$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fb9744d-259e-4620-9ef5-f94a76d16233/844976c9-85b7-3a55-977c-b31cf7e56c03.roa File: 844976c9-85b7-3a55-977c-b31cf7e56c03.roa (raw, json) Hash identifier: HcGlUSlZqaPUsVabrFPJ231FKlLcEQYbpZ9dFgmSL94= Subject key identifier: 11:CD:77:5E:2A:5D:57:A2:00:22:05:3B:CF:4E:A3:64:A9:0E:1C:CA Certificate issuer: /CN=7fb9744d-259e-4620-9ef5-f94a76d16233 Certificate serial: 010D0C9F4328584CF4224225F755EAF011CA3B40 Authority key identifier: 23:0B:5F:0F:D8:67:AC:10:98:9D:D6:A3:42:17:71:FB:51:83:D3:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fb9744d-259e-4620-9ef5-f94a76d16233.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fb9744d-259e-4620-9ef5-f94a76d16233/844976c9-85b7-3a55-977c-b31cf7e56c03.roa Signing time: Mon 23 Feb 2026 02:00:31 +0000 ROA not before: Mon 23 Feb 2026 02:00:31 +0000 ROA not after: Sun 24 May 2026 01:00:31 +0000 asID: 394059 IP address blocks: 64.40.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fb9744d-259e-4620-9ef5-f94a76d16233/7fb9744d-259e-4620-9ef5-f94a76d16233.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fb9744d-259e-4620-9ef5-f94a76d16233/7fb9744d-259e-4620-9ef5-f94a76d16233.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fb9744d-259e-4620-9ef5-f94a76d16233.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f4:22:42:25:f7:55:ea:f0:11:ca:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fb9744d-259e-4620-9ef5-f94a76d16233 Validity Not Before: Feb 23 02:00:31 2026 GMT Not After : May 24 01:00:31 2026 GMT Subject: CN=25bfa33e-915e-4960-bb34-1c60896a2473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:07:31:5e:3c:88:f0:f3:c1:17:af:38:bb:35: 4a:08:fb:bd:b4:60:13:f4:70:5a:b8:04:79:6a:11: c0:a3:96:64:f3:0c:52:d7:7a:bd:a9:c9:c9:c2:12: 46:c2:a5:26:1e:0e:7d:04:74:51:17:af:9a:da:3b: a0:75:62:b6:07:43:60:36:c8:bd:64:20:9e:75:6b: a7:9f:87:13:33:60:aa:4f:26:61:9e:10:7b:53:f4: ae:f0:f9:ea:f4:a1:5e:64:b7:6d:f6:6a:5b:81:61: 3c:9a:0a:2f:5d:ea:1b:f3:3d:11:3f:14:b5:4e:64: 4b:50:9f:79:7c:a5:af:97:6a:6f:0e:a7:40:ad:73: f0:f1:08:2e:c5:79:64:15:32:d4:7f:8a:8a:b2:fd: 76:f7:25:e1:85:58:b1:f7:10:ff:90:8c:b1:56:73: 37:ca:77:b8:be:6f:90:7d:88:08:16:dc:8a:2a:bd: 98:2c:cc:3b:58:b1:91:1e:12:bc:3f:8d:10:6c:30: 82:b7:a6:b4:42:27:d6:88:ab:ce:dc:17:55:b2:cf: 63:af:9d:04:30:d5:50:20:47:38:85:91:2d:9e:a9: 22:3e:6f:cd:cf:99:4f:67:e2:28:e5:0e:4b:7f:ce: 4a:e0:10:60:0e:e0:fe:8f:5f:c1:e5:93:b8:ea:cd: 51:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CD:77:5E:2A:5D:57:A2:00:22:05:3B:CF:4E:A3:64:A9:0E:1C:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fb9744d-259e-4620-9ef5-f94a76d16233/844976c9-85b7-3a55-977c-b31cf7e56c03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fb9744d-259e-4620-9ef5-f94a76d16233/7fb9744d-259e-4620-9ef5-f94a76d16233.crl X509v3 Authority Key Identifier: keyid:23:0B:5F:0F:D8:67:AC:10:98:9D:D6:A3:42:17:71:FB:51:83:D3:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fb9744d-259e-4620-9ef5-f94a76d16233.cer sbgp-ipAddrBlock: critical IPv4: 64.40.