$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/4321a0e2-1607-3b92-8e26-22c2e6822e85.roa File: 4321a0e2-1607-3b92-8e26-22c2e6822e85.roa (raw, json) Hash identifier: nGwW7j8m9w9XRayfbzTEb5mYq72jMS/wUYusx9LIpXY= Subject key identifier: E2:9F:46:E5:7C:96:96:C0:DC:2A:BC:BC:7A:89:23:78:A6:E8:E1:D3 Certificate issuer: /CN=12380a37-68ce-4e9c-9585-53cd09071ada Certificate serial: 010D0C9F4328584FC7311AEC33B9DA805CA82880 Authority key identifier: 0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/4321a0e2-1607-3b92-8e26-22c2e6822e85.roa Signing time: Mon 09 Nov 2026 02:00:13 +0000 ROA not before: Mon 09 Nov 2026 02:00:13 +0000 ROA not after: Sun 07 Feb 2027 02:00:13 +0000 asID: 400350 IP address blocks: 64.189.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c7:31:1a:ec:33:b9:da:80:5c:a8:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12380a37-68ce-4e9c-9585-53cd09071ada Validity Not Before: Nov 9 02:00:13 2026 GMT Not After : Feb 7 02:00:13 2027 GMT Subject: CN=ede06dc0-4dfa-4b92-aa68-428e9c2481a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:66:36:4c:b9:68:ee:81:74:e4:df:fc:24:8f: cd:9f:0e:79:8d:78:11:d9:28:df:6e:27:0b:ee:4f: f0:c8:4f:16:ae:c2:c8:2a:d9:1f:39:6e:2a:73:2d: 0f:50:c5:62:7b:a9:ed:a5:8e:41:fb:1d:8d:64:21: bf:ea:f6:5b:a4:13:93:40:ea:b6:d0:c2:37:9a:85: d6:ad:6e:ce:32:d5:c9:23:2a:12:31:85:e1:95:53: 70:03:47:d3:eb:6a:1c:5a:02:c7:ca:1d:3f:e3:62: 23:a4:47:ca:11:0f:21:19:e3:6d:c3:20:5e:7d:92: 97:1d:73:6b:80:a1:e4:21:cc:f9:29:58:58:2f:55: d8:84:30:2b:5e:18:b1:b8:b3:57:5c:6d:3c:e0:b0: 42:22:2f:64:26:4d:e9:8a:7f:de:04:dd:23:60:b7: f7:58:c7:e1:53:6c:2b:e2:b1:35:46:0d:75:99:ff: 96:39:21:c0:e0:f2:b9:79:99:0e:05:e5:ce:38:c0: 24:33:92:04:a2:ca:7b:19:4e:49:5d:0d:46:cc:b5: 61:b0:67:da:67:e5:f9:91:cd:57:78:40:d2:80:73: 54:af:ee:46:39:c2:44:67:0e:04:2f:41:a4:4b:14: 04:b4:66:84:c0:14:8f:eb:64:ed:22:88:db:c3:36: 79:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9F:46:E5:7C:96:96:C0:DC:2A:BC:BC:7A:89:23:78:A6:E8:E1:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/4321a0e2-1607-3b92-8e26-22c2e6822e85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl X509v3 Authority Key Identifier: keyid:0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer sbgp-ipAddrBlock: critical IPv4: 64.189.