$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/ebf94e0b-f3da-3bb5-a5e0-28ead16c459a.roa File: ebf94e0b-f3da-3bb5-a5e0-28ead16c459a.roa (raw, json) Hash identifier: +gj12tTE1BEaNr2Zlw1sMUHVBhjNzo2pyQC0JTTMGF4= Subject key identifier: C4:D3:EC:AC:5D:D6:3E:8E:28:AA:5A:6E:C1:C1:B3:0E:9F:BA:6D:87 Certificate issuer: /CN=da8ef68a-20eb-4f6e-a80e-617aa1473f09 Certificate serial: 010D0C9F4328584EC3314864F338A7F94E7A5400 Authority key identifier: CC:52:EE:D6:CD:6F:C2:A0:F3:2B:8E:12:3B:23:87:59:02:0B:35:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/ebf94e0b-f3da-3bb5-a5e0-28ead16c459a.roa Signing time: Fri 07 Aug 2026 22:50:26 +0000 ROA not before: Fri 07 Aug 2026 22:50:26 +0000 ROA not after: Thu 05 Nov 2026 23:50:26 +0000 asID: 40933 IP address blocks: 64.187.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:31:48:64:f3:38:a7:f9:4e:7a:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8ef68a-20eb-4f6e-a80e-617aa1473f09 Validity Not Before: Aug 7 22:50:26 2026 GMT Not After : Nov 5 23:50:26 2026 GMT Subject: CN=8aec120b-a6ea-4d6a-b83c-48e4f34c1c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4e:52:b1:7f:7e:fe:ca:bd:35:1f:72:4b:87: 95:59:63:f9:0a:05:7d:7a:bb:45:eb:62:11:17:33: 08:16:b9:4a:0f:84:79:e1:d3:f0:3a:c3:11:f0:6a: f2:11:53:d9:87:7c:3b:f5:7f:b3:2c:81:bd:db:f5: 06:40:d1:2d:42:85:77:74:9e:12:e6:45:85:1a:69: b2:37:41:49:b4:6b:58:34:6b:1e:a7:6e:05:61:27: 22:e1:6b:81:67:c2:30:f7:f9:47:ad:6c:b4:f9:19: 3f:9b:ae:fd:d1:04:1c:84:fc:1b:ab:14:ad:3b:3e: 1f:de:a8:8e:a6:c1:df:ff:b5:e7:5f:ad:42:6c:9b: 6e:98:c0:50:75:fc:5a:a7:71:75:93:86:d3:16:c2: c5:e2:63:62:8d:12:54:a5:30:46:eb:25:40:cd:82: 29:bc:d0:46:51:e9:59:6a:74:f2:d9:07:91:8f:49: 4c:db:89:75:d4:1b:19:4b:c8:27:30:14:f4:66:3d: 0f:75:0a:32:56:d2:ea:90:0a:70:a8:d4:87:2f:ba: 93:13:ae:c3:82:07:e9:00:b1:f8:4c:a9:10:d1:bd: be:90:3d:84:21:ae:3a:00:2c:42:be:4b:72:9c:67: 87:38:e6:41:0e:73:32:7f:2a:b9:29:66:72:5e:1b: c9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D3:EC:AC:5D:D6:3E:8E:28:AA:5A:6E:C1:C1:B3:0E:9F:BA:6D:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/ebf94e0b-f3da-3bb5-a5e0-28ead16c459a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.crl X509v3 Authority Key Identifier: keyid:CC:52:EE:D6:CD:6F:C2:A0:F3:2B:8E:12:3B:23:87:59:02:0B:35:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer sbgp-ipAddrBlock: critical IPv4: 64.187.