$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/df4ae81b-3b81-359e-8c36-1c826165e898.roa File: df4ae81b-3b81-359e-8c36-1c826165e898.roa (raw, json) Hash identifier: XHDnuiMpuv1Zw6W1rMGXalGrf8QOHjgH1Y9JV8Sti+w= Subject key identifier: 0D:8C:A9:39:61:12:EB:8E:04:BF:FD:0C:F6:5E:5D:00:B8:93:60:DA Certificate issuer: /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Certificate serial: 010D0C9F4328584EA787D448EAF3BDA8F1C0FA00 Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/df4ae81b-3b81-359e-8c36-1c826165e898.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20454 IP address blocks: 64.38.216.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:d4:48:ea:f3:bd:a8:f1:c0:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5bbab197-b0de-457a-983e-cb900937d731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8f:a3:e3:b4:19:7d:c1:5d:9f:9a:27:88:08: 37:45:72:8a:1e:fb:09:ff:05:62:32:4c:72:4c:a1: e0:2c:01:c6:b8:07:8c:2a:26:23:d6:b2:65:f2:06: 5c:90:3d:47:84:4f:67:65:4c:2d:46:e3:59:90:b0: 6c:8a:c4:67:be:0b:ce:29:13:62:d7:70:65:a6:64: 36:80:08:bf:9c:05:ce:91:9b:0c:fc:36:9e:48:57: 03:49:d6:78:6b:a2:8d:c9:6d:58:76:cf:bf:22:57: b8:6a:c3:6b:1e:6b:f6:4f:21:1c:30:17:f7:02:75: b5:f3:3a:de:15:64:c0:70:5b:24:dc:bb:31:fa:2c: 2b:8c:94:c2:48:24:82:b7:ab:ca:94:55:41:79:48: 57:89:be:00:24:18:1b:05:37:4e:cc:29:5b:5c:67: f6:db:bc:07:13:5d:5b:6d:67:2b:61:37:4d:9e:12: 3d:a4:45:d1:68:f5:35:d4:5c:6a:a8:2e:54:c4:18: be:69:20:79:94:cd:c0:f1:2f:cd:df:5a:2b:06:a6: 25:7f:60:94:94:a7:fd:fc:c0:0e:46:1a:c0:e3:63: 98:59:d3:99:08:5f:35:e2:ed:ed:82:ec:08:0f:81: 7e:14:9e:bf:04:9f:20:5b:54:4b:d0:07:58:16:0e: b7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:8C:A9:39:61:12:EB:8E:04:BF:FD:0C:F6:5E:5D:00:B8:93:60:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/df4ae81b-3b81-359e-8c36-1c826165e898.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl X509v3 Authority Key Identifier: keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer sbgp-ipAddrBlock: critical IPv4: 64.38.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:43:5b:11:c7:02:60:63:8f:aa:22:7f:96:f7:0b:af:c4:99: e4:04:4b:45:50:7c:37:1d:74:12:ad:59:14:88:ab:1a:dd:51: f0:e3:8c:9d:99:cf:37:42:19:e7:34:2b:fe:4f:b4:7f:da:07: 40:c6:8e:13:d0:ff:33:d1:75:2d:9e:de:b9:32:02:a4:c0:2a: 85:93:41:99:ff:6a:2a:69:13:12:c7:97:5e:5c:c2:fb:ec:1a: c3:af:50:e0:ab:a1:d0:c7:65:52:10:0c:35:e7:51:36:44:72: 4c:1b:6f:21:22:0a:da:ca:44:9e:ec:96:e0:e1:6a:ad:14:3d: a2:41:24:b4:00:5f:1c:53:55:22:dc:43:bd:d7:9d:8b:91:88: 0f:04:cf:bc:16:d4:22:59:8d:20:0d:6d:ee:bb:47:0c:c5:52: d9:ee:e5:93:c8:53:3f:a4:a6:76:68:13:43:01:78:3d:fd:5e: 1e:ce:a7:ab:49:4f:9e:0c:0f:62:e3:c0:df:30:24:8a:46:a7: b6:79:e5:e6:e8:f0:91:11:79:58:d4:b6:c8:c7:84:6e:aa:8f: b3:3a:1d:86:5d:fb:aa:73:a0:f1:1d:dc:68:5d:be:77:7f:f4: 36:00:9f:af:10:24:8a:a6:e9:4b:e8:9b:60:90:38:41:36:ec: 2c:c0:83:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh9RI6vO9qPHA+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAyMzEzZTYtNTZiZi00ZmQ4LWFlMGQtYzllMDU3ZDNi Mzk4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NWJiYWIxOTctYjBkZS00NTdhLTk4M2UtY2I5MDA5MzdkNzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4+j47QZfcFdn5oniAg3RXKKHvsJ/wViMkxy TKHgLAHGuAeMKiYj1rJl8gZckD1HhE9nZUwtRuNZkLBsisRnvgvOKRNi13BlpmQ2 gAi/nAXOkZsM/DaeSFcDSdZ4a6KNyW1Yds+/Ile4asNrHmv2TyEcMBf3AnW18zre FWTAcFsk3Lsx+iwrjJTCSCSCt6vKlFVBeUhXib4AJBgbBTdOzClbXGf227wHE11b bWcrYTdNnhI9pEXRaPU11FxqqC5UxBi+aSB5lM3A8S/N31orBqYlf2CUlKf9/MAO RhrA42OYWdOZCF814u3tguwID4F+FJ6/BJ8gW1RL0AdYFg63PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2MqTlhEuuOBL/9DPZeXQC4k2DaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIz MTNlNi01NmJmLTRmZDgtYWUwZC1jOWUwNTdkM2IzOTgvZGY0YWU4MWItM2I4MS0z NTllLThjMzYtMWM4MjYxNjVlODk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODAyMzEzZTYtNTZiZi00ZmQ4LWFl MGQtYzllMDU3ZDNiMzk4LzgwMjMxM2U2LTU2YmYtNGZkOC1hZTBkLWM5ZTA1N2Qz YjM5OC5jcmwwHwYDVR0jBBgwFoAU6Nx8ybbq227grPfqrNCHZurVu2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIzMTNlNi01NmJmLTRmZDgtYWUwZC1jOWUw NTdkM2IzOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQCbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChDWxHHAmBjj6oif5b3C6/EmeQES0VQfDcddBKtWRSIqxrdUfDjjJ2Z zzdCGec0K/5PtH/aB0DGjhPQ/zPRdS2e3rkyAqTAKoWTQZn/aippExLHl15cwvvs GsOvUOCrodDHZVIQDDXnUTZEckwbbyEiCtrKRJ7sluDhaq0UPaJBJLQAXxxTVSLc Q73XnYuRiA8Ez7wW1CJZjSANbe67RwzFUtnu5ZPIUz+kpnZoE0MBeD39Xh7Op6tJ T54MD2LjwN8wJIpGp7Z55ebo8JEReVjUtsjHhG6qj7M6HYZd+6pzoPEd3Ghdvnd/ 9DYAn68QJIqm6Uvom2CQOEE27CzAg2k= -----END CERTIFICATE-----Generated at Wed Jul 29 10:35:18 2026 by rpki-client