$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d3b62030-a9ee-3e91-ae16-480ea55f4fd8.roa File: d3b62030-a9ee-3e91-ae16-480ea55f4fd8.roa (raw, json) Hash identifier: IL/wAfAzkOW5JV7xr+ijVIkWdvbtZa2WCoEVafWbtts= Subject key identifier: 45:4A:FF:1C:3D:73:EC:75:2F:33:9E:60:BE:8A:B3:DF:A5:10:57:1F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F76F0C19ACC6B98535D91C480 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d3b62030-a9ee-3e91-ae16-480ea55f4fd8.roa Signing time: Sun 11 Oct 2026 08:05:56 +0000 ROA not before: Sun 11 Oct 2026 08:05:56 +0000 ROA not after: Sat 09 Jan 2027 09:05:56 +0000 asID: 29802 IP address blocks: 64.204.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:76:f0:c1:9a:cc:6b:98:53:5d:91:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 11 08:05:56 2026 GMT Not After : Jan 9 09:05:56 2027 GMT Subject: CN=1db998fb-b8c2-449a-bf7e-dd2a5eae9b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:05:8f:8f:fe:29:bb:6e:37:55:ee:a4:fd:b4: 00:15:9a:5d:9f:da:83:a4:8d:c7:64:48:8f:54:65: 79:d5:2b:16:4b:ee:c9:b3:f9:17:de:84:ef:77:42: 1f:ea:aa:ea:f2:c6:ba:47:d0:16:ea:bb:91:bd:d9: 14:2a:b8:8b:32:82:59:10:a9:29:2f:06:ee:09:96: f2:08:2b:ee:d8:ce:26:63:4d:aa:d0:13:7b:10:34: 12:af:4c:8b:ae:36:d0:ca:e7:d5:72:dc:3b:05:5b: 93:88:20:eb:28:d5:a5:06:fe:e6:a7:48:ae:55:1c: 33:e7:7f:c8:eb:21:49:c2:04:51:24:ac:fa:1d:14: f8:5d:7f:78:f8:0b:87:a2:e1:4a:52:f8:f4:47:f9: 86:72:e4:ad:0f:e8:84:74:ab:00:56:00:2d:2a:20: b7:5d:cc:8b:fd:55:b2:96:6a:f2:b2:22:41:64:3b: 99:78:97:82:d1:70:27:b4:88:1f:00:86:14:fa:9a: 81:08:5e:c6:4c:28:1b:cd:eb:f0:2a:ea:fc:d4:66: 14:9b:70:24:e5:76:5e:84:57:be:e4:1b:5f:e6:98: 20:d1:c3:e5:a7:66:7d:14:13:14:04:e1:dd:37:f9: d2:c1:37:62:ba:43:df:bb:14:08:14:27:a2:aa:9f: 26:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:4A:FF:1C:3D:73:EC:75:2F:33:9E:60:BE:8A:B3:DF:A5:10:57:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d3b62030-a9ee-3e91-ae16-480ea55f4fd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:e9:8c:4c:fd:f2:36:70:76:68:c5:0b:ba:34:5f:1a:ba:42: c6:da:ce:eb:8f:ba:92:79:0f:6f:aa:cb:8f:2e:25:ac:0e:55: bb:1f:d9:32:8f:96:62:f6:f8:c3:a5:61:98:54:bf:32:5e:33: 02:32:82:e9:b0:1c:76:3a:0b:da:76:73:67:b5:46:a2:4c:3a: dc:b2:5c:9c:83:93:aa:d2:c7:1c:cc:80:02:fd:79:f0:40:4a: e3:13:2e:5e:94:ad:ab:13:f9:a4:89:14:57:99:7b:16:bd:9c: 9d:e8:7e:92:45:f7:88:1c:ba:6c:c9:83:81:3b:69:d7:cf:48: 58:fd:2d:05:84:2b:3e:68:f0:ac:ce:00:17:8b:49:d3:6a:16: 51:83:25:3f:6d:f4:ae:97:53:7c:1a:9d:92:85:a7:0c:e5:ff: ca:c9:9a:cf:fd:4c:a4:69:bf:12:ad:04:98:cd:e4:7a:ae:c4: 54:ff:9a:8d:6c:1a:cf:f9:76:23:cc:f7:36:34:76:4b:6a:e5: 7c:c4:93:93:38:c6:1f:7e:e2:da:51:82:9d:8e:68:11:dd:06: a2:ff:1b:54:e4:5d:a5:62:92:c5:44:94:18:38:77:59:9e:b2: da:d0:2c:69:3a:8d:47:48:34:a4:27:9b:a4:a8:76:a3:ff:02: c1:db:ab:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE928MGazGuYU12RxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAxMTA4MDU1NloXDTI3MDEwOTA5MDU1NlowLzEtMCsGA1UEAxMk MWRiOTk4ZmItYjhjMi00NDlhLWJmN2UtZGQyYTVlYWU5YjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAWPj/4pu243Ve6k/bQAFZpdn9qDpI3HZEiP VGV51SsWS+7Js/kX3oTvd0If6qrq8sa6R9AW6ruRvdkUKriLMoJZEKkpLwbuCZby CCvu2M4mY02q0BN7EDQSr0yLrjbQyufVctw7BVuTiCDrKNWlBv7mp0iuVRwz53/I 6yFJwgRRJKz6HRT4XX94+AuHouFKUvj0R/mGcuStD+iEdKsAVgAtKiC3XcyL/VWy lmrysiJBZDuZeJeC0XAntIgfAIYU+pqBCF7GTCgbzevwKur81GYUm3Ak5XZehFe+ 5Btf5pgg0cPlp2Z9FBMUBOHdN/nSwTdiukPfuxQIFCeiqp8m0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVK/xw9c+x1LzOeYL6Ks9+lEFcfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDNiNjIwMzAtYTllZS0z ZTkxLWFlMTYtNDgwZWE1NWY0ZmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMzvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzpjEz98jZwdmjFC7o0Xxq6QsbazuuPupJ5D2+qy48uJawOVbsf2TKP lmL2+MOlYZhUvzJeMwIygumwHHY6C9p2c2e1RqJMOtyyXJyDk6rSxxzMgAL9efBA SuMTLl6UrasT+aSJFFeZexa9nJ3ofpJF94gcumzJg4E7adfPSFj9LQWEKz5o8KzO ABeLSdNqFlGDJT9t9K6XU3wanZKFpwzl/8rJms/9TKRpvxKtBJjN5HquxFT/mo1s Gs/5diPM9zY0dktq5XzEk5M4xh9+4tpRgp2OaBHdBqL/G1TkXaViksVElBg4d1me strQLGk6jUdINKQnm6SodqP/AsHbqwA= -----END CERTIFICATE-----Generated at Thu Oct 29 06:08:40 2026 by rpki-client