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:dc:f7:7e:6a:ac:15:88:41:9d:d9:80:49:b9:a0:7f:b8:bf: 10:d0:ae:fe:dd:a1:40:9f:55:8b:dd:cd:69:f0:e7:95:ca:01: 36:81:90:2f:93:ad:7c:b6:dc:32:19:fd:05:50:6c:fa:e9:51: 3f:27:a2:6e:d9:ad:76:f7:8b:77:bb:5b:0e:7c:ac:c9:04:ef: 89:a5:ae:ff:74:74:30:12:43:85:35:d5:1c:0d:98:e5:da:d0: 09:89:61:e8:4f:bd:03:25:92:1d:36:e0:e6:19:f2:b5:07:f8: c7:81:72:d6:b8:91:57:5f:4c:2c:b0:df:3e:80:8c:f8:3b:26: dd:3b:4b:c5:7d:54:b5:cb:1c:22:78:35:c4:b7:45:fe:13:37: dc:62:77:01:c2:98:c0:26:13:72:a8:2a:d3:2f:87:4d:38:7b: 71:b6:3e:3a:a4:8c:a2:38:ea:64:f0:93:af:55:9e:cd:7f:8d: 27:a8:4e:7e:01:d1:86:a1:b4:33:d8:4b:45:ca:46:90:94:aa: 94:8c:d2:ed:2a:77:ac:6f:da:7c:29:09:a6:62:f3:93:bc:4f: 4a:06:00:25:e9:33:d0:1b:fd:c7:dd:6f:bc:d6:9a:f9:99:b2: 6b:a6:8a:59:d6:d6:47:b2:7c:69:c3:4b:36:81:27:48:cc:60: f4:24:0b:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DMUhk8zin+U56VAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE4ZWY2OGEtMjBlYi00ZjZlLWE4MGUtNjE3YWExNDcz ZjA5MB4XDTI2MDgwNzIyNTAyNloXDTI2MTEwNTIzNTAyNlowLzEtMCsGA1UEAxMk OGFlYzEyMGItYTZlYS00ZDZhLWI4M2MtNDhlNGYzNGMxYzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp05SsX9+/sq9NR9yS4eVWWP5CgV9ertF62IR FzMIFrlKD4R54dPwOsMR8GryEVPZh3w79X+zLIG92/UGQNEtQoV3dJ4S5kWFGmmy N0FJtGtYNGsep24FYSci4WuBZ8Iw9/lHrWy0+Rk/m6790QQchPwbqxStOz4f3qiO psHf/7XnX61CbJtumMBQdfxap3F1k4bTFsLF4mNijRJUpTBG6yVAzYIpvNBGUelZ anTy2QeRj0lM24l11BsZS8gnMBT0Zj0PdQoyVtLqkApwqNSHL7qTE67DggfpALH4 TKkQ0b2+kD2EIa46ACxCvktynGeHOOZBDnMyfyq5KWZyXhvJFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTT7Kxd1j6OKKpabsHBsw6fum2HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9kYThl ZjY4YS0yMGViLTRmNmUtYTgwZS02MTdhYTE0NzNmMDkvZWJmOTRlMGItZjNkYS0z YmI1LWE1ZTAtMjhlYWQxNmM0NTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZGE4ZWY2OGEtMjBlYi00ZjZlLWE4 MGUtNjE3YWExNDczZjA5L2RhOGVmNjhhLTIwZWItNGY2ZS1hODBlLTYxN2FhMTQ3 M2YwOS5jcmwwHwYDVR0jBBgwFoAUzFLu1s1vwqDzK44SOyOHWQILNTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9kYThlZjY4YS0yMGViLTRmNmUtYTgwZS02MTdh YTE0NzNmMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLvMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/c935qrBWIQZ3ZgEm5oH+4vxDQrv7doUCfVYvdzWnw55XKATaBkC+T rXy23DIZ/QVQbPrpUT8nom7ZrXb3i3e7Ww58rMkE74mlrv90dDASQ4U11RwNmOXa 0AmJYehPvQMlkh024OYZ8rUH+MeBcta4kVdfTCyw3z6AjPg7Jt07S8V9VLXLHCJ4 NcS3Rf4TN9xidwHCmMAmE3KoKtMvh004e3G2PjqkjKI46mTwk69Vns1/jSeoTn4B 0YahtDPYS0XKRpCUqpSM0u0qd6xv2nwpCaZi85O8T0oGACXpM9Ab/cfdb7zWmvmZ smumilnW1keyfGnDSzaBJ0jMYPQkCzg= -----END CERTIFICATE-----Generated at Wed Aug 26 14:47:06 2026 by rpki-client