$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/c38a9254-bd55-334d-8825-624e13ddc8fa.roa File: c38a9254-bd55-334d-8825-624e13ddc8fa.roa (raw, json) Hash identifier: gu4FFQxupvSg0rm0uBrdsat8xhGgUUEr08yNqYmBXkY= Subject key identifier: 66:71:2C:C5:40:99:1D:92:82:41:C0:92:3F:44:65:89:56:F1:D7:04 Certificate issuer: /CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d Certificate serial: 010D0C9F4328584F0672325AF5C510385753D500 Authority key identifier: 1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/c38a9254-bd55-334d-8825-624e13ddc8fa.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 26155 IP address blocks: 67.223.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:32:5a:f5:c5:10:38:57:53:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=20b13f84-2e11-4e0a-beb5-e59016fede83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ec:8e:cf:9b:81:60:77:d4:de:da:ec:df:44: e2:54:44:73:56:80:ae:00:af:4f:7c:33:c8:13:10: e3:15:fa:cd:aa:50:45:e1:5b:35:e3:9c:b5:df:e0: bc:8e:ae:ac:f8:b5:76:59:8c:28:dc:d0:f1:e7:e6: f6:9b:03:fb:85:c5:d1:9f:0b:bb:2f:5b:43:c0:b9: 1e:49:e6:f8:3d:74:9a:62:ab:ac:df:29:c4:d9:8d: e4:9d:b3:69:0b:07:7a:33:d2:32:f8:20:25:3e:03: 08:a4:b9:2f:a3:34:6d:fb:cf:a6:75:a1:e2:7f:2a: 73:5b:3d:a0:b1:b4:81:c0:ff:8c:00:bf:35:c9:8b: 27:04:86:d3:7b:13:1c:67:02:e8:a3:ac:b5:4b:a9: 7e:93:7a:ac:0b:d6:6f:55:72:61:0e:da:a1:73:a7: ce:7a:1c:4d:0e:fd:37:bf:ac:35:7e:70:e7:1a:01: fb:21:0d:5b:8d:31:b1:75:09:aa:55:25:cf:e1:da: 22:15:50:c9:6b:ca:5e:eb:3a:e1:98:8e:d6:bf:86: c6:20:90:32:0e:c1:ca:dc:76:1f:3a:f4:83:b3:72: 7c:18:91:05:31:7c:63:c5:4c:7a:ac:f6:4c:4c:25: 7f:6c:e3:d5:58:17:5c:51:7d:52:18:f6:76:c2:be: 03:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:71:2C:C5:40:99:1D:92:82:41:C0:92:3F:44:65:89:56:F1:D7:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/c38a9254-bd55-334d-8825-624e13ddc8fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl X509v3 Authority Key Identifier: keyid:1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer sbgp-ipAddrBlock: critical IPv4: 67.223.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ca:60:21:1b:c9:6e:47:b7:76:f8:86:da:f4:0c:0f:74:5a: ad:a2:6c:7b:ec:81:a7:93:23:6c:ee:0e:95:ac:5c:60:57:5a: 3d:e9:86:ca:6b:a7:4b:50:3a:76:84:60:b8:26:c2:a1:73:c6: 85:83:96:3d:48:5f:db:b1:64:56:ad:08:25:87:c0:f2:b1:21: 0a:84:de:9a:00:18:72:f4:51:1b:51:c0:b8:19:b8:57:12:38: 3e:29:83:d8:26:b8:43:3e:4a:6a:76:3f:39:cf:d0:97:0c:2c: db:17:06:38:4a:94:bd:c2:b2:cc:54:07:6b:1b:be:52:36:08: 7c:27:42:0a:d5:08:db:00:b1:b3:f3:1d:ec:66:1b:84:d4:59: 7f:90:f7:e6:32:01:2d:af:79:99:39:5a:6b:f9:d2:c2:66:3a: 96:40:b6:8c:ed:a9:69:fc:5e:e3:d1:07:bc:c3:f3:89:a9:17: a6:25:6e:3f:6d:c9:5a:8d:3d:9e:3a:71:22:f7:7b:61:cd:8b: 42:da:84:68:27:d3:de:3e:92:15:21:05:79:9a:54:1f:97:a6: f3:8e:82:09:15:21:54:8a:b4:2e:f3:39:f3:35:80:90:96:91: c3:f3:1d:2c:5e:76:d8:01:ac:75:34:00:8f:3b:f9:08:c9:b4: 21:20:9c:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcjJa9cUQOFdT1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTgyOTU4MjAtMDNiYy00YTRlLTgwNzItN2NiZjc0OGY0 YzZkMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MjBiMTNmODQtMmUxMS00ZTBhLWJlYjUtZTU5MDE2ZmVkZTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOyOz5uBYHfU3trs30TiVERzVoCuAK9PfDPI ExDjFfrNqlBF4Vs145y13+C8jq6s+LV2WYwo3NDx5+b2mwP7hcXRnwu7L1tDwLke Seb4PXSaYqus3ynE2Y3knbNpCwd6M9Iy+CAlPgMIpLkvozRt+8+mdaHifypzWz2g sbSBwP+MAL81yYsnBIbTexMcZwLoo6y1S6l+k3qsC9ZvVXJhDtqhc6fOehxNDv03 v6w1fnDnGgH7IQ1bjTGxdQmqVSXP4doiFVDJa8pe6zrhmI7Wv4bGIJAyDsHK3HYf OvSDs3J8GJEFMXxjxUx6rPZMTCV/bOPVWBdcUX1SGPZ2wr4DoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZxLMVAmR2SgkHAkj9EZYlW8dcEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lODI5 NTgyMC0wM2JjLTRhNGUtODA3Mi03Y2JmNzQ4ZjRjNmQvYzM4YTkyNTQtYmQ1NS0z MzRkLTg4MjUtNjI0ZTEzZGRjOGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTgyOTU4MjAtMDNiYy00YTRlLTgw NzItN2NiZjc0OGY0YzZkL2U4Mjk1ODIwLTAzYmMtNGE0ZS04MDcyLTdjYmY3NDhm NGM2ZC5jcmwwHwYDVR0jBBgwFoAUGt9TWH5SbG/MuhYDvE0QNRjo5qQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lODI5NTgyMC0wM2JjLTRhNGUtODA3Mi03Y2Jm NzQ4ZjRjNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ99tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADKYCEbyW5Ht3b4htr0DA90Wq2ibHvsgaeTI2zuDpWsXGBXWj3phspr p0tQOnaEYLgmwqFzxoWDlj1IX9uxZFatCCWHwPKxIQqE3poAGHL0URtRwLgZuFcS OD4pg9gmuEM+Smp2PznP0JcMLNsXBjhKlL3CssxUB2sbvlI2CHwnQgrVCNsAsbPz HexmG4TUWX+Q9+YyAS2veZk5Wmv50sJmOpZAtoztqWn8XuPRB7zD84mpF6Ylbj9t yVqNPZ46cSL3e2HNi0LahGgn094+khUhBXmaVB+XpvOOggkVIVSKtC7zOfM1gJCW kcPzHSxedtgBrHU0AI87+QjJtCEgnE4= -----END CERTIFICATE-----Generated at Sat Sep 26 09:44:47 2026 by rpki-client