$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894/a721cac8-deba-3761-be8a-ae47103ecdf1.roa File: a721cac8-deba-3761-be8a-ae47103ecdf1.roa (raw, json) Hash identifier: sw521kiaWvMkIMsguIx4WTO0QJpMLHk9wQ8N8oU1bZs= Subject key identifier: F0:30:9F:81:02:6C:27:8F:50:89:06:06:EA:ED:27:CB:38:8F:C4:FD Certificate issuer: /CN=2b687897-0772-49b6-9e4b-0f6ffee30894 Certificate serial: 010D0C9F4328584E2F045538BFEEAA61E4D94780 Authority key identifier: 82:30:1A:70:60:99:11:47:F7:EF:AA:08:20:03:78:79:AB:FA:E7:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894/a721cac8-deba-3761-be8a-ae47103ecdf1.roa Signing time: Mon 15 Jun 2026 21:00:12 +0000 ROA not before: Mon 15 Jun 2026 21:00:12 +0000 ROA not after: Sun 13 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 64.25.240.0/21 maxlen: 21 64.25.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894/2b687897-0772-49b6-9e4b-0f6ffee30894.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894/2b687897-0772-49b6-9e4b-0f6ffee30894.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2f:04:55:38:bf:ee:aa:61:e4:d9:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b687897-0772-49b6-9e4b-0f6ffee30894 Validity Not Before: Jun 15 21:00:12 2026 GMT Not After : Sep 13 21:00:12 2026 GMT Subject: CN=11403b8f-9ff5-4751-8b9f-6c055d30df27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5e:e2:b6:c9:32:8c:f2:49:83:b8:02:40:cd: c5:1e:00:b7:99:ae:15:26:cc:cb:1a:05:85:63:bf: ea:4f:3e:0a:54:34:74:c2:e3:b5:ea:d7:a5:fe:a8: 65:41:0a:67:0d:70:b6:5d:b7:8b:77:dd:67:37:8e: 30:4c:a6:75:7d:04:4c:fa:b1:96:f9:42:79:a5:30: 4d:28:61:be:1f:d7:e7:39:1c:ad:ae:fe:9b:52:00: 41:81:7d:96:e7:cf:3c:e8:26:25:8f:e5:5b:ae:a3: 49:3d:87:85:19:0f:de:b8:16:6a:4c:b7:95:92:ee: 36:ba:a8:94:b8:23:75:8a:85:92:cc:f5:91:53:8c: e9:9f:a1:1d:40:94:bd:1f:1a:02:32:30:ad:58:3c: 1b:6d:8c:a3:f9:b5:02:15:13:40:59:dd:6b:73:2e: 1a:b2:8b:e6:63:ff:76:ca:1f:0f:dd:6d:a6:1d:1c: 96:7f:f0:8b:48:8e:9f:d8:73:4d:68:fd:4f:47:20: 47:08:5a:4e:5d:5e:4d:ab:f8:a2:d1:20:fa:f3:b9: 70:cb:cc:bd:63:5e:ad:a3:81:e7:4c:e9:30:3c:4e: 29:20:b3:06:6d:a2:48:dc:f0:bb:44:3c:7c:24:37: 64:12:28:8b:16:05:3f:26:1d:66:05:b7:91:39:26: 9f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:30:9F:81:02:6C:27:8F:50:89:06:06:EA:ED:27:CB:38:8F:C4:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894/a721cac8-deba-3761-be8a-ae47103ecdf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894/2b687897-0772-49b6-9e4b-0f6ffee30894.crl X509v3 Authority Key Identifier: keyid:82:30:1A:70:60:99:11:47:F7:EF:AA:08:20:03:78:79:AB:FA:E7:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894.cer sbgp-ipAddrBlock: critical IPv4: 64.25.240.0-64.25.251.