$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a6bfa668-d2c3-31c3-8e75-884e4fda29b4.roa File: a6bfa668-d2c3-31c3-8e75-884e4fda29b4.roa (raw, json) Hash identifier: XB78UY+ttykfO6aGI23dITOV7cAIZmJ3Fh5gX1kte9g= Subject key identifier: 66:59:1B:3D:41:3E:0F:A2:9A:7B:BC:55:8C:4E:A8:8D:02:88:3F:ED Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584F1467A996D22C14088B849440 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a6bfa668-d2c3-31c3-8e75-884e4fda29b4.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 32298 IP address blocks: 64.255.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:a9:96:d2:2c:14:08:8b:84:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=171ce207-0b6b-450b-b25b-747a827579c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:27:7d:75:c2:ae:e4:28:1b:33:fc:0f:67:88: b1:c4:98:db:d6:17:03:35:9b:ea:37:e5:93:ca:a5: 8d:d2:86:88:e6:63:7c:88:22:05:f5:03:8b:a2:17: d8:2d:fb:91:b1:ab:16:0f:44:53:71:cc:ad:90:11: f0:30:2e:16:9c:dc:ee:0a:5f:9f:38:9b:66:ba:c6: 0b:53:69:67:db:10:9f:bc:a6:5d:76:4a:a0:72:0a: 73:bb:76:75:40:81:0f:a2:a8:f6:51:d4:b8:1a:bb: bd:a9:4f:35:a0:aa:a7:44:26:a9:e6:a5:43:64:90: 5a:2b:b6:8e:eb:0f:56:15:a6:93:67:7b:33:74:b0: 51:b4:50:d8:88:06:4c:a7:0f:ae:c6:1d:32:16:2a: b3:23:49:74:99:c0:cc:eb:8c:8b:78:dc:eb:2f:16: b1:56:5e:e5:90:02:56:8f:1f:25:05:51:a0:7a:5a: a1:39:c7:9f:e0:ae:d9:7f:fe:03:b5:32:4b:66:b3: 1c:b1:19:4e:0b:c3:30:0f:20:26:3b:53:2f:5f:40: 11:23:98:61:f3:b4:51:07:89:a3:38:1c:01:93:a0: 01:e9:83:0a:93:f3:19:4e:29:e0:a0:25:95:8d:65: 2b:e0:ff:31:0c:e2:cf:71:68:51:6a:ef:0b:cb:7f: 33:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:59:1B:3D:41:3E:0F:A2:9A:7B:BC:55:8C:4E:A8:8D:02:88:3F:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a6bfa668-d2c3-31c3-8e75-884e4fda29b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 64.255.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:cf:86:fe:7c:7c:5a:58:19:fe:48:81:35:54:4d:9c:4d:07: 15:fb:26:1b:c8:42:1f:f5:75:2a:ff:f6:86:5b:25:e7:a7:db: 34:ad:54:05:ad:40:ce:da:49:14:da:a7:13:aa:fb:57:17:ae: f9:aa:d8:5b:f8:1c:e8:00:2c:fa:84:17:7d:24:38:e8:de:11: 05:fe:c2:64:a6:12:b5:55:b7:c5:fe:e7:f3:ed:0b:44:5c:b4: f1:6d:98:84:53:5a:91:38:6f:d1:b1:c1:a9:61:f1:c3:90:ba: ee:ea:1a:b5:f9:3c:af:aa:77:79:71:0f:2d:0c:94:8b:ad:86: bc:ea:48:46:bb:75:00:9d:64:73:68:a0:a9:1a:91:60:b9:bf: 70:cc:6c:2d:ba:44:ca:c8:0b:51:b4:34:3f:b2:c6:ce:32:60: 31:82:d5:ca:59:39:11:74:b1:63:d4:57:ed:bc:28:fd:4f:18: 5d:88:a4:75:07:21:e3:58:ea:73:0e:c4:6a:57:b0:5a:5e:dd: 0b:49:20:a1:21:43:bb:0a:44:8c:ff:ca:7d:48:0e:a3:4c:3d: 50:8c:df:90:e2:c1:d3:6b:89:61:a0:29:2f:9e:37:9d:e7:06: f7:c7:40:71:29:c4:f1:05:58:8c:81:93:76:ca:2a:4f:08:0d: 9a:d4:ee:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ6mW0iwUCIuElEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk MTcxY2UyMDctMGI2Yi00NTBiLWIyNWItNzQ3YTgyNzU3OWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCd9dcKu5CgbM/wPZ4ixxJjb1hcDNZvqN+WT yqWN0oaI5mN8iCIF9QOLohfYLfuRsasWD0RTccytkBHwMC4WnNzuCl+fOJtmusYL U2ln2xCfvKZddkqgcgpzu3Z1QIEPoqj2UdS4Gru9qU81oKqnRCap5qVDZJBaK7aO 6w9WFaaTZ3szdLBRtFDYiAZMpw+uxh0yFiqzI0l0mcDM64yLeNzrLxaxVl7lkAJW jx8lBVGgelqhOcef4K7Zf/4DtTJLZrMcsRlOC8MwDyAmO1MvX0ARI5hh87RRB4mj OBwBk6AB6YMKk/MZTingoCWVjWUr4P8xDOLPcWhRau8Ly38z+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZZGz1BPg+imnu8VYxOqI0CiD/tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvYTZiZmE2NjgtZDJjMy0z MWMzLThlNzUtODg0ZTRmZGEyOWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQP/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHPhv58fFpYGf5IgTVUTZxNBxX7JhvIQh/1dSr/9oZbJeen2zStVAWt QM7aSRTapxOq+1cXrvmq2Fv4HOgALPqEF30kOOjeEQX+wmSmErVVt8X+5/PtC0Rc tPFtmIRTWpE4b9Gxwalh8cOQuu7qGrX5PK+qd3lxDy0MlIuthrzqSEa7dQCdZHNo oKkakWC5v3DMbC26RMrIC1G0ND+yxs4yYDGC1cpZORF0sWPUV+28KP1PGF2IpHUH IeNY6nMOxGpXsFpe3QtJIKEhQ7sKRIz/yn1IDqNMPVCM35DiwdNriWGgKS+eN53n BvfHQHEpxPEFWIyBk3bKKk8IDZrU7sA= -----END CERTIFICATE-----Generated at Fri Sep 25 04:53:45 2026 by rpki-client