$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7f98375f-e9f8-334d-b12d-6cf716a9e408.roa File: 7f98375f-e9f8-334d-b12d-6cf716a9e408.roa (raw, json) Hash identifier: cITRylr7itwrcQEu5Gv8mFqxRTyFyK4uQgJD9LB8z4c= Subject key identifier: ED:F1:B1:65:AC:05:A2:FE:19:D5:E5:3E:CC:FA:41:7F:AD:78:C2:31 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EBC31E1CD5DF45194DD3BC040 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7f98375f-e9f8-334d-b12d-6cf716a9e408.roa Signing time: Wed 05 Aug 2026 10:40:59 +0000 ROA not before: Wed 05 Aug 2026 10:40:59 +0000 ROA not after: Tue 03 Nov 2026 11:40:59 +0000 asID: 27411 IP address blocks: 64.120.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bc:31:e1:cd:5d:f4:51:94:dd:3b:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 5 10:40:59 2026 GMT Not After : Nov 3 11:40:59 2026 GMT Subject: CN=6b67c7f4-f8f9-4ac7-b971-6bc345ec197c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f0:45:bc:16:ff:0a:95:ee:92:c4:3a:fb:38: ab:98:dd:05:7f:0a:67:3b:55:a7:8f:45:d0:18:6e: c8:8e:4e:09:b0:f6:99:98:2c:f1:4c:63:d1:39:de: 00:fc:15:84:69:da:64:d1:4c:df:5f:60:45:ea:24: 1e:1d:40:ab:63:a2:d0:71:b1:85:10:dc:f1:99:ff: 39:87:45:bc:1c:04:5d:8f:31:ad:a3:56:ee:16:de: a2:05:06:25:41:49:35:83:d9:bf:23:f1:e8:8a:15: bb:3c:5b:80:03:6d:fc:36:01:0d:26:2a:c4:d1:b4: e5:1b:4b:89:16:93:46:9e:f0:08:55:46:c8:a0:f2: 1d:14:f2:c1:00:30:b8:84:b2:c2:68:aa:46:91:11: fa:c1:8a:d7:73:96:22:8e:4b:4f:2d:95:3a:a4:54: a5:c6:79:b6:15:aa:0a:7b:de:36:2d:dc:fb:4e:7d: 7f:94:4b:2a:d9:65:50:fa:28:52:35:3b:83:c2:39: a7:63:7f:54:14:f1:04:20:cf:90:ea:70:0e:d7:47: 29:08:32:e6:1b:13:22:de:41:37:4a:22:dc:9a:3f: e2:09:fc:0a:67:a8:84:2e:2a:27:93:28:d9:4d:63: 08:43:2c:96:59:ed:9c:c6:5c:6d:7a:24:d8:02:64: d6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F1:B1:65:AC:05:A2:FE:19:D5:E5:3E:CC:FA:41:7F:AD:78:C2:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7f98375f-e9f8-334d-b12d-6cf716a9e408.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 64.120.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:dd:d8:dc:cf:5a:43:3c:a3:8c:c5:93:60:f6:90:91:37:c9: 20:06:ef:de:0b:33:69:35:5c:bc:28:ea:52:5f:7d:1e:fa:0d: ba:05:a6:3a:0f:48:fc:f1:c1:78:25:1e:96:e5:f2:26:0a:5b: 62:b0:1d:ff:44:5a:12:5a:4b:04:c8:23:84:0a:35:4c:eb:af: cd:57:19:11:b0:29:b2:fc:85:1b:cc:b3:fe:3a:97:55:26:80: 78:cd:dd:81:99:f9:ac:dc:91:ae:65:89:56:a8:17:38:07:23: 58:66:3e:26:04:59:57:ec:e5:f0:25:43:4c:cc:e8:4e:b9:ea: 5b:79:40:2b:4b:99:a4:46:e4:5b:21:c2:42:b7:5a:6e:57:30: 62:5d:57:6c:07:39:ab:46:7f:c1:20:60:43:cc:4c:d0:03:20: 86:b7:63:50:b9:82:7f:67:dd:e8:cf:35:de:62:1a:a9:a1:95: 0d:b1:49:25:3d:1c:af:15:13:fb:40:92:af:28:ab:ca:07:90: 73:93:72:bf:35:6f:60:2c:f4:91:a2:32:9a:87:c5:0b:49:9c: 98:a2:a2:ac:73:c2:8c:12:1b:67:96:b5:3f:5f:61:2f:fc:bf: fa:f8:92:a8:8c:82:82:3e:ac:a6:04:bc:69:02:e0:9f:68:a8: ac:b6:f5:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE68MeHNXfRRlN07wEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNTEwNDA1OVoXDTI2MTEwMzExNDA1OVowLzEtMCsGA1UEAxMk NmI2N2M3ZjQtZjhmOS00YWM3LWI5NzEtNmJjMzQ1ZWMxOTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfBFvBb/CpXuksQ6+zirmN0FfwpnO1Wnj0XQ GG7Ijk4JsPaZmCzxTGPROd4A/BWEadpk0UzfX2BF6iQeHUCrY6LQcbGFENzxmf85 h0W8HARdjzGto1buFt6iBQYlQUk1g9m/I/HoihW7PFuAA238NgENJirE0bTlG0uJ FpNGnvAIVUbIoPIdFPLBADC4hLLCaKpGkRH6wYrXc5YijktPLZU6pFSlxnm2FaoK e942Ldz7Tn1/lEsq2WVQ+ihSNTuDwjmnY39UFPEEIM+Q6nAO10cpCDLmGxMi3kE3 SiLcmj/iCfwKZ6iELionkyjZTWMIQyyWWe2cxlxteiTYAmTW8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3xsWWsBaL+GdXlPsz6QX+teMIxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvN2Y5ODM3NWYtZTlmOC0z MzRkLWIxMmQtNmNmNzE2YTllNDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQHhQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/d2NzPWkM8o4zFk2D2kJE3ySAG794LM2k1XLwo6lJffR76DboFpjoP SPzxwXglHpbl8iYKW2KwHf9EWhJaSwTII4QKNUzrr81XGRGwKbL8hRvMs/46l1Um gHjN3YGZ+azcka5liVaoFzgHI1hmPiYEWVfs5fAlQ0zM6E656lt5QCtLmaRG5Fsh wkK3Wm5XMGJdV2wHOatGf8EgYEPMTNADIIa3Y1C5gn9n3ejPNd5iGqmhlQ2xSSU9 HK8VE/tAkq8oq8oHkHOTcr81b2As9JGiMpqHxQtJnJiioqxzwowSG2eWtT9fYS/8 v/r4kqiMgoI+rKYEvGkC4J9oqKy29VQ= -----END CERTIFICATE-----Generated at Thu Aug 27 16:01:30 2026 by rpki-client