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:62:35:3c:1a:38:8f:a8:42:8a:a7:17:0b:c7:39:c9:47:83: 95:52:3e:2d:3e:f9:41:6c:0a:9f:92:d4:79:c8:a2:d7:44:4e: d2:de:a0:9f:d5:43:ab:ba:9e:9f:99:2b:c1:de:7d:5a:ed:6f: ea:c2:12:6f:b7:64:3f:21:4d:b8:a9:85:9a:87:57:79:89:20: 22:a1:1b:c1:ee:65:44:74:48:85:2a:dc:b8:c1:bc:49:16:0f: a2:13:15:26:b3:7d:ec:1d:a2:ab:9b:76:6d:9b:45:94:7f:3d: bc:f4:0b:9e:cf:cc:f6:41:6c:0e:5b:56:e1:22:ec:a7:70:cf: 52:cf:b4:97:46:f3:89:52:ce:4a:40:05:ca:f1:1a:99:43:da: 50:b2:bf:70:60:04:33:a7:30:3e:d4:63:25:52:df:f9:9b:45: ff:d1:19:d9:14:37:01:85:5c:c0:a0:a0:86:04:41:4f:d9:23: 61:ea:b7:1e:cb:6b:e9:f8:9b:86:6d:ca:e7:24:94:f8:f1:b3: a8:4a:75:4a:cc:7d:ca:8c:1a:ac:dd:56:a2:d4:c0:d3:09:0a: 8b:6f:4e:1e:7a:25:55:e4:a0:9a:38:22:ae:16:51:f3:b3:a7: 31:a6:4d:af:68:eb:4c:49:a4:6f:90:4c:6e:5c:88:4a:fe:70: 17:bc:b7:a4 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE4vBFU4v+6qYeTZR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI2ODc4OTctMDc3Mi00OWI2LTllNGItMGY2ZmZlZTMw ODk0MB4XDTI2MDYxNTIxMDAxMloXDTI2MDkxMzIxMDAxMlowLzEtMCsGA1UEAxMk MTE0MDNiOGYtOWZmNS00NzUxLThiOWYtNmMwNTVkMzBkZjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl7itskyjPJJg7gCQM3FHgC3ma4VJszLGgWF Y7/qTz4KVDR0wuO16tel/qhlQQpnDXC2XbeLd91nN44wTKZ1fQRM+rGW+UJ5pTBN KGG+H9fnORytrv6bUgBBgX2W58886CYlj+VbrqNJPYeFGQ/euBZqTLeVku42uqiU uCN1ioWSzPWRU4zpn6EdQJS9HxoCMjCtWDwbbYyj+bUCFRNAWd1rcy4asovmY/92 yh8P3W2mHRyWf/CLSI6f2HNNaP1PRyBHCFpOXV5Nq/ii0SD687lwy8y9Y16to4Hn TOkwPE4pILMGbaJI3PC7RDx8JDdkEiiLFgU/Jh1mBbeROSafYQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFPAwn4ECbCePUIkGBurtJ8s4j8T9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYjY4 Nzg5Ny0wNzcyLTQ5YjYtOWU0Yi0wZjZmZmVlMzA4OTQvYTcyMWNhYzgtZGViYS0z NzYxLWJlOGEtYWU0NzEwM2VjZGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMmI2ODc4OTctMDc3Mi00OWI2LTll NGItMGY2ZmZlZTMwODk0LzJiNjg3ODk3LTA3NzItNDliNi05ZTRiLTBmNmZmZWUz MDg5NC5jcmwwHwYDVR0jBBgwFoAUgjAacGCZEUf376oIIAN4eav65/IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYjY4Nzg5Ny0wNzcyLTQ5YjYtOWU0Yi0wZjZm ZmVlMzA4OTQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBARAGfAD BAJAGfgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAZ2I1PBo4j6hCiqcXC8c5yUeDlVI+LT75QWwKn5LUecii 10RO0t6gn9VDq7qen5krwd59Wu1v6sISb7dkPyFNuKmFmodXeYkgIqEbwe5lRHRI hSrcuMG8SRYPohMVJrN97B2iq5t2bZtFlH89vPQLns/M9kFsDltW4SLsp3DPUs+0 l0bziVLOSkAFyvEamUPaULK/cGAEM6cwPtRjJVLf+ZtF/9EZ2RQ3AYVcwKCghgRB T9kjYeq3Hstr6fibhm3K5ySU+PGzqEp1Ssx9yowarN1WotTA0wkKi29OHnolVeSg mjgirhZR87OnMaZNr2jrTEmkb5BMblyISv5wF7y3pA== -----END CERTIFICATE-----Generated at Sat Jul 18 01:49:15 2026 by rpki-client