$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/d7aec6f7-46ff-3b64-9ffa-e2953521321f.roa File: d7aec6f7-46ff-3b64-9ffa-e2953521321f.roa (raw, json) Hash identifier: NlEXboCEIQrrfD7UXvP8Sp5MfEvr2vhLlbC+rOhu4eg= Subject key identifier: F4:9F:97:AA:13:70:81:D9:C6:E4:3F:1F:AA:57:D7:99:FC:CE:B3:B4 Certificate issuer: /CN=2f4d2ef2-fbc2-4b15-8104-e53c358cf139 Certificate serial: 010D0C9F4328584F4987DEC77FF8B64A11351140 Authority key identifier: E6:A8:C2:3F:B5:82:80:19:7E:FB:33:A1:EF:7D:30:DC:A9:BB:DF:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/d7aec6f7-46ff-3b64-9ffa-e2953521321f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 2535 IP address blocks: 164.63.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:de:c7:7f:f8:b6:4a:11:35:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f4d2ef2-fbc2-4b15-8104-e53c358cf139 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bcb7697f-5643-42fe-950e-5d0936e7eec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:7a:17:15:09:f0:cb:f2:53:cd:54:45:57: 30:b1:3b:c4:4a:aa:61:d2:c7:46:cb:1f:c0:c8:2d: 9b:e4:00:0e:bf:26:5c:1d:0f:70:18:71:73:a6:e7: 18:9e:aa:fb:f5:09:23:85:19:96:45:c5:ff:df:e1: 84:93:84:5a:72:20:4a:76:05:fe:07:d1:da:b0:74: e2:14:64:c3:4c:be:b7:f5:df:54:9f:4c:7a:64:25: 18:56:3d:f3:31:85:05:73:40:87:f2:4a:3e:69:06: e1:04:b1:d9:ec:50:7e:1a:18:f8:e2:84:b1:cd:ad: 4f:9c:a0:53:33:77:d2:89:fc:ab:d0:ca:ff:e0:b3: 99:d3:7a:64:cb:2c:5b:6c:74:4e:f9:3e:bf:f8:08: 93:2a:20:82:e6:73:df:42:7a:f1:d0:3b:85:26:f3: b2:63:ad:aa:d3:cc:fe:d9:a7:10:48:b7:46:94:b0: fb:62:47:d1:92:2e:19:c8:9c:f7:3c:34:0f:ff:66: 05:c7:00:b2:a4:04:e9:66:9c:f8:f8:37:47:c1:26: 55:3f:77:88:80:22:09:0f:3e:c4:42:c0:ce:ab:aa: 8e:80:bc:49:2f:fd:e3:da:72:58:e9:7b:16:cb:ef: 3a:10:a2:37:f3:a4:ea:f3:8a:45:7a:d1:3d:6c:43: 57:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9F:97:AA:13:70:81:D9:C6:E4:3F:1F:AA:57:D7:99:FC:CE:B3:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/d7aec6f7-46ff-3b64-9ffa-e2953521321f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.crl X509v3 Authority Key Identifier: keyid:E6:A8:C2:3F:B5:82:80:19:7E:FB:33:A1:EF:7D:30:DC:A9:BB:DF:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.cer sbgp-ipAddrBlock: critical IPv4: 164.63.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:c9:d5:cc:5e:9c:4d:7b:0a:0a:4f:a8:69:81:c3:51:6c:db: 7c:da:bb:fe:6d:c0:76:ab:17:48:16:fc:03:82:26:4e:da:0f: b4:b6:a5:ba:3f:40:f9:2a:80:f2:69:2b:a7:7a:ae:72:09:3a: e0:31:1c:ad:42:59:09:ba:69:32:72:45:b8:66:eb:d4:a9:71: 71:7c:f1:d0:d9:aa:00:76:96:21:a6:99:0e:54:64:38:69:60: 2a:8c:68:ec:41:7a:21:1a:d7:1f:fd:fd:2a:d7:06:86:b8:08: ac:b9:a8:75:47:c7:7e:7e:30:88:4b:89:12:22:01:14:68:d7: e7:4b:20:4d:9b:ed:eb:88:35:d5:cd:54:70:40:5e:0a:13:4c: 08:30:c4:a1:96:e2:60:96:14:c8:63:1b:87:2e:7c:00:d4:55: a3:89:4c:9d:a4:1f:6e:60:5e:fd:68:37:d0:94:6e:27:93:07: 9f:d1:ec:2c:46:8c:ef:2c:8f:d6:61:1b:22:14:5c:7d:85:ae: be:99:46:54:f1:c4:2c:28:da:5a:8b:0f:69:8c:7a:a7:06:04: 06:25:78:de:e5:3c:7a:a7:34:0e:d6:57:ba:42:17:8a:06:fb: 41:1d:f2:fb:af:f2:41:3f:c6:db:70:14:5d:0f:72:60:cd:6d: 4b:19:83:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh97Hf/i2ShE1EUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmY0ZDJlZjItZmJjMi00YjE1LTgxMDQtZTUzYzM1OGNm MTM5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmNiNzY5N2YtNTY0My00MmZlLTk1MGUtNWQwOTM2ZTdlZWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB96FxUJ8MvyU81URVcwsTvESqph0sdGyx/A yC2b5AAOvyZcHQ9wGHFzpucYnqr79QkjhRmWRcX/3+GEk4RaciBKdgX+B9HasHTi FGTDTL639d9Un0x6ZCUYVj3zMYUFc0CH8ko+aQbhBLHZ7FB+Ghj44oSxza1PnKBT M3fSifyr0Mr/4LOZ03pkyyxbbHRO+T6/+AiTKiCC5nPfQnrx0DuFJvOyY62q08z+ 2acQSLdGlLD7YkfRki4ZyJz3PDQP/2YFxwCypATpZpz4+DdHwSZVP3eIgCIJDz7E QsDOq6qOgLxJL/3j2nJY6XsWy+86EKI386Tq84pFetE9bENXmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSfl6oTcIHZxuQ/H6pX15n8zrO0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZjRk MmVmMi1mYmMyLTRiMTUtODEwNC1lNTNjMzU4Y2YxMzkvZDdhZWM2ZjctNDZmZi0z YjY0LTlmZmEtZTI5NTM1MjEzMjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmY0ZDJlZjItZmJjMi00YjE1LTgx MDQtZTUzYzM1OGNmMTM5LzJmNGQyZWYyLWZiYzItNGIxNS04MTA0LWU1M2MzNThj ZjEzOS5jcmwwHwYDVR0jBBgwFoAU5qjCP7WCgBl++zOh730w3Km730swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZjRkMmVmMi1mYmMyLTRiMTUtODEwNC1lNTNj MzU4Y2YxMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApD/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLJ1cxenE17CgpPqGmBw1Fs23zau/5twHarF0gW/AOCJk7aD7S2pbo/ QPkqgPJpK6d6rnIJOuAxHK1CWQm6aTJyRbhm69SpcXF88dDZqgB2liGmmQ5UZDhp YCqMaOxBeiEa1x/9/SrXBoa4CKy5qHVHx35+MIhLiRIiARRo1+dLIE2b7euINdXN VHBAXgoTTAgwxKGW4mCWFMhjG4cufADUVaOJTJ2kH25gXv1oN9CUbieTB5/R7CxG jO8sj9ZhGyIUXH2Frr6ZRlTxxCwo2lqLD2mMeqcGBAYleN7lPHqnNA7WV7pCF4oG +0Ed8vuv8kE/xttwFF0PcmDNbUsZgyM= -----END CERTIFICATE-----Generated at Sat Sep 26 14:47:06 2026 by rpki-client