$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aac91b14-4f5c-36d1-b322-64f353930746.roa File: aac91b14-4f5c-36d1-b322-64f353930746.roa (raw, json) Hash identifier: B9ZxYygjlOtIe6d/lTFjm/qVAZ68SqJScFP1erd/Myw= Subject key identifier: 7A:33:20:C0:9F:6D:2C:46:E0:B3:D6:CC:D1:0C:FA:AF:DF:06:06:00 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F7B0BCC14C475EE73FCA7B520 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aac91b14-4f5c-36d1-b322-64f353930746.roa Signing time: Mon 12 Oct 2026 19:23:39 +0000 ROA not before: Mon 12 Oct 2026 19:23:39 +0000 ROA not after: Sun 10 Jan 2027 20:23:39 +0000 asID: 29802 IP address blocks: 68.164.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:0b:cc:14:c4:75:ee:73:fc:a7:b5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 12 19:23:39 2026 GMT Not After : Jan 10 20:23:39 2027 GMT Subject: CN=1fcca2de-543b-494b-9384-1a4bde87bd41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bf:ef:19:da:09:d3:73:6a:dc:37:54:ff:2d: dd:3d:e0:3f:64:12:e1:89:05:27:16:bf:da:67:fd: d2:66:65:8a:63:17:85:b0:30:b1:1e:ac:63:10:46: 28:56:7b:be:16:b3:37:8f:97:d3:28:c3:0b:30:a6: 3c:4d:63:0c:32:5f:55:e6:2e:10:fa:07:92:19:1a: 42:2b:1c:67:15:3f:87:d0:b9:2f:18:7d:57:e8:ef: c7:ce:bd:1e:62:69:79:5a:f8:96:ea:6c:ce:4c:8a: 01:ee:36:81:b3:25:dc:c4:83:82:67:3c:f5:3d:cd: 63:45:e6:b6:00:69:bb:85:49:73:a0:53:44:84:77: 50:ef:1d:11:f1:db:ad:46:3d:6b:3a:aa:28:2c:95: d7:75:a6:b1:54:1c:01:2b:2e:3d:74:d9:59:9a:a3: 7f:4e:bf:17:46:39:44:4d:d0:84:6c:7f:0c:a3:fc: d8:51:69:bc:88:6c:ba:e7:cb:ae:16:63:9a:7d:76: 89:9f:25:95:20:be:c1:5f:2c:be:d3:94:eb:c4:29: 30:c9:32:bb:e0:fa:ed:50:ec:ed:97:01:92:ed:e3: 26:69:5b:25:e8:26:68:24:e9:ee:63:68:b8:04:34: d7:9f:9a:52:db:13:ef:81:25:fe:03:85:8e:38:fa: 1b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:33:20:C0:9F:6D:2C:46:E0:B3:D6:CC:D1:0C:FA:AF:DF:06:06:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aac91b14-4f5c-36d1-b322-64f353930746.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:03:97:b0:cc:a4:2b:ca:45:59:37:3e:6b:4d:c9:32:bc:39: 38:20:27:21:3d:d8:91:38:1b:21:29:0e:6d:05:3d:34:18:03: 6c:f3:a8:fc:7d:e2:6e:95:f6:d4:aa:c7:53:84:43:b4:d9:2a: 30:67:16:df:e4:6a:69:69:71:80:fb:7a:23:b4:f4:e4:0e:97: 1a:95:4c:e6:d5:51:d5:11:d1:ba:33:85:88:97:a3:b1:a3:6b: e1:44:47:17:43:84:41:e2:53:a7:0c:d7:5f:3a:1b:37:a8:0a: a2:ab:42:ac:21:ca:6d:e6:c9:42:74:b8:13:fd:60:12:5c:ce: 7e:d1:89:c7:1d:18:b9:b8:59:49:ed:a7:64:0a:2e:64:1a:52: 25:cc:36:67:77:49:0f:c5:58:d1:3a:50:17:77:64:3b:80:26: 9f:e7:34:bb:2a:ca:77:8c:54:79:7a:09:15:6f:ad:86:b7:84: 89:02:98:fa:c0:a9:87:66:ad:a9:9c:4c:12:87:c5:f8:bb:b1: a9:b3:a5:88:21:78:5c:d3:c5:16:c4:f4:d6:27:ac:f2:6d:29: 72:3e:1c:da:1c:23:bb:1f:45:05:58:5e:53:28:8a:2b:3c:f5: 41:06:6a:31:7f:1b:04:38:f0:d4:88:56:c1:38:99:c0:8a:4c: e8:34:05:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97C8wUxHXuc/yntSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAxMjE5MjMzOVoXDTI3MDExMDIwMjMzOVowLzEtMCsGA1UEAxMk MWZjY2EyZGUtNTQzYi00OTRiLTkzODQtMWE0YmRlODdiZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7/vGdoJ03Nq3DdU/y3dPeA/ZBLhiQUnFr/a Z/3SZmWKYxeFsDCxHqxjEEYoVnu+FrM3j5fTKMMLMKY8TWMMMl9V5i4Q+geSGRpC KxxnFT+H0LkvGH1X6O/Hzr0eYml5WviW6mzOTIoB7jaBsyXcxIOCZzz1Pc1jRea2 AGm7hUlzoFNEhHdQ7x0R8dutRj1rOqooLJXXdaaxVBwBKy49dNlZmqN/Tr8XRjlE TdCEbH8Mo/zYUWm8iGy658uuFmOafXaJnyWVIL7BXyy+05TrxCkwyTK74PrtUOzt lwGS7eMmaVsl6CZoJOnuY2i4BDTXn5pS2xPvgSX+A4WOOPobbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHozIMCfbSxG4LPWzNEM+q/fBgYAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWFjOTFiMTQtNGY1Yy0z NmQxLWIzMjItNjRmMzUzOTMwNzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKQHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQDl7DMpCvKRVk3PmtNyTK8OTggJyE92JE4GyEpDm0FPTQYA2zzqPx9 4m6V9tSqx1OEQ7TZKjBnFt/kamlpcYD7eiO09OQOlxqVTObVUdUR0bozhYiXo7Gj a+FERxdDhEHiU6cM1186GzeoCqKrQqwhym3myUJ0uBP9YBJczn7RiccdGLm4WUnt p2QKLmQaUiXMNmd3SQ/FWNE6UBd3ZDuAJp/nNLsqyneMVHl6CRVvrYa3hIkCmPrA qYdmramcTBKHxfi7samzpYgheFzTxRbE9NYnrPJtKXI+HNocI7sfRQVYXlMoiis8 9UEGajF/GwQ48NSIVsE4mcCKTOg0BcA= -----END CERTIFICATE-----Generated at Wed Oct 28 18:17:54 2026 by rpki-client