$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/7a6ec0c9-3385-33f5-87cb-631d9aea5ce0.roa File: 7a6ec0c9-3385-33f5-87cb-631d9aea5ce0.roa (raw, json) Hash identifier: UNg5oyqzeECAHu6WXePhmbfRBo6My7SCLQWaaAmW+ww= Subject key identifier: C6:27:93:96:A5:82:84:9B:37:4D:69:10:8D:6A:80:EA:F3:08:82:5F Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Certificate serial: 010D0C9F4328584E54B49FA95445AF6F6DA54200 Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/7a6ec0c9-3385-33f5-87cb-631d9aea5ce0.roa Signing time: Mon 29 Jun 2026 09:00:12 +0000 ROA not before: Mon 29 Jun 2026 09:00:12 +0000 ROA not after: Sun 27 Sep 2026 09:00:12 +0000 asID: 393336 IP address blocks: 64.40.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:b4:9f:a9:54:45:af:6f:6d:a5:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Validity Not Before: Jun 29 09:00:12 2026 GMT Not After : Sep 27 09:00:12 2026 GMT Subject: CN=82ee8db9-7cb8-4063-ba88-545347c976bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c7:39:df:6f:d5:f9:8d:f3:e7:bd:43:83:35: d7:20:48:d8:92:d2:b3:88:a2:85:a8:3e:fc:33:41: dc:87:3f:d6:12:48:e3:b9:62:f2:95:cb:48:c0:0c: 33:79:bf:13:53:d3:e4:63:f2:2c:b3:9b:a9:a1:c9: e1:d7:6c:d7:88:1e:32:f6:ad:8c:cb:ed:be:67:87: 42:06:79:9a:5c:0f:3c:9c:41:6a:c0:38:00:29:d7: e8:04:86:f6:3d:c1:f3:36:fb:46:7f:66:19:86:84: 48:f4:06:f3:99:31:8c:2a:4d:da:50:9d:6a:96:01: 47:c9:79:6e:b3:e3:0f:89:f5:d6:73:77:57:73:34: a4:02:b8:14:d4:54:e8:14:86:2f:7b:ea:5c:e8:35: a1:b2:58:c8:d5:33:1a:09:80:d1:93:b4:c6:5f:a1: 49:03:20:14:87:cc:c3:63:8d:31:59:7e:61:6f:c1: 0c:8c:be:cd:54:e2:0a:00:95:94:44:a0:c1:c8:0c: f5:dd:db:05:e8:df:2e:0e:23:7b:84:0c:8e:a4:45: 93:68:7c:af:25:e7:10:e0:26:ed:cd:7f:e6:36:f6: c1:c1:fd:fc:59:fd:8d:19:10:f7:67:1d:37:a8:a2: d7:61:c3:60:9d:4b:54:c2:ed:7e:41:3f:0b:ee:1b: b2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:27:93:96:A5:82:84:9B:37:4D:69:10:8D:6A:80:EA:F3:08:82:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/7a6ec0c9-3385-33f5-87cb-631d9aea5ce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl X509v3 Authority Key Identifier: keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer sbgp-ipAddrBlock: critical IPv4: 64.40.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:e9:f6:23:e4:ba:91:c8:9b:62:83:7f:26:98:96:7a:8a:e5: 10:9c:27:7d:a7:ba:b7:db:28:e9:c1:52:8c:2d:18:6c:dc:ed: 3f:f0:9d:94:1e:94:57:18:f5:82:5e:dc:70:7a:e1:d1:c5:5b: e8:e1:86:34:be:71:1b:c1:4a:cd:33:f6:96:b6:60:84:71:97: 94:d4:51:5d:23:b2:a6:c9:6c:8b:e8:ac:9b:4c:af:43:21:1d: d9:21:fe:60:e2:e5:10:da:ae:91:7f:52:98:49:82:a4:3e:35: b6:31:0a:82:46:09:c7:8f:7b:5f:58:05:c1:37:82:10:55:4a: a2:a3:85:b1:cf:ed:ec:f9:d0:45:1c:ef:a6:fe:ba:b6:5a:9e: 0f:f7:de:b8:8d:73:fa:75:28:fe:8d:90:e4:db:ab:3d:59:2d: 9d:06:06:20:c8:8f:bc:4e:28:41:5d:a5:96:3c:47:c9:a8:d3: 2b:e2:ec:52:24:c2:32:20:07:f4:08:db:bf:f0:53:1c:32:6d: fc:9b:0d:b9:7b:11:a4:1c:32:7f:33:e2:dd:86:19:21:15:ca: 3a:67:c4:50:c7:54:3b:ec:ed:4f:bd:51:ba:39:ff:57:dd:e3: d2:55:60:59:17:75:2a:76:9e:c9:e0:3f:37:be:33:f7:06:cf: 0e:b4:d1:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtJ+pVEWvb22lQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0 ZWE5MB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk ODJlZThkYjktN2NiOC00MDYzLWJhODgtNTQ1MzQ3Yzk3NmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsc532/V+Y3z571DgzXXIEjYktKziKKFqD78 M0Hchz/WEkjjuWLylctIwAwzeb8TU9PkY/Iss5upocnh12zXiB4y9q2My+2+Z4dC BnmaXA88nEFqwDgAKdfoBIb2PcHzNvtGf2YZhoRI9AbzmTGMKk3aUJ1qlgFHyXlu s+MPifXWc3dXczSkArgU1FToFIYve+pc6DWhsljI1TMaCYDRk7TGX6FJAyAUh8zD Y40xWX5hb8EMjL7NVOIKAJWURKDByAz13dsF6N8uDiN7hAyOpEWTaHyvJecQ4Cbt zX/mNvbBwf38Wf2NGRD3Zx03qKLXYcNgnUtUwu1+QT8L7huyQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYnk5algoSbN01pEI1qgOrzCIJfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvN2E2ZWMwYzktMzM4NS0z M2Y1LTg3Y2ItNjMxZDlhZWE1Y2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3 MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5 ZGI3YzRlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCgZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7p9iPkupHIm2KDfyaYlnqK5RCcJ32nurfbKOnBUowtGGzc7T/wnZQe lFcY9YJe3HB64dHFW+jhhjS+cRvBSs0z9pa2YIRxl5TUUV0jsqbJbIvorJtMr0Mh Hdkh/mDi5RDarpF/UphJgqQ+NbYxCoJGCcePe19YBcE3ghBVSqKjhbHP7ez50EUc 76b+urZang/33riNc/p1KP6NkOTbqz1ZLZ0GBiDIj7xOKEFdpZY8R8mo0yvi7FIk wjIgB/QI27/wUxwybfybDbl7EaQcMn8z4t2GGSEVyjpnxFDHVDvs7U+9Ubo5/1fd 49JVYFkXdSp2nsngPze+M/cGzw600Rw= -----END CERTIFICATE-----Generated at Fri Jul 24 11:11:22 2026 by rpki-client