$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/9b9669dd-4344-345d-b8ca-344210163939.roa File: 9b9669dd-4344-345d-b8ca-344210163939.roa (raw, json) Hash identifier: HjdMI6sifnrCUWOcImY7CLoVreqWeN4i0GSXLQzNUnw= Subject key identifier: CD:0E:7A:17:B0:69:CC:7E:CA:B9:38:51:68:4F:B1:DA:03:84:70:43 Certificate issuer: /CN=f9e87468-3770-44b8-9cdc-c0b0e117f2db Certificate serial: 010D0C9F4328584E4AEF2A5340FADCC968E0DE80 Authority key identifier: 5E:1A:94:DA:91:56:B9:AD:6A:2F:83:4C:8B:E8:E2:0F:E1:44:8E:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/9b9669dd-4344-345d-b8ca-344210163939.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 203861 IP address blocks: 64.89.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9e87468-3770-44b8-9cdc-c0b0e117f2db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9e87468-3770-44b8-9cdc-c0b0e117f2db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:2a:53:40:fa:dc:c9:68:e0:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9e87468-3770-44b8-9cdc-c0b0e117f2db Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=19dd35ba-4c3f-4613-8a9d-5d0c5483e235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3b:4c:1f:8a:0b:69:bf:05:25:e1:25:ca:81: 37:d4:74:e3:09:8d:8d:04:d3:c9:69:33:cf:99:85: 69:81:e5:d6:24:3d:ea:a7:8a:23:7e:93:2f:15:82: ad:b8:b3:cf:b5:6b:5c:2e:0b:70:02:b6:94:6f:c1: 6c:48:bb:a3:b2:29:75:1c:f2:7a:97:19:2f:1d:7a: fe:ed:e1:54:ac:62:f3:5e:0b:01:2b:e1:55:a1:ee: 82:cc:03:4a:05:cf:6e:8b:21:c8:b8:b7:5e:d1:7f: 62:7f:7b:70:7f:4d:1e:8c:b0:e3:50:c6:b5:81:f1: 1e:e5:2f:ec:c5:63:f5:d0:5c:2d:32:42:53:a5:06: b2:45:9c:eb:39:a8:bc:7d:4b:2f:c6:d8:d5:1f:e3: 9c:a9:75:b1:fd:ad:62:07:3a:b4:85:f4:e5:72:58: 3d:b7:19:25:0f:7f:00:91:46:b9:a7:3e:24:70:5c: 47:29:a7:01:46:41:c2:ca:16:38:8e:a4:54:61:c7: e0:8c:45:a8:d9:18:5a:98:93:ed:67:af:34:cf:6f: 01:27:31:da:89:8e:bf:7d:9c:65:03:db:4b:4a:91: a7:30:1b:24:1c:90:b2:59:39:f0:1e:b9:89:5c:03: a8:c8:eb:01:1b:c5:76:d8:71:ce:43:ee:fa:23:79: ab:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:0E:7A:17:B0:69:CC:7E:CA:B9:38:51:68:4F:B1:DA:03:84:70:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/9b9669dd-4344-345d-b8ca-344210163939.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9e87468-3770-44b8-9cdc-c0b0e117f2db.crl X509v3 Authority Key Identifier: keyid:5E:1A:94:DA:91:56:B9:AD:6A:2F:83:4C:8B:E8:E2:0F:E1:44:8E:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db.cer sbgp-ipAddrBlock: critical IPv4: 64.89.