$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/84704c59-1b86-3949-9b9d-26dfdf55ba37.roa File: 84704c59-1b86-3949-9b9d-26dfdf55ba37.roa (raw, json) Hash identifier: rmZLpikI4W7mgnPTWI5wLNZrrLCFRzZadshPg6fsF3s= Subject key identifier: A9:77:86:14:28:50:D2:E7:1C:E5:38:A4:27:E1:6B:2B:62:78:69:A1 Certificate issuer: /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Certificate serial: 010D0C9F4328584E921FADD12DC2FA0B87BB1880 Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/84704c59-1b86-3949-9b9d-26dfdf55ba37.roa Signing time: Tue 21 Jul 2026 09:00:12 +0000 ROA not before: Tue 21 Jul 2026 09:00:12 +0000 ROA not after: Mon 19 Oct 2026 09:00:12 +0000 asID: 14090 IP address blocks: 64.21.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:1f:ad:d1:2d:c2:fa:0b:87:bb:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Validity Not Before: Jul 21 09:00:12 2026 GMT Not After : Oct 19 09:00:12 2026 GMT Subject: CN=e49d069a-e22f-43fd-beb3-d735781ba8d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d0:8c:ce:cf:df:c6:10:59:28:99:46:34:da: de:ea:16:67:a0:38:54:70:fe:d5:fd:67:c3:96:63: 3d:ad:49:c7:e4:ff:9b:f2:68:13:1c:7e:ec:e5:36: d0:9e:e7:38:16:3e:6a:97:bd:ba:18:00:ea:2e:6c: de:2d:93:75:d9:e2:9a:bf:22:c8:ca:4b:04:77:80: f1:10:b1:44:3c:e6:20:34:55:ae:e6:f1:8a:a7:d1: 17:2e:b4:3e:a0:10:25:d1:60:dc:2a:ad:02:fe:a1: 2e:fa:61:9e:1c:48:33:4e:4a:fa:60:c1:54:e2:9a: e8:55:54:fc:eb:60:37:b1:41:1c:67:ca:f8:8b:d3: e8:a9:2e:97:d1:82:b3:09:77:c8:0e:9e:58:73:19: 12:6d:77:28:ff:5c:c9:dc:05:ef:a1:c9:4d:da:09: 95:6b:09:84:52:19:60:b9:79:5b:0e:d5:8a:9e:60: 77:05:5c:18:e6:eb:77:72:89:77:3a:0a:e5:5a:ca: 61:6b:d9:51:b0:57:0e:6b:27:85:8e:44:d7:eb:0d: 05:00:e1:7c:1f:22:b3:31:16:83:1b:75:0a:43:4e: 08:1a:35:6c:97:b6:06:c2:1c:b1:d9:d7:af:ff:0d: 3d:1d:73:d4:5e:f4:75:97:27:11:08:de:57:61:4a: 10:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:77:86:14:28:50:D2:E7:1C:E5:38:A4:27:E1:6B:2B:62:78:69:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/84704c59-1b86-3949-9b9d-26dfdf55ba37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl X509v3 Authority Key Identifier: keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer sbgp-ipAddrBlock: critical IPv4: 64.21.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:fc:8f:d0:ea:5d:3a:d7:eb:84:59:26:d2:7e:5a:b2:45:27: 38:e0:1d:31:8d:16:8e:b4:39:45:48:4b:61:de:bb:17:6f:71: 9c:f1:30:3b:a1:64:82:b2:f6:7e:6c:2e:73:f4:31:5f:18:8d: 5a:a7:8a:ab:e0:67:f6:2f:f0:94:bb:c6:d0:3e:98:89:55:15: 7f:46:f9:33:9e:24:77:a3:8b:ad:0c:08:42:a6:77:61:ce:e6: 35:4c:7c:3b:3d:8d:d0:6d:c1:3e:fa:f2:2d:2e:14:b5:a0:48: e9:67:05:be:fc:a2:e7:a3:e4:85:86:34:3b:ca:74:de:ee:4f: 80:2b:3b:37:b9:df:d1:a6:29:71:6c:37:de:83:0f:42:68:2b: a0:b6:ba:fc:df:9e:c5:11:5e:a3:74:86:d2:46:4e:af:bd:59: c2:93:31:c4:38:8f:59:2d:4d:ff:b3:75:2b:71:0f:1d:b1:5c: 47:86:71:44:78:dc:03:78:11:35:67:f6:7b:78:fd:ec:a7:f0: 61:d5:4d:a4:33:ec:29:74:1a:a4:31:5c:e5:44:a8:38:4f:2f: a2:72:b4:36:dc:af:93:ae:8a:53:2c:19:56:54:f8:ca:90:b5: 29:e3:46:b9:54:72:8f:8c:4b:73:44:31:09:80:fd:89:b7:94: 7f:c9:d4:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6SH63RLcL6C4e7GIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk ZTYxMB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk ZTQ5ZDA2OWEtZTIyZi00M2ZkLWJlYjMtZDczNTc4MWJhOGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9CMzs/fxhBZKJlGNNre6hZnoDhUcP7V/WfD lmM9rUnH5P+b8mgTHH7s5TbQnuc4Fj5ql726GADqLmzeLZN12eKavyLIyksEd4Dx ELFEPOYgNFWu5vGKp9EXLrQ+oBAl0WDcKq0C/qEu+mGeHEgzTkr6YMFU4proVVT8 62A3sUEcZ8r4i9PoqS6X0YKzCXfIDp5YcxkSbXco/1zJ3AXvoclN2gmVawmEUhlg uXlbDtWKnmB3BVwY5ut3col3OgrlWspha9lRsFcOayeFjkTX6w0FAOF8HyKzMRaD G3UKQ04IGjVsl7YGwhyx2dev/w09HXPUXvR1lycRCN5XYUoQXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKl3hhQoUNLnHOU4pCfhaytieGmhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3 ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvODQ3MDRjNTktMWI4Ni0z OTQ5LTliOWQtMjZkZmRmNTViYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1 NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5 ZGQ0ZWRlNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQBX6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADb8j9DqXTrX64RZJtJ+WrJFJzjgHTGNFo60OUVIS2HeuxdvcZzxMDuh ZIKy9n5sLnP0MV8YjVqniqvgZ/Yv8JS7xtA+mIlVFX9G+TOeJHeji60MCEKmd2HO 5jVMfDs9jdBtwT768i0uFLWgSOlnBb78ouej5IWGNDvKdN7uT4ArOze539GmKXFs N96DD0JoK6C2uvzfnsURXqN0htJGTq+9WcKTMcQ4j1ktTf+zdStxDx2xXEeGcUR4 3AN4ETVn9nt4/eyn8GHVTaQz7Cl0GqQxXOVEqDhPL6JytDbcr5OuilMsGVZU+MqQ tSnjRrlUco+MS3NEMQmA/Ym3lH/J1E4= -----END CERTIFICATE-----Generated at Fri Jul 24 09:08:30 2026 by rpki-client