$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/1b514e1b-42b6-30f9-bbaa-1a960a2af6e2.roa File: 1b514e1b-42b6-30f9-bbaa-1a960a2af6e2.roa (raw, json) Hash identifier: 0H67lOT71KtMMBLUr98KzCscDkTos9PNkaCwQn1Oe+o= Subject key identifier: AA:76:A5:BB:0D:66:1A:A4:9B:AA:AC:8A:29:72:09:40:EA:25:A1:C7 Certificate issuer: /CN=4d4940f4-61c2-4251-acdb-36be83cdc744 Certificate serial: 010D0C9F4328584F497331B2A91B250068D5A7C0 Authority key identifier: 3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/1b514e1b-42b6-30f9-bbaa-1a960a2af6e2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6407 IP address blocks: 108.63.0.0/21 maxlen: 24 108.63.8.0/22 maxlen: 24 108.63.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:31:b2:a9:1b:25:00:68:d5:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d4940f4-61c2-4251-acdb-36be83cdc744 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=68ee41f4-82c6-498c-9548-2fa9eaf5343d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:20:01:0f:9f:19:3d:e6:ce:9e:1f:2f:e9:a9: 00:a6:6e:30:7a:c6:24:28:ad:a2:9b:71:b7:d9:53: 15:53:e7:ef:34:ca:6e:87:4b:20:e4:b5:ca:90:c8: e7:4e:97:3b:0b:a0:c2:0d:d5:86:55:00:6b:20:6d: 97:b6:84:71:5d:00:65:18:ba:18:7a:bf:75:b6:98: 70:e0:92:ca:9a:51:3c:80:a4:b5:46:52:3c:da:8c: 92:f0:2a:cd:8a:cb:00:b7:2e:5a:14:12:5d:af:92: 3f:be:42:29:94:db:a7:81:5a:33:84:58:a8:56:d7: 70:b3:34:c2:df:d5:72:ee:9e:37:88:6d:ff:e8:f4: c9:d0:4e:2b:d9:cd:ef:fc:50:d4:89:12:27:4a:aa: c1:05:25:bf:5e:de:3f:a2:20:f9:79:a7:d3:51:93: 27:a5:30:f2:13:cb:29:c7:cd:f9:60:2c:c4:f0:01: 28:13:3d:be:ca:0b:44:6a:c1:fa:0b:0b:c2:3b:ab: 36:76:a7:4d:88:9f:d4:b2:40:5d:65:a2:35:9c:c6: 72:3b:6b:92:0e:3d:4d:ee:82:b1:12:07:62:28:1d: 06:91:0e:61:e4:eb:6f:f4:34:8d:37:20:e8:e8:96: b2:d2:c7:79:87:da:64:cc:87:66:11:21:ec:4d:e8: f8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:76:A5:BB:0D:66:1A:A4:9B:AA:AC:8A:29:72:09:40:EA:25:A1:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/1b514e1b-42b6-30f9-bbaa-1a960a2af6e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl X509v3 Authority Key Identifier: keyid:3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer sbgp-ipAddrBlock: critical IPv4: 108.63.0.0-108.63.13.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:0a:99:6a:bd:e1:23:85:ee:8c:80:a7:87:da:64:28:4b:ae: 5b:4c:85:b0:0f:52:54:13:43:5b:8a:15:82:71:bd:4b:61:8e: e6:c3:d4:30:a2:f1:c6:51:3b:17:8c:45:43:1e:72:71:c5:bc: 6b:dc:b2:80:6b:1e:df:c0:21:7e:f0:e9:83:3e:dc:78:c2:7b: 0d:85:89:41:97:51:45:b5:66:30:80:10:99:38:92:53:5e:3a: 1d:68:27:b5:45:17:73:c3:08:24:7e:e0:49:da:62:3f:a2:72: d3:12:12:c4:3d:87:9c:45:39:fa:69:01:fa:09:4b:0f:62:f3: e4:20:3a:77:d8:7e:3e:9a:4c:82:53:df:1a:33:07:50:cf:65: b2:cf:f2:20:f2:2e:cb:ac:31:2e:d8:18:dd:8d:86:9b:68:0f: 9a:d9:c4:24:20:97:b2:86:24:ce:7f:9a:26:3b:aa:aa:8d:3a: 7f:f2:67:6f:5d:4e:a2:16:39:05:f7:b9:ee:86:87:b7:99:ca: e4:65:2c:d5:71:8b:02:60:a6:aa:e2:39:4a:18:92:6a:cc:7f: dc:be:f9:d7:41:d8:d8:04:c4:d2:80:75:62:67:47:dc:fa:15: 7b:c9:18:28:a2:6d:14:86:31:bc:b0:7e:0d:8c:24:20:57:5a: a7:35:34:b5 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWE9JczGyqRslAGjVp8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0OTQwZjQtNjFjMi00MjUxLWFjZGItMzZiZTgzY2Rj NzQ0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjhlZTQxZjQtODJjNi00OThjLTk1NDgtMmZhOWVhZjUzNDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSABD58ZPebOnh8v6akApm4wesYkKK2im3G3 2VMVU+fvNMpuh0sg5LXKkMjnTpc7C6DCDdWGVQBrIG2XtoRxXQBlGLoYer91tphw 4JLKmlE8gKS1RlI82oyS8CrNissAty5aFBJdr5I/vkIplNungVozhFioVtdwszTC 39Vy7p43iG3/6PTJ0E4r2c3v/FDUiRInSqrBBSW/Xt4/oiD5eafTUZMnpTDyE8sp x835YCzE8AEoEz2+ygtEasH6CwvCO6s2dqdNiJ/UskBdZaI1nMZyO2uSDj1N7oKx EgdiKB0GkQ5h5Otv9DSNNyDo6Jay0sd5h9pkzIdmESHsTej49QIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFKp2pbsNZhqkm6qsiilyCUDqJaHHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5 NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJlODNjZGM3NDQvMWI1MTRlMWItNDJiNi0z MGY5LWJiYWEtMWE5NjBhMmFmNmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGQ0OTQwZjQtNjFjMi00MjUxLWFj ZGItMzZiZTgzY2RjNzQ0LzRkNDk0MGY0LTYxYzItNDI1MS1hY2RiLTM2YmU4M2Nk Yzc0NC5jcmwwHwYDVR0jBBgwFoAUPdev1k6DmBY4LIH9klbSh2ozmcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJl ODNjZGM3NDQuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwBsPwME AWw/DDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBBCplqveEjhe6MgKeH2mQoS65bTIWwD1JUE0NbihWCcb1L YY7mw9QwovHGUTsXjEVDHnJxxbxr3LKAax7fwCF+8OmDPtx4wnsNhYlBl1FFtWYw gBCZOJJTXjodaCe1RRdzwwgkfuBJ2mI/onLTEhLEPYecRTn6aQH6CUsPYvPkIDp3 2H4+mkyCU98aMwdQz2Wyz/Ig8i7LrDEu2BjdjYabaA+a2cQkIJeyhiTOf5omO6qq jTp/8mdvXU6iFjkF97nuhoe3mcrkZSzVcYsCYKaq4jlKGJJqzH/cvvnXQdjYBMTS gHViZ0fc+hV7yRgoom0UhjG8sH4NjCQgV1qnNTS1 -----END CERTIFICATE-----Generated at Sat Sep 26 18:45:24 2026 by rpki-client