$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/f0f14ca5-fb96-31bb-811e-2f0220140ce7.roa File: f0f14ca5-fb96-31bb-811e-2f0220140ce7.roa (raw, json) Hash identifier: RSK5aJxMXtH2vbUK5Rr4gpHvWcSl8ZhFzNWnCQNA7hU= Subject key identifier: A7:26:C5:4F:D0:C9:48:87:09:E9:49:94:44:D9:2E:17:0D:2C:1E:68 Certificate issuer: /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Certificate serial: 010D0C9F4328584F348266E3A98AC47E0E380240 Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/f0f14ca5-fb96-31bb-811e-2f0220140ce7.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 14090 IP address blocks: 64.21.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:66:e3:a9:8a:c4:7e:0e:38:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=e9eb57ba-7e8d-42a5-8610-c5c952d1a0bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cb:c6:c4:83:69:17:dc:8c:4a:c1:41:4b:02: ff:0c:1c:a6:5c:c5:92:39:1e:f6:c9:7e:d4:f0:2a: 5d:0f:49:26:cd:8c:20:bd:fb:ca:a7:24:fc:53:c7: c4:7f:65:f2:ed:cc:4e:f9:ab:44:33:cc:e9:7d:06: 8d:98:a1:39:78:f7:9b:e5:36:fb:6d:0f:a9:1d:60: dc:c9:ec:0b:c6:e2:3e:54:9a:2d:06:52:cc:4f:83: c3:3d:67:75:f6:51:db:64:6d:17:f2:d9:96:3e:e7: a1:34:fe:07:76:76:e9:79:36:86:c4:14:9d:e4:76: ad:c2:07:00:56:1a:a2:93:32:d7:54:48:8d:2c:03: 2b:df:cd:02:b1:96:51:3a:80:8e:b7:72:f5:98:69: e6:40:73:5c:5a:83:aa:9b:4b:93:69:3d:07:74:c4: 90:c7:99:40:42:1a:ff:92:ba:f0:b9:bb:73:2c:65: 00:2d:b3:24:05:30:7e:6a:48:56:53:79:b0:5b:b4: f4:e0:f3:55:9e:0e:70:5b:ff:bf:86:30:b5:ad:92: e1:c3:e5:5a:3d:68:70:10:8c:e9:07:cf:14:a5:91: e3:0b:59:db:85:84:1c:d1:20:d7:89:62:55:3a:5d: fb:a7:75:f6:7e:32:b4:30:1a:27:d7:3f:7a:21:de: 0a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:26:C5:4F:D0:C9:48:87:09:E9:49:94:44:D9:2E:17:0D:2C:1E:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/f0f14ca5-fb96-31bb-811e-2f0220140ce7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl X509v3 Authority Key Identifier: keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer sbgp-ipAddrBlock: critical IPv4: 64.21.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:dc:66:c6:b1:be:e3:98:73:58:74:3e:04:1d:f2:54:ba:6a: b2:71:4f:8e:c7:af:d1:bd:75:e8:e8:06:2b:fd:62:87:8f:a3: 61:d3:58:cf:58:81:a8:58:c2:b3:c8:ee:92:35:f9:ba:b2:ba: ad:a2:63:92:0d:3b:a4:db:90:07:f1:d2:03:4e:28:d4:4f:69: cd:11:ee:0f:aa:57:55:39:fa:b4:83:8c:43:bf:e4:56:5d:07: b6:b9:f0:de:02:62:50:6b:47:7f:f7:b1:bf:99:2d:3b:b9:a7: ef:69:36:cd:a7:dc:6d:2c:b4:53:a3:3e:d9:9d:f4:9f:67:67: 86:bb:d2:b1:c2:27:5d:0f:12:45:01:b6:7c:52:9c:99:40:5c: fd:bc:d2:66:d5:58:64:e2:32:d0:0e:c4:ca:39:60:72:44:d7: 0c:37:6e:ff:39:03:73:c7:64:69:5d:de:88:72:fd:ef:61:b2: 89:31:51:19:a1:b1:4b:0d:8c:d5:99:4f:90:91:3f:3a:16:81: 44:c5:60:2a:33:cb:33:1d:82:e6:9e:a2:cb:71:ec:78:47:15: 1a:c7:73:80:6f:9b:36:c1:34:0f:6e:e0:c9:10:e1:5a:c9:df: 3d:e0:53:76:eb:eb:cf:cf:c8:d4:25:ad:a9:e7:dd:93:78:db: c3:67:d4:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80gmbjqYrEfg44AkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk ZTYxMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk ZTllYjU3YmEtN2U4ZC00MmE1LTg2MTAtYzVjOTUyZDFhMGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMvGxINpF9yMSsFBSwL/DBymXMWSOR72yX7U 8CpdD0kmzYwgvfvKpyT8U8fEf2Xy7cxO+atEM8zpfQaNmKE5ePeb5Tb7bQ+pHWDc yewLxuI+VJotBlLMT4PDPWd19lHbZG0X8tmWPuehNP4HdnbpeTaGxBSd5HatwgcA VhqikzLXVEiNLAMr380CsZZROoCOt3L1mGnmQHNcWoOqm0uTaT0HdMSQx5lAQhr/ krrwubtzLGUALbMkBTB+akhWU3mwW7T04PNVng5wW/+/hjC1rZLhw+VaPWhwEIzp B88UpZHjC1nbhYQc0SDXiWJVOl37p3X2fjK0MBon1z96Id4KRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcmxU/QyUiHCelJlETZLhcNLB5oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3 ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvZjBmMTRjYTUtZmI5Ni0z MWJiLTgxMWUtMmYwMjIwMTQwY2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1 NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5 ZGQ0ZWRlNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQBX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvcZsaxvuOYc1h0PgQd8lS6arJxT47Hr9G9dejoBiv9YoePo2HTWM9Y gahYwrPI7pI1+bqyuq2iY5INO6TbkAfx0gNOKNRPac0R7g+qV1U5+rSDjEO/5FZd B7a58N4CYlBrR3/3sb+ZLTu5p+9pNs2n3G0stFOjPtmd9J9nZ4a70rHCJ10PEkUB tnxSnJlAXP280mbVWGTiMtAOxMo5YHJE1ww3bv85A3PHZGld3ohy/e9hsokxURmh sUsNjNWZT5CRPzoWgUTFYCozyzMdguaeostx7HhHFRrHc4BvmzbBNA9u4MkQ4VrJ 3z3gU3br68/PyNQlrann3ZN428Nn1L4= -----END CERTIFICATE-----Generated at Wed Sep 23 22:28:00 2026 by rpki-client