$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/8f44a5ad-b955-3151-98f8-be4475fd9b8c.roa File: 8f44a5ad-b955-3151-98f8-be4475fd9b8c.roa (raw, json) Hash identifier: Rxoi9A8+EVdYNiMR7PfUcrbbfAHoLftqzDcTXXTj3hU= Subject key identifier: AC:5E:DB:03:30:B6:46:0E:FC:24:94:80:7B:6E:DC:74:06:86:50:DB Certificate issuer: /CN=02df9026-5ea2-4718-a55c-d46da7505348 Certificate serial: 010D0C9F4328584DF64093E43A4632C9AF8F01E0 Authority key identifier: C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/8f44a5ad-b955-3151-98f8-be4475fd9b8c.roa Signing time: Tue 26 May 2026 13:00:31 +0000 ROA not before: Tue 26 May 2026 13:00:31 +0000 ROA not after: Mon 24 Aug 2026 13:00:31 +0000 asID: 14291 IP address blocks: 64.7.40.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:40:93:e4:3a:46:32:c9:af:8f:01:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02df9026-5ea2-4718-a55c-d46da7505348 Validity Not Before: May 26 13:00:31 2026 GMT Not After : Aug 24 13:00:31 2026 GMT Subject: CN=9178d652-ad48-4c6b-8cb3-02d78443e859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3d:e8:77:dd:7b:12:12:bf:3e:5c:e1:d9:65: 3b:c4:b7:12:e3:92:85:1d:ce:99:ab:e1:54:58:20: fa:ab:40:d2:2d:b2:c4:b2:cc:67:d5:3e:8b:e5:36: 3b:b9:b7:e0:50:9c:19:81:bd:19:82:f5:27:c7:31: 9c:84:a3:dc:0b:bd:63:30:7d:88:d7:17:e8:e4:97: ba:c1:88:1d:72:3a:a2:52:76:fa:e3:f9:61:98:ee: 3e:77:9f:29:d7:24:60:44:84:3f:93:c2:b1:b0:d1: fc:92:c2:c0:48:d8:c3:3b:cb:9c:b6:12:86:61:c7: 4c:d4:6f:79:ea:d5:10:60:d5:1c:89:99:2e:ab:ab: d5:21:62:44:00:6e:a7:ff:8c:1b:b7:2a:36:d6:00: a0:25:64:80:38:49:9c:9b:db:7d:11:86:e2:a8:7b: 25:1b:1c:d1:d6:5b:30:9e:5b:d7:7f:e8:2a:2e:44: a4:b1:5d:24:93:d8:b6:09:e0:8c:70:e2:57:b4:a3: f2:59:6b:d0:42:0f:8b:ca:2a:07:45:5e:75:c3:e3: b5:af:3f:8b:36:37:85:8b:5f:36:9f:33:a8:3f:1b: 2d:74:4f:d4:7a:0c:17:2d:f7:52:30:58:a6:9d:27: 45:3b:19:6a:c8:ba:33:ca:57:10:5e:5e:ae:6e:79: 7a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5E:DB:03:30:B6:46:0E:FC:24:94:80:7B:6E:DC:74:06:86:50:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/8f44a5ad-b955-3151-98f8-be4475fd9b8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl X509v3 Authority Key Identifier: keyid:C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer sbgp-ipAddrBlock: critical IPv4: 64.7.