$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/a1dfb53a-b73c-3e22-b074-38786c83f94a.roa File: a1dfb53a-b73c-3e22-b074-38786c83f94a.roa (raw, json) Hash identifier: NKv29VywFnOEaL88EJ8EOAyDIUzg8ec+m/jh0yHoQPE= Subject key identifier: 1B:4F:5F:50:71:BA:74:6B:28:A6:A1:E9:D5:D0:E1:78:BB:DB:9E:C8 Certificate issuer: /CN=da8ef68a-20eb-4f6e-a80e-617aa1473f09 Certificate serial: 010D0C9F4328584F655D6849238B1A905ACCB000 Authority key identifier: CC:52:EE:D6:CD:6F:C2:A0:F3:2B:8E:12:3B:23:87:59:02:0B:35:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/a1dfb53a-b73c-3e22-b074-38786c83f94a.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 40933 IP address blocks: 64.187.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:68:49:23:8b:1a:90:5a:cc:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8ef68a-20eb-4f6e-a80e-617aa1473f09 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=31eaa94a-c80a-40a9-82e4-e0c96691a026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7b:ed:f7:2f:09:71:5f:72:e0:1d:57:1d:97: ac:fa:be:08:1b:31:a4:f4:73:d7:37:f9:83:cd:26: 74:b7:40:de:3b:9b:69:79:24:7b:3f:ba:3b:35:27: 25:ed:71:dc:17:8a:d9:52:c7:c3:d3:e3:c1:63:71: 9f:86:29:e3:bf:36:85:81:b0:63:30:2c:31:d6:b1: a5:e2:4b:ad:11:0e:30:a0:ec:10:f0:af:2f:11:40: e9:1e:26:45:10:b3:e7:a4:a1:47:6c:ba:35:2b:ab: f5:98:85:d9:18:a9:24:f3:95:8e:a4:26:b9:e7:df: c9:8a:5a:31:0b:41:5c:6b:dc:a7:06:b8:f9:a4:47: ca:14:cc:f8:86:a0:16:fd:62:3c:4c:b5:2f:ae:63: 30:e4:78:43:eb:65:23:fc:06:cc:7c:d2:c6:19:47: e9:dc:6b:31:2d:98:22:17:85:23:e5:5f:65:cf:08: e7:40:1f:75:c7:71:33:79:d5:17:e5:3a:7f:26:bb: f4:e1:85:47:66:d9:93:4d:2c:97:b4:1a:9b:97:9c: 37:c3:af:05:ba:d5:5a:b9:88:76:fb:b3:90:9e:d0: 30:e6:c1:bb:82:da:63:54:34:8e:13:b4:3c:27:45: fc:23:36:0e:bf:bc:6d:c4:3f:27:9e:a1:53:20:dd: ea:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4F:5F:50:71:BA:74:6B:28:A6:A1:E9:D5:D0:E1:78:BB:DB:9E:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/a1dfb53a-b73c-3e22-b074-38786c83f94a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.crl X509v3 Authority Key Identifier: keyid:CC:52:EE:D6:CD:6F:C2:A0:F3:2B:8E:12:3B:23:87:59:02:0B:35:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer sbgp-ipAddrBlock: critical IPv4: 64.187.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:aa:98:07:61:ad:d7:98:61:f6:3a:09:89:db:af:21:b0:88: 1a:4b:30:32:cc:ef:ad:13:d4:fa:70:91:c7:4d:40:4b:49:07: bc:68:b1:bd:4f:5d:0f:e2:7b:fc:14:b8:6b:46:54:22:cd:06: a9:4d:10:90:d0:31:1b:b3:62:2b:2c:72:37:e4:8a:51:d8:20: fc:3d:0d:05:03:8c:97:23:ed:a4:30:63:46:85:ee:bf:20:2c: 3e:2f:ca:32:a6:08:b2:5d:07:a5:6e:23:6a:33:0a:5f:f7:88: 20:e2:6c:21:6b:c6:1a:c5:cc:2e:50:2b:97:fc:7f:a2:c3:4f: 51:dc:a8:ef:5d:12:fa:58:d2:d0:ff:f7:97:76:4d:0d:4d:3c: eb:bd:e3:26:b5:87:83:ad:b9:77:10:bb:07:e7:eb:56:eb:a4: f5:fb:e4:db:b6:57:a8:56:f4:35:c9:57:f2:b0:82:1e:2d:1b: 44:e2:f3:99:23:ae:63:31:35:da:da:f4:88:66:74:2b:cc:2a: d8:cd:10:43:6a:79:6d:15:be:20:34:75:fd:bc:5f:2e:99:a7: d7:bb:72:2e:1b:c5:8d:b1:20:b9:24:af:e7:7b:cf:44:33:e8: d1:80:88:f8:b9:f3:5c:71:bd:c7:29:ca:92:08:62:9a:e1:64: 4a:8f:1e:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXWhJI4sakFrMsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE4ZWY2OGEtMjBlYi00ZjZlLWE4MGUtNjE3YWExNDcz ZjA5MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk MzFlYWE5NGEtYzgwYS00MGE5LTgyZTQtZTBjOTY2OTFhMDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHvt9y8JcV9y4B1XHZes+r4IGzGk9HPXN/mD zSZ0t0DeO5tpeSR7P7o7NScl7XHcF4rZUsfD0+PBY3GfhinjvzaFgbBjMCwx1rGl 4kutEQ4woOwQ8K8vEUDpHiZFELPnpKFHbLo1K6v1mIXZGKkk85WOpCa559/Jilox C0Fca9ynBrj5pEfKFMz4hqAW/WI8TLUvrmMw5HhD62Uj/AbMfNLGGUfp3GsxLZgi F4Uj5V9lzwjnQB91x3EzedUX5Tp/Jrv04YVHZtmTTSyXtBqbl5w3w68FutVauYh2 +7OQntAw5sG7gtpjVDSOE7Q8J0X8IzYOv7xtxD8nnqFTIN3qrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtPX1BxunRrKKah6dXQ4Xi7257IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9kYThl ZjY4YS0yMGViLTRmNmUtYTgwZS02MTdhYTE0NzNmMDkvYTFkZmI1M2EtYjczYy0z ZTIyLWIwNzQtMzg3ODZjODNmOTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZGE4ZWY2OGEtMjBlYi00ZjZlLWE4 MGUtNjE3YWExNDczZjA5L2RhOGVmNjhhLTIwZWItNGY2ZS1hODBlLTYxN2FhMTQ3 M2YwOS5jcmwwHwYDVR0jBBgwFoAUzFLu1s1vwqDzK44SOyOHWQILNTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9kYThlZjY4YS0yMGViLTRmNmUtYTgwZS02MTdh YTE0NzNmMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLvDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiqmAdhrdeYYfY6CYnbryGwiBpLMDLM760T1PpwkcdNQEtJB7xosb1P XQ/ie/wUuGtGVCLNBqlNEJDQMRuzYisscjfkilHYIPw9DQUDjJcj7aQwY0aF7r8g LD4vyjKmCLJdB6VuI2ozCl/3iCDibCFrxhrFzC5QK5f8f6LDT1HcqO9dEvpY0tD/ 95d2TQ1NPOu94ya1h4OtuXcQuwfn61brpPX75Nu2V6hW9DXJV/Kwgh4tG0Ti85kj rmMxNdra9IhmdCvMKtjNEENqeW0VviA0df28Xy6Zp9e7ci4bxY2xILkkr+d7z0Qz 6NGAiPi581xxvccpypIIYprhZEqPHqg= -----END CERTIFICATE-----Generated at Tue Oct 13 08:36:14 2026 by rpki-client