$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8d6a95de-8e8e-3a12-af10-5b6e13ed87db.roa File: 8d6a95de-8e8e-3a12-af10-5b6e13ed87db.roa (raw, json) Hash identifier: TMrMqa4Zhhj0uelDX+GPWxRum8RyYLh6A5N3dTXy8fE= Subject key identifier: 53:A7:54:71:72:95:E8:94:69:9D:54:56:B4:91:BE:05:64:6F:65:59 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584CCA41E9A0D8ABA2060811CA40 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8d6a95de-8e8e-3a12-af10-5b6e13ed87db.roa Signing time: Sun 08 Feb 2026 02:00:32 +0000 ROA not before: Sun 08 Feb 2026 02:00:32 +0000 ROA not after: Sat 09 May 2026 01:00:32 +0000 asID: 13414 IP address blocks: 64.63.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ca:41:e9:a0:d8:ab:a2:06:08:11:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Feb 8 02:00:32 2026 GMT Not After : May 9 01:00:32 2026 GMT Subject: CN=08ac72db-70a4-4730-9c07-4865184fab14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e5:77:e3:0b:0b:55:c6:51:03:90:6d:08:8e: fc:df:6c:ca:6f:ab:00:33:85:27:f7:60:32:2f:48: 24:36:80:57:2b:15:aa:8f:77:ed:6c:dc:a1:85:89: 1a:1f:0c:8f:0a:e0:69:f2:d1:49:0c:83:0f:03:07: 62:5c:5a:9a:cc:1f:6a:a6:de:9c:67:26:5e:15:fd: fc:5a:be:73:5d:64:1c:f5:7e:48:af:06:fb:e5:dd: 93:3e:b6:1e:7a:42:14:71:53:f8:cb:51:22:8a:64: f6:88:57:87:27:28:0e:6c:9d:9d:3c:ae:00:56:2d: c8:32:a5:75:40:88:1e:3a:0a:5c:8e:2f:29:b2:bc: 4c:86:64:82:2b:7c:73:1c:2b:10:8b:4f:7a:4e:6c: 0b:cc:93:bc:c1:1d:97:a0:3f:25:7b:96:b4:cc:11: d1:74:f5:91:12:ff:99:68:87:e9:5f:a0:f3:e9:3e: 83:35:2b:f5:ec:e0:ca:56:08:8e:ad:14:07:66:37: 4b:d8:ee:b5:21:07:5c:be:a3:1d:6b:ec:1c:8b:cc: f1:1a:12:02:fd:b0:42:f7:77:8f:17:e0:09:45:f9: d1:cb:2b:31:1e:8b:43:59:79:4b:d6:7e:83:f7:53: 29:51:ed:5f:4c:5c:f6:f5:ef:3f:20:06:30:28:86: b3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A7:54:71:72:95:E8:94:69:9D:54:56:B4:91:BE:05:64:6F:65:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8d6a95de-8e8e-3a12-af10-5b6e13ed87db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 64.63.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:39:2c:27:a6:05:69:35:2d:c5:5f:36:0c:de:c8:d8:a5:4e: 5c:45:fe:65:75:eb:11:b9:ab:57:9e:56:d4:b1:15:d8:50:63: 9b:6d:72:7b:c4:4d:55:8f:39:04:4b:79:bb:f4:29:e7:b2:dc: f6:58:c1:9d:e1:99:f5:20:bc:7e:1c:75:c2:ce:6a:c6:4a:83: b6:3c:07:ef:1d:22:f2:d8:68:37:c4:6c:ea:80:ea:51:c5:af: 4c:b1:ec:cb:a4:70:0f:36:aa:0c:a3:35:dd:b6:be:12:8e:47: 01:ae:fa:a4:fd:b8:52:d0:44:f0:02:77:7e:7e:a6:12:f4:0b: 3b:50:ca:d0:71:fb:0e:6f:36:b4:bb:17:dc:8b:0f:b8:68:2a: 41:e4:12:6d:5a:9f:46:15:b9:35:32:f1:03:0a:77:67:64:2c: 33:05:dd:92:f9:ed:5a:ab:6b:41:27:d2:66:fb:ef:ec:89:d7: 18:01:ab:7d:d1:ed:a5:99:2e:fd:43:c7:bb:d2:df:f3:7d:e4: f3:cb:17:8f:71:89:cb:b5:d7:36:ae:7a:af:d4:3e:7d:d6:4d: d1:33:97:bb:58:7a:7d:bc:bf:69:f2:88:7a:b3:2f:fd:a5:84: 0f:91:61:a4:30:9b:53:0e:46:d2:1f:05:c5:4b:86:64:ac:70: 80:7f:be:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzKQemg2KuiBggRykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDIwODAyMDAzMloXDTI2MDUwOTAxMDAzMlowLzEtMCsGA1UEAxMk MDhhYzcyZGItNzBhNC00NzMwLTljMDctNDg2NTE4NGZhYjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeV34wsLVcZRA5BtCI7832zKb6sAM4Un92Ay L0gkNoBXKxWqj3ftbNyhhYkaHwyPCuBp8tFJDIMPAwdiXFqazB9qpt6cZyZeFf38 Wr5zXWQc9X5Irwb75d2TPrYeekIUcVP4y1EiimT2iFeHJygObJ2dPK4AVi3IMqV1 QIgeOgpcji8psrxMhmSCK3xzHCsQi096TmwLzJO8wR2XoD8le5a0zBHRdPWREv+Z aIfpX6Dz6T6DNSv17ODKVgiOrRQHZjdL2O61IQdcvqMda+wci8zxGhIC/bBC93eP F+AJRfnRyysxHotDWXlL1n6D91MpUe1fTFz29e8/IAYwKIazIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOnVHFyleiUaZ1UVrSRvgVkb2VZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvOGQ2YTk1ZGUtOGU4ZS0z YTEyLWFmMTAtNWI2ZTEzZWQ4N2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACM5LCemBWk1LcVfNgzeyNilTlxF/mV16xG5q1eeVtSxFdhQY5ttcnvE TVWPOQRLebv0Keey3PZYwZ3hmfUgvH4cdcLOasZKg7Y8B+8dIvLYaDfEbOqA6lHF r0yx7MukcA82qgyjNd22vhKORwGu+qT9uFLQRPACd35+phL0CztQytBx+w5vNrS7 F9yLD7hoKkHkEm1an0YVuTUy8QMKd2dkLDMF3ZL57Vqra0En0mb77+yJ1xgBq33R 7aWZLv1Dx7vS3/N95PPLF49xicu11zaueq/UPn3WTdEzl7tYen28v2nyiHqzL/2l hA+RYaQwm1MORtIfBcVLhmSscIB/vjo= -----END CERTIFICATE-----Generated at Mon Mar 2 11:00:04 2026 by rpki-client