$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34/2fc23996-5b7e-31ad-91be-f227ef142d20.roa File: 2fc23996-5b7e-31ad-91be-f227ef142d20.roa (raw, json) Hash identifier: zthv2fcyHJ+npWJjk6W8IP23Rz4GTXkHJZllpUEjURo= Subject key identifier: D1:36:E2:A9:3F:A9:49:CB:C7:1E:77:8F:FC:B4:B5:8A:61:31:C5:09 Certificate issuer: /CN=646b4c8f-df71-430f-9338-67bba3a82c34 Certificate serial: 010D0C9F4328584F427804035B6AFCD11D99E5C0 Authority key identifier: DD:AB:EE:2B:C6:8A:88:CA:10:F7:A1:A9:F5:21:59:C2:A5:79:2E:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34/2fc23996-5b7e-31ad-91be-f227ef142d20.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 6407 IP address blocks: 64.56.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34/646b4c8f-df71-430f-9338-67bba3a82c34.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34/646b4c8f-df71-430f-9338-67bba3a82c34.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:04:03:5b:6a:fc:d1:1d:99:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=646b4c8f-df71-430f-9338-67bba3a82c34 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=a7c7ab88-004d-4fb7-beaa-1ee991ed177a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:51:34:73:7b:e0:e6:91:5e:40:19:eb:31:5f: b7:bd:91:83:a2:98:a6:00:86:00:00:20:03:48:c7: 88:58:6f:f8:ad:b7:f9:94:51:0a:6f:01:e4:60:01: d2:55:95:eb:65:4e:0a:6a:15:22:18:61:d9:82:2f: c0:13:7c:d1:3f:4c:d1:cf:2d:f1:b2:8d:b5:8d:af: 48:52:1d:f1:76:b7:0c:b4:45:70:e2:fb:27:ec:7e: 7a:81:99:53:43:69:de:1c:50:58:08:10:c0:07:5d: 96:20:10:c2:88:c5:3d:e0:bd:fc:84:c8:19:de:a4: 61:80:90:50:bf:70:c7:8e:49:17:aa:3d:ba:87:db: e6:3b:82:89:13:03:36:49:4a:20:80:e0:90:b2:ec: 51:73:25:12:f3:c3:c6:57:57:f2:8a:8e:a3:03:60: d9:a1:0d:ba:83:6f:a8:5c:43:c8:b0:54:7b:a3:df: 8d:a3:15:d9:1c:e6:7a:c0:86:9c:bd:1a:5d:83:44: df:2a:d2:12:a1:b2:8a:48:4f:b4:48:b5:3f:75:2c: c8:a9:a4:f6:fa:5a:4e:f0:ba:aa:a3:4a:b4:df:66: 86:15:a8:5f:30:b1:4c:3e:18:c7:fe:eb:90:f5:95: 93:19:68:07:35:44:96:7c:44:38:af:9b:f7:db:1d: d6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:36:E2:A9:3F:A9:49:CB:C7:1E:77:8F:FC:B4:B5:8A:61:31:C5:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34/2fc23996-5b7e-31ad-91be-f227ef142d20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34/646b4c8f-df71-430f-9338-67bba3a82c34.crl X509v3 Authority Key Identifier: keyid:DD:AB:EE:2B:C6:8A:88:CA:10:F7:A1:A9:F5:21:59:C2:A5:79:2E:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34.cer sbgp-ipAddrBlock: critical IPv4: 64.56.