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:43:44:b6:56:d2:85:5d:53:70:26:3d:89:0b:82:64:05:0a: 9d:fd:20:23:fc:87:cb:c4:96:c6:4d:3c:35:11:2d:6d:39:06: bd:7f:7f:75:d5:dc:e2:6f:59:3c:71:41:f8:15:91:5f:fb:cc: 81:fa:7f:c8:17:e8:b3:db:77:09:a2:0e:fa:ee:f2:92:f2:df: 23:01:d6:1c:24:b2:d1:d7:29:87:a8:50:dd:ce:8f:30:08:b0: 3d:10:ff:18:5c:ce:50:ce:48:34:7c:06:68:e9:c5:0d:cd:bd: e7:68:94:8e:9a:e0:2a:96:b0:36:36:27:be:c6:da:f6:1e:7f: f6:01:da:a9:e9:7d:7a:d9:45:46:94:a0:35:95:2a:07:27:0a: 5d:2c:48:bd:19:f0:a2:b0:3e:c1:0b:e4:4b:b4:a0:61:8b:ce: eb:e0:f1:e8:54:15:aa:01:38:12:4c:37:3e:70:25:69:1c:c1: 19:a0:07:54:35:2b:a5:5e:77:54:01:b3:b0:30:89:0c:44:b8: fe:ed:3f:58:3e:46:6a:00:cd:c1:44:10:22:e9:40:18:b5:56: fc:5c:bc:e8:4e:cc:e4:d6:3b:35:2d:3d:75:b3:39:2a:66:71: 07:e6:44:b2:98:5f:0a:cf:65:bd:e0:4d:12:dc:c5:7c:26:14: e4:3c:6d:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE32QJPkOkYyya+PAeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJkZjkwMjYtNWVhMi00NzE4LWE1NWMtZDQ2ZGE3NTA1 MzQ4MB4XDTI2MDUyNjEzMDAzMVoXDTI2MDgyNDEzMDAzMVowLzEtMCsGA1UEAxMk OTE3OGQ2NTItYWQ0OC00YzZiLThjYjMtMDJkNzg0NDNlODU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz3od917EhK/Plzh2WU7xLcS45KFHc6Zq+FU WCD6q0DSLbLEssxn1T6L5TY7ubfgUJwZgb0ZgvUnxzGchKPcC71jMH2I1xfo5Je6 wYgdcjqiUnb64/lhmO4+d58p1yRgRIQ/k8KxsNH8ksLASNjDO8ucthKGYcdM1G95 6tUQYNUciZkuq6vVIWJEAG6n/4wbtyo21gCgJWSAOEmcm9t9EYbiqHslGxzR1lsw nlvXf+gqLkSksV0kk9i2CeCMcOJXtKPyWWvQQg+LyioHRV51w+O1rz+LNjeFi182 nzOoPxstdE/UegwXLfdSMFimnSdFOxlqyLozylcQXl6ubnl6UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxe2wMwtkYO/CSUgHtu3HQGhlDbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRm OTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZkYTc1MDUzNDgvOGY0NGE1YWQtYjk1NS0z MTUxLTk4ZjgtYmU0NDc1ZmQ5YjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDJkZjkwMjYtNWVhMi00NzE4LWE1 NWMtZDQ2ZGE3NTA1MzQ4LzAyZGY5MDI2LTVlYTItNDcxOC1hNTVjLWQ0NmRhNzUw NTM0OC5jcmwwHwYDVR0jBBgwFoAUyBt2Ol6lM34AGtjZ+ZDa9s1kXqUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRmOTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZk YTc1MDUzNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQAcoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1DRLZW0oVdU3AmPYkLgmQFCp39ICP8h8vElsZNPDURLW05Br1/f3XV 3OJvWTxxQfgVkV/7zIH6f8gX6LPbdwmiDvru8pLy3yMB1hwkstHXKYeoUN3OjzAI sD0Q/xhczlDOSDR8BmjpxQ3NvedolI6a4CqWsDY2J77G2vYef/YB2qnpfXrZRUaU oDWVKgcnCl0sSL0Z8KKwPsEL5Eu0oGGLzuvg8ehUFaoBOBJMNz5wJWkcwRmgB1Q1 K6Ved1QBs7AwiQxEuP7tP1g+RmoAzcFEECLpQBi1VvxcvOhOzOTWOzUtPXWzOSpm cQfmRLKYXwrPZb3gTRLcxXwmFOQ8bTI= -----END CERTIFICATE-----Generated at Thu May 28 13:41:36 2026 by rpki-client