$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/3f920350-5b1c-3b42-8ab9-7751f4f415d1.roa File: 3f920350-5b1c-3b42-8ab9-7751f4f415d1.roa (raw, json) Hash identifier: T1Ch+gl4mnYv5AiLHIBRyphAioCa1fWzzE5RdJGyYRo= Subject key identifier: 26:DE:2C:AA:D8:BA:3E:53:0C:86:ED:30:73:35:42:0B:A3:E1:01:68 Certificate issuer: /CN=e0647553-32ca-48b6-be58-d6c7f475e654 Certificate serial: 010D0C9F4328584F3E47E892C3E4F148332CA180 Authority key identifier: 3D:EA:87:2B:EB:A8:27:88:90:FC:5A:63:64:0F:CA:8F:10:C0:FE:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/3f920350-5b1c-3b42-8ab9-7751f4f415d1.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 7784 IP address blocks: 65.79.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:e8:92:c3:e4:f1:48:33:2c:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0647553-32ca-48b6-be58-d6c7f475e654 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=f6ec63d8-4166-4c60-af23-ca7268b00f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:58:ed:86:a0:3d:78:2a:52:44:e0:34:64:80: f7:50:63:0c:e2:68:c3:be:d2:03:a7:3d:9b:d6:0d: 44:71:21:1b:f4:51:4d:f5:aa:08:67:30:62:d9:0a: f6:60:cd:18:f6:61:ce:a6:38:24:d3:2f:ff:74:b7: eb:24:86:ac:23:8b:03:4b:bc:80:78:01:4b:ca:45: e0:26:55:fe:05:d7:61:e2:5c:39:27:d4:51:e4:39: 51:30:04:85:09:90:a1:c1:7c:e6:95:06:46:4a:8e: ec:68:3c:a5:03:f0:40:cc:ba:83:53:23:63:32:1a: ce:6f:24:96:5c:6d:6f:ed:7a:d1:06:4b:de:4c:f3: af:80:85:f8:30:db:98:51:99:67:5f:d0:7b:30:22: 85:9d:42:77:4d:f3:fe:18:17:66:0f:75:f9:bd:76: 8c:56:33:73:f4:51:59:52:4b:be:ff:6f:63:d7:0d: bb:ed:38:d2:30:db:87:16:3b:9a:92:02:e1:21:b2: 6e:9f:89:fd:87:c2:00:c8:3b:0b:2a:f3:99:38:23: ad:45:ee:5e:18:5f:69:92:bd:5e:a0:21:99:cd:d2: 5f:b9:cd:0c:57:2f:f1:0c:96:a3:29:c5:5c:0d:d6: e1:2c:2e:e0:d1:79:2a:f0:c6:f1:13:68:cf:67:19: 66:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:DE:2C:AA:D8:BA:3E:53:0C:86:ED:30:73:35:42:0B:A3:E1:01:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/3f920350-5b1c-3b42-8ab9-7751f4f415d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.crl X509v3 Authority Key Identifier: keyid:3D:EA:87:2B:EB:A8:27:88:90:FC:5A:63:64:0F:CA:8F:10:C0:FE:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer sbgp-ipAddrBlock: critical IPv4: 65.79.