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:9c:7a:cc:33:0d:64:85:92:c3:43:e4:1a:53:d2:66:a4:63: 31:65:28:c6:1d:de:5b:bf:61:fc:bf:5b:66:fe:1c:9f:f5:45: ac:fe:0f:d4:c3:b2:92:a8:04:2f:0e:bc:46:c1:b5:51:5e:2d: 40:e7:2b:f4:95:93:a9:12:21:f6:d5:55:7c:85:b2:fa:e7:50: 1f:cb:58:82:74:8c:fd:d6:da:6a:a1:80:5e:21:f1:29:13:f8: 56:b2:4b:a0:16:06:fb:a6:37:a6:aa:a5:d5:32:56:6d:b5:9b: 87:a8:d5:3a:c5:8e:eb:73:23:d5:4f:f3:cd:37:fd:d6:fd:bf: 3e:a4:c3:3f:2c:be:d6:1a:b6:14:3d:63:51:59:00:ad:55:51: 2b:9c:2d:11:a9:7d:62:ea:28:cf:16:d6:39:75:e5:e9:4d:0c: 43:ec:78:92:f1:71:f6:9f:79:c9:c5:a9:e6:54:44:db:c2:3f: 35:3f:d0:d9:4b:8b:c9:0e:03:3a:21:e2:2c:00:9c:3d:da:32: 6b:d5:a0:a6:85:10:96:ff:bc:14:d2:89:29:b9:b5:5d:67:a4: 1f:0b:db:1c:c4:8e:79:6f:1d:64:40:a1:ae:9b:b8:a7:54:96: a3:88:93:86:e3:31:b3:f4:62:c7:16:73:70:c9:92:d2:f2:1c: c5:cc:e0:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeAQDW2r80R2Z5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ2YjRjOGYtZGY3MS00MzBmLTkzMzgtNjdiYmEzYTgy YzM0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk YTdjN2FiODgtMDA0ZC00ZmI3LWJlYWEtMWVlOTkxZWQxNzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VE0c3vg5pFeQBnrMV+3vZGDopimAIYAACAD SMeIWG/4rbf5lFEKbwHkYAHSVZXrZU4KahUiGGHZgi/AE3zRP0zRzy3xso21ja9I Uh3xdrcMtEVw4vsn7H56gZlTQ2neHFBYCBDAB12WIBDCiMU94L38hMgZ3qRhgJBQ v3DHjkkXqj26h9vmO4KJEwM2SUoggOCQsuxRcyUS88PGV1fyio6jA2DZoQ26g2+o XEPIsFR7o9+NoxXZHOZ6wIacvRpdg0TfKtISobKKSE+0SLU/dSzIqaT2+lpO8Lqq o0q032aGFahfMLFMPhjH/uuQ9ZWTGWgHNUSWfEQ4r5v32x3WfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNE24qk/qUnLxx53j/y0tYphMcUJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82NDZi NGM4Zi1kZjcxLTQzMGYtOTMzOC02N2JiYTNhODJjMzQvMmZjMjM5OTYtNWI3ZS0z MWFkLTkxYmUtZjIyN2VmMTQyZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjQ2YjRjOGYtZGY3MS00MzBmLTkz MzgtNjdiYmEzYTgyYzM0LzY0NmI0YzhmLWRmNzEtNDMwZi05MzM4LTY3YmJhM2E4 MmMzNC5jcmwwHwYDVR0jBBgwFoAU3avuK8aKiMoQ96Gp9SFZwqV5LjowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82NDZiNGM4Zi1kZjcxLTQzMGYtOTMzOC02N2Ji YTNhODJjMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQDjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyceswzDWSFksND5BpT0makYzFlKMYd3lu/Yfy/W2b+HJ/1Raz+D9TD spKoBC8OvEbBtVFeLUDnK/SVk6kSIfbVVXyFsvrnUB/LWIJ0jP3W2mqhgF4h8SkT +FayS6AWBvumN6aqpdUyVm21m4eo1TrFjutzI9VP8803/db9vz6kwz8svtYathQ9 Y1FZAK1VUSucLRGpfWLqKM8W1jl15elNDEPseJLxcfafecnFqeZURNvCPzU/0NlL i8kOAzoh4iwAnD3aMmvVoKaFEJb/vBTSiSm5tV1npB8L2xzEjnlvHWRAoa6buKdU lqOIk4bjMbP0YscWc3DJktLyHMXM4OE= -----END CERTIFICATE-----Generated at Sat Oct 3 08:13:09 2026 by rpki-client