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:75:2d:47:98:11:7e:54:38:ce:79:88:29:14:47:c2:2e:c8: 8e:1b:d4:eb:85:99:57:46:4c:ba:54:e3:5e:94:e3:6b:2e:73: 46:40:66:1c:df:41:3c:5b:f4:98:5a:fd:81:a9:dc:99:c4:da: 12:c8:d2:59:ea:78:c0:f8:f2:0f:ad:2f:6d:3d:f9:94:f0:eb: e1:dd:1e:24:cd:6b:7a:fb:01:8d:cf:b8:1e:4b:58:47:24:b3: d4:e7:19:90:ce:5b:74:17:93:27:6d:83:01:58:17:cc:1a:76: bd:42:3b:6e:b0:11:9e:bb:77:f7:f6:ef:b0:97:2e:6b:f0:06: 71:fa:e6:af:aa:61:c8:8a:14:b4:05:ed:fa:85:85:3f:f0:15: d2:9a:09:9a:9a:00:be:4f:9a:2d:42:fb:df:4e:d1:a3:c8:4e: b7:26:10:71:07:a5:d4:94:55:b2:ab:96:ed:40:89:a6:fb:f7: ae:98:3f:b6:f0:83:3a:8f:02:67:e5:b7:3f:30:ee:e2:55:e6: a0:5c:bc:d4:3e:3f:7f:02:e5:ff:a2:61:37:27:f3:95:5c:46: dd:49:01:38:0e:0d:5b:fe:18:90:a6:94:42:c0:14:b4:25:b2: c8:e2:61:ff:bd:6e:70:2c:d2:81:0c:0a:c6:21:64:44:91:c8: f2:43:4d:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/HMRrsM7nagFyoKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTIzODBhMzctNjhjZS00ZTljLTk1ODUtNTNjZDA5MDcx YWRhMB4XDTI2MTEwOTAyMDAxM1oXDTI3MDIwNzAyMDAxM1owLzEtMCsGA1UEAxMk ZWRlMDZkYzAtNGRmYS00YjkyLWFhNjgtNDI4ZTljMjQ4MWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmY2TLlo7oF05N/8JI/Nnw55jXgR2SjfbicL 7k/wyE8WrsLIKtkfOW4qcy0PUMVie6ntpY5B+x2NZCG/6vZbpBOTQOq20MI3moXW rW7OMtXJIyoSMYXhlVNwA0fT62ocWgLHyh0/42IjpEfKEQ8hGeNtwyBefZKXHXNr gKHkIcz5KVhYL1XYhDArXhixuLNXXG084LBCIi9kJk3pin/eBN0jYLf3WMfhU2wr 4rE1Rg11mf+WOSHA4PK5eZkOBeXOOMAkM5IEosp7GU5JXQ1GzLVhsGfaZ+X5kc1X eEDSgHNUr+5GOcJEZw4EL0GkSxQEtGaEwBSP62TtIojbwzZ5NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKfRuV8lpbA3Cq8vHqJI3im6OHTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMjM4 MGEzNy02OGNlLTRlOWMtOTU4NS01M2NkMDkwNzFhZGEvNDMyMWEwZTItMTYwNy0z YjkyLThlMjYtMjJjMmU2ODIyZTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTIzODBhMzctNjhjZS00ZTljLTk1 ODUtNTNjZDA5MDcxYWRhLzEyMzgwYTM3LTY4Y2UtNGU5Yy05NTg1LTUzY2QwOTA3 MWFkYS5jcmwwHwYDVR0jBBgwFoAUC+v8Zzc9d2IVQpU/rmHdVlHBuaIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMjM4MGEzNy02OGNlLTRlOWMtOTU4NS01M2Nk MDkwNzFhZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL2yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAt1LUeYEX5UOM55iCkUR8IuyI4b1OuFmVdGTLpU416U42suc0ZAZhzf QTxb9Jha/YGp3JnE2hLI0lnqeMD48g+tL209+ZTw6+HdHiTNa3r7AY3PuB5LWEck s9TnGZDOW3QXkydtgwFYF8wadr1CO26wEZ67d/f277CXLmvwBnH65q+qYciKFLQF 7fqFhT/wFdKaCZqaAL5Pmi1C+99O0aPITrcmEHEHpdSUVbKrlu1Aiab7966YP7bw gzqPAmfltz8w7uJV5qBcvNQ+P38C5f+iYTcn85VcRt1JATgODVv+GJCmlELAFLQl ssjiYf+9bnAs0oEMCsYhZESRyPJDTXQ= -----END CERTIFICATE-----Generated at Sun Nov 15 17:39:53 2026 by rpki-client