$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/da47acb3-62b2-36c6-8314-c3449c4ff7f3.roa File: da47acb3-62b2-36c6-8314-c3449c4ff7f3.roa (raw, json) Hash identifier: b9r/BrFfWqadA/bdgMPOGcEvzEohCStxEfN8HW7L4zo= Subject key identifier: 8D:D4:B0:D9:63:9E:90:FE:72:C5:2F:10:60:E9:CC:C6:78:39:69:A4 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584E78FF76493B0D0FA77E99CF80 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/da47acb3-62b2-36c6-8314-c3449c4ff7f3.roa Signing time: Sun 12 Jul 2026 09:00:11 +0000 ROA not before: Sun 12 Jul 2026 09:00:11 +0000 ROA not after: Sat 10 Oct 2026 09:00:11 +0000 asID: 11426 IP address blocks: 64.20.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:78:ff:76:49:3b:0d:0f:a7:7e:99:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Jul 12 09:00:11 2026 GMT Not After : Oct 10 09:00:11 2026 GMT Subject: CN=f9544820-eccb-4904-8c70-020191d6b436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:62:10:9e:db:9f:50:2c:40:77:c0:bc:89:1d: a0:8b:04:16:6f:83:b3:dc:19:7a:79:34:e3:bf:43: 59:8b:2b:61:22:de:f8:db:0c:9b:6e:ba:fc:e3:e0: 08:55:74:09:81:9c:87:9a:c9:2b:14:d6:1d:b0:63: 53:91:96:33:31:ac:fc:27:27:ff:5b:74:f4:0a:e0: b7:24:85:df:a5:84:49:25:a4:67:31:fc:7a:6d:7a: 88:12:20:86:ef:c4:da:8f:e5:47:30:60:c7:53:77: aa:dd:49:f3:cf:8a:1a:45:92:d0:02:97:ba:10:01: fe:a3:2e:d0:be:64:7c:65:c4:da:70:78:ce:ea:77: ea:2a:41:ff:65:ed:d7:4f:b0:14:d7:6c:2e:01:ea: 3b:99:51:2d:c0:96:4a:d0:b5:2a:2c:a9:ee:f4:64: bd:67:0c:0d:98:6e:ba:82:d7:ee:fd:6e:14:4c:aa: 2f:81:4e:8e:db:bf:a8:06:37:ac:d6:44:1d:ff:59: 8f:49:78:38:d5:37:ce:d9:4a:34:bb:ae:90:49:14: b4:de:91:58:5a:36:98:98:57:90:07:00:9f:d4:22: 30:54:aa:52:06:fb:dd:f0:4f:b5:a3:0a:4a:f3:7a: 79:9c:c6:31:9c:cd:d3:fb:54:be:e0:4b:d6:52:f0: 3d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D4:B0:D9:63:9E:90:FE:72:C5:2F:10:60:E9:CC:C6:78:39:69:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/da47acb3-62b2-36c6-8314-c3449c4ff7f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 64.20.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:1a:93:2d:84:89:50:04:a7:5b:ea:89:bf:9d:00:6f:90:c5: 6a:3c:47:d0:9b:66:df:a3:ce:97:82:85:63:bd:12:ec:36:0a: 08:5d:16:e4:7c:41:6c:af:29:ff:e2:33:66:bb:5c:f6:00:a2: 99:2a:87:6f:10:6f:c5:01:12:a6:86:48:79:86:fd:b8:8c:8d: ee:7c:4e:40:0f:9e:14:b8:f5:23:54:1a:aa:fb:af:c2:40:78: 81:d9:9a:7b:96:a1:0b:12:f3:bd:11:2b:89:b0:30:cf:27:88: fb:bc:d7:94:1f:fd:11:f9:8a:bc:aa:5a:84:d1:8e:59:4b:1f: df:0a:16:92:34:e7:0a:6b:20:2a:92:0e:45:cd:45:7a:49:6f: 66:0e:5e:1a:99:a0:92:40:b1:4e:ca:76:0c:91:d4:0c:d3:05: e9:c8:33:4f:35:65:a3:c0:b9:48:5b:3c:66:d8:00:ec:3d:0a: 92:59:db:27:0d:a0:1a:83:b0:82:4d:d4:39:fd:94:7d:aa:0b: 52:b1:c8:6d:5c:fe:62:ef:d3:97:96:d3:14:99:a5:bc:62:d7: 93:66:21:0f:fb:cc:55:d2:7f:08:95:ee:57:18:cd:2e:48:da: d6:1e:6a:1f:a7:cc:06:89:62:43:cf:a4:04:10:21:32:d6:3c: 62:a6:17:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/3ZJOw0Pp36Zz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk Zjk1NDQ4MjAtZWNjYi00OTA0LThjNzAtMDIwMTkxZDZiNDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GIQntufUCxAd8C8iR2giwQWb4Oz3Bl6eTTj v0NZiythIt742wybbrr84+AIVXQJgZyHmskrFNYdsGNTkZYzMaz8Jyf/W3T0CuC3 JIXfpYRJJaRnMfx6bXqIEiCG78Taj+VHMGDHU3eq3Unzz4oaRZLQApe6EAH+oy7Q vmR8ZcTacHjO6nfqKkH/Ze3XT7AU12wuAeo7mVEtwJZK0LUqLKnu9GS9ZwwNmG66 gtfu/W4UTKovgU6O27+oBjes1kQd/1mPSXg41TfO2Uo0u66QSRS03pFYWjaYmFeQ BwCf1CIwVKpSBvvd8E+1owpK83p5nMYxnM3T+1S+4EvWUvA9VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3UsNljnpD+csUvEGDpzMZ4OWmkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvZGE0N2FjYjMtNjJiMi0z NmM2LTgzMTQtYzM0NDljNGZmN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBTRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQaky2EiVAEp1vqib+dAG+QxWo8R9CbZt+jzpeChWO9Euw2CghdFuR8 QWyvKf/iM2a7XPYAopkqh28Qb8UBEqaGSHmG/biMje58TkAPnhS49SNUGqr7r8JA eIHZmnuWoQsS870RK4mwMM8niPu815Qf/RH5iryqWoTRjllLH98KFpI05wprICqS DkXNRXpJb2YOXhqZoJJAsU7KdgyR1AzTBenIM081ZaPAuUhbPGbYAOw9CpJZ2ycN oBqDsIJN1Dn9lH2qC1KxyG1c/mLv05eW0xSZpbxi15NmIQ/7zFXSfwiV7lcYzS5I 2tYeah+nzAaJYkPPpAQQITLWPGKmFwc= -----END CERTIFICATE-----Generated at Tue Jul 21 11:35:40 2026 by rpki-client