$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/9b69fb41-a0aa-3c96-a31c-05de7f90e9de.roa File: 9b69fb41-a0aa-3c96-a31c-05de7f90e9de.roa (raw, json) Hash identifier: +1Ucl3y+tEmZlduPvSHLq55+NvEwxzVcGYZYwMW2xyk= Subject key identifier: D6:44:4E:44:B2:70:99:AB:DB:91:1E:72:03:F5:36:B3:37:AC:2C:11 Certificate issuer: /CN=6a38b089-4bb1-4c65-837b-853a9a3398e1 Certificate serial: 010D0C9F4328584C99670ACB024678413EAEC2C0 Authority key identifier: 61:8B:A2:DB:42:0B:DE:9C:E0:19:58:25:1E:A4:C7:E7:20:05:FD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/9b69fb41-a0aa-3c96-a31c-05de7f90e9de.roa Signing time: Wed 21 Jan 2026 14:00:38 +0000 ROA not before: Wed 21 Jan 2026 14:00:38 +0000 ROA not after: Tue 21 Apr 2026 13:00:38 +0000 asID: 5650 IP address blocks: 64.49.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/6a38b089-4bb1-4c65-837b-853a9a3398e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/6a38b089-4bb1-4c65-837b-853a9a3398e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:99:67:0a:cb:02:46:78:41:3e:ae:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a38b089-4bb1-4c65-837b-853a9a3398e1 Validity Not Before: Jan 21 14:00:38 2026 GMT Not After : Apr 21 13:00:38 2026 GMT Subject: CN=02717e9b-c034-4f86-b223-cb1016faa5ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:09:97:f1:94:cb:fa:c6:83:43:45:d5:25:11: 8b:b3:f4:85:2e:43:29:cd:5f:65:02:31:8d:31:ed: 04:08:e8:f9:f7:b2:05:97:fc:dc:84:50:03:ce:89: be:2c:f3:dd:0f:f3:43:d9:e2:a9:02:d7:b4:59:d9: ae:7d:72:f1:81:04:91:13:b5:6f:9a:5b:e5:e5:0d: 86:e9:03:cf:43:d0:05:f6:00:13:2a:58:97:ff:cd: 84:2d:14:16:a0:95:45:08:40:d8:7d:1b:fb:49:4b: e8:00:aa:cc:b9:cc:20:aa:95:00:bb:65:7a:8e:6a: 37:95:a6:c0:a1:22:0f:ae:1c:03:8f:e6:43:bf:db: f1:0d:71:2c:d7:6c:ed:9c:9d:95:3f:2e:f3:86:90: 37:22:f2:f5:fd:4f:fc:a5:fc:eb:0f:58:ed:0b:77: 3d:87:d5:b4:fa:58:52:0c:7e:94:ca:ae:e0:1c:22: da:ed:ed:ff:7a:13:05:2d:5e:c0:f3:72:cc:c3:c1: 56:ed:54:63:9d:5c:93:67:a6:07:23:c0:a0:f2:18: ab:a0:e2:1a:a8:4b:d1:15:d0:a0:e8:bc:c9:04:d9: b6:b6:2f:e7:9a:b5:c7:fb:9f:ba:bb:01:01:07:29: b7:60:f1:2a:2d:0f:9c:87:ed:4e:df:3d:19:38:34: f0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:44:4E:44:B2:70:99:AB:DB:91:1E:72:03:F5:36:B3:37:AC:2C:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/9b69fb41-a0aa-3c96-a31c-05de7f90e9de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/6a38b089-4bb1-4c65-837b-853a9a3398e1.crl X509v3 Authority Key Identifier: keyid:61:8B:A2:DB:42:0B:DE:9C:E0:19:58:25:1E:A4:C7:E7:20:05:FD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1.cer sbgp-ipAddrBlock: critical IPv4: 64.49.