$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/da47acb3-62b2-36c6-8314-c3449c4ff7f3.roa File: da47acb3-62b2-36c6-8314-c3449c4ff7f3.roa (raw, json) Hash identifier: O5Ju7fFtzpgh5nGBnGS3TzJTedzP1T3FIqeIcpTfJ4o= Subject key identifier: 40:7B:7B:BE:45:F8:BB:EE:14:47:54:6D:98:9E:ED:C7:21:58:08:67 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584F1B6240A3CA8D9B3352B6C680 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/da47acb3-62b2-36c6-8314-c3449c4ff7f3.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 11426 IP address blocks: 64.20.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:40:a3:ca:8d:9b:33:52:b6:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=894cde93-7410-4b23-835f-8eef6b327deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4c:e2:7b:14:e0:c0:50:2f:26:5f:d8:b5:66: f4:88:be:73:10:b6:d0:ca:69:f7:9c:11:cb:3d:b7: 16:e5:e3:16:38:60:1d:05:56:8e:60:d5:ed:f1:18: 8d:65:ff:b6:d3:61:39:c2:cc:de:0b:33:b3:45:63: fe:7f:bf:0d:24:74:9f:45:2d:ef:e6:6b:ac:2c:a9: 1b:f8:87:0b:98:a9:2c:b8:22:37:b0:f3:42:5a:0c: 24:fa:f8:8d:c8:49:9e:ba:12:b2:3b:ab:4d:09:67: cf:76:a3:f6:08:48:25:29:bd:8b:34:25:65:d9:10: f6:1d:58:b2:c1:94:aa:04:85:1e:0d:ba:0a:a1:49: dd:e7:f6:fa:96:d1:dd:0e:80:41:5d:85:7a:a8:7d: 34:25:e2:91:bc:0e:8f:16:27:39:9f:24:23:24:45: 6a:8b:ed:33:67:96:b2:4f:60:c5:1f:bc:ae:35:06: 84:f7:16:b8:1e:05:32:d4:bb:31:93:32:42:43:59: 4b:25:e8:53:d7:40:98:23:51:c9:da:e8:2d:13:39: 5e:69:a9:29:14:10:1b:c2:c8:41:44:0f:21:ed:e0: 96:06:27:57:c7:39:e4:5b:46:9e:eb:ec:08:2a:e0: 6b:fa:21:c1:79:36:69:2c:ed:c4:ab:3c:e1:36:3f: c4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7B:7B:BE:45:F8:BB:EE:14:47:54:6D:98:9E:ED:C7:21:58:08:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/da47acb3-62b2-36c6-8314-c3449c4ff7f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 64.20.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:c9:1d:f0:fa:c8:b7:b9:d9:77:fd:a5:86:6f:0c:4f:cb:a2: 45:8d:af:68:54:f5:e0:40:2a:89:d7:94:27:42:05:a0:e4:85: 6a:2d:b9:2a:46:2d:22:b9:cf:70:a7:70:37:ec:cf:95:c0:ef: 7c:f5:26:23:02:d6:1e:5a:ca:48:d0:49:c3:80:b4:ad:de:71: 9a:d4:52:20:8f:19:c1:b8:46:c7:c7:a8:ca:44:2f:ae:4d:dc: 03:34:03:37:86:4a:70:25:7c:b3:e0:91:d4:35:da:64:44:22: e8:10:35:4a:b5:93:87:fa:11:57:3d:03:a6:c3:5c:50:d6:4d: 91:f0:09:b0:14:22:44:2d:f1:8a:e3:36:92:62:ef:dc:c4:92: 6c:f5:74:d8:84:1d:b5:4e:f8:04:52:bb:e9:90:77:f0:32:73: 39:f3:7e:f8:c3:5a:0a:05:88:49:99:01:dd:5e:6f:29:a4:60: d6:9a:5a:88:1c:90:f3:93:73:08:97:d1:ef:f9:7f:9a:1e:46: 99:cb:c6:19:c5:4d:e6:28:7e:a0:71:44:31:42:16:f0:e0:77: 88:b4:a2:ce:80:54:bb:c3:2e:bf:8f:ee:5e:c8:9d:d7:77:4c: d9:1b:32:6a:30:95:ee:94:9b:08:60:03:27:7b:74:be:5c:7a: 9c:e2:04:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkCjyo2bM1K2xoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk ODk0Y2RlOTMtNzQxMC00YjIzLTgzNWYtOGVlZjZiMzI3ZGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskziexTgwFAvJl/YtWb0iL5zELbQymn3nBHL PbcW5eMWOGAdBVaOYNXt8RiNZf+202E5wszeCzOzRWP+f78NJHSfRS3v5musLKkb +IcLmKksuCI3sPNCWgwk+viNyEmeuhKyO6tNCWfPdqP2CEglKb2LNCVl2RD2HViy wZSqBIUeDboKoUnd5/b6ltHdDoBBXYV6qH00JeKRvA6PFic5nyQjJEVqi+0zZ5ay T2DFH7yuNQaE9xa4HgUy1LsxkzJCQ1lLJehT10CYI1HJ2ugtEzleaakpFBAbwshB RA8h7eCWBidXxznkW0ae6+wIKuBr+iHBeTZpLO3EqzzhNj/EOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEB7e75F+LvuFEdUbZie7cchWAhnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvZGE0N2FjYjMtNjJiMi0z NmM2LTgzMTQtYzM0NDljNGZmN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBTRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbJHfD6yLe52Xf9pYZvDE/LokWNr2hU9eBAKonXlCdCBaDkhWotuSpG LSK5z3CncDfsz5XA73z1JiMC1h5aykjQScOAtK3ecZrUUiCPGcG4RsfHqMpEL65N 3AM0AzeGSnAlfLPgkdQ12mREIugQNUq1k4f6EVc9A6bDXFDWTZHwCbAUIkQt8Yrj NpJi79zEkmz1dNiEHbVO+ARSu+mQd/AycznzfvjDWgoFiEmZAd1ebymkYNaaWogc kPOTcwiX0e/5f5oeRpnLxhnFTeYofqBxRDFCFvDgd4i0os6AVLvDLr+P7l7Indd3 TNkbMmowle6UmwhgAyd7dL5cepziBBM= -----END CERTIFICATE-----Generated at Mon Sep 21 20:13:35 2026 by rpki-client