$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/12be74e3-b4f1-305d-a6b5-95b0134a4612.roa File: 12be74e3-b4f1-305d-a6b5-95b0134a4612.roa (raw, json) Hash identifier: 5WMizPbo79G6jNON/F8V7OrrI1JbmY4YsbkIgJViZDs= Subject key identifier: F5:93:79:03:D9:80:4F:19:13:2F:6A:D3:D9:B4:0C:0A:ED:41:66:14 Certificate issuer: /CN=da8ef68a-20eb-4f6e-a80e-617aa1473f09 Certificate serial: 010D0C9F4328584F655D686329A591C4E9A24500 Authority key identifier: CC:52:EE:D6:CD:6F:C2:A0:F3:2B:8E:12:3B:23:87:59:02:0B:35:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/12be74e3-b4f1-305d-a6b5-95b0134a4612.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 40933 IP address blocks: 64.187.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:68:63:29:a5:91:c4:e9:a2:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8ef68a-20eb-4f6e-a80e-617aa1473f09 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=ced33b16-7bff-4449-8ae6-f4453613f8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a3:1d:f1:1f:17:45:06:8d:8a:37:8e:96:a9: ed:63:cf:20:1a:6b:39:60:ff:77:5a:f8:75:42:ff: 39:83:b1:7f:2f:34:f9:56:82:c6:79:e1:ba:69:a8: a6:f3:dc:18:33:e8:41:5c:0d:22:c6:ea:89:02:8b: 89:94:63:a0:78:06:ba:b7:51:2c:6a:ca:c3:9c:9c: 57:4b:54:4e:00:43:91:fa:3d:ab:5a:23:e6:ec:fe: e0:16:83:31:ec:98:3b:60:d6:b3:7c:4e:6d:b0:1c: 64:ed:07:4b:21:0c:f3:ce:73:20:6f:32:79:cf:ee: e6:37:ae:72:8b:e1:f2:95:00:a8:c9:6c:5f:8f:3f: d0:94:a2:e7:09:4a:f0:45:8b:b9:34:4d:f8:fc:ee: 53:87:06:ac:bc:84:16:d5:83:99:55:4a:77:95:61: 36:08:3d:f5:18:a8:09:d4:0b:3b:d7:90:ff:25:39: 38:06:3e:4a:0b:74:41:f6:8b:c2:0a:f4:7c:b1:30: be:d0:78:c1:95:2d:5a:37:5f:10:12:48:82:cb:73: cf:c7:e6:37:06:7e:29:fa:b6:83:fe:48:c0:96:78: d2:c1:14:aa:ea:52:b4:32:06:28:e9:82:ed:9c:8a: 45:d2:53:32:11:45:90:cc:44:af:41:13:8d:ea:d4: 25:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:93:79:03:D9:80:4F:19:13:2F:6A:D3:D9:B4:0C:0A:ED:41:66:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/12be74e3-b4f1-305d-a6b5-95b0134a4612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.crl X509v3 Authority Key Identifier: keyid:CC:52:EE:D6:CD:6F:C2:A0:F3:2B:8E:12:3B:23:87:59:02:0B:35:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer sbgp-ipAddrBlock: critical IPv4: 64.187.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:29:16:76:98:4a:52:0d:07:6e:f7:47:3e:a4:4b:9e:36:84: cc:14:5c:05:e8:b6:fb:e5:35:14:27:8c:95:67:32:24:aa:81: 95:b1:e0:03:1f:c1:b2:6f:32:41:61:b0:f3:f9:72:92:4e:68: 8e:e2:04:89:cd:61:e4:08:55:72:fe:2a:55:fd:02:de:17:82: 53:d0:ac:9b:58:74:66:d0:c8:e6:40:64:46:ec:13:f5:f0:0e: f1:ff:85:70:81:cd:e7:ce:8c:95:9e:11:e1:b7:b7:d2:44:f2: 51:ef:0c:70:50:8e:1a:19:71:b2:fa:69:64:63:68:75:c5:34: ae:27:13:7e:b7:1a:21:24:fe:2d:ee:1d:5a:85:66:07:f4:e9: 3b:6b:fe:eb:79:cc:e2:3b:56:c8:00:bb:14:09:f1:c4:3e:01: 9b:d5:f7:23:18:79:15:36:32:0a:7d:d8:b0:ed:a8:c9:15:69: 85:df:9c:70:60:60:b5:3b:ac:8d:99:cc:1a:c9:ff:08:b8:ea: 34:b1:60:4a:41:48:a4:7a:23:fd:5c:bb:14:c6:19:12:c0:0b: f9:83:67:9b:96:6f:92:35:6c:cf:8f:97:80:5c:c9:c8:fb:b8: 0e:b7:9d:bb:2a:a2:ef:f1:67:22:ad:e3:95:9b:08:89:72:df: bf:dc:d1:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXWhjKaWRxOmiRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE4ZWY2OGEtMjBlYi00ZjZlLWE4MGUtNjE3YWExNDcz ZjA5MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk Y2VkMzNiMTYtN2JmZi00NDQ5LThhZTYtZjQ0NTM2MTNmOGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KMd8R8XRQaNijeOlqntY88gGms5YP93Wvh1 Qv85g7F/LzT5VoLGeeG6aaim89wYM+hBXA0ixuqJAouJlGOgeAa6t1EsasrDnJxX S1ROAEOR+j2rWiPm7P7gFoMx7Jg7YNazfE5tsBxk7QdLIQzzznMgbzJ5z+7mN65y i+HylQCoyWxfjz/QlKLnCUrwRYu5NE34/O5ThwasvIQW1YOZVUp3lWE2CD31GKgJ 1As715D/JTk4Bj5KC3RB9ovCCvR8sTC+0HjBlS1aN18QEkiCy3PPx+Y3Bn4p+raD /kjAlnjSwRSq6lK0MgYo6YLtnIpF0lMyEUWQzESvQRON6tQl+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWTeQPZgE8ZEy9q09m0DArtQWYUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9kYThl ZjY4YS0yMGViLTRmNmUtYTgwZS02MTdhYTE0NzNmMDkvMTJiZTc0ZTMtYjRmMS0z MDVkLWE2YjUtOTViMDEzNGE0NjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZGE4ZWY2OGEtMjBlYi00ZjZlLWE4 MGUtNjE3YWExNDczZjA5L2RhOGVmNjhhLTIwZWItNGY2ZS1hODBlLTYxN2FhMTQ3 M2YwOS5jcmwwHwYDVR0jBBgwFoAUzFLu1s1vwqDzK44SOyOHWQILNTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9kYThlZjY4YS0yMGViLTRmNmUtYTgwZS02MTdh YTE0NzNmMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQLvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFopFnaYSlINB273Rz6kS542hMwUXAXotvvlNRQnjJVnMiSqgZWx4AMf wbJvMkFhsPP5cpJOaI7iBInNYeQIVXL+KlX9At4XglPQrJtYdGbQyOZAZEbsE/Xw DvH/hXCBzefOjJWeEeG3t9JE8lHvDHBQjhoZcbL6aWRjaHXFNK4nE363GiEk/i3u HVqFZgf06Ttr/ut5zOI7VsgAuxQJ8cQ+AZvV9yMYeRU2Mgp92LDtqMkVaYXfnHBg YLU7rI2ZzBrJ/wi46jSxYEpBSKR6I/1cuxTGGRLAC/mDZ5uWb5I1bM+Pl4Bcycj7 uA63nbsqou/xZyKt45WbCIly37/c0T0= -----END CERTIFICATE-----Generated at Mon Oct 12 23:52:55 2026 by rpki-client