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:4a:3b:30:6a:08:14:3e:d9:cd:0f:a4:1d:c2:3d:aa:13:54: dc:6c:b5:63:1f:8a:6a:b8:76:b1:5c:b9:b2:fc:0c:db:6c:79: 7b:f1:0f:3e:9d:64:1b:3d:bd:f1:e4:aa:60:e6:5a:0b:34:c5: bd:05:64:9e:51:30:d7:01:43:2e:47:e5:0f:72:00:d0:51:9e: 1a:91:36:ef:b2:f9:b4:7c:19:a4:1c:8d:97:77:46:13:56:f7: 5e:71:52:35:9b:fc:d7:2d:79:05:85:00:b7:88:24:67:d0:fa: 9f:c9:a6:c1:5c:d7:02:21:52:7e:46:4d:11:38:16:88:13:a5: fe:29:80:c3:86:e6:97:75:ad:1c:b9:1c:45:e2:7e:02:71:e6: 08:f8:b4:0c:3c:8f:8f:51:ff:5f:af:92:d4:c7:17:3b:0d:37: f9:80:02:d1:6f:c3:95:82:c2:0b:84:4f:6e:6c:9f:97:28:2b: 29:09:81:ff:dc:85:06:54:a6:4e:78:1a:76:5a:21:d8:39:66: 93:f3:54:aa:f1:77:eb:44:42:fb:32:c7:60:25:96:d0:4d:5b: b2:9c:e4:85:eb:ed:1e:b5:a1:6d:d2:84:db:a9:19:f2:3b:b0: 5f:5d:f6:bf:a7:9b:c7:e9:d6:91:22:4b:2d:ac:3b:89:29:ae: b7:f9:d1:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz0IkIl91Xq8BHKO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ZiOTc0NGQtMjU5ZS00NjIwLTllZjUtZjk0YTc2ZDE2 MjMzMB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk MjViZmEzM2UtOTE1ZS00OTYwLWJiMzQtMWM2MDg5NmEyNDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AcxXjyI8PPBF684uzVKCPu9tGAT9HBauAR5 ahHAo5Zk8wxS13q9qcnJwhJGwqUmHg59BHRRF6+a2jugdWK2B0NgNsi9ZCCedWun n4cTM2CqTyZhnhB7U/Su8Pnq9KFeZLdt9mpbgWE8mgovXeob8z0RPxS1TmRLUJ95 fKWvl2pvDqdArXPw8QguxXlkFTLUf4qKsv129yXhhVix9xD/kIyxVnM3yne4vm+Q fYgIFtyKKr2YLMw7WLGRHhK8P40QbDCCt6a0QifWiKvO3BdVss9jr50EMNVQIEc4 hZEtnqkiPm/Nz5lPZ+Io5Q5Lf85K4BBgDuD+j1/B5ZO46s1RYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHNd14qXVeiACIFO89Oo2SpDhzKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83ZmI5 NzQ0ZC0yNTllLTQ2MjAtOWVmNS1mOTRhNzZkMTYyMzMvODQ0OTc2YzktODViNy0z YTU1LTk3N2MtYjMxY2Y3ZTU2YzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvN2ZiOTc0NGQtMjU5ZS00NjIwLTll ZjUtZjk0YTc2ZDE2MjMzLzdmYjk3NDRkLTI1OWUtNDYyMC05ZWY1LWY5NGE3NmQx NjIzMy5jcmwwHwYDVR0jBBgwFoAUIwtfD9hnrBCYndajQhdx+1GD0+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83ZmI5NzQ0ZC0yNTllLTQ2MjAtOWVmNS1mOTRh NzZkMTYyMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCgKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtKOzBqCBQ+2c0PpB3CPaoTVNxstWMfimq4drFcubL8DNtseXvxDz6d ZBs9vfHkqmDmWgs0xb0FZJ5RMNcBQy5H5Q9yANBRnhqRNu+y+bR8GaQcjZd3RhNW 915xUjWb/NcteQWFALeIJGfQ+p/JpsFc1wIhUn5GTRE4FogTpf4pgMOG5pd1rRy5 HEXifgJx5gj4tAw8j49R/1+vktTHFzsNN/mAAtFvw5WCwguET25sn5coKykJgf/c hQZUpk54GnZaIdg5ZpPzVKrxd+tEQvsyx2AlltBNW7Kc5IXr7R61oW3ShNupGfI7 sF9d9r+nm8fp1pEiSy2sO4kprrf50Xk= -----END CERTIFICATE-----Generated at Mon Mar 2 18:27:23 2026 by rpki-client