$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3af35d11-a01d-3db6-b395-3c5923ec3c8b.roa File: 3af35d11-a01d-3db6-b395-3c5923ec3c8b.roa (raw, json) Hash identifier: 4MyeQexV96+PO7Kh3Gm2l1DqUEVzAwcEISIy0CFIfT8= Subject key identifier: 6A:EE:2F:AB:9B:C5:8D:EA:51:8D:D7:25:E4:C8:26:F4:23:90:FF:07 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F3FAD364DC8F6449C7D49ED80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3af35d11-a01d-3db6-b395-3c5923ec3c8b.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 14618 IP address blocks: 64.17.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:36:4d:c8:f6:44:9c:7d:49:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=58d08d15-3338-4582-8dcd-100f9bcdd61f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:69:6f:20:b2:52:44:dd:4a:ab:d3:de:4c:5b: 23:74:f5:0e:3b:cc:2f:2b:06:a9:b2:ed:80:cf:48: c2:72:de:94:17:db:5a:34:9c:56:a3:dc:9d:7f:2c: 20:6d:1e:9e:32:68:46:a0:f5:0e:a6:ec:ef:a0:b4: f3:79:00:09:95:c0:1f:4d:c8:e8:46:d0:e2:48:91: db:05:de:40:00:16:2b:99:30:41:85:ca:37:80:5f: a5:80:ab:25:fb:18:f0:ff:a2:52:89:59:11:8a:2f: 62:2a:f2:c8:17:8a:d4:83:fa:a4:7e:79:bb:ce:c6: 15:36:30:db:cb:e5:c8:ad:7b:18:39:32:c7:bb:e9: ec:c0:ef:be:71:0b:73:55:f4:8f:a4:39:42:8f:c8: f4:78:d4:50:b5:da:7f:d8:a6:24:b3:3f:95:e4:a4: bc:fc:16:bc:15:d3:7c:73:84:44:3c:e3:f1:0b:39: 8a:7e:67:8a:b1:81:7f:da:10:73:b1:84:3c:65:cd: 17:fd:05:d7:1f:cc:48:4a:4e:49:66:81:dd:d8:45: b2:32:9b:50:37:99:2b:f9:52:00:92:79:29:66:0e: 99:10:98:f6:33:88:28:37:ef:8b:d7:9b:02:a4:09: e4:de:0f:19:6a:8b:af:c0:26:7a:52:ce:84:01:34: a2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:EE:2F:AB:9B:C5:8D:EA:51:8D:D7:25:E4:C8:26:F4:23:90:FF:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3af35d11-a01d-3db6-b395-3c5923ec3c8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 64.17.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d2:9f:47:7d:83:8a:e3:d0:e4:34:f8:65:0a:da:a3:5d:c7: 69:c8:e9:f6:59:31:7e:24:3a:57:ab:1e:c9:16:b3:ac:a2:7e: 36:b0:df:1f:45:15:b1:f0:db:99:ae:ca:be:3c:db:3b:fa:06: b8:6c:e2:29:51:a5:5d:ca:53:8b:e8:04:2f:0a:65:d6:b8:d8: c6:19:a2:64:f7:a5:75:5f:e6:a9:13:97:1a:b7:85:a5:22:02: 7e:d3:e3:aa:90:6d:32:c3:9e:33:a8:5a:00:a6:34:98:a7:ac: 7a:fd:f9:85:1a:f4:db:66:10:a4:8d:3e:a2:71:0a:a5:b2:78: 20:41:64:95:bd:f4:85:3b:89:1d:0d:df:0c:ec:4d:d8:17:c5: ea:ea:a9:03:dc:7a:3c:5b:5c:c7:68:06:46:b4:95:57:22:63: 19:0d:80:84:25:bb:49:4f:32:b4:b1:21:0b:f2:d4:d4:e2:24: 1e:bd:e4:46:c9:ed:ec:87:9c:69:c9:83:af:6a:19:20:a1:a9: f4:f5:63:3e:13:ab:b2:97:d5:5e:a9:06:d3:c4:a5:66:e1:7a: 51:20:9c:3d:60:50:2d:a1:26:f7:ac:0c:ec:fd:dd:ec:6d:46: 9b:43:2c:12:48:a3:33:fb:ce:94:38:1a:67:03:58:86:17:16: 70:c4:29:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rTZNyPZEnH1J7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NThkMDhkMTUtMzMzOC00NTgyLThkY2QtMTAwZjliY2RkNjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmlvILJSRN1Kq9PeTFsjdPUOO8wvKwapsu2A z0jCct6UF9taNJxWo9ydfywgbR6eMmhGoPUOpuzvoLTzeQAJlcAfTcjoRtDiSJHb Bd5AABYrmTBBhco3gF+lgKsl+xjw/6JSiVkRii9iKvLIF4rUg/qkfnm7zsYVNjDb y+XIrXsYOTLHu+nswO++cQtzVfSPpDlCj8j0eNRQtdp/2KYksz+V5KS8/Ba8FdN8 c4REPOPxCzmKfmeKsYF/2hBzsYQ8Zc0X/QXXH8xISk5JZoHd2EWyMptQN5kr+VIA knkpZg6ZEJj2M4goN++L15sCpAnk3g8ZaouvwCZ6Us6EATSiAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGruL6ubxY3qUY3XJeTIJvQjkP8HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2FmMzVkMTEtYTAxZC0z ZGI2LWIzOTUtM2M1OTIzZWMzYzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQBEwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnSn0d9g4rj0OQ0+GUK2qNdx2nI6fZZMX4kOlerHskWs6yifjaw3x9F FbHw25muyr482zv6Brhs4ilRpV3KU4voBC8KZda42MYZomT3pXVf5qkTlxq3haUi An7T46qQbTLDnjOoWgCmNJinrHr9+YUa9NtmEKSNPqJxCqWyeCBBZJW99IU7iR0N 3wzsTdgXxerqqQPcejxbXMdoBka0lVciYxkNgIQlu0lPMrSxIQvy1NTiJB695EbJ 7eyHnGnJg69qGSChqfT1Yz4Tq7KX1V6pBtPEpWbhelEgnD1gUC2hJvesDOz93ext RptDLBJIozP7zpQ4GmcDWIYXFnDEKUs= -----END CERTIFICATE-----Generated at Thu Sep 24 13:40:19 2026 by rpki-client