$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/973138b2-db4c-3e19-aa4e-e721be2d7380.roa File: 973138b2-db4c-3e19-aa4e-e721be2d7380.roa (raw, json) Hash identifier: w3AmmkCkFQjXp/gw4yLIzyLSVEUisW9Qpel/pQ037P8= Subject key identifier: 9E:BF:64:82:1D:B9:33:48:7A:EF:39:A3:A0:A5:C0:CE:23:A3:09:3B Certificate issuer: /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee Certificate serial: 010D0C9F4328584FC97042193EECB9F58E715490 Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/973138b2-db4c-3e19-aa4e-e721be2d7380.roa Signing time: Mon 09 Nov 2026 21:19:07 +0000 ROA not before: Mon 09 Nov 2026 21:19:07 +0000 ROA not after: Sun 07 Feb 2027 21:19:07 +0000 asID: 3761 IP address blocks: 63.247.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c9:70:42:19:3e:ec:b9:f5:8e:71:54:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee Validity Not Before: Nov 9 21:19:07 2026 GMT Not After : Feb 7 21:19:07 2027 GMT Subject: CN=8f63ed58-1f4b-4f41-a70c-38294927b597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:23:42:f4:45:b8:6e:c3:34:7b:41:d3:1c:ff: 95:4e:d6:63:a7:d2:33:ff:e0:de:f5:24:d4:4f:88: b8:d3:24:35:26:e8:83:76:44:29:4d:b1:5b:68:f4: b2:be:b7:28:32:9f:70:82:68:b2:40:09:99:98:7a: 15:50:e6:92:b5:cc:99:94:70:46:86:b5:22:64:05: 7d:8e:14:0f:a2:4c:68:cb:32:cd:de:81:75:10:92: 57:f4:79:95:2e:13:0d:4c:3d:99:39:1c:eb:77:39: 0c:fa:85:29:58:00:4f:52:ff:ac:35:cb:93:67:61: 7a:51:02:25:29:5a:2b:95:9e:61:c1:01:aa:f7:7d: e0:98:98:1d:af:75:2f:2c:e4:78:b4:67:c7:81:24: 3f:4b:48:f9:18:f7:66:06:b7:ff:63:6a:e5:f0:c1: 93:39:d0:37:fe:8e:7e:86:b7:31:a8:0e:97:66:47: 9c:69:b4:b3:a3:43:d4:d3:ec:21:f4:03:cd:bf:6d: 51:89:a1:dd:bc:10:91:12:31:6f:a5:2f:29:ee:2c: 69:42:ff:df:bf:4f:f8:93:8f:49:e7:0e:7a:a3:93: dc:ea:af:86:0d:2a:dc:0f:45:b5:b6:51:88:28:5b: a8:41:65:19:48:1b:4d:f2:de:aa:41:3a:c8:9b:5e: 37:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BF:64:82:1D:B9:33:48:7A:EF:39:A3:A0:A5:C0:CE:23:A3:09:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/973138b2-db4c-3e19-aa4e-e721be2d7380.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl X509v3 Authority Key Identifier: keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer sbgp-ipAddrBlock: critical IPv4: 63.247.