$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/23961820-6832-3252-9dba-8aa2df70fc49.roa File: 23961820-6832-3252-9dba-8aa2df70fc49.roa (raw, json) Hash identifier: spkdAckpW/tZCY5J1ez6PD96RVoOigyAs2TqYUjovSU= Subject key identifier: 67:FE:D5:DE:33:20:FF:48:64:3C:F3:1A:6E:60:90:C8:6B:D0:EB:08 Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F4328584F4972DE97ED7979ADE24DB600 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/23961820-6832-3252-9dba-8aa2df70fc49.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21766 IP address blocks: 64.63.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:de:97:ed:79:79:ad:e2:4d:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e67fe650-9937-4fcd-bd69-42d0da255aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:63:c1:06:d0:16:40:75:78:d3:ff:23:ea:c5: 47:bf:52:20:28:70:0a:f5:63:73:a6:38:ca:17:b0: fb:04:21:af:82:25:e4:87:3a:e6:2e:27:b0:c8:f7: 8a:62:50:42:69:51:86:00:f6:db:1f:85:ac:37:d8: c0:3f:a8:63:69:c3:75:16:32:1f:d1:ad:e5:a6:ec: 8d:19:79:1a:95:9e:bf:75:00:05:e9:3f:a5:d1:d0: 7b:9a:0e:a9:29:06:62:8b:ad:06:de:e2:1d:11:94: ca:41:fc:41:2c:e6:50:c6:0e:26:75:9f:de:79:45: 23:c1:4f:8e:98:d7:e0:3e:c1:f0:c1:78:d9:b3:b0: 4c:72:1f:b3:50:d5:0e:55:41:84:88:08:85:24:96: 3a:c6:44:62:65:9e:8f:53:99:bb:9f:dc:29:2b:c1: d4:a6:23:87:d2:ea:77:55:4d:83:35:2f:31:99:de: 9d:ea:9a:d8:67:b0:32:19:c3:c0:11:bc:77:0f:9c: c1:a4:b9:e3:15:c4:76:b4:32:13:29:83:d0:97:c5: cf:0e:35:56:78:be:7e:e8:86:ac:a7:a4:3d:84:d7: 2e:66:57:2e:e4:60:1e:ce:c7:1d:8a:df:8a:48:9b: 3b:56:86:bd:c8:e3:c1:63:88:31:98:ab:a3:c5:78: 94:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FE:D5:DE:33:20:FF:48:64:3C:F3:1A:6E:60:90:C8:6B:D0:EB:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/23961820-6832-3252-9dba-8aa2df70fc49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 64.63.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:cc:01:86:6c:81:dd:0f:17:6d:11:d5:c4:37:d8:30:0f:cd: b4:19:0d:30:de:98:50:e0:bb:a8:6a:fd:ab:cb:9b:4b:59:df: 6f:31:f1:8d:eb:d9:7d:51:3d:ee:c5:34:c0:da:2a:02:57:2f: 91:d1:7a:90:67:5e:a2:15:12:e1:43:61:82:a5:b5:30:b5:e2: e4:1f:7e:41:4e:5f:4b:00:1d:dd:df:34:59:54:56:10:90:66: 0c:62:32:4b:65:b0:83:67:36:0d:e3:08:f3:e1:76:7c:ff:51: f2:56:7e:89:1d:57:ce:63:16:9d:1e:6e:a1:c6:aa:ba:56:ac: d7:f6:e7:b8:84:11:0a:ac:83:b6:e8:9d:7e:bb:9c:89:16:42: c6:4a:b1:30:82:a2:1e:c8:86:70:82:47:0b:57:93:4e:93:39: a9:33:48:3b:72:53:36:9f:eb:fd:6e:9a:84:d7:45:c9:4d:29: 4c:35:60:51:c0:b7:40:9c:3b:32:1c:6e:26:3c:d2:43:17:95: 2e:02:b5:32:25:77:eb:c8:20:a5:b1:9f:8b:4c:0f:e3:3d:a4: 8c:bc:be:6d:d6:76:0f:be:bb:01:cf:a3:46:59:39:ba:25:d7: 4e:3f:e3:53:74:95:36:da:07:3d:c8:05:44:3a:99:c8:c9:bc: 9e:87:ac:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jct6X7Xl5reJNtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTY3ZmU2NTAtOTkzNy00ZmNkLWJkNjktNDJkMGRhMjU1YWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGPBBtAWQHV40/8j6sVHv1IgKHAK9WNzpjjK F7D7BCGvgiXkhzrmLiewyPeKYlBCaVGGAPbbH4WsN9jAP6hjacN1FjIf0a3lpuyN GXkalZ6/dQAF6T+l0dB7mg6pKQZii60G3uIdEZTKQfxBLOZQxg4mdZ/eeUUjwU+O mNfgPsHwwXjZs7BMch+zUNUOVUGEiAiFJJY6xkRiZZ6PU5m7n9wpK8HUpiOH0up3 VU2DNS8xmd6d6prYZ7AyGcPAEbx3D5zBpLnjFcR2tDITKYPQl8XPDjVWeL5+6Ias p6Q9hNcuZlcu5GAezscdit+KSJs7Voa9yOPBY4gxmKujxXiUCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGf+1d4zIP9IZDzzGm5gkMhr0OsIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvMjM5NjE4MjAtNjgzMi0z MjUyLTlkYmEtOGFhMmRmNzBmYzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQD/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLMAYZsgd0PF20R1cQ32DAPzbQZDTDemFDgu6hq/avLm0tZ328x8Y3r 2X1RPe7FNMDaKgJXL5HRepBnXqIVEuFDYYKltTC14uQffkFOX0sAHd3fNFlUVhCQ ZgxiMktlsINnNg3jCPPhdnz/UfJWfokdV85jFp0ebqHGqrpWrNf257iEEQqsg7bo nX67nIkWQsZKsTCCoh7IhnCCRwtXk06TOakzSDtyUzaf6/1umoTXRclNKUw1YFHA t0CcOzIcbiY80kMXlS4CtTIld+vIIKWxn4tMD+M9pIy8vm3Wdg++uwHPo0ZZObol 104/41N0lTbaBz3IBUQ6mcjJvJ6HrIQ= -----END CERTIFICATE-----Generated at Sun Sep 27 21:46:46 2026 by rpki-client