$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/aea7cd1d-a1ed-3404-852a-8f82586d17f4.roa File: aea7cd1d-a1ed-3404-852a-8f82586d17f4.roa (raw, json) Hash identifier: sTQBfbUIk8DpRK6bHmqZYF6uVjK1lZQRUbMh6Xy1js8= Subject key identifier: 11:F3:C9:77:6F:EA:41:DE:90:B2:58:F6:AA:E4:7D:13:A8:ED:73:D5 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584F480D65557375D4525861F480 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/aea7cd1d-a1ed-3404-852a-8f82586d17f4.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 137409 IP address blocks: 64.64.104.0/22 maxlen: 24 64.64.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:65:55:73:75:d4:52:58:61:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=d049065e-61cb-4d4a-8064-c1f08e275830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7d:23:ad:d5:5e:2a:f3:05:e2:4c:a3:44:6f: 50:1c:88:d6:0c:48:87:06:73:ce:50:dc:8b:c0:c2: 2a:57:eb:e0:f9:2c:40:9a:bb:02:32:66:dc:10:4c: b1:87:4d:f6:de:35:c9:7a:b1:f5:c3:e7:c4:32:42: de:d0:04:5b:e0:e2:a0:5e:9f:a5:a9:6d:ac:26:15: b5:f3:81:f4:3e:16:fb:d7:b4:dc:00:cc:4c:5c:6f: e3:44:4e:81:06:34:e9:0b:f5:79:d3:79:af:d2:1f: be:01:24:09:c3:bc:96:b7:cf:87:bc:cc:20:65:b5: 5f:f4:08:b8:81:9c:47:f2:1f:36:79:5d:a9:1f:8d: 4f:56:82:45:60:a0:e6:e7:07:54:0e:c0:81:cf:c3: 76:18:da:5f:26:b1:6e:87:eb:ba:38:d4:6e:8f:4d: 25:d8:97:a4:bd:60:78:a0:e6:f1:45:f2:15:e5:0a: 58:16:40:d2:61:84:e4:ba:b6:af:43:94:8e:93:45: 93:3b:13:97:2b:ad:fc:9c:8c:ef:61:36:1a:f5:38: 74:de:2f:95:1a:41:17:45:57:eb:6c:72:db:6c:e1: 44:38:4a:74:7a:bf:d1:f7:cf:3f:10:8a:2c:db:96: ca:67:a6:ee:d9:ea:73:7a:74:8e:37:85:85:62:8e: 2b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F3:C9:77:6F:EA:41:DE:90:B2:58:F6:AA:E4:7D:13:A8:ED:73:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/aea7cd1d-a1ed-3404-852a-8f82586d17f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 64.64.104.0/22 64.64.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:4f:f9:6a:6f:ee:72:da:a9:0f:93:7d:e6:38:5b:d6:01:ae: 6c:24:41:64:79:96:1f:d2:b6:6d:5b:5d:34:6a:c2:07:fd:8c: 16:9d:b3:1a:10:d9:13:e2:5c:f8:0b:ae:15:df:f5:3f:50:aa: 6c:7b:f6:68:03:31:21:e2:93:0c:05:b4:5c:e1:55:40:d8:f5: ac:d3:3d:77:c3:ef:85:9a:57:bb:46:a3:7d:49:8d:9a:87:fa: 00:13:ef:50:ba:60:d6:49:23:e2:d6:f1:d1:e9:1a:8e:f7:11: 0c:97:d3:4d:8a:0f:b9:e4:c0:ca:34:02:8d:d3:d8:b1:21:d5: 03:8a:4a:db:6c:26:31:8c:52:0d:98:bc:96:67:14:21:5e:54: b7:27:db:08:39:1c:cc:54:49:f0:f5:b4:38:ea:dd:3e:c0:28: ae:20:62:59:8f:c2:bf:66:5c:f7:6c:01:06:37:82:1c:ef:3d: 4e:ae:17:19:1e:77:55:b2:43:a2:0c:05:55:c9:d9:29:c0:b5: 5f:4d:0b:09:ac:3d:42:ca:81:11:74:27:3f:e7:a8:9b:f4:54: e9:85:a9:39:04:42:16:3e:7a:22:42:80:ed:d6:5c:72:b5:37: c0:80:c3:39:0e:29:b5:d4:5f:61:94:12:34:25:e8:a0:ae:79: ef:b9:39:b0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9IDWVVc3XUUlhh9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZDA0OTA2NWUtNjFjYi00ZDRhLTgwNjQtYzFmMDhlMjc1ODMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX0jrdVeKvMF4kyjRG9QHIjWDEiHBnPOUNyL wMIqV+vg+SxAmrsCMmbcEEyxh0323jXJerH1w+fEMkLe0ARb4OKgXp+lqW2sJhW1 84H0Phb717TcAMxMXG/jRE6BBjTpC/V503mv0h++ASQJw7yWt8+HvMwgZbVf9Ai4 gZxH8h82eV2pH41PVoJFYKDm5wdUDsCBz8N2GNpfJrFuh+u6ONRuj00l2JekvWB4 oObxRfIV5QpYFkDSYYTkuravQ5SOk0WTOxOXK638nIzvYTYa9Th03i+VGkEXRVfr bHLbbOFEOEp0er/R988/EIos25bKZ6bu2epzenSON4WFYo4rPQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBHzyXdv6kHekLJY9qrkfROo7XPVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYWVhN2NkMWQtYTFlZC0z NDA0LTg1MmEtOGY4MjU4NmQxN2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCQEBoAwQA QEB7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADVP+Wpv7nLaqQ+TfeY4W9YBrmwkQWR5lh/Stm1bXTRqwgf9 jBadsxoQ2RPiXPgLrhXf9T9Qqmx79mgDMSHikwwFtFzhVUDY9azTPXfD74WaV7tG o31JjZqH+gAT71C6YNZJI+LW8dHpGo73EQyX002KD7nkwMo0Ao3T2LEh1QOKStts JjGMUg2YvJZnFCFeVLcn2wg5HMxUSfD1tDjq3T7AKK4gYlmPwr9mXPdsAQY3ghzv PU6uFxked1WyQ6IMBVXJ2SnAtV9NCwmsPULKgRF0Jz/nqJv0VOmFqTkEQhY+eiJC gO3WXHK1N8CAwzkOKbXUX2GUEjQl6KCuee+5ObA= -----END CERTIFICATE-----Generated at Sun Sep 27 06:46:15 2026 by rpki-client