$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bb9fd38b-3313-32b0-8320-d6ad7b76be77.roa File: bb9fd38b-3313-32b0-8320-d6ad7b76be77.roa (raw, json) Hash identifier: Er1UyYOunrgMTqGPqe5LY2RnJKQ9pIFGPP9ljPapcaY= Subject key identifier: DE:94:DE:8E:54:54:EC:A7:30:92:76:90:4A:2C:60:FE:FB:8E:2A:19 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584EA7926FACEAA82316294EB7E0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bb9fd38b-3313-32b0-8320-d6ad7b76be77.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 25668 IP address blocks: 64.114.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:6f:ac:ea:a8:23:16:29:4e:b7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2d245b96-2069-4b3c-bbba-23f368a67ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:38:77:80:a1:b1:49:8e:4d:8f:3b:09:7b:ff: 2c:71:01:8c:41:6f:4e:4a:a0:8b:53:df:d0:9d:46: f4:35:48:44:7e:8f:dc:2a:fd:6b:6f:66:f9:dd:4b: da:06:79:c5:b7:5d:70:9f:ff:8e:e5:f0:3f:5a:8e: 60:52:27:47:8f:11:39:90:b3:58:aa:23:3a:8a:26: 30:ec:40:2d:5e:76:fc:73:18:4e:58:4d:97:6c:75: 52:df:18:f9:bc:11:17:61:03:b7:97:90:21:c4:ab: 6f:59:2c:40:9f:4a:8e:f8:f2:d5:bc:a0:1b:a3:04: 46:04:b8:46:7b:33:04:3d:22:09:ae:1f:71:00:88: 0b:6e:0f:a1:8c:62:42:3e:8f:72:4d:4f:f6:78:22: 6f:b0:09:f6:24:1c:1c:22:62:e8:e5:6c:f5:fd:e0: d4:8e:e0:2a:5a:0b:06:0c:77:45:36:e0:4f:b6:f8: 98:1e:21:cf:48:5f:ee:cf:46:db:e3:ee:50:73:9e: 05:14:78:8e:ba:f0:ac:68:1d:6f:4c:7a:18:f9:0c: df:b9:97:04:04:04:d2:9f:81:d2:87:44:6a:94:64: 83:40:b3:3f:bd:91:0c:cc:55:18:8a:ba:72:57:23: 35:d8:96:b0:79:41:a7:be:5c:99:71:ca:f8:69:39: f5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:94:DE:8E:54:54:EC:A7:30:92:76:90:4A:2C:60:FE:FB:8E:2A:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bb9fd38b-3313-32b0-8320-d6ad7b76be77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 64.114.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:d8:b3:1d:9f:69:eb:67:8a:73:d9:74:26:2a:d3:c4:88:f4: 07:62:dd:10:14:7d:05:a5:03:73:a0:4e:c6:fc:e4:d7:6b:e0: a9:92:bc:c9:8d:3c:02:44:56:09:4b:8a:f8:c3:e5:b2:03:e4: 44:4c:c4:10:10:85:47:15:e9:e4:f3:9d:bb:51:9c:27:14:5b: 36:51:cc:02:a2:96:2a:60:23:d1:2f:45:c2:fb:04:b1:b9:0f: 56:b1:24:b0:05:cd:6a:f9:aa:c5:52:62:6a:c1:dc:09:eb:59: e5:21:7d:b7:9d:cc:82:e8:03:19:cd:06:75:b0:9b:8c:66:df: fc:10:dd:73:09:06:92:8e:2e:8f:77:28:29:8a:b6:63:40:38: ca:c8:df:e3:d3:f1:83:42:7d:d3:17:80:71:31:ed:e0:a9:9f: 29:65:69:0d:4d:6e:73:ba:9a:dd:82:01:cc:50:16:b8:26:74: 6f:07:3d:90:c6:fa:bf:a5:78:cc:31:ed:30:4b:cb:9a:5f:6f: 66:9f:3a:47:c5:3c:5f:c7:8b:d8:a6:04:ad:e6:3a:5d:5c:f6: d9:51:e7:86:91:f6:2b:10:59:5d:f7:cd:d7:69:bf:a4:5b:3b: 5f:62:7c:22:c2:23:ec:a8:dc:b2:03:e8:89:f4:b1:e5:74:3f: 7b:51:14:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkm+s6qgjFilOt+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MmQyNDViOTYtMjA2OS00YjNjLWJiYmEtMjNmMzY4YTY3YWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zh3gKGxSY5NjzsJe/8scQGMQW9OSqCLU9/Q nUb0NUhEfo/cKv1rb2b53UvaBnnFt11wn/+O5fA/Wo5gUidHjxE5kLNYqiM6iiYw 7EAtXnb8cxhOWE2XbHVS3xj5vBEXYQO3l5AhxKtvWSxAn0qO+PLVvKAbowRGBLhG ezMEPSIJrh9xAIgLbg+hjGJCPo9yTU/2eCJvsAn2JBwcImLo5Wz1/eDUjuAqWgsG DHdFNuBPtviYHiHPSF/uz0bb4+5Qc54FFHiOuvCsaB1vTHoY+QzfuZcEBATSn4HS h0RqlGSDQLM/vZEMzFUYirpyVyM12JaweUGnvlyZccr4aTn1UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6U3o5UVOynMJJ2kEosYP77jioZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYmI5ZmQzOGItMzMxMy0z MmIwLTgzMjAtZDZhZDdiNzZiZTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQHJUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjYsx2faetninPZdCYq08SI9Adi3RAUfQWlA3OgTsb85Ndr4KmSvMmN PAJEVglLivjD5bID5ERMxBAQhUcV6eTznbtRnCcUWzZRzAKilipgI9EvRcL7BLG5 D1axJLAFzWr5qsVSYmrB3AnrWeUhfbedzILoAxnNBnWwm4xm3/wQ3XMJBpKOLo93 KCmKtmNAOMrI3+PT8YNCfdMXgHEx7eCpnyllaQ1NbnO6mt2CAcxQFrgmdG8HPZDG +r+leMwx7TBLy5pfb2afOkfFPF/Hi9imBK3mOl1c9tlR54aR9isQWV33zddpv6Rb O19ifCLCI+yo3LID6In0seV0P3tRFDc= -----END CERTIFICATE-----Generated at Wed Jul 29 05:16:28 2026 by rpki-client