$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c080201f-f854-382e-8a78-4e45cf3e1b98.roa File: c080201f-f854-382e-8a78-4e45cf3e1b98.roa (raw, json) Hash identifier: 27oZFGb+FZXjpld4DAAtm4a17xQZx1p/mJtirvem7R0= Subject key identifier: B0:A3:AD:36:9C:99:40:94:39:39:3D:0E:87:C8:CD:3C:D9:43:C6:BA Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EB9CC9ED42FF8EAA19BD4A260 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c080201f-f854-382e-8a78-4e45cf3e1b98.roa Signing time: Tue 04 Aug 2026 14:05:21 +0000 ROA not before: Tue 04 Aug 2026 14:05:21 +0000 ROA not after: Mon 02 Nov 2026 15:05:21 +0000 asID: 7203 IP address blocks: 64.64.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b9:cc:9e:d4:2f:f8:ea:a1:9b:d4:a2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 4 14:05:21 2026 GMT Not After : Nov 2 15:05:21 2026 GMT Subject: CN=4796bf03-e18f-4fae-82ca-1e16afe2931a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b3:8e:93:b0:03:c2:c3:2d:64:0e:15:8b:82: c0:99:c0:9a:ce:c8:71:21:cd:20:9d:dd:eb:a6:52: 4e:7c:4d:8c:56:c5:cd:6e:96:72:ae:09:8d:35:3b: ca:ac:d2:55:78:c8:4f:17:33:91:02:a5:75:2b:8f: 2a:88:16:84:cb:38:78:cb:d3:ff:6f:f1:8d:b9:f2: 9b:f4:12:c1:01:0e:76:45:ed:8a:af:92:be:54:e1: 93:4a:3e:91:cd:5a:67:31:58:8e:be:60:e2:f8:e0: f5:0c:fe:d7:4b:66:b2:f4:43:de:d5:8c:ef:4f:f7: 7d:e0:32:11:ef:8e:c3:6e:0a:27:64:1a:04:6f:32: 19:f6:46:2d:b5:51:7a:5e:8d:f1:e0:8f:f9:9b:fd: 49:d2:08:d6:b2:a5:ee:d5:d1:d2:98:89:d5:95:5e: 7e:7e:04:6d:03:1b:7d:d3:96:12:af:24:02:7a:14: 68:fa:66:41:d2:24:19:98:8d:fb:8e:41:ac:b4:5d: 52:1a:b3:09:07:08:28:dd:78:3f:c6:40:b3:5e:02: 20:53:fc:67:dc:d6:0a:f0:63:b2:33:a5:53:4c:51: cc:fb:71:14:6a:1f:c2:90:a5:ce:5a:5d:63:24:27: c1:2d:e1:af:83:aa:4d:79:a5:9a:1b:fc:f4:cd:28: 64:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A3:AD:36:9C:99:40:94:39:39:3D:0E:87:C8:CD:3C:D9:43:C6:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c080201f-f854-382e-8a78-4e45cf3e1b98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 64.64.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:df:6c:55:10:48:29:01:20:d9:ad:f1:f7:63:10:6d:b5:4e: 4c:71:5e:39:1b:4c:c4:4e:10:a7:3c:2c:4c:5c:26:42:ec:b4: 45:d0:4e:56:d1:b3:ac:6d:81:c4:8f:7f:d1:4c:23:d8:7d:cf: 1b:32:61:eb:c0:cb:f0:26:0b:d7:21:73:f7:e5:26:22:f3:28: 7d:61:75:15:6d:81:2f:2e:05:60:04:75:84:17:fe:70:e3:1e: 66:fd:af:52:4f:8f:5f:d8:d1:3e:ee:e7:33:47:83:6b:c2:13: 2f:6b:0b:83:08:f6:4a:10:5d:db:e3:31:c6:a9:3a:ab:96:30: d7:16:99:63:bb:ca:6a:77:0a:ec:e5:e2:8a:71:39:b2:b2:72: e4:f3:87:83:65:c6:58:6d:f9:c0:c6:8c:fe:09:37:1d:0b:d1: c9:c3:f0:dd:44:70:da:0d:ca:9e:15:25:67:b3:f9:d2:a1:46: 68:24:ba:42:78:61:f1:5b:1e:89:7d:4f:b9:18:82:f0:e7:a3: a2:49:1e:02:a8:1c:84:45:df:41:13:56:20:d5:19:ae:93:51: bb:e8:37:e8:0a:79:2d:73:1d:fa:55:dc:1e:e7:6d:1c:4f:8e: 29:db:d7:ab:58:a7:26:5c:be:45:c7:af:5b:36:d3:6f:a9:3f: f0:ae:ab:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE65zJ7UL/jqoZvUomAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNDE0MDUyMVoXDTI2MTEwMjE1MDUyMVowLzEtMCsGA1UEAxMk NDc5NmJmMDMtZTE4Zi00ZmFlLTgyY2EtMWUxNmFmZTI5MzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7OOk7ADwsMtZA4Vi4LAmcCazshxIc0gnd3r plJOfE2MVsXNbpZyrgmNNTvKrNJVeMhPFzORAqV1K48qiBaEyzh4y9P/b/GNufKb 9BLBAQ52Re2Kr5K+VOGTSj6RzVpnMViOvmDi+OD1DP7XS2ay9EPe1YzvT/d94DIR 747DbgonZBoEbzIZ9kYttVF6Xo3x4I/5m/1J0gjWsqXu1dHSmInVlV5+fgRtAxt9 05YSryQCehRo+mZB0iQZmI37jkGstF1SGrMJBwgo3Xg/xkCzXgIgU/xn3NYK8GOy M6VTTFHM+3EUah/CkKXOWl1jJCfBLeGvg6pNeaWaG/z0zShkhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCjrTacmUCUOTk9DofIzTzZQ8a6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYzA4MDIwMWYtZjg1NC0z ODJlLThhNzgtNGU0NWNmM2UxYjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQEAUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7fbFUQSCkBINmt8fdjEG21TkxxXjkbTMROEKc8LExcJkLstEXQTlbR s6xtgcSPf9FMI9h9zxsyYevAy/AmC9chc/flJiLzKH1hdRVtgS8uBWAEdYQX/nDj Hmb9r1JPj1/Y0T7u5zNHg2vCEy9rC4MI9koQXdvjMcapOquWMNcWmWO7ymp3Cuzl 4opxObKycuTzh4Nlxlht+cDGjP4JNx0L0cnD8N1EcNoNyp4VJWez+dKhRmgkukJ4 YfFbHol9T7kYgvDno6JJHgKoHIRF30ETViDVGa6TUbvoN+gKeS1zHfpV3B7nbRxP jinb16tYpyZcvkXHr1s202+pP/Cuq3E= -----END CERTIFICATE-----Generated at Thu Aug 27 18:19:04 2026 by rpki-client