$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a356ae27-38ea-3c1f-a57d-72a0bf3684df.roa File: a356ae27-38ea-3c1f-a57d-72a0bf3684df.roa (raw, json) Hash identifier: deatQgujNGOkJfN+tAJfrvE15hfgy8NRwtK1Qg4z8+Q= Subject key identifier: D1:90:11:93:BE:D9:E9:7C:88:93:28:73:AE:53:C6:41:1D:DA:27:8A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F8F8189D8C272015CA9C127A0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a356ae27-38ea-3c1f-a57d-72a0bf3684df.roa Signing time: Tue 20 Oct 2026 03:17:03 +0000 ROA not before: Tue 20 Oct 2026 03:17:03 +0000 ROA not after: Mon 18 Jan 2027 04:17:03 +0000 asID: 219447 IP address blocks: 68.164.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:81:89:d8:c2:72:01:5c:a9:c1:27:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 20 03:17:03 2026 GMT Not After : Jan 18 04:17:03 2027 GMT Subject: CN=0bb08dff-16f9-4c4a-9428-d9de2ebf7929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2e:a1:e7:12:74:a3:93:9b:f5:f6:05:bd:23: 2a:ae:da:70:ef:a7:0d:eb:f6:02:47:44:c9:a9:c9: 9c:1b:d8:b6:d8:ce:92:08:62:e9:5b:42:c2:17:df: d4:be:2e:8a:e6:d3:a3:a3:70:3b:95:60:75:98:c7: fd:db:ff:88:52:c0:36:4b:fe:f4:ec:48:61:54:2c: d6:b9:f3:fa:80:aa:e3:8a:5d:3f:23:22:70:2d:e6: 80:08:98:5f:91:34:5e:e8:b9:b1:95:34:13:67:78: 2d:ec:03:6f:84:37:4d:bf:d9:83:38:c4:a0:c2:96: 9f:03:1e:25:25:8f:73:6a:14:12:04:f9:21:6c:e1: 53:fe:1c:df:2b:09:61:df:48:3a:b9:f7:98:d7:34: 41:69:5a:a5:bf:ca:24:47:8f:a9:cb:54:3c:ab:db: d5:01:98:86:f9:2a:10:cd:1a:92:c0:36:46:86:27: 41:9e:55:1e:98:de:67:4d:f3:3c:03:f8:fe:ca:84: e3:20:6c:cd:58:57:5d:79:42:b8:37:fa:f0:84:1c: 43:c8:e0:8d:ae:6e:8b:ac:0d:49:7b:7b:2a:7a:55: c4:a3:07:66:87:5d:42:35:0a:2c:7e:4c:db:e8:4c: 65:23:31:aa:24:d6:96:79:9a:9f:e7:55:6a:11:89: df:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:90:11:93:BE:D9:E9:7C:88:93:28:73:AE:53:C6:41:1D:DA:27:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a356ae27-38ea-3c1f-a57d-72a0bf3684df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:3e:42:aa:9d:8d:d2:af:74:38:ef:ab:10:f6:be:72:b2:02: 94:90:52:c2:34:af:df:de:f2:a0:ec:91:72:94:b7:27:08:39: 50:72:71:cc:e3:5d:63:9b:2b:41:e3:37:c7:d8:c1:8e:1f:df: f5:13:06:64:a2:93:f2:70:e8:7d:ad:e3:26:b3:36:74:80:4c: 87:72:ac:c8:2f:49:8a:fe:55:f0:1e:04:57:05:df:d9:f5:c4: 5b:be:53:50:62:d0:01:c1:81:8d:0c:0b:b5:7c:c4:24:23:b2: a8:8d:64:1b:0a:86:5b:cb:fa:3b:1a:d2:04:9f:21:26:9b:d6: f8:a7:26:fc:46:86:d2:d5:d8:71:ba:fe:72:a2:d9:6a:70:ed: ec:e3:32:27:26:94:c0:2c:25:dc:c0:4f:26:c7:be:0b:dc:c2: 3b:2e:c8:ad:27:48:4a:ab:29:48:0e:9d:63:99:a9:e5:33:7f: 91:87:66:45:84:ea:b4:cb:3b:b1:29:77:d5:0d:82:02:f3:fc: 89:b5:e4:85:20:c5:ec:44:9b:8f:82:01:bc:c0:47:d7:b3:14: 9f:55:8f:ce:2e:f3:f9:ee:93:93:84:88:94:75:48:11:39:22: fe:5d:a6:77:a7:13:4c:82:90:81:b6:94:7f:93:9d:e6:8c:db: 28:a7:e0:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PgYnYwnIBXKnBJ6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAyMDAzMTcwM1oXDTI3MDExODA0MTcwM1owLzEtMCsGA1UEAxMk MGJiMDhkZmYtMTZmOS00YzRhLTk0MjgtZDlkZTJlYmY3OTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS6h5xJ0o5Ob9fYFvSMqrtpw76cN6/YCR0TJ qcmcG9i22M6SCGLpW0LCF9/Uvi6K5tOjo3A7lWB1mMf92/+IUsA2S/707EhhVCzW ufP6gKrjil0/IyJwLeaACJhfkTRe6LmxlTQTZ3gt7ANvhDdNv9mDOMSgwpafAx4l JY9zahQSBPkhbOFT/hzfKwlh30g6ufeY1zRBaVqlv8okR4+py1Q8q9vVAZiG+SoQ zRqSwDZGhidBnlUemN5nTfM8A/j+yoTjIGzNWFddeUK4N/rwhBxDyOCNrm6LrA1J e3sqelXEowdmh11CNQosfkzb6ExlIzGqJNaWeZqf51VqEYnffwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGQEZO+2el8iJMoc65TxkEd2ieKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTM1NmFlMjctMzhlYS0z YzFmLWE1N2QtNzJhMGJmMzY4NGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKRCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGY+QqqdjdKvdDjvqxD2vnKyApSQUsI0r9/e8qDskXKUtycIOVBycczj XWObK0HjN8fYwY4f3/UTBmSik/Jw6H2t4yazNnSATIdyrMgvSYr+VfAeBFcF39n1 xFu+U1Bi0AHBgY0MC7V8xCQjsqiNZBsKhlvL+jsa0gSfISab1vinJvxGhtLV2HG6 /nKi2Wpw7ezjMicmlMAsJdzATybHvgvcwjsuyK0nSEqrKUgOnWOZqeUzf5GHZkWE 6rTLO7Epd9UNggLz/Im15IUgxexEm4+CAbzAR9ezFJ9Vj84u8/nuk5OEiJR1SBE5 Iv5dpnenE0yCkIG2lH+TneaM2yin4NI= -----END CERTIFICATE-----Generated at Mon Oct 26 11:42:00 2026 by rpki-client