$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/376f1606-d35e-3cb6-b663-26b1e90c408b.roa File: 376f1606-d35e-3cb6-b663-26b1e90c408b.roa (raw, json) Hash identifier: 7/O5sG39H5Nw5bcuko2ObfK7VX0YJNWQL79T3tdKrcM= Subject key identifier: D4:54:59:D5:07:BF:38:8B:77:22:4E:51:A6:9A:A4:6B:02:E7:B2:A6 Certificate issuer: /CN=da733fda-b405-4eb1-adbe-811e8f7eacd4 Certificate serial: 010D0C9F4328584F4976F698742881C6C4D11280 Authority key identifier: CF:9A:BF:04:C8:42:8F:3F:52:AA:0D:50:E8:C7:7B:D2:75:46:E5:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/376f1606-d35e-3cb6-b663-26b1e90c408b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 55159 IP address blocks: 64.89.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:f6:98:74:28:81:c6:c4:d1:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da733fda-b405-4eb1-adbe-811e8f7eacd4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0e7306b6-aa3a-4bd5-920a-cad2bc90ef7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f4:de:ce:fe:c2:66:1a:73:f2:91:8c:ed:85: 43:ce:9d:96:95:03:a9:ac:fc:7f:ca:d4:e5:f3:3d: 28:12:58:d2:41:d3:b0:f2:a1:48:47:13:66:fb:cb: ae:de:bd:b4:8d:31:4a:54:46:28:ed:02:e9:59:94: a3:10:59:d2:77:58:31:5e:3f:57:85:92:e6:d5:c0: 34:44:e0:c8:fc:4f:dc:7c:a4:a8:6d:06:a7:4e:00: d1:b7:db:1b:ea:fd:4f:d8:b3:fc:70:8d:76:5c:b8: a5:71:5e:ad:d6:6f:27:64:96:13:a2:d6:2b:f4:b1: 85:60:06:48:cd:d9:54:16:21:ad:94:d0:a1:06:4a: 45:92:ba:d3:41:49:04:81:0c:f4:1d:1e:62:b2:0d: c8:33:62:47:b7:74:7c:6f:04:0c:86:36:d6:bb:ac: 12:c1:ac:52:d2:39:2f:61:b4:07:21:22:48:bf:be: 9d:84:59:df:5c:f4:4d:16:40:b9:97:b9:53:20:68: 86:fb:c9:61:b7:a7:24:2e:ab:51:ea:89:c0:04:fb: 81:26:5d:49:6b:64:58:74:59:7c:40:6e:5b:5c:12: 0a:dc:16:bb:ac:57:9d:6d:a1:ab:64:d9:8b:d8:77: 40:fa:ba:9d:bd:32:68:55:ee:48:62:33:08:26:da: e2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:54:59:D5:07:BF:38:8B:77:22:4E:51:A6:9A:A4:6B:02:E7:B2:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/376f1606-d35e-3cb6-b663-26b1e90c408b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.crl X509v3 Authority Key Identifier: keyid:CF:9A:BF:04:C8:42:8F:3F:52:AA:0D:50:E8:C7:7B:D2:75:46:E5:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4.cer sbgp-ipAddrBlock: critical IPv4: 64.89.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:5b:8e:20:7c:4c:05:38:af:b3:0b:12:a2:20:e2:ee:92:a0: ca:fc:6d:a4:20:5f:50:db:1f:1f:ae:9d:79:b3:53:ea:24:c6: 63:59:12:11:82:d5:8e:13:41:48:e8:a4:0d:9f:b1:5e:e4:56: 48:71:f5:65:02:cd:91:63:35:e1:af:8e:d3:64:a6:d7:84:83: 43:2e:6d:74:99:78:24:50:a6:b1:c0:af:c1:89:95:72:31:b3: 88:0f:5e:ac:0f:53:66:b9:95:ff:87:5e:31:c4:2a:8c:b9:e9: bd:ca:99:58:23:fa:1f:6b:ba:63:e7:ba:a2:1e:8b:d1:59:ee: 73:10:27:fc:a1:42:fc:ef:6f:32:f6:a0:0d:22:4b:1f:60:1b: a4:a2:13:48:a6:f4:f0:61:52:48:09:6d:9a:a7:c9:4e:21:5f: 76:88:2e:c7:aa:48:3b:c2:af:33:6c:ca:4e:73:60:9f:51:8b: 56:9f:18:7b:34:26:4a:2a:a6:48:2a:4e:d6:0b:a5:a5:42:e1: 60:52:ba:88:3f:2e:dc:02:cf:76:e2:ab:96:80:92:25:3f:50: 81:67:2a:e5:b3:ff:fc:df:c2:93:e0:57:2c:87:13:8d:b8:f6: 9e:82:77:c8:0f:b6:f7:7a:86:b9:5e:da:ec:f9:50:ad:d0:e1: ea:8b:2f:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdvaYdCiBxsTREoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE3MzNmZGEtYjQwNS00ZWIxLWFkYmUtODExZThmN2Vh Y2Q0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGU3MzA2YjYtYWEzYS00YmQ1LTkyMGEtY2FkMmJjOTBlZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PTezv7CZhpz8pGM7YVDzp2WlQOprPx/ytTl 8z0oEljSQdOw8qFIRxNm+8uu3r20jTFKVEYo7QLpWZSjEFnSd1gxXj9XhZLm1cA0 RODI/E/cfKSobQanTgDRt9sb6v1P2LP8cI12XLilcV6t1m8nZJYTotYr9LGFYAZI zdlUFiGtlNChBkpFkrrTQUkEgQz0HR5isg3IM2JHt3R8bwQMhjbWu6wSwaxS0jkv YbQHISJIv76dhFnfXPRNFkC5l7lTIGiG+8lht6ckLqtR6onABPuBJl1Ja2RYdFl8 QG5bXBIK3Ba7rFedbaGrZNmL2HdA+rqdvTJoVe5IYjMIJtriBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRUWdUHvziLdyJOUaaapGsC57KmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kYTcz M2ZkYS1iNDA1LTRlYjEtYWRiZS04MTFlOGY3ZWFjZDQvMzc2ZjE2MDYtZDM1ZS0z Y2I2LWI2NjMtMjZiMWU5MGM0MDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGE3MzNmZGEtYjQwNS00ZWIxLWFk YmUtODExZThmN2VhY2Q0L2RhNzMzZmRhLWI0MDUtNGViMS1hZGJlLTgxMWU4Zjdl YWNkNC5jcmwwHwYDVR0jBBgwFoAUz5q/BMhCjz9Sqg1Q6Md70nVG5TgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kYTczM2ZkYS1iNDA1LTRlYjEtYWRiZS04MTFl OGY3ZWFjZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQFmoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1bjiB8TAU4r7MLEqIg4u6SoMr8baQgX1DbHx+unXmzU+okxmNZEhGC 1Y4TQUjopA2fsV7kVkhx9WUCzZFjNeGvjtNkpteEg0MubXSZeCRQprHAr8GJlXIx s4gPXqwPU2a5lf+HXjHEKoy56b3KmVgj+h9rumPnuqIei9FZ7nMQJ/yhQvzvbzL2 oA0iSx9gG6SiE0im9PBhUkgJbZqnyU4hX3aILseqSDvCrzNsyk5zYJ9Ri1afGHs0 JkoqpkgqTtYLpaVC4WBSuog/LtwCz3biq5aAkiU/UIFnKuWz//zfwpPgVyyHE424 9p6Cd8gPtvd6hrle2uz5UK3Q4eqLL6k= -----END CERTIFICATE-----Generated at Sun Oct 25 17:19:40 2026 by rpki-client