$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7294aee6-e70a-494f-aa0c-f3894c542c48/d973f1a1-9464-3126-8bbe-53e64e5b1bba.roa File: d973f1a1-9464-3126-8bbe-53e64e5b1bba.roa (raw, json) Hash identifier: oNYsu4X9+YlUAWGjx646jTLlo9sNXNXVkET9r/2DYHw= Subject key identifier: 87:69:1B:5C:22:59:59:C9:14:AC:CC:86:ED:15:03:4C:C0:05:7E:61 Certificate issuer: /CN=7294aee6-e70a-494f-aa0c-f3894c542c48 Certificate serial: 010D0C9F4328584F46A7DC2CE8D8880DD6366500 Authority key identifier: D2:BB:A0:63:1B:40:37:34:B8:D5:D4:AF:E7:27:F9:A9:B9:05:8F:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7294aee6-e70a-494f-aa0c-f3894c542c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7294aee6-e70a-494f-aa0c-f3894c542c48/d973f1a1-9464-3126-8bbe-53e64e5b1bba.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 64.28.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7294aee6-e70a-494f-aa0c-f3894c542c48/7294aee6-e70a-494f-aa0c-f3894c542c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7294aee6-e70a-494f-aa0c-f3894c542c48/7294aee6-e70a-494f-aa0c-f3894c542c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7294aee6-e70a-494f-aa0c-f3894c542c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:dc:2c:e8:d8:88:0d:d6:36:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7294aee6-e70a-494f-aa0c-f3894c542c48 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=d7a7da55-cb41-4acb-854c-4e1cc5d48ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:20:dd:4e:53:06:7e:50:35:6f:e4:4a:f8:3d: b7:37:c9:b5:7e:46:1d:62:25:5d:b7:63:a8:5f:d5: 05:c1:8f:8d:d2:04:9a:d9:f7:0a:15:91:29:36:db: c5:52:44:3d:22:81:42:b1:5d:d9:84:25:c0:c6:05: db:5f:19:f8:6c:d3:33:b5:77:6f:4e:b6:f0:34:f4: ab:5e:11:fe:c8:16:da:01:a4:d2:8d:a1:3d:25:19: 36:0d:95:8e:9c:07:4d:8e:03:65:e8:ef:1a:80:1f: 84:4e:21:b0:a6:03:1f:c7:2b:42:50:dd:35:bf:30: 3d:0d:31:71:99:f9:dc:a0:e8:72:a8:24:22:48:ec: 77:de:32:bd:aa:23:83:bb:2d:a3:1d:c5:a5:49:f4: 1a:00:82:44:86:91:f2:3b:48:92:53:ab:05:98:c9: 45:24:a9:5d:1f:49:a7:57:21:54:91:f3:a9:5a:10: 99:0c:d2:42:32:6d:0b:e5:88:0f:f4:9d:4e:ff:b7: f9:7c:a0:7a:4d:b5:d5:3a:6d:87:1b:67:34:bc:6c: 39:a9:86:ef:2e:bd:0e:fa:ae:8a:16:f8:e9:fe:f0: 16:b2:63:21:a5:52:d2:eb:ff:fb:1e:22:61:0d:db: 4b:6b:c0:10:19:ca:68:bf:38:65:4f:36:69:d9:1b: 99:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:69:1B:5C:22:59:59:C9:14:AC:CC:86:ED:15:03:4C:C0:05:7E:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7294aee6-e70a-494f-aa0c-f3894c542c48/d973f1a1-9464-3126-8bbe-53e64e5b1bba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7294aee6-e70a-494f-aa0c-f3894c542c48/7294aee6-e70a-494f-aa0c-f3894c542c48.crl X509v3 Authority Key Identifier: keyid:D2:BB:A0:63:1B:40:37:34:B8:D5:D4:AF:E7:27:F9:A9:B9:05:8F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7294aee6-e70a-494f-aa0c-f3894c542c48.cer sbgp-ipAddrBlock: critical IPv4: 64.28.