$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/2f8e121a-5a00-37e8-a81f-82cd07241597.roa File: 2f8e121a-5a00-37e8-a81f-82cd07241597.roa (raw, json) Hash identifier: EFo6yejcpYau/YT2Qa6DfwQu3Icp4WrQvgQ6dOmS3pA= Subject key identifier: 34:1D:A2:A6:F0:72:9D:B1:C4:F9:53:F6:B5:E1:C6:CA:F7:76:0E:D8 Certificate issuer: /CN=6a38b089-4bb1-4c65-837b-853a9a3398e1 Certificate serial: 010D0C9F4328584ED2D7B414BDCAE8D8A1686240 Authority key identifier: 61:8B:A2:DB:42:0B:DE:9C:E0:19:58:25:1E:A4:C7:E7:20:05:FD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/2f8e121a-5a00-37e8-a81f-82cd07241597.roa Signing time: Thu 13 Aug 2026 13:22:53 +0000 ROA not before: Thu 13 Aug 2026 13:22:53 +0000 ROA not after: Wed 11 Nov 2026 14:22:53 +0000 asID: 402447 IP address blocks: 64.49.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/6a38b089-4bb1-4c65-837b-853a9a3398e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/6a38b089-4bb1-4c65-837b-853a9a3398e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d2:d7:b4:14:bd:ca:e8:d8:a1:68:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a38b089-4bb1-4c65-837b-853a9a3398e1 Validity Not Before: Aug 13 13:22:53 2026 GMT Not After : Nov 11 14:22:53 2026 GMT Subject: CN=d98cea1d-68b3-4e35-8d3a-a1a052253f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:64:80:d0:ce:a4:0c:a1:6e:7d:2c:fa:2a:95: 60:1e:87:16:ad:8e:f9:3f:46:1c:c7:84:b9:d1:f6: 56:b9:7a:21:09:76:78:2b:57:0e:3a:2c:9b:0f:a9: 6b:f9:69:e2:47:8b:17:b9:42:06:6a:08:c7:19:2e: 06:d6:5d:81:7d:cc:39:c9:6c:e0:c2:76:45:f2:79: 02:4d:de:66:9f:52:d2:51:f5:0b:54:6d:ad:43:3f: 91:12:39:63:d3:71:20:4e:f7:aa:58:af:b3:b8:da: 84:28:09:e7:41:e9:7a:da:2c:5f:bf:a7:b3:81:2e: 6e:1f:23:fc:da:7e:04:72:d3:9c:5e:c4:52:4a:39: c7:14:06:d8:fe:29:56:39:ab:2d:16:89:9f:c2:b2: 3f:0a:f3:a1:bb:de:91:7f:c5:b2:f9:75:be:13:0e: 90:c8:aa:2e:99:c9:fa:4d:e6:2d:9c:75:2e:ed:6c: 51:eb:e7:53:c6:a1:6f:9e:08:ca:a1:8d:b8:e6:a4: 54:43:45:3b:d0:bb:44:5f:d6:95:8c:7b:8e:16:0e: 94:9c:6b:8d:87:f2:02:a2:83:82:07:79:cf:25:a9: 17:37:79:bb:5b:26:ce:0c:ac:fc:28:ed:d4:30:6d: 4b:e0:59:44:29:85:b9:35:df:46:2a:c2:3c:55:14: d7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1D:A2:A6:F0:72:9D:B1:C4:F9:53:F6:B5:E1:C6:CA:F7:76:0E:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/2f8e121a-5a00-37e8-a81f-82cd07241597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/6a38b089-4bb1-4c65-837b-853a9a3398e1.crl X509v3 Authority Key Identifier: keyid:61:8B:A2:DB:42:0B:DE:9C:E0:19:58:25:1E:A4:C7:E7:20:05:FD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1.cer sbgp-ipAddrBlock: critical IPv4: 64.49.