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:1e:30:77:e3:25:51:9c:20:62:7f:f6:f7:d9:8e:1d:a3:e4: 62:01:16:e9:61:f6:dc:62:f1:cd:16:9d:42:ea:db:a1:d7:8b: 3a:7e:0b:9b:86:a0:23:88:b5:12:77:a6:ae:0a:3d:65:26:33: a5:38:91:de:64:11:3f:3e:bf:70:7e:43:e4:87:58:27:06:24: 74:02:e9:13:0b:d4:97:d0:02:15:9a:ff:09:73:b9:8b:a2:91: eb:ab:d9:fa:02:f3:a2:2c:ed:64:4c:84:4a:05:b0:a9:68:9f: a7:45:82:90:79:27:b6:a5:ce:bc:a4:fd:6c:ca:36:59:d0:92: af:8a:00:c7:66:21:07:6a:3c:25:17:1f:b9:70:ed:fe:af:26: fd:4e:8b:09:b2:dc:16:8a:99:cd:00:43:4a:a0:41:43:57:1a: a9:fe:c9:3f:c9:b2:3f:f1:f9:9e:07:53:8d:b0:24:b0:24:bf: 22:ba:8d:00:90:09:e3:ad:35:8d:f6:b4:9c:a1:aa:51:fa:a9: 48:9a:26:ef:27:f1:21:da:d9:29:c7:fe:a9:bd:b1:16:95:a7: 8f:e4:69:15:4b:60:a7:bb:39:90:31:76:1e:d4:48:47:9b:d0: d7:45:c7:84:0b:65:a2:ec:a1:91:a2:85:f6:0e:4f:7d:8e:bc: 44:e5:da:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K7ypTQPrcyWjg3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjllODc0NjgtMzc3MC00NGI4LTljZGMtYzBiMGUxMTdm MmRiMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk MTlkZDM1YmEtNGMzZi00NjEzLThhOWQtNWQwYzU0ODNlMjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiztMH4oLab8FJeElyoE31HTjCY2NBNPJaTPP mYVpgeXWJD3qp4ojfpMvFYKtuLPPtWtcLgtwAraUb8FsSLujsil1HPJ6lxkvHXr+ 7eFUrGLzXgsBK+FVoe6CzANKBc9uiyHIuLde0X9if3twf00ejLDjUMa1gfEe5S/s xWP10FwtMkJTpQayRZzrOai8fUsvxtjVH+OcqXWx/a1iBzq0hfTlclg9txklD38A kUa5pz4kcFxHKacBRkHCyhY4jqRUYcfgjEWo2RhamJPtZ680z28BJzHaiY6/fZxl A9tLSpGnMBskHJCyWTnwHrmJXAOoyOsBG8V22HHOQ+76I3mrBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0Oehewacx+yrk4UWhPsdoDhHBDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mOWU4 NzQ2OC0zNzcwLTQ0YjgtOWNkYy1jMGIwZTExN2YyZGIvOWI5NjY5ZGQtNDM0NC0z NDVkLWI4Y2EtMzQ0MjEwMTYzOTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjllODc0NjgtMzc3MC00NGI4LTlj ZGMtYzBiMGUxMTdmMmRiL2Y5ZTg3NDY4LTM3NzAtNDRiOC05Y2RjLWMwYjBlMTE3 ZjJkYi5jcmwwHwYDVR0jBBgwFoAUXhqU2pFWua1qL4NMi+jiD+FEjrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mOWU4NzQ2OC0zNzcwLTQ0YjgtOWNkYy1jMGIw ZTExN2YyZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFmiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADweMHfjJVGcIGJ/9vfZjh2j5GIBFulh9txi8c0WnULq26HXizp+C5uG oCOItRJ3pq4KPWUmM6U4kd5kET8+v3B+Q+SHWCcGJHQC6RML1JfQAhWa/wlzuYui keur2foC86Is7WRMhEoFsKlon6dFgpB5J7alzryk/WzKNlnQkq+KAMdmIQdqPCUX H7lw7f6vJv1Oiwmy3BaKmc0AQ0qgQUNXGqn+yT/Jsj/x+Z4HU42wJLAkvyK6jQCQ CeOtNY32tJyhqlH6qUiaJu8n8SHa2SnH/qm9sRaVp4/kaRVLYKe7OZAxdh7USEeb 0NdFx4QLZaLsoZGihfYOT32OvETl2h8= -----END CERTIFICATE-----Generated at Tue Jul 21 20:05:43 2026 by rpki-client