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:cc:f7:de:18:bb:e2:b4:60:f8:b7:ab:93:e8:a6:cb:73:0a: 16:d5:50:b4:16:51:f8:dc:a6:32:35:cf:08:f0:57:8f:ce:52: 78:b4:d8:6a:da:bc:0d:62:cc:cc:12:a0:cf:f7:51:37:0c:71: 67:ac:c0:0f:a5:5c:8a:1a:da:6e:09:15:af:c2:30:7e:39:17: 13:b6:7c:53:9b:15:e8:9d:88:6d:c6:3c:79:05:d7:93:3a:67: 04:00:0e:59:e7:9f:a6:57:fc:49:bc:9c:98:32:49:78:04:4f: fd:58:fe:2d:7e:d2:69:c0:21:19:73:a1:43:82:8f:6a:0c:ce: ab:27:ea:3e:c1:7b:f9:8a:6c:af:cd:cf:fb:33:6c:b6:f3:38: 9e:85:1a:cb:23:91:c6:aa:41:e1:3e:4a:43:6c:6a:52:b1:03: 60:55:f6:5f:43:07:93:9c:81:1c:ba:f9:08:a1:09:57:a2:34: 20:03:ee:11:99:38:1d:d6:f9:cb:8c:f3:e9:4f:d7:60:6a:cb: b4:e2:32:d9:85:90:e0:0e:e2:c6:db:29:c1:d2:d1:13:15:40: e9:c4:11:31:d6:e4:f5:b4:ca:ec:45:10:1c:c2:2d:37:da:eb: 5f:2c:9d:5b:18:2a:e7:f2:f0:c3:f2:db:4f:62:d4:6e:6b:8d: 0a:eb:92:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+iSw+TxSDMsoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA2NDc1NTMtMzJjYS00OGI2LWJlNTgtZDZjN2Y0NzVl NjU0MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk ZjZlYzYzZDgtNDE2Ni00YzYwLWFmMjMtY2E3MjY4YjAwZjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlljthqA9eCpSROA0ZID3UGMM4mjDvtIDpz2b 1g1EcSEb9FFN9aoIZzBi2Qr2YM0Y9mHOpjgk0y//dLfrJIasI4sDS7yAeAFLykXg JlX+Bddh4lw5J9RR5DlRMASFCZChwXzmlQZGSo7saDylA/BAzLqDUyNjMhrObySW XG1v7XrRBkveTPOvgIX4MNuYUZlnX9B7MCKFnUJ3TfP+GBdmD3X5vXaMVjNz9FFZ Uku+/29j1w277TjSMNuHFjuakgLhIbJun4n9h8IAyDsLKvOZOCOtRe5eGF9pkr1e oCGZzdJfuc0MVy/xDJajKcVcDdbhLC7g0Xkq8MbxE2jPZxlm8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbeLKrYuj5TDIbtMHM1Qguj4QFoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMDY0 NzU1My0zMmNhLTQ4YjYtYmU1OC1kNmM3ZjQ3NWU2NTQvM2Y5MjAzNTAtNWIxYy0z YjQyLThhYjktNzc1MWY0ZjQxNWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTA2NDc1NTMtMzJjYS00OGI2LWJl NTgtZDZjN2Y0NzVlNjU0L2UwNjQ3NTUzLTMyY2EtNDhiNi1iZTU4LWQ2YzdmNDc1 ZTY1NC5jcmwwHwYDVR0jBBgwFoAUPeqHK+uoJ4iQ/FpjZA/KjxDA/kcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lMDY0NzU1My0zMmNhLTQ4YjYtYmU1OC1kNmM3 ZjQ3NWU2NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQU/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3M994Yu+K0YPi3q5PopstzChbVULQWUfjcpjI1zwjwV4/OUni02Gra vA1izMwSoM/3UTcMcWeswA+lXIoa2m4JFa/CMH45FxO2fFObFeidiG3GPHkF15M6 ZwQADlnnn6ZX/Em8nJgySXgET/1Y/i1+0mnAIRlzoUOCj2oMzqsn6j7Be/mKbK/N z/szbLbzOJ6FGssjkcaqQeE+SkNsalKxA2BV9l9DB5OcgRy6+QihCVeiNCAD7hGZ OB3W+cuM8+lP12Bqy7TiMtmFkOAO4sbbKcHS0RMVQOnEETHW5PW0yuxFEBzCLTfa 618snVsYKufy8MPy209i1G5rjQrrkk8= -----END CERTIFICATE-----Generated at Sun Oct 11 22:40:26 2026 by rpki-client