$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/9faef993-81b7-3486-a305-4bb2df44e2a6.roa File: 9faef993-81b7-3486-a305-4bb2df44e2a6.roa (raw, json) Hash identifier: vOk2Oev/macg70T1SDDW2LuSdSdz+PoRpGJDH+dqIuM= Subject key identifier: 95:A4:50:E4:D9:4D:B7:4A:B5:62:89:C5:0B:31:2A:89:6E:3F:A0:F9 Certificate issuer: /CN=a20363da-11e1-47d9-ac51-fe156737c8bb Certificate serial: 010D0C9F4328584F49773DFF050541268690FA00 Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/9faef993-81b7-3486-a305-4bb2df44e2a6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 55039 IP address blocks: 64.190.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:3d:ff:05:05:41:26:86:90:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6738f40d-b630-4356-aa82-67e1845f3578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a0:a4:ab:fe:13:8c:66:d8:b9:f2:f3:40:c0: 7b:d1:24:e8:69:d5:84:b1:fa:41:a6:c1:04:b2:f6: 9b:62:a7:74:89:c0:1e:62:e1:90:85:bb:d4:66:87: 19:00:ab:c3:3c:8d:de:ec:3e:c1:45:e1:23:50:0b: 6d:73:ce:db:06:5f:59:44:a3:20:06:37:6c:90:6d: 7f:74:81:24:18:b0:51:3c:7b:64:a0:22:ef:d5:f7: 94:5f:86:90:f9:b6:0d:57:3e:1a:d3:18:a2:bb:30: 91:c8:77:67:46:e9:1e:3f:63:d4:6f:00:47:35:16: 0b:fa:22:8f:c2:4b:ec:ca:44:ab:7d:b8:36:e9:15: 76:7f:11:68:24:74:83:c9:6b:dd:c5:a2:83:d3:d9: de:bc:b2:8e:60:e7:5f:ad:87:5e:c5:5f:ef:9c:2e: 87:43:64:c2:35:d8:57:8f:0b:24:fc:d7:61:2e:5b: c8:ce:65:ac:43:cd:5a:f8:ab:ed:36:79:04:12:6b: da:a2:83:df:a3:cc:04:de:8a:8c:f2:1a:ff:5c:e1: 17:27:99:58:00:e5:c9:e3:08:83:cc:37:ae:c3:2b: ec:04:8b:f0:81:04:ce:af:11:95:f1:8f:a5:46:fa: 8e:91:17:b0:75:30:dd:a5:1c:2e:11:e3:35:57:91: f9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A4:50:E4:D9:4D:B7:4A:B5:62:89:C5:0B:31:2A:89:6E:3F:A0:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/9faef993-81b7-3486-a305-4bb2df44e2a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl X509v3 Authority Key Identifier: keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer sbgp-ipAddrBlock: critical IPv4: 64.190.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:27:cc:80:5b:91:c4:82:db:2a:cb:fa:c3:bd:a1:d2:7c:40: 56:5d:9e:48:94:5f:0d:ff:88:1a:44:6c:28:dd:52:01:f2:c4: 65:6e:94:05:17:ba:31:10:a6:eb:fe:2d:16:3b:c7:2a:49:6e: 31:50:6e:55:72:54:d8:af:92:5a:b4:aa:e4:fb:53:61:4e:8f: 1e:8d:c0:f5:4e:50:d9:f1:78:83:77:fa:70:f4:cc:51:65:8c: a9:03:58:78:40:86:02:9b:9e:6f:9a:22:13:c0:01:15:df:f8: 3f:09:4b:a3:94:ae:4c:57:c1:0d:c1:46:cc:33:9f:47:f4:49: 13:e0:4b:40:3b:2c:53:a2:8f:34:25:83:09:de:4e:69:e4:9d: 04:f9:20:d3:53:ab:fe:c0:ac:92:44:0f:bb:95:92:09:76:fd: 4d:71:57:ad:15:47:e7:08:3a:c6:06:e4:2c:8d:16:17:d2:64: a3:fc:88:ba:cf:2c:9d:30:d6:03:a2:40:98:bf:bc:a7:d0:70: c4:7d:c5:fd:59:b4:67:0d:09:8b:af:59:5e:3a:84:a3:80:58: 3b:5f:80:89:77:65:d4:e1:11:0e:a5:0a:01:b8:ff:ab:e1:72: 87:de:cc:a2:11:58:66:7c:c8:90:00:f8:09:1b:ed:55:d1:a7: b6:1d:ed:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdz3/BQVBJoaQ+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwMzYzZGEtMTFlMS00N2Q5LWFjNTEtZmUxNTY3Mzdj OGJiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjczOGY0MGQtYjYzMC00MzU2LWFhODItNjdlMTg0NWYzNTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqCkq/4TjGbYufLzQMB70SToadWEsfpBpsEE svabYqd0icAeYuGQhbvUZocZAKvDPI3e7D7BReEjUAttc87bBl9ZRKMgBjdskG1/ dIEkGLBRPHtkoCLv1feUX4aQ+bYNVz4a0xiiuzCRyHdnRukeP2PUbwBHNRYL+iKP wkvsykSrfbg26RV2fxFoJHSDyWvdxaKD09nevLKOYOdfrYdexV/vnC6HQ2TCNdhX jwsk/NdhLlvIzmWsQ81a+KvtNnkEEmvaooPfo8wE3oqM8hr/XOEXJ5lYAOXJ4wiD zDeuwyvsBIvwgQTOrxGV8Y+lRvqOkRewdTDdpRwuEeM1V5H5YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWkUOTZTbdKtWKJxQsxKoluP6D5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAz NjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1NjczN2M4YmIvOWZhZWY5OTMtODFiNy0z NDg2LWEzMDUtNGJiMmRmNDRlMmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTIwMzYzZGEtMTFlMS00N2Q5LWFj NTEtZmUxNTY3MzdjOGJiL2EyMDM2M2RhLTExZTEtNDdkOS1hYzUxLWZlMTU2NzM3 YzhiYi5jcmwwHwYDVR0jBBgwFoAU00Sj8uDd7uXT1A4v3OrfYK5roBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAzNjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1 NjczN2M4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQL4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4nzIBbkcSC2yrL+sO9odJ8QFZdnkiUXw3/iBpEbCjdUgHyxGVulAUX ujEQpuv+LRY7xypJbjFQblVyVNivklq0quT7U2FOjx6NwPVOUNnxeIN3+nD0zFFl jKkDWHhAhgKbnm+aIhPAARXf+D8JS6OUrkxXwQ3BRswzn0f0SRPgS0A7LFOijzQl gwneTmnknQT5INNTq/7ArJJED7uVkgl2/U1xV60VR+cIOsYG5CyNFhfSZKP8iLrP LJ0w1gOiQJi/vKfQcMR9xf1ZtGcNCYuvWV46hKOAWDtfgIl3ZdThEQ6lCgG4/6vh cofezKIRWGZ8yJAA+Akb7VXRp7Yd7dU= -----END CERTIFICATE-----Generated at Mon Oct 5 00:49:40 2026 by rpki-client