$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/6644e09e-e6f0-35ae-b40d-dcc1a4ab7180.roa File: 6644e09e-e6f0-35ae-b40d-dcc1a4ab7180.roa (raw, json) Hash identifier: IuGhWwS3cFAvp7CvyfiKcGeUr3B/opzN78B6iBtdDXA= Subject key identifier: 86:70:16:73:E9:03:5B:11:0A:4C:BC:0F:53:4A:43:2E:A8:84:2E:81 Certificate issuer: /CN=d3f2a064-9e78-4a16-a8db-33eef399665d Certificate serial: 010D0C9F4328584F4975E875BC517734A657B600 Authority key identifier: 4C:38:1C:85:25:59:B6:C1:78:FF:E3:BA:9D:83:3B:C7:10:FB:1F:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/6644e09e-e6f0-35ae-b40d-dcc1a4ab7180.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397753 IP address blocks: 64.49.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/d3f2a064-9e78-4a16-a8db-33eef399665d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/d3f2a064-9e78-4a16-a8db-33eef399665d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:e8:75:bc:51:77:34:a6:57:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3f2a064-9e78-4a16-a8db-33eef399665d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f721b4b0-3e83-4c78-8eee-efc724646bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8c:da:56:43:cd:9b:8b:50:8f:9d:a0:82:21: af:29:cd:49:f5:dc:77:ae:80:ae:31:5a:8d:17:b2: 5c:66:7b:5d:9c:34:1f:83:5f:60:c1:f3:09:58:a4: ab:e7:d6:8d:89:17:64:82:62:db:68:e2:86:1f:2c: 92:09:44:33:99:98:6b:e9:3f:89:1e:ae:94:0d:1f: 10:45:7a:8a:6f:c0:a5:ed:6d:aa:53:99:4a:02:61: 6b:d5:3d:fe:84:51:2a:ac:7e:6c:75:ac:2c:6d:b4: 6f:f9:8e:1c:25:2b:dd:42:66:85:45:8d:a5:01:a4: ae:26:6d:4d:d9:77:8c:f5:b1:ab:8c:c1:36:31:d6: 1d:a7:5c:5b:c0:a6:1e:13:da:e5:86:9c:64:8d:18: d5:99:13:f5:cd:ed:dc:ca:43:93:7f:9b:12:54:3c: 07:78:5a:91:8a:60:15:af:5b:a3:66:3e:29:59:06: 13:44:0b:63:87:d1:df:42:26:74:8e:87:66:82:67: 27:8b:67:47:38:b0:36:40:dc:24:c0:9e:65:5c:45: 17:55:61:42:85:9f:e9:37:fc:ba:73:ca:7c:91:33: a0:62:b5:dc:5f:8e:43:4f:87:0a:95:39:49:28:9b: 79:f3:58:8b:ed:7d:cc:ca:07:67:ef:d3:c5:af:d6: d1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:70:16:73:E9:03:5B:11:0A:4C:BC:0F:53:4A:43:2E:A8:84:2E:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/6644e09e-e6f0-35ae-b40d-dcc1a4ab7180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/d3f2a064-9e78-4a16-a8db-33eef399665d.crl X509v3 Authority Key Identifier: keyid:4C:38:1C:85:25:59:B6:C1:78:FF:E3:BA:9D:83:3B:C7:10:FB:1F:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d.cer sbgp-ipAddrBlock: critical IPv4: 64.49.