$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/9687f9d6-a6cf-3603-bf2f-8727f81aaa4c.roa File: 9687f9d6-a6cf-3603-bf2f-8727f81aaa4c.roa (raw, json) Hash identifier: zoGenRMQqqPMKtXpHzgen5oBwIeoamcLR/ZlkaCvAIc= Subject key identifier: AB:2A:0F:B4:07:29:2C:E5:D3:11:9C:C6:CC:10:04:9D:AB:E7:B6:07 Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Certificate serial: 010D0C9F4328584B328C3A94AA995BEDEE329300 Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/9687f9d6-a6cf-3603-bf2f-8727f81aaa4c.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 393336 IP address blocks: 64.40.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:3a:94:aa:99:5b:ed:ee:32:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=0b1d3973-c3b4-410f-9d61-a1a30bca5c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b3:c9:e3:4d:9b:52:5c:02:be:3c:49:9c:3c: 54:55:d0:9a:e6:d9:77:f9:31:d5:55:45:56:5d:89: 8c:c1:de:16:4f:b4:64:46:ff:31:e7:18:a5:0f:18: ea:40:cd:46:64:f2:18:2d:a8:16:e8:89:da:73:16: 0a:4d:f7:69:83:35:13:54:d4:06:69:e3:74:e7:ed: 20:4c:93:a0:9b:29:9d:af:4c:68:27:79:87:47:2f: 87:d7:df:ee:db:ee:87:16:b5:7e:27:c0:c1:24:5a: 20:32:76:18:c2:10:92:27:67:ce:d7:f8:b6:ec:8d: 62:6d:d2:c2:bc:d8:da:63:d3:a7:bd:2e:14:7f:e5: 1d:a6:19:e3:98:16:bc:94:41:6a:46:8f:de:f2:f1: f9:53:90:b6:d7:d8:fe:4d:5a:f9:cd:57:62:20:ce: b2:44:44:69:3e:d9:c2:c4:1b:d9:ed:21:a1:6a:15: ae:85:c2:50:03:da:ea:9b:ba:73:e0:22:57:4d:f5: e2:5f:17:cf:f2:83:c7:5a:0d:fe:52:81:f9:97:42: 7e:b1:0c:f0:c1:08:55:5f:11:cf:bb:97:f4:2d:f9: d7:36:31:af:30:bd:d9:23:61:da:e9:b3:72:6b:ab: 0d:68:bf:ee:38:49:30:6a:82:36:e4:4d:b4:0b:1a: 10:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2A:0F:B4:07:29:2C:E5:D3:11:9C:C6:CC:10:04:9D:AB:E7:B6:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/9687f9d6-a6cf-3603-bf2f-8727f81aaa4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl X509v3 Authority Key Identifier: keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer sbgp-ipAddrBlock: critical IPv4: 64.40.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:c5:a8:21:ca:d1:3c:d3:1b:b4:e9:90:38:2f:b4:b7:4e:5d: bf:cb:43:9f:3c:83:e1:25:0d:9b:4c:d3:8b:2e:00:4c:e1:f8: 7a:94:53:e3:1e:17:9e:85:bd:78:2d:05:a3:bd:66:11:24:37: ac:39:f2:9f:61:e7:13:67:a7:f3:0f:31:a4:06:87:40:18:d8: f6:76:39:e5:d8:16:41:43:e6:54:cc:28:9e:41:9f:ab:cf:8f: cd:b3:90:4c:b5:7c:23:bd:0f:e6:10:c8:e0:32:0e:a5:d2:8e: 73:f0:5e:4f:66:5d:cf:38:76:15:a3:57:53:42:a0:98:1c:a6: c0:d1:e8:ff:9a:0b:db:da:92:6d:74:ad:ff:bf:e7:10:3b:c9: e6:f5:ab:59:f9:92:6f:f4:68:6d:5f:5e:79:bc:8b:f0:e5:c4: e9:42:17:d6:d0:63:fc:91:4d:2d:3e:20:bd:db:ec:b6:63:28: cf:8f:7e:25:4f:de:d7:17:3c:1e:e1:6c:0c:ec:f5:b2:b7:d8: 41:95:73:87:22:a0:6b:77:f8:6d:50:71:40:f3:78:ba:5a:bb: bf:e3:01:80:fd:ea:cb:a6:76:18:57:ae:b0:eb:96:74:95:d3: ef:2d:e4:72:1d:35:79:0c:b7:d8:e4:54:34:55:65:ed:d5:ab: 56:84:de:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjDqUqplb7e4ykwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0 ZWE5MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk MGIxZDM5NzMtYzNiNC00MTBmLTlkNjEtYTFhMzBiY2E1YzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprPJ402bUlwCvjxJnDxUVdCa5tl3+THVVUVW XYmMwd4WT7RkRv8x5xilDxjqQM1GZPIYLagW6InacxYKTfdpgzUTVNQGaeN05+0g TJOgmymdr0xoJ3mHRy+H19/u2+6HFrV+J8DBJFogMnYYwhCSJ2fO1/i27I1ibdLC vNjaY9OnvS4Uf+UdphnjmBa8lEFqRo/e8vH5U5C219j+TVr5zVdiIM6yRERpPtnC xBvZ7SGhahWuhcJQA9rqm7pz4CJXTfXiXxfP8oPHWg3+UoH5l0J+sQzwwQhVXxHP u5f0LfnXNjGvML3ZI2Ha6bNya6sNaL/uOEkwaoI25E20CxoQDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsqD7QHKSzl0xGcxswQBJ2r57YHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvOTY4N2Y5ZDYtYTZjZi0z NjAzLWJmMmYtODcyN2Y4MWFhYTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3 MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5 ZGI3YzRlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCgaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALDFqCHK0TzTG7TpkDgvtLdOXb/LQ588g+ElDZtM04suAEzh+HqUU+Me F56FvXgtBaO9ZhEkN6w58p9h5xNnp/MPMaQGh0AY2PZ2OeXYFkFD5lTMKJ5Bn6vP j82zkEy1fCO9D+YQyOAyDqXSjnPwXk9mXc84dhWjV1NCoJgcpsDR6P+aC9vakm10 rf+/5xA7yeb1q1n5km/0aG1fXnm8i/DlxOlCF9bQY/yRTS0+IL3b7LZjKM+PfiVP 3tcXPB7hbAzs9bK32EGVc4cioGt3+G1QcUDzeLpau7/jAYD96sumdhhXrrDrlnSV 0+8t5HIdNXkMt9jkVDRVZe3Vq1aE3gg= -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:39 2025 by rpki-client