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:4b:04:eb:18:fd:b2:3c:82:69:51:05:12:2a:1b:df:48:45: ea:0b:ea:9a:08:4a:2e:d2:fe:25:be:49:d2:d0:e6:6c:95:ad: 1d:fa:24:8a:2c:30:11:b7:69:63:1d:3c:14:16:42:e8:86:b1: 97:8d:a7:8e:da:41:83:1e:c2:17:e2:01:55:4c:d2:e3:0a:2a: b0:a9:10:70:26:e5:b0:fc:a7:39:5e:1c:1e:a1:af:2a:26:0a: 38:b3:e9:1b:c9:19:29:6f:b7:07:75:c5:25:5c:00:af:32:19: 9a:ea:fc:44:52:7b:bb:7a:08:f9:b5:49:0e:5d:03:59:dd:e8: 45:fb:6c:54:06:4f:fa:5e:2a:0e:9e:e1:30:f2:5a:0b:71:07: 43:3b:c1:00:e8:b4:56:e7:02:19:1e:dc:bd:49:4c:29:84:86: 7f:08:f6:2f:d6:a6:1e:7f:35:5d:82:81:0a:0b:bd:99:42:35: f6:21:a3:c9:a9:ea:ea:33:c1:06:cb:14:da:e1:b2:88:81:50: 67:df:45:f3:45:25:1c:32:8f:57:d5:53:07:40:31:b2:fd:a0: e6:46:5f:d7:a0:ed:ad:2e:52:97:51:73:53:f3:ff:c5:47:b8: d0:9a:ad:98:40:ec:2e:37:63:f1:22:c9:d8:61:36:a1:e5:c1: d9:46:d4:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7S17QUvcro2KFoYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmEzOGIwODktNGJiMS00YzY1LTgzN2ItODUzYTlhMzM5 OGUxMB4XDTI2MDgxMzEzMjI1M1oXDTI2MTExMTE0MjI1M1owLzEtMCsGA1UEAxMk ZDk4Y2VhMWQtNjhiMy00ZTM1LThkM2EtYTFhMDUyMjUzZjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimSA0M6kDKFufSz6KpVgHocWrY75P0Ycx4S5 0fZWuXohCXZ4K1cOOiybD6lr+WniR4sXuUIGagjHGS4G1l2Bfcw5yWzgwnZF8nkC Td5mn1LSUfULVG2tQz+REjlj03EgTveqWK+zuNqEKAnnQel62ixfv6ezgS5uHyP8 2n4EctOcXsRSSjnHFAbY/ilWOastFomfwrI/CvOhu96Rf8Wy+XW+Ew6QyKoumcn6 TeYtnHUu7WxR6+dTxqFvngjKoY245qRUQ0U70LtEX9aVjHuOFg6UnGuNh/ICooOC B3nPJakXN3m7WybODKz8KO3UMG1L4FlEKYW5Nd9GKsI8VRTXQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQdoqbwcp2xxPlT9rXhxsr3dg7YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82YTM4 YjA4OS00YmIxLTRjNjUtODM3Yi04NTNhOWEzMzk4ZTEvMmY4ZTEyMWEtNWEwMC0z N2U4LWE4MWYtODJjZDA3MjQxNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNmEzOGIwODktNGJiMS00YzY1LTgz N2ItODUzYTlhMzM5OGUxLzZhMzhiMDg5LTRiYjEtNGM2NS04MzdiLTg1M2E5YTMz OThlMS5jcmwwHwYDVR0jBBgwFoAUYYui20IL3pzgGVglHqTH5yAF/bowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82YTM4YjA4OS00YmIxLTRjNjUtODM3Yi04NTNh OWEzMzk4ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQDEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxLBOsY/bI8gmlRBRIqG99IReoL6poISi7S/iW+SdLQ5myVrR36JIos MBG3aWMdPBQWQuiGsZeNp47aQYMewhfiAVVM0uMKKrCpEHAm5bD8pzleHB6hryom Cjiz6RvJGSlvtwd1xSVcAK8yGZrq/ERSe7t6CPm1SQ5dA1nd6EX7bFQGT/peKg6e 4TDyWgtxB0M7wQDotFbnAhke3L1JTCmEhn8I9i/Wph5/NV2CgQoLvZlCNfYho8mp 6uozwQbLFNrhsoiBUGffRfNFJRwyj1fVUwdAMbL9oOZGX9eg7a0uUpdRc1Pz/8VH uNCarZhA7C43Y/EiydhhNqHlwdlG1Jc= -----END CERTIFICATE-----Generated at Thu Sep 10 15:29:46 2026 by rpki-client