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:bf:5b:09:05:56:7a:57:bb:8a:e4:ef:92:cb:1f:1d:17:0d: e2:3e:c5:8b:22:3c:b7:50:89:b9:32:24:c1:bf:b4:64:56:d1: 78:aa:58:77:22:09:b3:d0:a8:ce:75:d7:c8:a9:66:55:2e:2f: 2d:5a:a3:c5:26:b0:ba:54:d5:52:09:54:b5:9e:be:cf:b6:a1: 07:73:02:87:85:b8:fa:ca:f2:7d:20:c4:18:e3:3d:0a:ec:bb: 80:71:70:ac:11:ed:fc:98:95:79:ad:99:f6:b8:6c:25:65:3c: a0:b3:38:3a:9f:7a:d3:b9:75:8e:01:1b:c9:f8:79:45:18:26: 9f:d5:5f:39:bc:b8:63:f0:65:ca:c5:a0:c1:fc:fd:83:fc:29: ae:18:6e:8e:92:db:44:f2:eb:62:9e:a7:b1:95:94:bb:1a:58: d7:50:82:85:88:37:1c:01:de:3e:c0:9a:ac:60:c1:1c:48:db: 97:59:01:d3:a6:60:5a:b5:bf:e6:a4:16:a7:f0:21:ea:8a:2c: 7f:69:41:2e:69:fd:c8:c1:7b:c0:83:40:e0:2b:8f:97:46:76: 88:73:36:ad:8f:b8:af:85:45:4d:84:11:db:f8:d7:18:31:39: b5:ee:d0:6d:8f:17:8e:f1:23:e6:b4:2d:38:55:e9:b8:e6:49: 88:eb:27:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp9ws6NiIDdY2ZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzI5NGFlZTYtZTcwYS00OTRmLWFhMGMtZjM4OTRjNTQy YzQ4MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk ZDdhN2RhNTUtY2I0MS00YWNiLTg1NGMtNGUxY2M1ZDQ4ZWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyDdTlMGflA1b+RK+D23N8m1fkYdYiVdt2Oo X9UFwY+N0gSa2fcKFZEpNtvFUkQ9IoFCsV3ZhCXAxgXbXxn4bNMztXdvTrbwNPSr XhH+yBbaAaTSjaE9JRk2DZWOnAdNjgNl6O8agB+ETiGwpgMfxytCUN01vzA9DTFx mfncoOhyqCQiSOx33jK9qiODuy2jHcWlSfQaAIJEhpHyO0iSU6sFmMlFJKldH0mn VyFUkfOpWhCZDNJCMm0L5YgP9J1O/7f5fKB6TbXVOm2HG2c0vGw5qYbvLr0O+q6K Fvjp/vAWsmMhpVLS6//7HiJhDdtLa8AQGcpovzhlTzZp2RuZqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdpG1wiWVnJFKzMhu0VA0zABX5hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83Mjk0 YWVlNi1lNzBhLTQ5NGYtYWEwYy1mMzg5NGM1NDJjNDgvZDk3M2YxYTEtOTQ2NC0z MTI2LThiYmUtNTNlNjRlNWIxYmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNzI5NGFlZTYtZTcwYS00OTRmLWFh MGMtZjM4OTRjNTQyYzQ4LzcyOTRhZWU2LWU3MGEtNDk0Zi1hYTBjLWYzODk0YzU0 MmM0OC5jcmwwHwYDVR0jBBgwFoAU0rugYxtANzS41dSv5yf5qbkFj/8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83Mjk0YWVlNi1lNzBhLTQ5NGYtYWEwYy1mMzg5 NGM1NDJjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQByQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJO/WwkFVnpXu4rk75LLHx0XDeI+xYsiPLdQibkyJMG/tGRW0XiqWHci CbPQqM5118ipZlUuLy1ao8UmsLpU1VIJVLWevs+2oQdzAoeFuPrK8n0gxBjjPQrs u4BxcKwR7fyYlXmtmfa4bCVlPKCzODqfetO5dY4BG8n4eUUYJp/VXzm8uGPwZcrF oMH8/YP8Ka4Ybo6S20Ty62Kep7GVlLsaWNdQgoWINxwB3j7AmqxgwRxI25dZAdOm YFq1v+akFqfwIeqKLH9pQS5p/cjBe8CDQOArj5dGdohzNq2PuK+FRU2EEdv41xgx ObXu0G2PF47xI+a0LThV6bjmSYjrJ1s= -----END CERTIFICATE-----Generated at Sat Sep 26 17:06:50 2026 by rpki-client