$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/125998d1-5641-3c1f-8af4-69cb241cad63.roa File: 125998d1-5641-3c1f-8af4-69cb241cad63.roa (raw, json) Hash identifier: qJ5mlX/VqrA+xHk5tAFpA9HlTY4eWka26dsmHj7p1Aw= Subject key identifier: 72:2B:2B:C5:E7:A0:C2:B1:B3:B2:F7:FD:53:F0:15:85:98:8B:A4:B5 Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Certificate serial: 010D0C9F4328584DE2B5DB08F3A0A663A2D8EDA0 Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/125998d1-5641-3c1f-8af4-69cb241cad63.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 393336 IP address blocks: 64.40.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:db:08:f3:a0:a6:63:a2:d8:ed:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=da05d8b5-c24a-4910-bb13-5e74343c2334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1b:49:d9:e2:d0:38:66:f8:77:f6:ab:88:a3: 67:06:cc:c3:91:63:c3:7b:75:e1:2e:28:48:33:7e: b1:68:55:61:a3:cb:dd:cb:0f:15:34:e3:5f:35:39: ff:b4:20:fa:31:f4:56:76:a7:92:7d:60:79:5d:1d: 36:23:9a:da:9a:05:c3:93:73:a5:d9:0e:b0:95:bf: ac:10:47:9b:20:22:dc:04:bf:26:87:8e:17:a8:de: 82:52:19:5f:f6:16:37:e7:e5:94:d2:61:11:1c:11: 37:62:da:d1:90:24:40:2f:33:ed:50:bd:99:d7:73: 46:73:90:99:fb:e4:fc:cd:f8:cb:bf:bd:01:2d:b6: f7:ce:cc:66:46:5b:97:8f:c8:44:26:e4:c4:2e:6c: 38:8e:d4:b4:d1:d1:f1:9a:0f:b7:38:14:e0:44:22: 8c:d6:98:f5:f5:ac:07:de:8f:80:aa:84:3e:32:96: fe:07:b7:26:65:90:69:cd:73:04:03:a4:bf:df:db: 27:02:dc:fc:74:5a:e0:c8:77:e8:27:1c:ec:bb:0e: b6:82:2d:39:be:ab:39:aa:94:78:be:b9:60:8a:48: 5d:ea:20:be:1c:92:e3:c1:3e:a1:1f:e9:f8:20:67: a0:22:23:aa:07:cb:db:95:8c:93:d9:4a:f2:92:31: 8e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:2B:2B:C5:E7:A0:C2:B1:B3:B2:F7:FD:53:F0:15:85:98:8B:A4:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/125998d1-5641-3c1f-8af4-69cb241cad63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl X509v3 Authority Key Identifier: keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer sbgp-ipAddrBlock: critical IPv4: 64.40.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:39:3a:c9:c5:4b:99:81:87:b2:14:91:d3:af:70:c4:35:e3: 58:b8:cd:c0:2e:3e:99:59:a8:b2:82:0a:99:3d:72:77:17:9c: c5:bc:25:f1:38:46:c0:1b:db:50:00:9a:6b:6a:3c:eb:f7:04: cc:32:9e:01:f5:96:82:b9:09:41:d7:1a:8f:44:74:a8:1d:6b: 3d:2a:8e:0e:27:d3:71:a6:ac:72:31:6e:9f:81:86:d6:e8:51: 8f:1d:d7:de:32:22:0c:16:cb:66:f2:48:eb:e8:a7:30:97:1c: 16:55:a5:44:a3:57:5b:2d:ac:be:94:73:33:23:4f:ce:79:57: 98:2b:ca:f1:e8:cf:69:bc:da:a2:72:35:62:12:4b:40:eb:bd: 8f:f4:6d:08:37:40:af:80:7b:d2:66:8c:91:97:d3:2b:76:04: 7d:a3:36:72:05:38:88:8d:0e:59:09:12:22:dc:cf:12:f5:85: 34:f3:63:09:86:2a:01:c8:79:7c:81:e9:43:45:72:c7:29:1c: b3:b2:b5:fb:71:5f:23:42:5f:a1:b8:a1:1b:9a:49:63:9a:10: a1:0f:e5:13:01:78:66:bf:9e:52:11:34:89:6d:5f:b5:d9:58: 42:ba:21:c7:cd:38:fc:4b:13:2e:c5:6e:16:c9:86:1e:32:1e: 14:65:9a:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3itdsI86CmY6LY7aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0 ZWE5MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk ZGEwNWQ4YjUtYzI0YS00OTEwLWJiMTMtNWU3NDM0M2MyMzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBtJ2eLQOGb4d/ariKNnBszDkWPDe3XhLihI M36xaFVho8vdyw8VNONfNTn/tCD6MfRWdqeSfWB5XR02I5ramgXDk3Ol2Q6wlb+s EEebICLcBL8mh44XqN6CUhlf9hY35+WU0mERHBE3YtrRkCRALzPtUL2Z13NGc5CZ ++T8zfjLv70BLbb3zsxmRluXj8hEJuTELmw4jtS00dHxmg+3OBTgRCKM1pj19awH 3o+AqoQ+Mpb+B7cmZZBpzXMEA6S/39snAtz8dFrgyHfoJxzsuw62gi05vqs5qpR4 vrlgikhd6iC+HJLjwT6hH+n4IGegIiOqB8vblYyT2UrykjGO1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIrK8XnoMKxs7L3/VPwFYWYi6S1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvMTI1OTk4ZDEtNTY0MS0z YzFmLThhZjQtNjljYjI0MWNhZDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3 MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5 ZGI3YzRlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCgYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABo5OsnFS5mBh7IUkdOvcMQ141i4zcAuPplZqLKCCpk9cncXnMW8JfE4 RsAb21AAmmtqPOv3BMwyngH1loK5CUHXGo9EdKgdaz0qjg4n03GmrHIxbp+Bhtbo UY8d194yIgwWy2bySOvopzCXHBZVpUSjV1strL6UczMjT855V5gryvHoz2m82qJy NWISS0DrvY/0bQg3QK+Ae9JmjJGX0yt2BH2jNnIFOIiNDlkJEiLczxL1hTTzYwmG KgHIeXyB6UNFcscpHLOytftxXyNCX6G4oRuaSWOaEKEP5RMBeGa/nlIRNIltX7XZ WEK6IcfNOPxLEy7FbhbJhh4yHhRlmnc= -----END CERTIFICATE-----Generated at Sat Jun 13 23:01:53 2026 by rpki-client