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:df:4d:e2:80:55:01:0e:35:ac:5c:aa:7b:fa:7b:38:2a:1e: e4:0c:f2:05:57:df:ea:b0:63:da:47:03:62:b3:46:6f:1d:45: 68:81:d0:3b:5b:dd:63:17:83:81:19:25:74:15:9f:63:f4:b1: c3:4e:7f:f6:ca:79:df:46:c2:d0:5d:28:36:84:e4:15:9b:ad: 60:4c:ce:85:55:b6:32:63:bf:0e:cb:c6:df:8b:9a:d6:46:11: 2d:70:b3:76:e2:15:29:2e:a5:86:f0:ab:56:31:51:03:e6:72: 68:92:6a:2c:03:37:3a:82:db:30:e0:1c:1a:2c:1a:bc:24:8b: 6b:c9:d3:a8:11:a9:b6:17:ef:3d:db:09:d6:0b:a6:d5:86:d1: 9e:dd:ff:6d:ae:75:ae:e5:b2:c8:52:7a:57:92:42:6f:84:c0: 7d:f3:5f:7f:b2:88:60:15:98:18:fe:5f:31:6d:81:5a:d1:d6: ff:00:e4:07:3a:09:19:86:d2:cf:9a:8b:22:32:21:b9:34:e7: 5c:83:3d:c6:96:cf:39:b2:59:2b:f2:33:6c:46:93:65:8d:a9: 43:d4:d5:ef:42:bb:e1:59:c3:93:f8:e1:41:49:f5:62:b6:24: e1:9c:73:9a:49:58:cc:e2:4d:d0:08:d2:b6:cd:53:e9:8b:98: 1e:26:32:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/JcEIZPuy59Y5xVJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE2MDE0YjEtZGYwZi00Y2ZkLTk5ODAtM2VlNGJjOWU5 ZmVlMB4XDTI2MTEwOTIxMTkwN1oXDTI3MDIwNzIxMTkwN1owLzEtMCsGA1UEAxMk OGY2M2VkNTgtMWY0Yi00ZjQxLWE3MGMtMzgyOTQ5MjdiNTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCNC9EW4bsM0e0HTHP+VTtZjp9Iz/+De9STU T4i40yQ1JuiDdkQpTbFbaPSyvrcoMp9wgmiyQAmZmHoVUOaStcyZlHBGhrUiZAV9 jhQPokxoyzLN3oF1EJJX9HmVLhMNTD2ZORzrdzkM+oUpWABPUv+sNcuTZ2F6UQIl KVorlZ5hwQGq933gmJgdr3UvLOR4tGfHgSQ/S0j5GPdmBrf/Y2rl8MGTOdA3/o5+ hrcxqA6XZkecabSzo0PU0+wh9APNv21RiaHdvBCREjFvpS8p7ixpQv/fv0/4k49J 5w56o5Pc6q+GDSrcD0W1tlGIKFuoQWUZSBtN8t6qQTrIm143gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6/ZIIduTNIeu85o6ClwM4jowk7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YTYw MTRiMS1kZjBmLTRjZmQtOTk4MC0zZWU0YmM5ZTlmZWUvOTczMTM4YjItZGI0Yy0z ZTE5LWFhNGUtZTcyMWJlMmQ3MzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGE2MDE0YjEtZGYwZi00Y2ZkLTk5 ODAtM2VlNGJjOWU5ZmVlLzhhNjAxNGIxLWRmMGYtNGNmZC05OTgwLTNlZTRiYzll OWZlZS5jcmwwHwYDVR0jBBgwFoAUkhU2LxsekHKvkCTiHxNn13oJ6bEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YTYwMTRiMS1kZjBmLTRjZmQtOTk4MC0zZWU0 YmM5ZTlmZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBP/eEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnfTeKAVQEONaxcqnv6ezgqHuQM8gVX3+qwY9pHA2KzRm8dRWiB0Dtb 3WMXg4EZJXQVn2P0scNOf/bKed9GwtBdKDaE5BWbrWBMzoVVtjJjvw7Lxt+LmtZG ES1ws3biFSkupYbwq1YxUQPmcmiSaiwDNzqC2zDgHBosGrwki2vJ06gRqbYX7z3b CdYLptWG0Z7d/22uda7lsshSeleSQm+EwH3zX3+yiGAVmBj+XzFtgVrR1v8A5Ac6 CRmG0s+aiyIyIbk051yDPcaWzzmyWSvyM2xGk2WNqUPU1e9Cu+FZw5P44UFJ9WK2 JOGcc5pJWMziTdAI0rbNU+mLmB4mMg8= -----END CERTIFICATE-----Generated at Sun Nov 15 22:09:33 2026 by rpki-client