$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/65ef4bc4-564a-3e87-a343-8f86a487b13b.roa File: 65ef4bc4-564a-3e87-a343-8f86a487b13b.roa (raw, json) Hash identifier: +RATOcVeHuf8zp70T6O6rlxm9UHZX1v7dVAVAiS2Fx0= Subject key identifier: 46:DF:05:A5:1D:DB:CC:54:01:6D:13:F8:25:40:CB:83:BC:39:38:03 Certificate issuer: /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Certificate serial: 010D0C9F4328584EF2E76E8A4FF12082EAB75D80 Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/65ef4bc4-564a-3e87-a343-8f86a487b13b.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 399122 IP address blocks: 64.130.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:6e:8a:4f:f1:20:82:ea:b7:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=603deda8-f55f-4849-a559-664ab7aa5171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:35:d5:09:08:ba:a7:6a:4e:f6:a5:20:99:99: 86:f0:66:3e:e6:62:80:a6:23:a2:91:5d:bb:dd:1f: 6c:73:32:e2:19:9f:a0:a6:74:f0:e9:e0:bc:d7:58: f6:26:db:3e:9e:bf:63:52:99:7c:9c:df:26:e1:31: 53:6f:0f:f3:cd:bf:9e:f6:d0:ca:7c:0d:56:47:2c: 18:e8:5c:2c:dc:59:ca:50:78:65:ae:b0:19:fe:9b: eb:57:2b:ca:a6:36:d3:1d:21:1c:a9:5d:37:79:5a: cb:2d:a1:27:71:0d:c3:a7:bd:45:0e:80:51:bb:ff: ea:92:6e:f4:0f:b8:2c:b7:d8:e5:cd:e0:f1:0b:62: bd:db:f9:a0:8d:53:7b:b9:c9:0c:74:62:be:13:50: b5:e5:a5:72:43:09:4b:de:55:d9:be:83:bd:76:f6: 65:9e:de:42:31:5b:05:23:a5:48:f3:96:35:cb:50: 9b:d0:f4:e3:c9:c3:06:c2:11:31:f5:85:5c:ff:f4: 02:cd:a5:4e:59:0a:1d:43:96:b5:03:2b:18:8a:1e: 58:84:6c:c6:1d:cf:32:0d:97:c2:91:15:8f:4c:3f: 9f:4a:9c:d5:17:53:09:7c:0e:76:ee:3e:2f:2d:7b: 01:ee:41:41:38:5b:3e:55:0a:15:f8:d7:c9:7f:b9: 76:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DF:05:A5:1D:DB:CC:54:01:6D:13:F8:25:40:CB:83:BC:39:38:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/65ef4bc4-564a-3e87-a343-8f86a487b13b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl X509v3 Authority Key Identifier: keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer sbgp-ipAddrBlock: critical IPv4: 64.130.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:76:64:42:1a:6e:14:66:ee:9d:81:1a:ff:db:e7:87:f9:59: 50:dd:fa:ea:a2:df:62:b6:8a:dc:e5:a2:30:6b:a0:99:39:5d: c8:68:d7:f4:9e:f7:fe:9b:64:f3:f3:15:3a:da:a8:6b:88:d3: 76:97:2b:f9:42:f9:9c:aa:27:6b:94:0b:c9:f2:f2:bc:38:dd: 6d:cf:2f:ba:38:72:a7:ac:43:47:95:89:34:ef:ab:01:09:a8: 9e:d1:9c:9e:6c:10:4b:bc:41:a6:79:fa:bc:be:6e:15:60:e8: 15:95:27:fc:ad:27:b0:ae:fa:96:6c:0a:77:1e:dc:65:6c:f6: 13:8b:bb:c9:a6:56:35:1d:12:46:b2:b9:3a:1e:d9:67:21:1d: af:96:ec:60:60:00:9d:34:b4:a6:5f:4a:89:ed:d6:d0:a4:80: 58:ca:e7:70:18:a7:a6:96:26:98:31:ce:ab:39:19:d8:2e:ce: eb:a6:a7:3d:72:cf:00:30:21:6f:ce:5c:03:d5:10:2c:19:95: 9f:ed:41:0a:b8:e4:d6:02:80:76:9f:48:f1:16:f0:a5:e6:d9: a4:7e:8c:44:aa:b3:5b:e4:61:eb:73:a0:1d:93:1f:06:49:8a: 95:7b:a2:42:0c:d4:2b:88:95:2d:7e:1a:e3:9f:40:0b:15:2f: 62:bf:4e:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y526KT/Egguq3XYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBkNmZkNTAtYjU0My00ZTk3LWE3ZjMtMGQ2YTU5MDhj YTM4MB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk NjAzZGVkYTgtZjU1Zi00ODQ5LWE1NTktNjY0YWI3YWE1MTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9TXVCQi6p2pO9qUgmZmG8GY+5mKApiOikV27 3R9sczLiGZ+gpnTw6eC811j2Jts+nr9jUpl8nN8m4TFTbw/zzb+e9tDKfA1WRywY 6Fws3FnKUHhlrrAZ/pvrVyvKpjbTHSEcqV03eVrLLaEncQ3Dp71FDoBRu//qkm70 D7gst9jlzeDxC2K92/mgjVN7uckMdGK+E1C15aVyQwlL3lXZvoO9dvZlnt5CMVsF I6VI85Y1y1Cb0PTjycMGwhEx9YVc//QCzaVOWQodQ5a1AysYih5YhGzGHc8yDZfC kRWPTD+fSpzVF1MJfA527j4vLXsB7kFBOFs+VQoV+NfJf7l2xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbfBaUd28xUAW0T+CVAy4O8OTgDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2 ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZhNTkwOGNhMzgvNjVlZjRiYzQtNTY0YS0z ZTg3LWEzNDMtOGY4NmE0ODdiMTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBkNmZkNTAtYjU0My00ZTk3LWE3 ZjMtMGQ2YTU5MDhjYTM4L2IwZDZmZDUwLWI1NDMtNGU5Ny1hN2YzLTBkNmE1OTA4 Y2EzOC5jcmwwHwYDVR0jBBgwFoAUuC1zjktame0lVFVY79EzURVo9P8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZh NTkwOGNhMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQIIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIN2ZEIabhRm7p2BGv/b54f5WVDd+uqi32K2itzlojBroJk5Xcho1/Se 9/6bZPPzFTraqGuI03aXK/lC+ZyqJ2uUC8ny8rw43W3PL7o4cqesQ0eViTTvqwEJ qJ7RnJ5sEEu8QaZ5+ry+bhVg6BWVJ/ytJ7Cu+pZsCnce3GVs9hOLu8mmVjUdEkay uToe2WchHa+W7GBgAJ00tKZfSont1tCkgFjK53AYp6aWJpgxzqs5Gdguzuumpz1y zwAwIW/OXAPVECwZlZ/tQQq45NYCgHafSPEW8KXm2aR+jESqs1vkYetzoB2THwZJ ipV7okIM1CuIlS1+GuOfQAsVL2K/TgE= -----END CERTIFICATE-----Generated at Sat Sep 19 02:59:15 2026 by rpki-client