$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6640caef-1c19-322c-a5b7-3dcacf84fe14.roa File: 6640caef-1c19-322c-a5b7-3dcacf84fe14.roa (raw, json) Hash identifier: QDlYP2DL5M4clkEUrUh7wvBHkx4ISvTYhQF632GO+J0= Subject key identifier: AA:B3:0B:5E:C9:CA:06:45:1B:F0:97:73:DC:C6:9D:B5:C4:E4:81:B6 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F41129FDD190579900E2B6280 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6640caef-1c19-322c-a5b7-3dcacf84fe14.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 396168 IP address blocks: 204.0.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:9f:dd:19:05:79:90:0e:2b:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=7cdfb1dd-086d-4624-94e6-15108470e04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b5:c4:e2:a8:4c:29:18:3e:5b:20:ef:35:d1: 37:3a:b1:40:a9:a9:bd:ab:7e:ce:b6:45:43:56:d0: 08:c6:9e:1f:c1:1e:26:d2:38:fe:d3:21:df:0e:bb: ef:29:39:95:04:03:26:84:a6:fb:03:c9:53:71:03: d0:e3:91:99:40:1a:8c:98:11:db:8a:74:f6:12:49: 3a:63:f4:b4:f1:9c:f2:e4:15:7f:68:c4:b4:ea:05: 57:45:49:93:b6:4e:fa:f6:14:b2:7c:ce:c7:ce:aa: a9:c3:80:06:12:c8:f7:77:2b:03:38:72:69:cf:e4: 5f:ca:9a:d8:2c:48:37:76:20:fe:7d:4f:63:b4:5f: 48:e2:62:6d:f4:66:51:4b:a6:a9:f7:d5:e7:60:92: 76:f4:53:2e:af:1c:66:73:a4:07:1a:58:d1:0b:64: 62:0e:5c:c0:81:c9:fc:3e:65:18:e5:85:d7:b4:03: 0d:0c:06:d5:c0:29:5d:56:df:69:5e:66:6a:f7:38: ff:f2:58:bd:86:95:de:d1:d4:b5:48:79:31:58:ec: ff:c9:5c:9c:42:00:b8:96:06:7a:b2:a7:64:a6:7e: a0:83:89:05:f0:41:c6:b7:cb:bd:bc:11:8a:31:06: bd:a5:cb:78:5a:c6:82:18:df:b6:0d:c1:88:29:4b: b4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B3:0B:5E:C9:CA:06:45:1B:F0:97:73:DC:C6:9D:B5:C4:E4:81:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6640caef-1c19-322c-a5b7-3dcacf84fe14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.0.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:83:86:fb:84:0f:cb:3c:c5:95:f5:96:39:1b:16:79:3d:2a: 73:e2:5d:12:97:43:58:ce:c2:84:97:9a:e3:39:35:eb:40:f6: da:5b:49:e8:64:c5:32:9f:3d:2b:cb:9c:ed:65:c2:6a:b6:5d: 12:b0:82:f6:c0:ef:0c:4f:23:6f:4d:09:c3:82:61:b8:f3:65: a2:7e:a3:72:69:68:06:06:d2:27:3a:07:b1:b0:72:6e:12:41: d3:62:87:82:9e:8b:a8:b9:8b:bb:36:fb:f2:76:59:81:9f:f4: 65:14:ee:35:54:40:93:c7:ce:72:d5:79:c7:35:56:bc:e9:76: 5e:26:c0:06:be:23:eb:66:f9:f5:fb:61:fc:7e:34:0d:8b:18: 44:8a:cc:b8:0d:8d:39:6e:6d:d0:7e:bf:80:fd:57:22:dc:9f: 23:1b:d9:fe:06:2b:fa:ad:ba:ca:ec:0d:78:1b:7f:ff:12:1a: 6b:9a:f1:95:c5:94:a5:d9:9e:31:8d:6d:43:29:7f:c8:c8:76: da:da:e9:a7:6d:5b:9b:9d:62:be:31:cd:a6:ed:07:15:d7:2b: 78:30:a7:b0:cb:46:0e:46:60:85:f5:9c:8f:6d:60:ba:dd:2f: d5:03:b9:18:5d:7c:43:56:b7:a1:0e:ad:af:b9:6b:92:8f:f1: 4c:0a:af:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEp/dGQV5kA4rYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk N2NkZmIxZGQtMDg2ZC00NjI0LTk0ZTYtMTUxMDg0NzBlMDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7XE4qhMKRg+WyDvNdE3OrFAqam9q37OtkVD VtAIxp4fwR4m0jj+0yHfDrvvKTmVBAMmhKb7A8lTcQPQ45GZQBqMmBHbinT2Ekk6 Y/S08Zzy5BV/aMS06gVXRUmTtk769hSyfM7Hzqqpw4AGEsj3dysDOHJpz+RfyprY LEg3diD+fU9jtF9I4mJt9GZRS6ap99XnYJJ29FMurxxmc6QHGljRC2RiDlzAgcn8 PmUY5YXXtAMNDAbVwCldVt9pXmZq9zj/8li9hpXe0dS1SHkxWOz/yVycQgC4lgZ6 sqdkpn6gg4kF8EHGt8u9vBGKMQa9pct4WsaCGN+2DcGIKUu0jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqzC17JygZFG/CXc9zGnbXE5IG2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNjY0MGNhZWYtMWMxOS0z MjJjLWE1YjctM2RjYWNmODRmZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzABAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALaDhvuED8s8xZX1ljkbFnk9KnPiXRKXQ1jOwoSXmuM5NetA9tpbSehk xTKfPSvLnO1lwmq2XRKwgvbA7wxPI29NCcOCYbjzZaJ+o3JpaAYG0ic6B7Gwcm4S QdNih4Kei6i5i7s2+/J2WYGf9GUU7jVUQJPHznLVecc1Vrzpdl4mwAa+I+tm+fX7 Yfx+NA2LGESKzLgNjTlubdB+v4D9VyLcnyMb2f4GK/qtusrsDXgbf/8SGmua8ZXF lKXZnjGNbUMpf8jIdtra6adtW5udYr4xzabtBxXXK3gwp7DLRg5GYIX1nI9tYLrd L9UDuRhdfENWt6EOra+5a5KP8UwKr/Q= -----END CERTIFICATE-----Generated at Tue Sep 22 07:02:12 2026 by rpki-client