$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be3cd95f-5dcc-301b-8970-aa9b7b048b63.roa File: be3cd95f-5dcc-301b-8970-aa9b7b048b63.roa (raw, json) Hash identifier: cL0C6rni+AUJSaPhOoCjBOWBo0+CfXgLK4NC5ITwKEY= Subject key identifier: 23:F5:01:0B:FB:57:D2:C3:4F:1F:F7:12:98:16:34:BC:E9:26:3F:E1 Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Certificate serial: 010D0C9F4328584DD35B09A60F55A75BF6F12860 Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be3cd95f-5dcc-301b-8970-aa9b7b048b63.roa Signing time: Thu 14 May 2026 01:00:25 +0000 ROA not before: Thu 14 May 2026 01:00:25 +0000 ROA not after: Wed 12 Aug 2026 01:00:25 +0000 asID: 393336 IP address blocks: 64.40.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d3:5b:09:a6:0f:55:a7:5b:f6:f1:28:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Validity Not Before: May 14 01:00:25 2026 GMT Not After : Aug 12 01:00:25 2026 GMT Subject: CN=1d579624-8736-4568-8eae-877506814bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2c:07:21:56:04:df:54:3b:c6:9b:af:eb:41: db:ae:11:46:1b:21:60:44:32:39:47:d4:97:f8:f3: de:0f:98:99:d1:8b:5a:da:98:e5:65:9a:29:53:6a: 7c:2a:ac:6b:5b:82:59:18:f0:da:3a:96:14:76:f0: 18:ab:57:c4:12:9c:ae:f6:5b:96:80:c6:84:61:e6: f2:e6:6f:d2:18:a3:99:9c:80:2a:fc:13:d7:34:5d: e0:41:4a:04:c0:48:9f:a5:ce:11:8d:9d:5b:cc:cd: 25:4f:c7:c0:37:7a:a2:6d:18:ea:94:0a:d5:37:e2: 18:cc:21:84:07:2c:16:46:55:a5:09:19:d5:e7:a7: 8f:d9:10:06:b0:65:1f:e7:77:8c:65:98:f9:7f:31: c1:86:e4:f7:5e:59:41:b5:e0:7b:71:a4:58:63:7b: 8b:86:ac:f3:11:3f:e8:5a:fb:7b:f1:49:44:58:cc: e2:e0:41:9d:68:87:0b:88:d6:b7:7c:2a:a6:9a:2b: 7b:90:63:04:12:6e:11:5c:9e:5d:32:df:12:72:d8: b8:5d:d4:f9:0c:b9:60:29:15:0b:24:43:82:8c:79: d8:05:f2:b4:65:03:e9:0f:3e:fb:64:2d:98:61:1c: 33:7e:92:62:d6:e5:76:80:2a:77:76:22:0b:2f:ad: 55:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F5:01:0B:FB:57:D2:C3:4F:1F:F7:12:98:16:34:BC:E9:26:3F:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be3cd95f-5dcc-301b-8970-aa9b7b048b63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl X509v3 Authority Key Identifier: keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer sbgp-ipAddrBlock: critical IPv4: 64.40.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e0:ce:a0:58:b1:42:c5:f6:72:54:85:73:74:1e:34:15:0d:84: 28:13:78:e6:66:78:a5:c1:cb:1f:8c:03:5f:95:57:93:13:b8: a9:ae:11:10:f5:06:6f:b9:5f:59:25:7e:f2:fd:88:3c:9a:b1: db:59:04:3b:b3:93:d9:14:1d:6a:93:54:d4:fe:d1:2e:c3:0e: 3d:a9:cd:dd:0c:4a:bd:82:87:15:b7:d0:8e:92:38:e7:11:0b: 7b:40:1c:c4:9b:98:3d:0b:03:91:27:e4:b3:94:d6:0f:58:d6: 48:92:c3:06:62:63:ff:f3:44:db:c9:af:7c:53:9f:92:89:56: 07:e8:d5:7f:5f:3a:b6:5d:86:50:7b:fc:d8:6e:e4:3f:b9:14: c1:92:50:bd:26:aa:1c:f2:f0:d4:2d:e0:f7:a5:cb:e2:f3:d4: d9:92:08:19:9b:b5:1e:ec:7f:ea:04:07:79:89:90:f9:82:49: fc:6d:dd:4b:a5:ec:20:fd:53:86:30:f7:7f:40:a3:09:79:7b: ed:13:62:5e:5f:6b:5c:5c:a4:62:b4:e6:6f:32:c8:64:2c:60: 4b:48:ff:60:0b:d2:2d:4b:ef:8c:81:b6:1e:0e:20:57:a1:38: 42:08:8d:4d:1d:ac:a7:c0:59:18:a9:e7:af:34:4a:0d:ee:f4: a5:7a:52:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3TWwmmD1WnW/bxKGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0 ZWE5MB4XDTI2MDUxNDAxMDAyNVoXDTI2MDgxMjAxMDAyNVowLzEtMCsGA1UEAxMk MWQ1Nzk2MjQtODczNi00NTY4LThlYWUtODc3NTA2ODE0YmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkywHIVYE31Q7xpuv60HbrhFGGyFgRDI5R9SX +PPeD5iZ0Yta2pjlZZopU2p8KqxrW4JZGPDaOpYUdvAYq1fEEpyu9luWgMaEYeby 5m/SGKOZnIAq/BPXNF3gQUoEwEifpc4RjZ1bzM0lT8fAN3qibRjqlArVN+IYzCGE BywWRlWlCRnV56eP2RAGsGUf53eMZZj5fzHBhuT3XllBteB7caRYY3uLhqzzET/o Wvt78UlEWMzi4EGdaIcLiNa3fCqmmit7kGMEEm4RXJ5dMt8Scti4XdT5DLlgKRUL JEOCjHnYBfK0ZQPpDz77ZC2YYRwzfpJi1uV2gCp3diILL61VFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCP1AQv7V9LDTx/3EpgWNLzpJj/hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvYmUzY2Q5NWYtNWRjYy0z MDFiLTg5NzAtYWE5YjdiMDQ4YjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3 MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5 ZGI3YzRlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCgbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAODOoFixQsX2clSFc3QeNBUNhCgTeOZmeKXByx+MA1+VV5MTuKmuERD1 Bm+5X1klfvL9iDyasdtZBDuzk9kUHWqTVNT+0S7DDj2pzd0MSr2ChxW30I6SOOcR C3tAHMSbmD0LA5En5LOU1g9Y1kiSwwZiY//zRNvJr3xTn5KJVgfo1X9fOrZdhlB7 /Nhu5D+5FMGSUL0mqhzy8NQt4Pely+Lz1NmSCBmbtR7sf+oEB3mJkPmCSfxt3Uul 7CD9U4Yw939Aowl5e+0TYl5fa1xcpGK05m8yyGQsYEtI/2AL0i1L74yBth4OIFeh OEIIjU0drKfAWRip5680Sg3u9KV6Uhw= -----END CERTIFICATE-----Generated at Sat Jun 13 13:58:32 2026 by rpki-client