$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/1b67fa3a-7071-398e-9616-287428534d31.roa File: 1b67fa3a-7071-398e-9616-287428534d31.roa (raw, json) Hash identifier: ulkLF8cB/Ce/KTi+QwAiU/VQRSVa+z60VR8UJ68VpfE= Subject key identifier: 5E:1F:8C:0D:10:B9:E7:40:86:E5:44:ED:AF:18:A5:B1:E5:EC:C5:22 Certificate issuer: /CN=da8ef68a-20eb-4f6e-a80e-617aa1473f09 Certificate serial: 010D0C9F4328584F655D6822127A14FA269452F0 Authority key identifier: CC:52:EE:D6:CD:6F:C2:A0:F3:2B:8E:12:3B:23:87:59:02:0B:35:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/1b67fa3a-7071-398e-9616-287428534d31.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 40933 IP address blocks: 64.187.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:68:22:12:7a:14:fa:26:94:52:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8ef68a-20eb-4f6e-a80e-617aa1473f09 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=0602a25d-dade-4e9b-b933-9eeec7f82651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0e:3a:cc:79:0a:56:fe:6e:03:2c:ae:73:9a: 38:70:e0:3a:6a:f0:c8:2a:1b:38:23:da:3e:15:44: 9c:e9:2d:e7:96:0f:c9:03:14:22:8d:3b:34:c4:ee: db:1c:79:9a:76:90:88:8a:08:78:20:64:39:9f:74: 58:72:30:3c:b5:dc:fe:49:99:67:34:8b:1b:14:b6: 47:91:0b:62:ac:77:97:2c:51:08:24:8f:0c:4f:f3: 79:d1:75:cf:fa:1f:bc:4f:e2:ba:fc:55:4a:bd:75: b3:87:be:5a:1e:42:ff:bb:89:95:22:a7:ef:2f:31: 57:57:cf:e5:8c:56:b3:a1:d2:8b:9d:2f:14:bb:48: b3:a8:c9:80:1e:b0:23:33:7d:b7:24:0d:f4:2f:09: 7f:0e:c5:46:6f:ac:1e:83:66:ca:06:85:1c:ce:08: ae:b2:06:a4:28:3c:59:db:81:bd:5c:d3:33:09:bd: 52:b3:3e:a6:77:a2:20:c6:d7:b5:4e:7e:ec:be:b5: c3:39:47:bd:f3:cc:72:b8:0d:bf:ee:b0:43:05:99: a2:43:4c:ea:bb:ef:56:3a:3d:cf:08:14:0f:95:06: a6:f7:ad:7e:c3:ef:64:f1:9d:ac:32:e1:37:e2:87: f1:89:5a:66:78:5a:c5:bd:9a:ae:59:16:14:a6:6c: b2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1F:8C:0D:10:B9:E7:40:86:E5:44:ED:AF:18:A5:B1:E5:EC:C5:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/1b67fa3a-7071-398e-9616-287428534d31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.crl X509v3 Authority Key Identifier: keyid:CC:52:EE:D6:CD:6F:C2:A0:F3:2B:8E:12:3B:23:87:59:02:0B:35:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer sbgp-ipAddrBlock: critical IPv4: 64.187.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:96:9c:36:33:31:11:61:b9:aa:49:4f:ff:55:9a:a2:4a:b8: 14:84:9b:34:a1:79:a2:b5:31:e6:85:d3:a6:ca:74:8f:53:e2: b7:a3:24:73:ee:7d:bc:52:ad:a9:23:ea:d2:d8:82:b1:fe:4b: c6:3c:ef:79:85:d8:a0:e1:59:53:23:da:86:a0:c8:d2:8a:68: 15:82:4c:92:a7:0d:53:85:88:ea:6d:e1:b3:70:d2:aa:32:45: db:29:35:99:ec:a1:ad:79:3c:96:1d:e8:e2:7e:27:c7:5f:b1: 21:de:16:1f:a4:c6:e8:49:82:4c:58:a0:03:ec:cc:13:5b:df: 8c:cc:a9:f4:19:79:d0:79:9f:88:29:3c:6d:f5:52:14:1a:a6: ec:8f:5c:c9:24:22:a6:72:5e:52:ab:d5:4d:8b:c6:64:62:93: fc:76:2d:9b:f2:88:3d:c2:dd:14:5b:b6:ce:c5:ae:7f:ee:1d: 78:fe:5e:65:45:d1:8a:f3:fd:9a:d0:c0:bf:42:7a:a8:ec:3b: 1c:51:a7:be:00:8d:e8:28:10:e8:14:73:4a:88:34:cc:05:dc: 41:48:40:c8:09:bb:dc:3d:a5:8d:0a:6c:5b:95:22:e4:1b:c3: c8:7c:10:d5:e7:11:64:ac:28:ab:0e:c6:bc:a8:fb:52:4a:56: d3:e4:67:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXWgiEnoU+iaUUvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE4ZWY2OGEtMjBlYi00ZjZlLWE4MGUtNjE3YWExNDcz ZjA5MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk MDYwMmEyNWQtZGFkZS00ZTliLWI5MzMtOWVlZWM3ZjgyNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ46zHkKVv5uAyyuc5o4cOA6avDIKhs4I9o+ FUSc6S3nlg/JAxQijTs0xO7bHHmadpCIigh4IGQ5n3RYcjA8tdz+SZlnNIsbFLZH kQtirHeXLFEIJI8MT/N50XXP+h+8T+K6/FVKvXWzh75aHkL/u4mVIqfvLzFXV8/l jFazodKLnS8Uu0izqMmAHrAjM323JA30Lwl/DsVGb6weg2bKBoUczgiusgakKDxZ 24G9XNMzCb1Ssz6md6Igxte1Tn7svrXDOUe988xyuA2/7rBDBZmiQ0zqu+9WOj3P CBQPlQam961+w+9k8Z2sMuE34ofxiVpmeFrFvZquWRYUpmyyBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4fjA0QuedAhuVE7a8YpbHl7MUiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9kYThl ZjY4YS0yMGViLTRmNmUtYTgwZS02MTdhYTE0NzNmMDkvMWI2N2ZhM2EtNzA3MS0z OThlLTk2MTYtMjg3NDI4NTM0ZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZGE4ZWY2OGEtMjBlYi00ZjZlLWE4 MGUtNjE3YWExNDczZjA5L2RhOGVmNjhhLTIwZWItNGY2ZS1hODBlLTYxN2FhMTQ3 M2YwOS5jcmwwHwYDVR0jBBgwFoAUzFLu1s1vwqDzK44SOyOHWQILNTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9kYThlZjY4YS0yMGViLTRmNmUtYTgwZS02MTdh YTE0NzNmMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiWnDYzMRFhuapJT/9VmqJKuBSEmzSheaK1MeaF06bKdI9T4rejJHPu fbxSrakj6tLYgrH+S8Y873mF2KDhWVMj2oagyNKKaBWCTJKnDVOFiOpt4bNw0qoy RdspNZnsoa15PJYd6OJ+J8dfsSHeFh+kxuhJgkxYoAPszBNb34zMqfQZedB5n4gp PG31UhQapuyPXMkkIqZyXlKr1U2LxmRik/x2LZvyiD3C3RRbts7Frn/uHXj+XmVF 0Yrz/ZrQwL9CeqjsOxxRp74AjegoEOgUc0qINMwF3EFIQMgJu9w9pY0KbFuVIuQb w8h8ENXnEWSsKKsOxryo+1JKVtPkZ/g= -----END CERTIFICATE-----Generated at Sun Oct 11 21:08:07 2026 by rpki-client