$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2ff47a0d-289e-3070-8daf-af316ad1b0f8.roa File: 2ff47a0d-289e-3070-8daf-af316ad1b0f8.roa (raw, json) Hash identifier: MB8Dpjakd5Ktsuf8KNWCv9psiUbP5nthJx/vRizQGns= Subject key identifier: A9:FF:08:8D:75:42:00:12:57:96:B3:D0:74:1E:B8:4A:A7:37:F1:6A Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E9EAFE7767F4CBA02E8E27D80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2ff47a0d-289e-3070-8daf-af316ad1b0f8.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 213888 IP address blocks: 64.4.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:af:e7:76:7f:4c:ba:02:e8:e2:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=1386563d-e323-4928-af75-a285cada05da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f8:43:4c:b4:f0:f7:32:14:26:0e:56:56:ba: 6f:de:c0:c9:4d:96:cd:be:99:cc:b6:1c:df:13:61: 66:01:31:95:2f:75:aa:c2:e5:b4:e8:ae:cc:0e:f6: f8:c8:32:d8:f7:14:49:0e:6d:6e:82:b9:d5:14:d0: bd:9f:9a:fa:e3:6e:cc:4b:b3:cc:4f:87:52:de:e9: ac:92:55:d3:5f:39:68:7d:54:4a:67:d7:72:bc:62: 5e:79:57:32:aa:42:6d:6a:40:16:27:cf:cf:a1:4d: bf:0d:5a:6d:8d:ae:62:1c:48:86:18:de:70:ed:81: 61:36:93:59:14:38:3e:7e:7d:fa:28:f3:38:50:d4: ff:79:f2:35:50:14:b0:4a:63:2f:e2:4f:6b:3a:91: d9:1e:e9:5d:f9:2f:95:8e:70:90:11:d8:16:1d:13: 66:fd:f8:90:08:1a:f5:58:d5:73:46:21:e4:28:93: 5a:b2:62:a1:dd:48:ca:f3:01:7b:45:6f:b5:39:23: fa:44:c6:6d:92:0a:43:e6:43:40:17:3f:b7:37:f9: b7:ce:36:2b:03:60:6f:c1:05:e2:e8:94:06:4d:d9: 0b:69:f3:70:a2:90:8e:5e:b6:6d:e1:ef:13:73:74: 1e:2b:ee:55:aa:73:e2:c2:2d:c7:fd:da:04:da:ff: c3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FF:08:8D:75:42:00:12:57:96:B3:D0:74:1E:B8:4A:A7:37:F1:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2ff47a0d-289e-3070-8daf-af316ad1b0f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 64.4.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:e3:ad:8f:9d:ce:7d:ef:1a:fb:09:9c:fc:42:31:2b:a6:1c: b2:c8:12:3d:93:d7:05:25:84:1c:17:92:54:a6:b8:0e:07:cf: fe:fb:1b:72:df:a3:d8:9a:c3:cb:6c:01:91:30:a4:c7:d7:f7: cf:5d:05:b4:bb:6d:e1:28:af:7b:94:db:9e:70:09:69:8d:2f: 09:ae:9b:7a:29:e4:0a:bb:7b:91:dc:b5:df:15:c2:26:73:86: ae:1e:28:51:ef:b7:49:d1:74:e8:6b:97:c5:0e:13:e8:c1:91: 48:f2:e8:bb:49:80:0a:2d:fe:8e:a6:2c:a5:b9:54:a1:08:61: 5e:3f:73:04:36:f9:54:16:8f:f4:2b:1d:81:0f:76:23:2e:e1: 5a:03:5c:66:cc:21:9a:1d:8c:a8:e5:2d:56:c0:7b:4f:1a:68: 27:fd:38:5f:37:40:ca:46:81:a8:0f:e1:ab:8f:de:76:86:d0: 71:30:8a:ef:5d:db:1a:ad:2b:a3:74:9b:d7:a8:d6:c6:36:cc: 61:f0:f4:fc:fd:37:df:82:20:a7:5a:99:5c:71:fd:58:a1:10: 1a:70:13:c0:a0:cc:f5:a4:f8:e0:d0:25:b3:49:0c:4b:e3:f1: 9a:e1:b0:25:6d:16:cc:a1:fa:c2:e7:a0:22:05:27:7c:43:2a: 24:14:d2:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er+d2f0y6AujifYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk MTM4NjU2M2QtZTMyMy00OTI4LWFmNzUtYTI4NWNhZGEwNWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfhDTLTw9zIUJg5WVrpv3sDJTZbNvpnMthzf E2FmATGVL3WqwuW06K7MDvb4yDLY9xRJDm1ugrnVFNC9n5r6427MS7PMT4dS3ums klXTXzlofVRKZ9dyvGJeeVcyqkJtakAWJ8/PoU2/DVptja5iHEiGGN5w7YFhNpNZ FDg+fn36KPM4UNT/efI1UBSwSmMv4k9rOpHZHuld+S+VjnCQEdgWHRNm/fiQCBr1 WNVzRiHkKJNasmKh3UjK8wF7RW+1OSP6RMZtkgpD5kNAFz+3N/m3zjYrA2BvwQXi 6JQGTdkLafNwopCOXrZt4e8Tc3QeK+5VqnPiwi3H/doE2v/DQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKn/CI11QgASV5az0HQeuEqnN/FqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmZmNDdhMGQtMjg5ZS0z MDcwLThkYWYtYWYzMTZhZDFiMGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQATPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHjrY+dzn3vGvsJnPxCMSumHLLIEj2T1wUlhBwXklSmuA4Hz/77G3Lf o9iaw8tsAZEwpMfX989dBbS7beEor3uU255wCWmNLwmum3op5Aq7e5Hctd8VwiZz hq4eKFHvt0nRdOhrl8UOE+jBkUjy6LtJgAot/o6mLKW5VKEIYV4/cwQ2+VQWj/Qr HYEPdiMu4VoDXGbMIZodjKjlLVbAe08aaCf9OF83QMpGgagP4auP3naG0HEwiu9d 2xqtK6N0m9eo1sY2zGHw9Pz9N9+CIKdamVxx/VihEBpwE8CgzPWk+ODQJbNJDEvj 8ZrhsCVtFsyh+sLnoCIFJ3xDKiQU0rs= -----END CERTIFICATE-----Generated at Tue Jul 28 00:19:59 2026 by rpki-client