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:17:e8:00:cb:75:07:ca:5b:41:39:9e:0b:22:dd:b9:8a:78: 1d:63:b1:87:47:29:44:92:a3:df:80:00:b1:b7:08:31:a9:3f: 73:e6:2c:b9:1c:b2:c6:45:a3:c4:8b:bf:da:f9:17:69:40:5f: cc:06:d9:aa:25:40:81:3f:2a:fb:0c:a8:f2:f0:f5:61:da:b6: 3e:c1:0a:38:b2:74:80:99:f5:b6:c2:16:49:97:68:61:fd:22: ce:f5:f7:8b:1e:62:c1:b6:45:dc:6c:e1:00:be:6c:9c:da:8d: db:38:fd:b1:e8:58:39:6e:5b:39:7c:82:a1:6f:82:8c:d6:7a: f1:07:4b:79:4f:34:3d:f8:da:ef:32:ae:b4:91:35:fa:e3:90: da:dc:01:b1:66:b3:05:bb:43:6e:db:74:9b:92:6b:28:23:1c: 05:3f:93:8c:71:0a:02:37:25:c0:68:ae:b7:b1:5e:c5:97:43: 67:92:a2:88:21:16:a2:39:9e:6b:c9:6e:5d:c8:19:12:a7:61: 76:8c:6e:03:fd:b0:3d:e6:b2:60:a0:c7:a6:17:af:7f:15:98: 87:94:6a:d7:8d:a6:30:10:0d:e9:01:e3:e2:5d:bd:ac:c6:de: 43:cc:f3:43:d0:4f:08:9f:f0:80:b2:65:e3:03:68:4c:6b:c0: e0:6b:62:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyZZwrLAkZ4QT6uwsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmEzOGIwODktNGJiMS00YzY1LTgzN2ItODUzYTlhMzM5 OGUxMB4XDTI2MDEyMTE0MDAzOFoXDTI2MDQyMTEzMDAzOFowLzEtMCsGA1UEAxMk MDI3MTdlOWItYzAzNC00Zjg2LWIyMjMtY2IxMDE2ZmFhNWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAmX8ZTL+saDQ0XVJRGLs/SFLkMpzV9lAjGN Me0ECOj597IFl/zchFADzom+LPPdD/ND2eKpAte0WdmufXLxgQSRE7Vvmlvl5Q2G 6QPPQ9AF9gATKliX/82ELRQWoJVFCEDYfRv7SUvoAKrMucwgqpUAu2V6jmo3labA oSIPrhwDj+ZDv9vxDXEs12ztnJ2VPy7zhpA3IvL1/U/8pfzrD1jtC3c9h9W0+lhS DH6Uyq7gHCLa7e3/ehMFLV7A83LMw8FW7VRjnVyTZ6YHI8Cg8hiroOIaqEvRFdCg 6LzJBNm2ti/nmrXH+5+6uwEBBym3YPEqLQ+ch+1O3z0ZODTwIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZETkSycJmr25EecgP1NrM3rCwRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82YTM4 YjA4OS00YmIxLTRjNjUtODM3Yi04NTNhOWEzMzk4ZTEvOWI2OWZiNDEtYTBhYS0z Yzk2LWEzMWMtMDVkZTdmOTBlOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNmEzOGIwODktNGJiMS00YzY1LTgz N2ItODUzYTlhMzM5OGUxLzZhMzhiMDg5LTRiYjEtNGM2NS04MzdiLTg1M2E5YTMz OThlMS5jcmwwHwYDVR0jBBgwFoAUYYui20IL3pzgGVglHqTH5yAF/bowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82YTM4YjA4OS00YmIxLTRjNjUtODM3Yi04NTNh OWEzMzk4ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQDEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoX6ADLdQfKW0E5ngsi3bmKeB1jsYdHKUSSo9+AALG3CDGpP3PmLLkc ssZFo8SLv9r5F2lAX8wG2aolQIE/KvsMqPLw9WHatj7BCjiydICZ9bbCFkmXaGH9 Is7194seYsG2Rdxs4QC+bJzajds4/bHoWDluWzl8gqFvgozWevEHS3lPND342u8y rrSRNfrjkNrcAbFmswW7Q27bdJuSaygjHAU/k4xxCgI3JcBorrexXsWXQ2eSoogh FqI5nmvJbl3IGRKnYXaMbgP9sD3msmCgx6YXr38VmIeUateNpjAQDekB4+JdvazG 3kPM80PQTwif8ICyZeMDaExrwOBrYig= -----END CERTIFICATE-----Generated at Sun Mar 1 23:09:26 2026 by rpki-client