$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/5b2340ea-6054-31e3-b42d-7f23e40eb030.roa File: 5b2340ea-6054-31e3-b42d-7f23e40eb030.roa (raw, json) Hash identifier: F47JasQBiOYVEmqC1wEIM8iEgKtsgBN4oT3cze0K0so= Subject key identifier: 42:80:A0:5F:89:26:8E:9F:C4:71:22:FF:4C:D9:BB:E9:39:87:3A:39 Certificate issuer: /CN=025f6cf8-1ef8-442b-a23d-43cf79ed5d3f Certificate serial: 010D0C9F4328584EA78847E826553E46E72C67B8 Authority key identifier: 68:3D:46:AA:59:3B:FA:04:A5:1C:0E:01:20:31:78:03:1D:57:51:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/5b2340ea-6054-31e3-b42d-7f23e40eb030.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 399603 IP address blocks: 64.112.14.0/24 maxlen: 32 2602:fc9c::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:47:e8:26:55:3e:46:e7:2c:67:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=025f6cf8-1ef8-442b-a23d-43cf79ed5d3f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c8ea2376-b322-48d8-b698-4af394520110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a6:5c:ae:4a:06:f6:40:10:b3:23:b1:0c:f5: 49:3a:23:53:b1:f8:8d:ed:21:b9:97:cf:d5:e6:d4: 8f:f7:5b:7b:a9:e3:85:da:07:ff:d5:af:09:99:7e: a5:32:88:6f:6c:ec:9f:19:c8:aa:75:5b:20:bb:88: f6:18:82:3a:e7:82:59:1d:d3:de:02:13:cf:d4:1c: 14:2d:e7:56:5c:f1:6e:c5:e0:3a:5a:dd:9a:85:d9: 5c:5d:38:9b:a0:d0:f9:c6:67:b4:41:48:63:bc:09: ee:e6:b3:3f:ac:0b:3a:22:6c:ee:4b:2d:bc:dc:24: 9b:06:b7:d2:10:3e:ff:be:14:7a:16:22:42:d4:01: 28:99:78:29:ad:73:8d:19:de:f1:1e:8b:8f:db:2a: f1:fa:8a:55:2b:09:12:b7:b1:d6:34:5e:82:1f:19: 95:a1:62:1c:b1:51:9a:1c:b8:82:d4:e6:c4:fa:4e: f1:ee:16:e7:32:64:29:f3:da:f3:86:7a:60:ca:b3: b5:ac:47:e4:1f:65:b6:32:40:a4:b7:a6:81:0a:c6: b1:f8:6d:e5:d3:41:de:00:e2:0f:fe:3a:75:1b:4f: 80:cc:c5:cb:7e:94:04:54:d9:7a:7d:ec:d2:31:34: 21:c6:53:46:f3:2d:d0:27:9d:1d:e3:3d:23:72:e4: 49:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:80:A0:5F:89:26:8E:9F:C4:71:22:FF:4C:D9:BB:E9:39:87:3A:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/5b2340ea-6054-31e3-b42d-7f23e40eb030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.crl X509v3 Authority Key Identifier: keyid:68:3D:46:AA:59:3B:FA:04:A5:1C:0E:01:20:31:78:03:1D:57:51:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.cer sbgp-ipAddrBlock: critical IPv4: 64.112.14.0/24 IPv6: 2602:fc9c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b7:57:2e:4b:51:dd:d9:ce:2e:bd:00:fe:dc:9e:b0:42:45: e2:d1:f6:e0:b5:b7:58:65:3f:fe:0e:37:5f:c0:fe:f7:d0:2b: ee:a1:f8:1e:22:57:9f:63:a6:c4:bf:d1:3f:60:c9:49:6d:85: df:27:4b:08:f8:fe:32:ff:54:b5:4d:05:9d:d5:be:d8:a0:1e: 59:99:64:50:97:2e:a5:3f:d9:98:0f:8a:b3:1c:d3:74:76:3e: 25:73:4e:c5:bf:a0:8e:31:bd:f8:6a:ed:2c:c1:38:5b:08:37: 60:ca:3d:71:69:9d:e0:86:2e:82:a2:ad:eb:96:a4:1d:89:42: ae:49:f9:82:19:b0:85:f2:0b:5c:ca:ec:79:bd:41:fc:35:de: 8a:01:b0:94:24:03:5f:a0:0c:92:72:6a:7b:3c:95:30:4d:d7: b0:e2:12:a4:d8:2e:2f:eb:fd:c3:ec:95:5a:44:a8:92:15:88: 02:d8:67:2d:dc:e0:87:d1:c4:f0:31:a3:9d:d4:f6:31:40:31: 33:0e:aa:50:b6:d7:af:41:5b:98:1d:19:35:a1:95:89:57:d7: 4b:a3:5f:db:89:7c:c3:89:fd:3b:f8:79:1c:f9:ff:cc:f6:86: f8:b6:8d:5d:70:48:2a:fa:f3:b3:e0:dd:38:f6:df:b4:5a:1b: 0e:52:41:1d -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6niEfoJlU+RucsZ7gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI1ZjZjZjgtMWVmOC00NDJiLWEyM2QtNDNjZjc5ZWQ1 ZDNmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzhlYTIzNzYtYjMyMi00OGQ4LWI2OTgtNGFmMzk0NTIwMTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaZcrkoG9kAQsyOxDPVJOiNTsfiN7SG5l8/V 5tSP91t7qeOF2gf/1a8JmX6lMohvbOyfGciqdVsgu4j2GII654JZHdPeAhPP1BwU LedWXPFuxeA6Wt2ahdlcXTiboND5xme0QUhjvAnu5rM/rAs6ImzuSy283CSbBrfS ED7/vhR6FiJC1AEomXgprXONGd7xHouP2yrx+opVKwkSt7HWNF6CHxmVoWIcsVGa HLiC1ObE+k7x7hbnMmQp89rzhnpgyrO1rEfkH2W2MkCkt6aBCsax+G3l00HeAOIP /jp1G0+AzMXLfpQEVNl6fezSMTQhxlNG8y3QJ50d4z0jcuRJVQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFEKAoF+JJo6fxHEi/0zZu+k5hzo5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMjVm NmNmOC0xZWY4LTQ0MmItYTIzZC00M2NmNzllZDVkM2YvNWIyMzQwZWEtNjA1NC0z MWUzLWI0MmQtN2YyM2U0MGViMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDI1ZjZjZjgtMWVmOC00NDJiLWEy M2QtNDNjZjc5ZWQ1ZDNmLzAyNWY2Y2Y4LTFlZjgtNDQyYi1hMjNkLTQzY2Y3OWVk NWQzZi5jcmwwHwYDVR0jBBgwFoAUaD1Gqlk7+gSlHA4BIDF4Ax1XUWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wMjVmNmNmOC0xZWY4LTQ0MmItYTIzZC00M2Nm NzllZDVkM2YuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAQHAOMA4E AgACMAgDBgQmAvycADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA4t1cuS1Hd2c4uvQD+3J6wQkXi0fbgtbdY ZT/+DjdfwP730CvuofgeIlefY6bEv9E/YMlJbYXfJ0sI+P4y/1S1TQWd1b7YoB5Z mWRQly6lP9mYD4qzHNN0dj4lc07Fv6COMb34au0swThbCDdgyj1xaZ3ghi6Coq3r lqQdiUKuSfmCGbCF8gtcyux5vUH8Nd6KAbCUJANfoAyScmp7PJUwTdew4hKk2C4v 6/3D7JVaRKiSFYgC2Gct3OCH0cTwMaOd1PYxQDEzDqpQttevQVuYHRk1oZWJV9dL o1/biXzDif07+Hkc+f/M9ob4to1dcEgq+vOz4N049t+0WhsOUkEd -----END CERTIFICATE-----Generated at Thu Jul 30 06:53:05 2026 by rpki-client