$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa File: 3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa (raw, json) Hash identifier: G6NmhEtKDKma+AxdqM8eg+Ax300x1NImsTYNqSY5R18= Subject key identifier: 88:E3:76:F3:5A:46:1C:2E:4A:C0:EB:3A:9F:37:F3:D8:BE:41:4D:EA Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584E4559DC6166905110A7B3A100 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 14618 IP address blocks: 64.52.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:dc:61:66:90:51:10:a7:b3:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=b07a41cc-fe6d-4397-b132-116951690b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5a:fd:7d:93:00:43:81:44:04:ec:95:ee:47: db:6b:c2:bf:90:cf:d7:d9:7e:1e:76:0b:21:f4:f3: bf:c6:e0:99:87:e3:c6:cb:45:f0:ba:c3:a4:fc:aa: 58:c9:b0:cc:39:47:13:62:2d:fe:58:a9:47:29:74: 65:c8:0e:f4:d8:1f:cf:16:62:f9:6b:41:a4:ab:48: a9:ce:6e:96:6c:c6:77:83:68:65:53:10:47:70:fc: ac:ce:7a:22:06:82:6c:64:50:85:4a:76:42:3c:c8: 08:21:cc:c9:51:fb:a0:5f:2a:b8:00:4f:4a:50:76: 7b:61:82:43:49:65:18:26:83:b7:57:74:10:e9:1f: ce:b5:f0:01:8c:9f:68:91:29:b2:f3:06:93:9c:df: e8:9b:3b:e4:ff:bd:6c:60:cd:a2:74:c6:f4:d4:7a: 50:ae:1f:4a:8b:c5:fd:ed:e8:e6:55:cf:58:68:3f: 1e:43:62:53:2e:06:66:42:b0:0f:7d:54:f7:b5:19: b6:99:0b:b0:ca:c8:6a:0a:b4:5b:15:e4:7b:ba:40: f3:7a:5a:e9:2e:c8:4e:65:87:73:13:15:37:f3:58: 9d:9d:ef:62:50:20:2e:ae:cf:f2:09:71:fa:8b:33: 85:91:51:30:54:10:34:e5:d9:01:ee:b6:64:0e:9b: ea:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E3:76:F3:5A:46:1C:2E:4A:C0:EB:3A:9F:37:F3:D8:BE:41:4D:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 64.52.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:ea:d6:9e:5e:9e:a2:4b:c9:5b:b7:03:ad:c8:86:9c:19:62: 71:d6:f5:77:8e:5f:81:f8:9a:23:ec:cb:42:86:63:97:84:58: e2:12:5b:86:85:71:7c:9a:5c:73:7e:3a:28:fe:05:d8:41:56: f0:e8:27:44:f8:15:92:37:f5:55:06:91:d3:c9:1f:71:54:2b: af:a1:17:f7:ae:ea:d5:06:63:d7:33:76:2b:f9:96:91:27:e4: 74:5a:17:6e:bf:de:5b:ce:2b:18:14:15:71:14:f5:3e:e2:9d: 88:09:8b:06:0e:3a:fc:54:68:d6:a5:58:41:9c:2a:a1:33:2e: 3d:61:49:71:10:fe:5c:5a:61:36:2a:0a:f6:0a:e9:d8:f1:6e: 03:81:09:cd:ea:1f:14:a0:9c:51:d0:6f:9a:91:67:b3:77:f0: 2e:02:9f:69:c8:ba:12:97:13:ad:b8:41:0c:91:de:cc:c7:b7: e0:67:e2:97:47:5b:6e:5d:03:9f:24:af:a8:af:74:69:81:44: a1:86:5d:c0:63:75:30:64:2d:9d:b1:39:75:bc:0a:72:e9:93: c0:db:3c:12:9c:9a:db:d7:fb:62:96:3f:94:fe:67:fb:7c:be: 99:5b:42:dc:83:a5:ed:2e:c2:ea:35:25:5e:27:90:8f:08:fd: 43:6d:0e:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWdxhZpBREKezoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk YjA3YTQxY2MtZmU2ZC00Mzk3LWIxMzItMTE2OTUxNjkwYjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1r9fZMAQ4FEBOyV7kfba8K/kM/X2X4edgsh 9PO/xuCZh+PGy0XwusOk/KpYybDMOUcTYi3+WKlHKXRlyA702B/PFmL5a0Gkq0ip zm6WbMZ3g2hlUxBHcPysznoiBoJsZFCFSnZCPMgIIczJUfugXyq4AE9KUHZ7YYJD SWUYJoO3V3QQ6R/OtfABjJ9okSmy8waTnN/omzvk/71sYM2idMb01HpQrh9Ki8X9 7ejmVc9YaD8eQ2JTLgZmQrAPfVT3tRm2mQuwyshqCrRbFeR7ukDzelrpLshOZYdz ExU381idne9iUCAurs/yCXH6izOFkVEwVBA05dkB7rZkDpvq2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjjdvNaRhwuSsDrOp8389i+QU3qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvM2YxZDVlMDgtOWE1Ny0z YjFmLWEyZDktOWRhMDNjZDhhYWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDRvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHq1p5enqJLyVu3A63IhpwZYnHW9XeOX4H4miPsy0KGY5eEWOISW4aF cXyaXHN+Oij+BdhBVvDoJ0T4FZI39VUGkdPJH3FUK6+hF/eu6tUGY9czdiv5lpEn 5HRaF26/3lvOKxgUFXEU9T7inYgJiwYOOvxUaNalWEGcKqEzLj1hSXEQ/lxaYTYq CvYK6djxbgOBCc3qHxSgnFHQb5qRZ7N38C4Cn2nIuhKXE624QQyR3szHt+Bn4pdH W25dA58kr6ivdGmBRKGGXcBjdTBkLZ2xOXW8CnLpk8DbPBKcmtvX+2KWP5T+Z/t8 vplbQtyDpe0uwuo1JV4nkI8I/UNtDjE= -----END CERTIFICATE-----Generated at Mon Jul 6 18:19:35 2026 by rpki-client