$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/efc73afb-129c-3933-82f2-0f33792597a6.roa File: efc73afb-129c-3933-82f2-0f33792597a6.roa (raw, json) Hash identifier: mto6N5P6UFAnEzNpjABrJagPBAFR0z7VRa5zeVsYxhM= Subject key identifier: 77:7C:C8:61:9E:27:F4:B1:A3:61:49:32:2D:92:F3:8D:68:FE:6A:9D Certificate issuer: /CN=f9e87468-3770-44b8-9cdc-c0b0e117f2db Certificate serial: 010D0C9F4328584F9BCE01CD2E7596EF747DB700 Authority key identifier: 5E:1A:94:DA:91:56:B9:AD:6A:2F:83:4C:8B:E8:E2:0F:E1:44:8E:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/efc73afb-129c-3933-82f2-0f33792597a6.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 401626 IP address blocks: 64.89.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9e87468-3770-44b8-9cdc-c0b0e117f2db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9e87468-3770-44b8-9cdc-c0b0e117f2db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:ce:01:cd:2e:75:96:ef:74:7d:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9e87468-3770-44b8-9cdc-c0b0e117f2db Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=71c6fb51-db49-473e-85ec-7bf7d58bfb3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e5:00:4a:13:67:95:11:bd:d9:59:70:57:26: cb:3a:9b:f0:eb:a5:1a:16:8b:a7:ae:24:39:0a:4a: ad:b2:aa:64:0d:bb:a0:cf:ea:5b:17:b5:04:97:15: e7:8f:cd:36:a4:e0:01:05:d4:c4:ad:10:a1:4f:0f: 33:ad:07:ee:fd:49:55:c3:44:51:4c:92:a6:0d:40: a9:b6:f7:1f:c2:88:b6:f1:26:e4:4a:d0:2d:8c:e7: e1:5c:3e:ba:de:bf:45:04:57:6b:a7:ea:9c:e2:ec: a2:62:0f:fb:08:f7:9a:6a:f2:9d:bb:78:d2:ed:d1: bb:a3:95:84:33:40:ec:61:a0:70:4d:6f:af:a2:00: a7:53:0e:a8:17:94:7f:aa:f3:bf:7c:34:dd:d5:a3: 0b:8f:36:fc:b6:2e:6f:ca:18:ef:02:a2:19:ae:77: f3:ea:7c:a1:40:35:de:76:89:b2:02:d5:ad:6e:f2: 83:73:c5:fd:9a:f8:79:42:1a:6f:99:8e:10:16:84: 0d:c3:d0:a9:dd:14:f3:e8:9c:aa:d7:b2:5b:54:d0: 01:97:19:cc:93:ac:66:ac:fe:16:f4:09:80:dc:95: f6:eb:0a:79:a4:f8:a8:95:c0:7f:6c:9a:d0:98:21: 86:f9:2a:c7:9a:75:60:09:04:8a:6a:21:83:89:93: 1a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:7C:C8:61:9E:27:F4:B1:A3:61:49:32:2D:92:F3:8D:68:FE:6A:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/efc73afb-129c-3933-82f2-0f33792597a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9e87468-3770-44b8-9cdc-c0b0e117f2db.crl X509v3 Authority Key Identifier: keyid:5E:1A:94:DA:91:56:B9:AD:6A:2F:83:4C:8B:E8:E2:0F:E1:44:8E:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db.cer sbgp-ipAddrBlock: critical IPv4: 64.89.