$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/de97a398-0fe3-3499-a1ee-909d1a9839c0.roa File: de97a398-0fe3-3499-a1ee-909d1a9839c0.roa (raw, json) Hash identifier: ZI5KHfqdjayMH6DM1Y69KyU60AaB3lsrM5F8QrCbxpc= Subject key identifier: F1:86:A4:6F:BE:F9:D3:E4:21:40:11:7E:3B:8F:34:D4:66:83:8E:48 Certificate issuer: /CN=a7e64b66-84df-4665-a4fb-eb3b8add365e Certificate serial: 010D0C9F4328584F20F7B95962D0DDC0D0D9A800 Authority key identifier: 44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/de97a398-0fe3-3499-a1ee-909d1a9839c0.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 16580 IP address blocks: 131.232.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b9:59:62:d0:dd:c0:d0:d9:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7e64b66-84df-4665-a4fb-eb3b8add365e Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=ae6d2280-47ec-4148-a1ec-97639aee7fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cf:bd:b0:45:19:bb:00:aa:5d:03:36:00:e8: fc:6d:a5:6b:ab:69:3e:bd:97:0f:12:de:e8:93:b7: 9f:f1:0c:f6:0e:a4:82:e1:c8:4a:14:cf:4a:93:da: 44:ea:5a:bd:67:8e:9d:91:2f:fc:74:07:f1:c8:cb: 9d:ff:ee:15:b3:aa:8c:9b:31:20:b3:2c:0f:aa:8d: 46:43:10:1a:0b:84:23:63:ef:69:53:6d:00:29:4f: 17:59:5c:c4:72:dc:37:df:f3:e3:c3:9d:f6:cd:c1: 4d:e6:7f:25:06:96:46:52:26:b1:40:b8:27:25:3e: 2f:44:a7:54:2d:b8:0f:dd:13:01:6e:09:19:84:4b: e4:18:c3:bd:a2:82:37:ae:55:13:3a:1f:10:b9:a3: 92:35:ad:81:41:01:62:8d:25:35:90:36:5e:fe:cd: e4:18:e7:2d:e6:bf:9a:06:7f:6b:56:74:73:ba:dc: bb:29:a6:cb:cc:99:81:f5:37:1c:15:9b:f5:2d:cb: 1f:99:e9:f9:f6:07:a2:74:46:1c:ae:5b:33:46:f3: 54:dc:94:21:ce:ba:22:25:a3:9b:5c:cb:3a:5d:9c: 0f:36:6f:6d:61:35:7c:81:38:9b:ae:bd:42:3a:2d: e7:a4:c3:d2:22:0f:40:7e:32:44:27:6e:38:9c:ad: 4e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:86:A4:6F:BE:F9:D3:E4:21:40:11:7E:3B:8F:34:D4:66:83:8E:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/de97a398-0fe3-3499-a1ee-909d1a9839c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl X509v3 Authority Key Identifier: keyid:44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer sbgp-ipAddrBlock: critical IPv4: 131.232.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a8:f9:76:8d:15:c4:9f:a0:c6:19:f3:aa:9b:a4:22:51:9f: 41:69:38:5f:04:45:51:a0:71:ac:6e:1b:17:35:fd:68:f8:1f: 7a:a0:e2:6c:8d:6b:66:2e:6b:8a:61:53:6e:1b:d3:2d:99:94: 73:30:6b:ae:00:34:b6:2a:7f:83:b1:30:bc:ae:77:e2:dd:9c: fc:56:4a:da:ce:86:2f:0e:c7:fb:e6:36:85:ac:ec:8e:fa:6b: 15:45:0f:7b:6d:ae:c5:6f:74:36:f2:8b:a9:a7:ce:f2:81:5e: c7:1e:37:e5:8e:f7:af:6e:a3:6b:5d:92:50:bf:2b:d7:75:4b: 7e:30:9c:cb:cc:e0:d9:57:9d:33:19:ab:84:6c:18:75:ce:69: 52:4e:30:36:7b:96:40:ff:8d:40:63:73:74:f0:bb:f3:4d:de: 1b:f2:e3:8b:97:55:a1:85:42:73:b6:4d:b3:8b:04:61:f7:61: e6:45:37:48:77:83:60:4a:7f:86:ee:75:65:9c:e1:b1:da:c4: 13:94:45:8e:e0:f1:cf:e2:eb:20:3b:24:7f:10:76:8a:aa:e7: 7f:9c:28:d2:e9:92:b7:8e:b8:5f:15:38:47:25:c2:f9:46:35: d3:08:12:7c:77:0a:56:ac:64:75:f5:c2:03:94:0f:ea:93:9c: 7d:05:ce:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97lZYtDdwNDZqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdlNjRiNjYtODRkZi00NjY1LWE0ZmItZWIzYjhhZGQz NjVlMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk YWU2ZDIyODAtNDdlYy00MTQ4LWExZWMtOTc2MzlhZWU3ZmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM+9sEUZuwCqXQM2AOj8baVrq2k+vZcPEt7o k7ef8Qz2DqSC4chKFM9Kk9pE6lq9Z46dkS/8dAfxyMud/+4Vs6qMmzEgsywPqo1G QxAaC4QjY+9pU20AKU8XWVzEctw33/Pjw532zcFN5n8lBpZGUiaxQLgnJT4vRKdU LbgP3RMBbgkZhEvkGMO9ooI3rlUTOh8QuaOSNa2BQQFijSU1kDZe/s3kGOct5r+a Bn9rVnRzuty7KabLzJmB9TccFZv1Lcsfmen59geidEYcrlszRvNU3JQhzroiJaOb XMs6XZwPNm9tYTV8gTibrr1COi3npMPSIg9AfjJEJ244nK1OfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGGpG+++dPkIUARfjuPNNRmg45IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2U2 NGI2Ni04NGRmLTQ2NjUtYTRmYi1lYjNiOGFkZDM2NWUvZGU5N2EzOTgtMGZlMy0z NDk5LWExZWUtOTA5ZDFhOTgzOWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdlNjRiNjYtODRkZi00NjY1LWE0 ZmItZWIzYjhhZGQzNjVlL2E3ZTY0YjY2LTg0ZGYtNDY2NS1hNGZiLWViM2I4YWRk MzY1ZS5jcmwwHwYDVR0jBBgwFoAURD98KgLjgWbdKUOAz3Mgib/DGEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2U2NGI2Ni04NGRmLTQ2NjUtYTRmYi1lYjNi OGFkZDM2NWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+gCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKo+XaNFcSfoMYZ86qbpCJRn0FpOF8ERVGgcaxuGxc1/Wj4H3qg4myN a2Yua4phU24b0y2ZlHMwa64ANLYqf4OxMLyud+LdnPxWStrOhi8Ox/vmNoWs7I76 axVFD3ttrsVvdDbyi6mnzvKBXsceN+WO969uo2tdklC/K9d1S34wnMvM4NlXnTMZ q4RsGHXOaVJOMDZ7lkD/jUBjc3Twu/NN3hvy44uXVaGFQnO2TbOLBGH3YeZFN0h3 g2BKf4budWWc4bHaxBOURY7g8c/i6yA7JH8Qdoqq53+cKNLpkreOuF8VOEclwvlG NdMIEnx3ClasZHX1wgOUD+qTnH0FzuQ= -----END CERTIFICATE-----Generated at Sun Sep 27 10:53:52 2026 by rpki-client