$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/d7a5f85b-4598-32d1-b8cc-d3f40d50fed2.roa File: d7a5f85b-4598-32d1-b8cc-d3f40d50fed2.roa (raw, json) Hash identifier: iGF+V2IOTr0Tp/DU7ayCGS8Xo52KEnVzQ7AicEGt0rg= Subject key identifier: 91:D6:58:3A:F9:FD:2D:AF:E3:8D:3D:D9:08:13:30:43:1D:EB:A0:48 Certificate issuer: /CN=20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e Certificate serial: 010D0C9F4328584DF4DB5C524D137661EA2A1940 Authority key identifier: B3:9D:C3:8F:82:1E:92:58:6B:AC:7E:60:33:85:13:34:51:93:A3:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/d7a5f85b-4598-32d1-b8cc-d3f40d50fed2.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 21790 IP address blocks: 64.190.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:5c:52:4d:13:76:61:ea:2a:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=a0a82013-5bbf-4ea6-aeb0-9a2a37d1630d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ce:d5:f0:34:e8:16:02:f9:61:7e:cc:36:6f: 2d:fa:53:ea:c1:a4:46:85:97:f5:2d:95:9d:99:5e: de:d5:a9:eb:d1:ae:bf:03:64:d7:d8:c7:c5:d9:39: b7:76:35:ef:e1:21:8b:44:45:50:48:21:75:ec:26: 6b:69:4a:ed:63:c8:7e:81:4a:ac:64:13:46:b8:b8: e9:04:a1:22:4a:9f:73:8c:87:b0:84:4e:59:50:a3: cc:59:c2:96:4c:53:16:d5:9d:00:38:44:76:a2:17: e7:cf:e1:eb:f9:ed:df:6c:9b:1d:81:5c:3d:b2:95: 02:d4:7f:37:18:46:b2:7a:38:79:a4:ed:74:a5:cc: cc:25:68:87:68:90:54:af:92:8d:6d:3a:85:0a:4d: 84:7c:e3:b9:bb:bd:36:bd:e9:ad:62:16:a0:11:c7: e0:47:6e:bb:e1:70:bd:d6:47:1a:9f:db:2a:d4:d8: 4c:39:e1:36:d2:d2:9a:26:97:f5:4e:c5:6d:80:92: 0e:eb:20:4c:ba:96:7e:85:4b:63:0c:03:0b:90:25: 79:ff:74:4a:1d:63:45:70:09:ca:e4:7d:04:8d:2a: 4d:6d:07:c7:a3:6a:e9:ba:00:60:e1:5b:45:4b:d0: 71:54:13:9c:a8:b7:5a:88:fc:90:23:d4:8f:b3:1c: ca:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D6:58:3A:F9:FD:2D:AF:E3:8D:3D:D9:08:13:30:43:1D:EB:A0:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/d7a5f85b-4598-32d1-b8cc-d3f40d50fed2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.crl X509v3 Authority Key Identifier: keyid:B3:9D:C3:8F:82:1E:92:58:6B:AC:7E:60:33:85:13:34:51:93:A3:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer sbgp-ipAddrBlock: critical IPv4: 64.190.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:e1:df:9a:39:05:93:85:c3:91:13:4f:ce:c3:73:55:b3:22: 18:60:8e:73:95:f4:e0:1b:70:19:68:a1:e8:97:15:ac:77:0a: eb:cd:99:f9:a5:14:75:f9:22:91:65:3f:a8:fb:74:56:29:3a: 19:bb:d4:1c:fb:7a:17:79:8c:4e:c4:92:bd:0b:bc:ce:98:02: 33:10:ef:82:9c:11:cf:1a:56:82:2e:9a:6f:12:b1:ca:b3:72: 58:f9:70:de:78:68:2f:8f:e3:f9:52:83:24:fa:75:b9:e6:9d: d5:62:6d:19:36:08:4f:39:f1:42:81:40:f8:03:9d:41:84:4a: 21:7e:bf:95:3e:a6:06:d9:24:34:46:85:3a:42:66:23:f0:6d: 7b:22:21:48:26:8f:53:fe:ca:2b:c1:6e:af:6b:28:0a:c5:d5: 0b:43:6b:4b:59:0d:8a:fc:47:2c:bd:62:67:26:63:e9:ec:54: 92:0e:d1:b2:15:a8:0d:2e:42:9a:7a:bd:6a:86:87:55:50:96: 60:65:d1:04:06:51:0b:a6:fb:7e:8a:cd:73:1d:84:a8:1a:25: 61:f2:5f:55:97:6b:eb:ce:b3:49:57:bc:5b:8c:14:29:1a:10: 58:83:22:86:d1:69:20:1e:11:b6:e2:03:1e:66:c4:82:ac:3e: 4d:42:83:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3021xSTRN2YeoqGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBmOGJjZTYtZTMzZS00MGU4LWJmYjMtYzRiNWIyMTU5 YTdlMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk YTBhODIwMTMtNWJiZi00ZWE2LWFlYjAtOWEyYTM3ZDE2MzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc7V8DToFgL5YX7MNm8t+lPqwaRGhZf1LZWd mV7e1anr0a6/A2TX2MfF2Tm3djXv4SGLREVQSCF17CZraUrtY8h+gUqsZBNGuLjp BKEiSp9zjIewhE5ZUKPMWcKWTFMW1Z0AOER2ohfnz+Hr+e3fbJsdgVw9spUC1H83 GEayejh5pO10pczMJWiHaJBUr5KNbTqFCk2EfOO5u702vemtYhagEcfgR2674XC9 1kcan9sq1NhMOeE20tKaJpf1TsVtgJIO6yBMupZ+hUtjDAMLkCV5/3RKHWNFcAnK 5H0EjSpNbQfHo2rpugBg4VtFS9BxVBOcqLdaiPyQI9SPsxzKSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHWWDr5/S2v44092QgTMEMd66BIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMGY4 YmNlNi1lMzNlLTQwZTgtYmZiMy1jNGI1YjIxNTlhN2UvZDdhNWY4NWItNDU5OC0z MmQxLWI4Y2MtZDNmNDBkNTBmZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjBmOGJjZTYtZTMzZS00MGU4LWJm YjMtYzRiNWIyMTU5YTdlLzIwZjhiY2U2LWUzM2UtNDBlOC1iZmIzLWM0YjViMjE1 OWE3ZS5jcmwwHwYDVR0jBBgwFoAUs53Dj4IeklhrrH5gM4UTNFGTo1AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMGY4YmNlNi1lMzNlLTQwZTgtYmZiMy1jNGI1 YjIxNTlhN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL6MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADh35o5BZOFw5ETT87Dc1WzIhhgjnOV9OAbcBlooeiXFax3CuvNmfml FHX5IpFlP6j7dFYpOhm71Bz7ehd5jE7Ekr0LvM6YAjMQ74KcEc8aVoIumm8Sscqz clj5cN54aC+P4/lSgyT6dbnmndVibRk2CE858UKBQPgDnUGESiF+v5U+pgbZJDRG hTpCZiPwbXsiIUgmj1P+yivBbq9rKArF1QtDa0tZDYr8Ryy9YmcmY+nsVJIO0bIV qA0uQpp6vWqGh1VQlmBl0QQGUQum+36KzXMdhKgaJWHyX1WXa+vOs0lXvFuMFCka EFiDIobRaSAeEbbiAx5mxIKsPk1Cg0k= -----END CERTIFICATE-----Generated at Wed Jun 17 10:13:30 2026 by rpki-client