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:1f:68:a7:aa:aa:81:7a:20:eb:95:25:98:41:ad:5a:fb:68: 08:74:33:32:a7:f2:91:53:b8:f7:43:09:a4:73:49:d1:7c:e1: 4c:3b:31:7b:e8:c8:b8:96:81:83:c6:23:b5:42:00:09:7d:dd: 89:06:8f:bf:26:f5:f7:85:7d:08:af:4c:f3:70:93:db:28:f3: dd:39:aa:7f:92:0f:4a:e5:21:90:4c:45:4d:df:af:81:5c:30: 6e:f6:e9:cb:4d:19:9c:ce:9a:01:49:56:05:ad:56:01:88:93: b2:53:4f:45:2d:b1:97:e1:94:ea:ba:05:63:89:5e:d9:5f:55: 3f:7c:e0:1c:ee:23:40:fa:94:df:e7:00:35:ef:12:93:a6:e7: 21:5c:ec:30:61:3b:7c:f9:a9:41:44:00:c9:cc:95:99:74:ea: f8:ae:f1:da:70:20:bb:de:87:4d:ff:c9:23:99:9e:bd:af:f0: 0d:b4:f4:82:93:34:94:a9:da:c4:a5:96:19:27:28:f9:05:48: 69:23:f5:b0:da:82:85:19:eb:d4:66:1d:5c:e6:ec:38:e3:b7: 10:cc:ff:4f:d3:e0:38:31:03:1d:ae:7c:5c:a3:9a:3f:ac:44: 49:75:cd:14:65:ae:35:e4:4f:44:fe:46:b0:15:5f:e3:12:60: 75:50:a5:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzgHNLnWW73R9twAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjllODc0NjgtMzc3MC00NGI4LTljZGMtYzBiMGUxMTdm MmRiMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk NzFjNmZiNTEtZGI0OS00NzNlLTg1ZWMtN2JmN2Q1OGJmYjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleUAShNnlRG92VlwVybLOpvw66UaFounriQ5 CkqtsqpkDbugz+pbF7UElxXnj802pOABBdTErRChTw8zrQfu/UlVw0RRTJKmDUCp tvcfwoi28SbkStAtjOfhXD663r9FBFdrp+qc4uyiYg/7CPeaavKdu3jS7dG7o5WE M0DsYaBwTW+vogCnUw6oF5R/qvO/fDTd1aMLjzb8ti5vyhjvAqIZrnfz6nyhQDXe domyAtWtbvKDc8X9mvh5QhpvmY4QFoQNw9Cp3RTz6Jyq17JbVNABlxnMk6xmrP4W 9AmA3JX26wp5pPiolcB/bJrQmCGG+SrHmnVgCQSKaiGDiZManwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHd8yGGeJ/Sxo2FJMi2S841o/mqdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mOWU4 NzQ2OC0zNzcwLTQ0YjgtOWNkYy1jMGIwZTExN2YyZGIvZWZjNzNhZmItMTI5Yy0z OTMzLTgyZjItMGYzMzc5MjU5N2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjllODc0NjgtMzc3MC00NGI4LTlj ZGMtYzBiMGUxMTdmMmRiL2Y5ZTg3NDY4LTM3NzAtNDRiOC05Y2RjLWMwYjBlMTE3 ZjJkYi5jcmwwHwYDVR0jBBgwFoAUXhqU2pFWua1qL4NMi+jiD+FEjrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mOWU4NzQ2OC0zNzcwLTQ0YjgtOWNkYy1jMGIw ZTExN2YyZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFmjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsfaKeqqoF6IOuVJZhBrVr7aAh0MzKn8pFTuPdDCaRzSdF84Uw7MXvo yLiWgYPGI7VCAAl93YkGj78m9feFfQivTPNwk9so8905qn+SD0rlIZBMRU3fr4Fc MG726ctNGZzOmgFJVgWtVgGIk7JTT0UtsZfhlOq6BWOJXtlfVT984BzuI0D6lN/n ADXvEpOm5yFc7DBhO3z5qUFEAMnMlZl06viu8dpwILveh03/ySOZnr2v8A209IKT NJSp2sSllhknKPkFSGkj9bDagoUZ69RmHVzm7DjjtxDM/0/T4DgxAx2ufFyjmj+s REl1zRRlrjXkT0T+RrAVX+MSYHVQpYA= -----END CERTIFICATE-----Generated at Sun Nov 15 20:37:34 2026 by rpki-client