$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d7cffb20-68b0-3efb-aae8-136dc8e4fbc9.roa File: d7cffb20-68b0-3efb-aae8-136dc8e4fbc9.roa (raw, json) Hash identifier: VCfAjoKCDJqHMLf8IYyGvhu0qnFU3BHs+GBRBkl5Eyw= Subject key identifier: A2:A4:65:D4:8F:77:90:3C:5C:D0:12:05:6B:42:C4:DF:29:A2:15:98 Certificate issuer: /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Certificate serial: 010D0C9F4328584F348270016D902EF2B13F9000 Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d7cffb20-68b0-3efb-aae8-136dc8e4fbc9.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 14090 IP address blocks: 64.21.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:70:01:6d:90:2e:f2:b1:3f:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=0a64ef76-82a7-4f2d-86ea-a7518d0284b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e2:3a:c9:e6:97:1c:16:a5:1d:42:13:52:90: b9:f6:ae:c4:c9:33:bc:ed:a5:ef:2a:2e:5a:06:bb: 21:1d:b7:ef:80:9e:ea:97:dc:61:57:e1:10:36:ed: 3d:8d:e3:1b:ff:48:26:4e:5e:0c:95:76:00:d5:c5: 42:a9:fa:b7:d9:2a:46:1a:82:85:ec:64:6f:cd:3b: 3a:01:e2:31:ff:e4:b0:b9:36:a1:6c:7e:aa:93:f9: b3:74:65:cf:ec:b3:a2:b7:95:7b:68:41:0e:21:de: a9:a3:95:88:94:b6:b5:f9:01:12:22:99:21:8d:ca: 6b:87:5d:4e:24:6c:06:a7:d0:37:b4:73:ac:3c:12: b8:9e:a2:26:53:ce:13:dd:fb:5b:da:81:f1:75:eb: 01:f5:9b:73:bb:ff:48:10:55:4a:45:42:68:13:54: d3:f8:89:69:c5:f7:a7:66:ec:0c:45:27:5f:e6:e1: 63:e6:13:c9:7a:03:4c:f2:ad:d5:ca:bf:1e:4c:36: 9a:21:2d:eb:98:f1:d1:91:54:ea:c8:a5:82:1a:c2: 8d:86:29:63:ff:ce:50:71:c0:95:8b:dd:d7:45:12: 02:02:7e:2e:d7:20:69:81:e1:5b:d3:dd:69:5f:6a: ae:a4:9d:77:45:2b:23:9e:4d:45:70:a2:7e:f1:a0: 5a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A4:65:D4:8F:77:90:3C:5C:D0:12:05:6B:42:C4:DF:29:A2:15:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d7cffb20-68b0-3efb-aae8-136dc8e4fbc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl X509v3 Authority Key Identifier: keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer sbgp-ipAddrBlock: critical IPv4: 64.21.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:78:0a:06:cb:ca:84:c0:44:25:8e:c1:31:d6:ac:5c:c5:b2: 8e:de:55:17:4b:02:ba:57:3e:2a:5e:2f:8b:6e:13:24:42:fc: be:66:98:ee:fb:3c:c6:e6:aa:cd:40:cb:84:a8:8d:5e:e8:14: 3a:38:9f:77:d1:cd:5a:2f:ed:d6:0d:ab:97:50:63:b5:63:04: 5f:e5:38:fc:66:ce:ed:b4:c9:c4:09:52:d4:3f:42:b9:ef:07: df:97:f5:03:89:8e:68:b7:1e:66:78:03:b2:be:2f:f1:17:bd: 4d:1c:02:96:35:af:ae:5a:19:ce:6c:44:db:96:ad:04:3b:43: 66:d0:31:ac:45:11:ef:f6:4a:a0:6b:78:a9:9f:99:c6:5c:b9: ef:e1:5e:6f:53:93:b9:e3:b8:6c:5b:ab:1c:5f:66:b5:2f:90: ab:25:cd:e8:7d:d6:95:a6:a1:25:07:d5:9c:3a:31:8f:c0:a8: c3:36:f6:cc:56:1d:dc:42:e5:d9:b8:4f:c7:fe:e0:b5:7a:fc: d0:1b:79:80:3d:0b:e5:30:7c:ee:0d:b4:86:f2:6d:b5:fc:02: 1f:a0:27:64:36:f3:7b:ce:48:45:1d:aa:a1:5f:29:e2:27:b2: 04:c0:da:16:51:e6:ca:e7:0e:46:b8:d9:e9:8d:19:9a:9e:73: 37:39:bf:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80gnABbZAu8rE/kAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk ZTYxMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk MGE2NGVmNzYtODJhNy00ZjJkLTg2ZWEtYTc1MThkMDI4NGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweI6yeaXHBalHUITUpC59q7EyTO87aXvKi5a BrshHbfvgJ7ql9xhV+EQNu09jeMb/0gmTl4MlXYA1cVCqfq32SpGGoKF7GRvzTs6 AeIx/+SwuTahbH6qk/mzdGXP7LOit5V7aEEOId6po5WIlLa1+QESIpkhjcprh11O JGwGp9A3tHOsPBK4nqImU84T3ftb2oHxdesB9Ztzu/9IEFVKRUJoE1TT+Ilpxfen ZuwMRSdf5uFj5hPJegNM8q3Vyr8eTDaaIS3rmPHRkVTqyKWCGsKNhilj/85QccCV i93XRRICAn4u1yBpgeFb091pX2qupJ13RSsjnk1FcKJ+8aBaiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKkZdSPd5A8XNASBWtCxN8pohWYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3 ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvZDdjZmZiMjAtNjhiMC0z ZWZiLWFhZTgtMTM2ZGM4ZTRmYmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1 NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5 ZGQ0ZWRlNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBX5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD94CgbLyoTARCWOwTHWrFzFso7eVRdLArpXPipeL4tuEyRC/L5mmO77 PMbmqs1Ay4SojV7oFDo4n3fRzVov7dYNq5dQY7VjBF/lOPxmzu20ycQJUtQ/Qrnv B9+X9QOJjmi3HmZ4A7K+L/EXvU0cApY1r65aGc5sRNuWrQQ7Q2bQMaxFEe/2SqBr eKmfmcZcue/hXm9Tk7njuGxbqxxfZrUvkKslzeh91pWmoSUH1Zw6MY/AqMM29sxW HdxC5dm4T8f+4LV6/NAbeYA9C+UwfO4NtIbybbX8Ah+gJ2Q283vOSEUdqqFfKeIn sgTA2hZR5srnDka42emNGZqeczc5v1g= -----END CERTIFICATE-----Generated at Mon Sep 21 20:16:37 2026 by rpki-client