$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/dd8eae82-74a3-3fb2-a603-a09a3c16a099.roa File: dd8eae82-74a3-3fb2-a603-a09a3c16a099.roa (raw, json) Hash identifier: qBLZk+YrxZWujoj3UJVuTOZBRlNS5lWXk092c4i9TCA= Subject key identifier: E5:20:3C:2B:A4:7A:25:01:6F:AB:17:7F:7F:80:9A:08:A6:80:55:5D Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584F63F82DCE5932FA50F8171C00 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/dd8eae82-74a3-3fb2-a603-a09a3c16a099.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 62943 IP address blocks: 64.111.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:2d:ce:59:32:fa:50:f8:17:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=ba8dbd52-b3d5-473d-8816-1c24fd869e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6b:74:8b:af:ed:c6:14:5d:78:b8:74:d5:94: 4a:89:6f:91:24:28:31:1f:6a:29:9e:2f:2f:5e:b9: db:5e:f3:cc:43:8c:7b:8f:d2:15:08:b4:d1:30:8b: 11:47:70:60:c0:42:e4:9a:b9:de:38:83:60:90:3d: 90:ea:f9:c0:c2:c2:6e:19:91:33:f8:34:4a:d4:9f: d0:af:8d:e8:8b:29:f3:82:82:26:2c:f2:59:f3:7b: 1e:d0:9b:55:de:58:9e:6a:74:2c:9d:e6:4a:a4:88: dd:b6:0c:8f:5e:0a:5f:5a:d1:3b:c3:fb:29:14:f6: 7a:27:f2:dc:c3:f0:82:d5:c0:61:eb:80:16:17:86: a8:96:9a:dc:13:e8:7b:6f:4f:c1:db:00:e0:aa:b0: d1:6f:4c:73:fe:97:7c:2e:2d:df:33:e3:13:f5:5e: 5a:ee:0d:44:c3:68:8a:f8:fa:f2:38:71:5e:ef:13: 9a:96:d5:c7:e6:cc:94:0c:9f:1d:88:6d:af:91:74: 75:1c:04:ef:49:7c:1c:b8:71:f5:4e:75:7a:97:47: 66:4f:4a:56:13:2d:17:83:91:4e:53:db:b3:06:83: 1c:14:d5:0d:7d:64:db:3e:4c:a3:c8:d5:49:82:6e: ca:fc:1b:d5:1e:bb:a6:ba:f9:39:16:ff:aa:b6:0a: 71:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:20:3C:2B:A4:7A:25:01:6F:AB:17:7F:7F:80:9A:08:A6:80:55:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/dd8eae82-74a3-3fb2-a603-a09a3c16a099.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 64.111.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:57:bc:e5:89:9c:c9:02:47:9d:b2:b2:a9:bf:01:98:76:46: 2f:34:b8:97:7b:6f:0e:cf:32:93:ee:b8:7d:3b:8c:d2:9d:ad: c5:47:9b:52:53:e5:60:99:d1:d4:c1:fa:ff:72:83:18:de:63: c0:e7:74:6b:4b:43:89:9b:1c:be:2c:0d:08:19:e1:f9:fc:54: a2:e1:f2:50:e1:d1:ce:ea:0c:1c:b6:52:fe:f7:65:4f:0f:f6: 15:14:ce:d3:69:90:ff:af:be:c1:46:bc:2f:50:9d:8d:4c:30: eb:bc:54:90:26:68:70:4e:1a:11:51:0a:ab:4d:5f:4e:ae:fb: c6:b0:d7:ce:ee:70:45:11:a9:42:b8:2b:8b:ae:91:bb:9f:3d: 34:0b:bb:79:eb:82:ec:ba:c6:e1:62:65:62:63:8e:76:53:1c: ca:aa:1a:aa:ef:94:4b:46:97:12:a8:56:64:8b:09:4b:32:ee: c8:02:f8:47:7b:42:57:d7:cf:04:12:7a:59:98:fc:32:92:66: df:84:c4:86:7f:3f:e0:58:fd:49:7f:c3:96:f0:21:b6:5b:67: 5f:44:4f:5a:cd:38:db:bb:a6:0a:4d:98:6b:f8:61:17:36:f3: 4c:86:62:d0:b2:53:66:51:11:5e:55:c6:15:c8:f5:12:38:09: 9e:3d:7c:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+C3OWTL6UPgXHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk YmE4ZGJkNTItYjNkNS00NzNkLTg4MTYtMWMyNGZkODY5ZTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWt0i6/txhRdeLh01ZRKiW+RJCgxH2opni8v XrnbXvPMQ4x7j9IVCLTRMIsRR3BgwELkmrneOINgkD2Q6vnAwsJuGZEz+DRK1J/Q r43oiynzgoImLPJZ83se0JtV3lieanQsneZKpIjdtgyPXgpfWtE7w/spFPZ6J/Lc w/CC1cBh64AWF4aolprcE+h7b0/B2wDgqrDRb0xz/pd8Li3fM+MT9V5a7g1Ew2iK +PryOHFe7xOaltXH5syUDJ8diG2vkXR1HATvSXwcuHH1TnV6l0dmT0pWEy0Xg5FO U9uzBoMcFNUNfWTbPkyjyNVJgm7K/BvVHrumuvk5Fv+qtgpxCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUgPCukeiUBb6sXf3+AmgimgFVdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvZGQ4ZWFlODItNzRhMy0z ZmIyLWE2MDMtYTA5YTNjMTZhMDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQG8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANXvOWJnMkCR52ysqm/AZh2Ri80uJd7bw7PMpPuuH07jNKdrcVHm1JT 5WCZ0dTB+v9ygxjeY8DndGtLQ4mbHL4sDQgZ4fn8VKLh8lDh0c7qDBy2Uv73ZU8P 9hUUztNpkP+vvsFGvC9QnY1MMOu8VJAmaHBOGhFRCqtNX06u+8aw187ucEURqUK4 K4uukbufPTQLu3nrguy6xuFiZWJjjnZTHMqqGqrvlEtGlxKoVmSLCUsy7sgC+Ed7 QlfXzwQSelmY/DKSZt+ExIZ/P+BY/Ul/w5bwIbZbZ19ET1rNONu7pgpNmGv4YRc2 80yGYtCyU2ZREV5VxhXI9RI4CZ49fNk= -----END CERTIFICATE-----Generated at Sun Oct 4 20:04:37 2026 by rpki-client