$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa File: 2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa (raw, json) Hash identifier: OQX+W5y+TcKTn6x0Mir/uqYgtTK/EYKsdSg3RVxJmfg= Subject key identifier: 32:3C:88:EE:A5:77:E0:1F:03:A7:D2:81:19:AE:45:C7:B5:13:C5:18 Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F4328584E296F0956546FDCFCB0C6F6C0 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa Signing time: Sat 13 Jun 2026 21:00:12 +0000 ROA not before: Sat 13 Jun 2026 21:00:12 +0000 ROA not after: Fri 11 Sep 2026 21:00:12 +0000 asID: 13807 IP address blocks: 64.64.144.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:29:6f:09:56:54:6f:dc:fc:b0:c6:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Jun 13 21:00:12 2026 GMT Not After : Sep 11 21:00:12 2026 GMT Subject: CN=8588a864-77c1-4a1b-9302-31b058e15d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c5:f8:fd:c7:1f:83:6f:37:ea:62:89:7f:38: 27:d6:76:64:7e:df:b1:db:ea:b3:84:80:ca:58:90: 60:26:cc:43:1a:a1:38:ec:31:cb:03:d8:8b:ff:88: 21:97:c3:73:ec:fc:69:b5:c0:73:26:a3:58:0b:2b: 79:9f:b8:34:4f:28:b8:d7:b5:04:34:60:1b:b6:6d: 26:96:a5:37:6b:ca:f4:f7:e9:7c:c1:82:15:ee:50: 25:7b:67:1c:4a:48:e6:9d:c0:24:6d:ce:7f:4d:c7: 74:7a:70:80:05:2a:15:6e:db:a5:48:05:25:4d:cc: eb:2c:e4:7e:84:82:d6:d8:24:2d:8c:a5:1b:be:99: b0:6f:02:3f:77:cb:ac:a4:f7:cd:a4:a3:cf:e0:4c: 1c:a7:15:74:53:c5:ed:d3:39:fb:09:e2:7d:82:3d: 8d:7a:0e:df:56:f5:3b:be:27:8d:04:37:ab:99:e4: 10:77:64:a1:33:77:25:13:79:1b:00:6f:c5:d6:d7: 14:2d:4a:46:26:f0:51:30:41:4a:83:64:ec:d5:92: ae:3c:fe:60:a6:2d:93:3c:1f:6d:16:c0:2a:e2:67: 89:c0:98:e4:6e:e2:b7:2a:e7:77:6a:23:18:7f:46: e6:cd:2f:31:61:c5:68:c6:ad:38:b1:bf:da:e1:a1: ea:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3C:88:EE:A5:77:E0:1F:03:A7:D2:81:19:AE:45:C7:B5:13:C5:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv4: 64.64.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:b2:1a:92:ae:e7:3e:b4:94:30:3c:2c:5b:8f:1e:46:29:86: ae:bd:6c:79:57:43:8e:bd:e1:66:5f:a7:b8:23:10:ae:52:4c: 55:6b:46:a4:88:de:89:ff:21:92:bf:ef:8e:74:bc:b3:77:79: 07:b6:9f:72:4a:ac:0e:17:63:d3:43:64:04:bc:2e:9e:45:d3: da:8d:0d:fb:81:db:65:d7:b6:e6:6e:c5:42:26:27:7b:32:48: c4:61:90:e9:54:bf:72:d7:5f:c7:35:16:32:97:f9:f5:40:df: 0a:d5:7c:b2:15:da:ef:b4:a0:82:30:98:c8:6d:52:f6:5d:e6: 74:13:cd:69:5e:4a:83:d7:d9:17:a7:ba:bf:e8:52:22:98:01: 0d:9d:f9:54:bf:60:2e:ed:37:31:0a:31:6a:f0:2a:a6:08:ab: b5:9b:28:8c:d2:f9:6c:0c:71:30:a7:9b:30:f8:63:04:b3:c0: 42:47:6f:9d:eb:66:d5:06:3d:ea:cf:50:c5:3a:f4:74:68:eb: 60:51:8e:b9:23:8a:d2:f0:da:a5:f1:41:b8:75:cb:00:dd:9f: f9:8f:05:d9:2c:fd:7e:0c:9f:e4:8b:33:75:76:0b:a2:3a:b0: 27:37:5a:71:d9:a7:82:d1:7d:b3:49:53:48:a2:94:20:f9:21: 0f:fd:6b:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4pbwlWVG/c/LDG9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI2MDYxMzIxMDAxMloXDTI2MDkxMTIxMDAxMlowLzEtMCsGA1UEAxMk ODU4OGE4NjQtNzdjMS00YTFiLTkzMDItMzFiMDU4ZTE1ZDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8X4/ccfg2836mKJfzgn1nZkft+x2+qzhIDK WJBgJsxDGqE47DHLA9iL/4ghl8Nz7PxptcBzJqNYCyt5n7g0Tyi417UENGAbtm0m lqU3a8r09+l8wYIV7lAle2ccSkjmncAkbc5/Tcd0enCABSoVbtulSAUlTczrLOR+ hILW2CQtjKUbvpmwbwI/d8uspPfNpKPP4EwcpxV0U8Xt0zn7CeJ9gj2Neg7fVvU7 vieNBDermeQQd2ShM3clE3kbAG/F1tcULUpGJvBRMEFKg2Ts1ZKuPP5gpi2TPB9t FsAq4meJwJjkbuK3Kud3aiMYf0bmzS8xYcVoxq04sb/a4aHqBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDI8iO6ld+AfA6fSgRmuRce1E8UYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvMmE0ZTNhZDYtZjZiYS0z MGI5LWE0YzUtYjRkOGRiMTA2NDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQECQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALuyGpKu5z60lDA8LFuPHkYphq69bHlXQ4694WZfp7gjEK5STFVrRqSI 3on/IZK/7450vLN3eQe2n3JKrA4XY9NDZAS8Lp5F09qNDfuB22XXtuZuxUImJ3sy SMRhkOlUv3LXX8c1FjKX+fVA3wrVfLIV2u+0oIIwmMhtUvZd5nQTzWleSoPX2Ren ur/oUiKYAQ2d+VS/YC7tNzEKMWrwKqYIq7WbKIzS+WwMcTCnmzD4YwSzwEJHb53r ZtUGPerPUMU69HRo62BRjrkjitLw2qXxQbh1ywDdn/mPBdks/X4Mn+SLM3V2C6I6 sCc3WnHZp4LRfbNJU0iilCD5IQ/9a3U= -----END CERTIFICATE-----Generated at Tue Jul 14 11:55:42 2026 by rpki-client