$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a63cc691-27c3-37d8-95b1-3d2f61d78fc1.roa File: a63cc691-27c3-37d8-95b1-3d2f61d78fc1.roa (raw, json) Hash identifier: MzyZS8xjGoe9+j145N9cpjB+ZTwvCdxREPCM9arE1no= Subject key identifier: 87:76:DB:C5:2A:B9:6D:95:34:22:55:91:A5:86:57:E7:CD:68:9B:A5 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EBC3180F2C446185010EA4F80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a63cc691-27c3-37d8-95b1-3d2f61d78fc1.roa Signing time: Wed 05 Aug 2026 10:40:14 +0000 ROA not before: Wed 05 Aug 2026 10:40:14 +0000 ROA not after: Tue 03 Nov 2026 11:40:14 +0000 asID: 27411 IP address blocks: 64.120.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bc:31:80:f2:c4:46:18:50:10:ea:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 5 10:40:14 2026 GMT Not After : Nov 3 11:40:14 2026 GMT Subject: CN=d842b8fc-6249-4339-861b-877ef07a3d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:db:45:12:ee:b8:0d:d6:7c:4d:00:49:f1:05: 70:21:aa:6b:31:b1:af:4b:33:a9:58:79:c1:ee:ec: 4b:bb:59:23:33:be:cc:e1:61:b1:76:db:29:a6:c9: c7:43:b6:2b:0b:99:ee:9a:a2:73:e8:f6:68:7c:10: 48:f8:ba:e4:f8:17:d7:e8:78:b8:c3:e9:0a:0c:91: 4d:af:4b:70:1a:dc:33:d5:e0:cd:7b:b5:6a:b3:ad: a6:02:2c:df:c5:99:9e:0d:f6:68:77:d0:4d:02:5d: e9:ae:51:eb:79:c2:f9:61:24:fb:ec:7d:7e:c7:20: 40:52:4a:be:3c:7d:c7:30:d0:1d:20:1c:b0:e8:ee: 16:03:e0:43:96:05:85:45:3f:b1:e0:cc:b7:d0:d1: 6c:36:92:78:05:d1:bc:de:1c:aa:4c:ea:26:29:6c: d9:9f:34:06:c5:ad:0b:7c:95:a4:1a:a0:4e:16:16: 21:34:d5:86:09:47:2b:61:98:36:a3:14:03:6e:ce: 1b:a0:85:36:e9:98:41:b2:b7:f6:6c:19:44:fb:0a: 8b:27:b2:9b:bb:44:7c:fc:8e:00:68:2c:4d:66:ce: 3c:bb:b4:8d:72:cc:b8:df:0f:63:e9:18:cd:a7:ca: 5f:40:7c:43:de:4f:4e:a3:72:48:56:88:c8:56:fa: ec:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:76:DB:C5:2A:B9:6D:95:34:22:55:91:A5:86:57:E7:CD:68:9B:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a63cc691-27c3-37d8-95b1-3d2f61d78fc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 64.120.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:4d:8b:11:f3:26:dc:89:4f:05:c2:0c:ac:8b:08:9b:78:e3: 1a:1e:d0:ec:fd:76:05:fc:8c:f4:4b:e7:b8:ad:40:d0:19:25: de:a6:0b:9b:f0:c8:dc:87:fa:74:94:eb:bc:16:7a:84:12:37: 58:75:69:34:5b:c8:46:e7:1d:ce:2a:49:e4:8d:00:b4:cc:cd: 40:4e:03:55:76:af:5d:07:fc:3d:7d:8d:30:d4:31:88:7b:dc: dd:89:8a:93:c8:32:d1:bd:82:fb:aa:a8:ff:41:77:2c:76:4c: 6d:1c:92:c7:85:93:3e:34:3d:3f:81:eb:1d:ce:24:ed:9b:36: fb:be:ef:bf:e0:7c:79:d5:fd:60:01:a8:bb:b0:9f:9d:ad:e1: 6d:a2:d9:f2:db:74:20:e6:2a:d6:8d:93:62:41:8a:4c:31:26: 2b:aa:34:ef:dc:c1:eb:a8:63:4f:9d:2f:4b:ce:29:c3:1b:d5: 01:8b:e7:ac:d8:3d:b5:9d:d8:ec:d3:83:1a:b9:4e:5d:32:d1: 77:ae:b7:84:23:99:df:1f:66:b7:eb:1f:02:86:8e:d7:99:b6: a3:69:43:4d:25:24:1e:80:3a:3e:3d:4c:b2:72:a4:6b:09:c9: ad:39:8e:cf:10:8c:e1:13:24:3a:33:9d:ce:a6:a1:8f:f6:1b: 94:b4:e2:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE68MYDyxEYYUBDqT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNTEwNDAxNFoXDTI2MTEwMzExNDAxNFowLzEtMCsGA1UEAxMk ZDg0MmI4ZmMtNjI0OS00MzM5LTg2MWItODc3ZWYwN2EzZDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9tFEu64DdZ8TQBJ8QVwIaprMbGvSzOpWHnB 7uxLu1kjM77M4WGxdtsppsnHQ7YrC5numqJz6PZofBBI+Lrk+BfX6Hi4w+kKDJFN r0twGtwz1eDNe7Vqs62mAizfxZmeDfZod9BNAl3prlHrecL5YST77H1+xyBAUkq+ PH3HMNAdIByw6O4WA+BDlgWFRT+x4My30NFsNpJ4BdG83hyqTOomKWzZnzQGxa0L fJWkGqBOFhYhNNWGCUcrYZg2oxQDbs4boIU26ZhBsrf2bBlE+wqLJ7Kbu0R8/I4A aCxNZs48u7SNcsy43w9j6RjNp8pfQHxD3k9Oo3JIVojIVvrsYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFId228UquW2VNCJVkaWGV+fNaJulMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYTYzY2M2OTEtMjdjMy0z N2Q4LTk1YjEtM2QyZjYxZDc4ZmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQHgYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxNixHzJtyJTwXCDKyLCJt44xoe0Oz9dgX8jPRL57itQNAZJd6mC5vw yNyH+nSU67wWeoQSN1h1aTRbyEbnHc4qSeSNALTMzUBOA1V2r10H/D19jTDUMYh7 3N2JipPIMtG9gvuqqP9Bdyx2TG0ckseFkz40PT+B6x3OJO2bNvu+77/gfHnV/WAB qLuwn52t4W2i2fLbdCDmKtaNk2JBikwxJiuqNO/cweuoY0+dL0vOKcMb1QGL56zY PbWd2OzTgxq5Tl0y0Xeut4Qjmd8fZrfrHwKGjteZtqNpQ00lJB6AOj49TLJypGsJ ya05js8QjOETJDoznc6moY/2G5S04g4= -----END CERTIFICATE-----Generated at Thu Aug 27 16:53:37 2026 by rpki-client