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:c9:6e:6a:4c:0b:90:42:fe:a2:3c:d9:73:0b:c9:40:e2:59: f9:65:f5:98:f7:58:da:1b:43:16:8b:65:da:82:56:93:4e:05: dc:07:ed:00:5a:29:14:6e:52:48:c3:e9:fa:4f:af:c9:5d:40: 9d:45:ee:08:9a:61:c5:d4:4a:71:45:ff:f6:bf:37:04:4d:a8: 2a:b1:ba:37:21:c9:43:b8:b6:e5:15:2b:13:d7:df:b0:1b:72: 89:13:99:5c:89:21:9b:ec:05:3d:76:9b:2c:b2:f8:fe:1b:b9: d8:66:5e:47:ae:22:dd:cb:e7:6e:6f:5c:eb:7d:c9:79:1c:88: 8d:f1:fd:2d:76:a5:99:a7:20:51:47:4b:4d:f3:84:36:e4:7d: 60:8b:7f:74:07:04:23:fe:9f:66:3d:d5:27:bd:bc:c9:0c:55: ba:0b:26:43:c6:9e:fa:eb:91:60:0b:a2:c3:7b:e3:43:e2:8f: 06:d5:7b:d4:c6:81:dc:f3:a9:df:9a:4b:ba:0e:24:69:ec:7b: 2c:04:a4:f5:53:eb:20:a7:21:0b:a9:81:10:37:23:fe:42:75: 80:7c:fc:ca:7b:ed:cc:2f:7e:15:f3:f2:9a:e6:1f:24:1b:54: e7:b0:ac:12:cb:8a:cb:1b:25:71:82:35:b0:f9:a8:d9:23:e0: c8:9d:81:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdeh1vFF3NKZXtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNmMmEwNjQtOWU3OC00YTE2LWE4ZGItMzNlZWYzOTk2 NjVkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjcyMWI0YjAtM2U4My00Yzc4LThlZWUtZWZjNzI0NjQ2YmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhozaVkPNm4tQj52ggiGvKc1J9dx3roCuMVqN F7JcZntdnDQfg19gwfMJWKSr59aNiRdkgmLbaOKGHyySCUQzmZhr6T+JHq6UDR8Q RXqKb8Cl7W2qU5lKAmFr1T3+hFEqrH5sdawsbbRv+Y4cJSvdQmaFRY2lAaSuJm1N 2XeM9bGrjME2MdYdp1xbwKYeE9rlhpxkjRjVmRP1ze3cykOTf5sSVDwHeFqRimAV r1ujZj4pWQYTRAtjh9HfQiZ0jodmgmcni2dHOLA2QNwkwJ5lXEUXVWFChZ/pN/y6 c8p8kTOgYrXcX45DT4cKlTlJKJt581iL7X3Mygdn79PFr9bRAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZwFnPpA1sRCky8D1NKQy6ohC6BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kM2Yy YTA2NC05ZTc4LTRhMTYtYThkYi0zM2VlZjM5OTY2NWQvNjY0NGUwOWUtZTZmMC0z NWFlLWI0MGQtZGNjMWE0YWI3MTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDNmMmEwNjQtOWU3OC00YTE2LWE4 ZGItMzNlZWYzOTk2NjVkL2QzZjJhMDY0LTllNzgtNGExNi1hOGRiLTMzZWVmMzk5 NjY1ZC5jcmwwHwYDVR0jBBgwFoAUTDgchSVZtsF4/+O6nYM7xxD7H1EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kM2YyYTA2NC05ZTc4LTRhMTYtYThkYi0zM2Vl ZjM5OTY2NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQDEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHJbmpMC5BC/qI82XMLyUDiWfll9Zj3WNobQxaLZdqCVpNOBdwH7QBa KRRuUkjD6fpPr8ldQJ1F7giaYcXUSnFF//a/NwRNqCqxujchyUO4tuUVKxPX37Ab cokTmVyJIZvsBT12myyy+P4budhmXkeuIt3L525vXOt9yXkciI3x/S12pZmnIFFH S03zhDbkfWCLf3QHBCP+n2Y91Se9vMkMVboLJkPGnvrrkWALosN740PijwbVe9TG gdzzqd+aS7oOJGnseywEpPVT6yCnIQupgRA3I/5CdYB8/Mp77cwvfhXz8prmHyQb VOewrBLLissbJXGCNbD5qNkj4MidgQw= -----END CERTIFICATE-----Generated at Sun Sep 27 17:25:36 2026 by rpki-client