$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/650dd2fc-99af-35a3-81ca-030219a24999.roa File: 650dd2fc-99af-35a3-81ca-030219a24999.roa (raw, json) Hash identifier: bfNwIeWUKzVxZcTGW9bylYwhlwvpmOLrdCTE16MVfNw= Subject key identifier: D5:97:B4:26:1F:43:D9:2C:DC:5A:ED:0C:11:ED:52:60:CA:05:69:4A Certificate issuer: /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Certificate serial: 010D0C9F4328584E4559DFA6638E2AF8E9F80E80 Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/650dd2fc-99af-35a3-81ca-030219a24999.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 19905 IP address blocks: 64.58.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:df:a6:63:8e:2a:f8:e9:f8:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=a145406d-6c7c-457a-b0dd-40ceaf11dab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3e:36:53:e9:94:f3:4f:95:3d:a5:5e:aa:e5: 24:f3:db:fa:22:8d:42:8c:80:f4:11:34:ca:25:35: 60:47:7b:7d:af:26:b5:2a:18:fb:df:ae:74:ea:6d: 51:fc:02:d4:85:43:33:29:97:a2:19:40:ee:0d:6b: 11:89:0f:df:3a:73:e8:c5:d8:bb:79:63:ba:f3:0d: 5a:59:8d:7c:9a:82:cd:85:12:af:f8:ae:38:d2:3d: 3c:1a:cb:96:e3:b6:ed:2e:06:cb:ee:57:e8:b2:3e: 0e:d9:a4:e4:7f:3d:16:32:52:ea:09:91:95:5c:18: 23:c9:8a:52:0d:a9:68:ca:e7:d8:78:d7:59:ed:6a: 6d:92:f7:1b:bb:4c:b4:4a:48:d4:2d:1f:61:03:18: df:c8:d9:c3:73:24:a8:9e:7e:cf:8c:58:61:62:c6: d3:34:51:95:19:79:66:18:1b:9b:e3:84:50:6e:91: ed:e2:26:8f:ed:94:30:a3:1a:d7:b1:26:57:d2:c8: fb:a9:c2:93:7e:c2:e7:db:31:d9:38:57:c9:86:d6: de:b7:a2:8e:7e:de:83:e7:14:13:32:83:70:4f:4b: da:bc:cd:c2:2f:38:20:ce:29:fd:d7:39:db:6a:49: b7:89:31:a3:9c:38:1b:52:15:80:97:68:47:47:7b: c9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:97:B4:26:1F:43:D9:2C:DC:5A:ED:0C:11:ED:52:60:CA:05:69:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/650dd2fc-99af-35a3-81ca-030219a24999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl X509v3 Authority Key Identifier: keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer sbgp-ipAddrBlock: critical IPv4: 64.58.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:a6:b6:5b:48:38:c8:91:46:1f:4d:8c:d9:6a:4b:5d:8d:46: 53:de:cb:57:51:e4:1d:a5:d8:9f:44:50:7a:db:c1:b0:b8:61: 65:90:10:fb:7f:62:33:6c:65:cf:57:7f:1e:4e:0a:54:9c:34: 21:b1:3b:0d:42:2e:62:e5:82:ae:86:6e:fc:39:f3:e7:8f:74: bd:32:77:8d:73:8a:58:b3:31:87:21:d4:c4:8a:32:68:39:8c: da:92:aa:4f:8b:87:7d:d6:bd:24:4c:eb:87:75:a1:06:a5:6b: 06:89:51:02:4a:b5:36:d4:be:3b:52:ac:af:6b:01:69:a0:28: 83:1b:82:fa:61:10:0b:aa:24:cb:35:1f:45:89:7b:46:ab:24: e3:0b:22:bf:78:0d:6d:fd:ca:87:16:cc:f2:bd:f5:76:e7:a4: d2:16:e0:93:5f:1b:5d:d9:af:9d:2c:e8:ff:82:f8:2c:bb:89: 65:cc:17:8c:93:51:e5:34:05:92:2f:8a:f4:80:5e:38:f7:48: ef:d8:f4:6a:00:e4:29:01:15:8a:04:27:2f:31:19:e7:f5:90: 45:9c:d3:8d:56:8c:4c:3b:8b:1a:2e:61:60:ba:6a:91:30:c3: 47:02:4f:75:0d:97:ea:e5:9d:13:9b:67:ba:83:40:69:6f:2b: 6d:2e:bd:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWd+mY44q+On4DoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVlMjkyODktNmYxYy00YzJmLTg0ZjQtYzk0NGU5ZTU0 OTQwMB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk YTE0NTQwNmQtNmM3Yy00NTdhLWIwZGQtNDBjZWFmMTFkYWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD42U+mU80+VPaVequUk89v6Io1CjID0ETTK JTVgR3t9rya1Khj736506m1R/ALUhUMzKZeiGUDuDWsRiQ/fOnPoxdi7eWO68w1a WY18moLNhRKv+K440j08GsuW47btLgbL7lfosj4O2aTkfz0WMlLqCZGVXBgjyYpS DaloyufYeNdZ7Wptkvcbu0y0SkjULR9hAxjfyNnDcySonn7PjFhhYsbTNFGVGXlm GBub44RQbpHt4iaP7ZQwoxrXsSZX0sj7qcKTfsLn2zHZOFfJhtbet6KOft6D5xQT MoNwT0vavM3CLzggzin91znbakm3iTGjnDgbUhWAl2hHR3vJLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWXtCYfQ9ks3FrtDBHtUmDKBWlKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUy OTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTllNTQ5NDAvNjUwZGQyZmMtOTlhZi0z NWEzLTgxY2EtMDMwMjE5YTI0OTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTVlMjkyODktNmYxYy00YzJmLTg0 ZjQtYzk0NGU5ZTU0OTQwLzk1ZTI5Mjg5LTZmMWMtNGMyZi04NGY0LWM5NDRlOWU1 NDk0MC5jcmwwHwYDVR0jBBgwFoAUTbpFqqu5h2Ol5m+zCcVulzCUmp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0 ZTllNTQ5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQDowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISmtltIOMiRRh9NjNlqS12NRlPey1dR5B2l2J9EUHrbwbC4YWWQEPt/ YjNsZc9Xfx5OClScNCGxOw1CLmLlgq6Gbvw58+ePdL0yd41zilizMYch1MSKMmg5 jNqSqk+Lh33WvSRM64d1oQalawaJUQJKtTbUvjtSrK9rAWmgKIMbgvphEAuqJMs1 H0WJe0arJOMLIr94DW39yocWzPK99XbnpNIW4JNfG13Zr50s6P+C+Cy7iWXMF4yT UeU0BZIvivSAXjj3SO/Y9GoA5CkBFYoEJy8xGef1kEWc041WjEw7ixouYWC6apEw w0cCT3UNl+rlnRObZ7qDQGlvK20uvXc= -----END CERTIFICATE-----Generated at Wed Jul 8 17:07:25 2026 by rpki-client