$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/08b6a567-8337-3e4f-8463-60f1a5d7f8a1.roa File: 08b6a567-8337-3e4f-8463-60f1a5d7f8a1.roa (raw, json) Hash identifier: 3sLQExTaAGGFLPUE5XG1Q6r3LKBCKiDIacDLrAIAsMo= Subject key identifier: 03:32:EA:2F:E6:0F:9A:4F:09:B6:4A:FD:86:C3:14:97:73:B3:5E:0D Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F49731E50D9EF4415872B2900 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/08b6a567-8337-3e4f-8463-60f1a5d7f8a1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 9009 IP address blocks: 68.165.136.0/22 maxlen: 22 68.165.212.0/22 maxlen: 22 68.165.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:1e:50:d9:ef:44:15:87:2b:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d7d8028e-7f16-4dd6-ad8a-8dc40ef6fe1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f8:1a:57:07:b8:fe:78:c5:03:61:8c:09:a1: f1:db:53:ed:4d:5d:12:10:93:88:46:89:1d:3a:52: a1:9b:a7:0c:02:34:7c:56:50:33:bb:65:06:6b:36: 5b:97:24:b2:c2:33:18:08:df:fe:a9:f6:ac:41:7e: 0a:f3:82:60:14:0b:fa:b1:77:a0:62:6b:6a:eb:69: 73:54:9e:ac:13:e9:00:f0:50:43:ad:75:5e:2c:2a: 34:44:52:18:20:51:8a:a1:a1:96:ae:49:4d:77:5e: 1a:c2:9b:a7:13:e8:a6:e7:ed:06:d3:fa:3e:5a:e1: 05:de:45:bd:66:c5:bd:1a:e6:c3:cb:9b:52:a7:10: 50:ae:d0:c2:15:97:a4:3a:82:cb:9d:ec:cf:ac:1d: 07:9e:7c:80:f7:75:3c:a7:3c:10:8b:52:03:2e:17: a5:68:e1:1b:64:c6:54:08:15:5c:c6:06:df:00:01: 13:95:e5:9f:49:5d:94:18:51:b3:34:11:e2:70:34: d9:b6:67:77:4d:ab:7e:7e:a2:06:f9:bd:11:0a:3d: ed:dc:dc:65:a1:58:e5:69:7b:ed:a9:e0:80:38:2b: 7c:7f:63:32:2a:3e:31:94:ef:a4:83:b5:1c:bd:5a: 33:15:50:30:6b:0c:57:ba:ab:80:b4:17:09:e8:66: f2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:32:EA:2F:E6:0F:9A:4F:09:B6:4A:FD:86:C3:14:97:73:B3:5E:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/08b6a567-8337-3e4f-8463-60f1a5d7f8a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.165.136.0/22 68.165.212.0/22 68.165.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:90:5f:e0:4f:a5:d9:30:af:af:0a:41:8d:53:86:5f:1d:06: b7:b3:e5:b3:d2:42:49:34:9c:4b:89:79:1c:18:92:06:c4:0d: 25:8e:0b:05:8b:4e:cd:b8:80:bf:b8:10:0e:40:b3:72:8e:69: 00:2e:d8:c7:0f:8a:34:ae:1c:aa:00:b8:5e:a7:0d:05:e6:e8: cf:db:f0:c0:5f:48:da:57:3d:9c:4c:63:63:f4:ee:47:63:0c: cf:cc:3c:0e:41:cb:45:d4:15:5d:02:a7:e9:b0:f3:06:33:0c: 3d:98:e5:63:dd:33:5b:fc:69:c4:7f:e1:91:4a:12:ea:5b:02: fa:1a:23:97:1d:2d:d1:a9:dd:98:27:8b:1b:69:6b:fd:7f:54: 92:9e:eb:91:2f:4e:1a:e3:97:7c:cf:3c:e0:ea:1d:0b:36:a5: d5:21:e6:e6:71:dd:76:55:fa:9b:c1:c6:e6:07:7e:21:7c:59: 8e:c2:a6:b0:be:50:5b:5c:24:e9:0b:0d:80:99:86:c5:b4:21: c0:16:18:57:48:f5:a4:f3:29:30:56:6e:03:48:96:51:51:a9: 1d:f2:e7:4f:ee:63:9b:20:42:f0:48:0e:3d:15:18:3d:a0:78: af:80:55:70:0c:21:5e:99:fa:89:20:1d:88:e7:c2:50:56:bb: 55:a8:ca:12 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9Jcx5Q2e9EFYcrKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDdkODAyOGUtN2YxNi00ZGQ2LWFkOGEtOGRjNDBlZjZmZTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPgaVwe4/njFA2GMCaHx21PtTV0SEJOIRokd OlKhm6cMAjR8VlAzu2UGazZblySywjMYCN/+qfasQX4K84JgFAv6sXegYmtq62lz VJ6sE+kA8FBDrXVeLCo0RFIYIFGKoaGWrklNd14awpunE+im5+0G0/o+WuEF3kW9 ZsW9GubDy5tSpxBQrtDCFZekOoLLnezPrB0HnnyA93U8pzwQi1IDLhelaOEbZMZU CBVcxgbfAAETleWfSV2UGFGzNBHicDTZtmd3Tat+fqIG+b0RCj3t3NxloVjlaXvt qeCAOCt8f2MyKj4xlO+kg7UcvVozFVAwawxXuquAtBcJ6GbyOQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFAMy6i/mD5pPCbZK/YbDFJdzs14NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDhiNmE1NjctODMzNy0z ZTRmLTg0NjMtNjBmMWE1ZDdmOGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCRKWIAwQC RKXUAwQCRKXoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEeQX+BPpdkwr68KQY1Thl8dBrez5bPSQkk0nEuJ eRwYkgbEDSWOCwWLTs24gL+4EA5As3KOaQAu2McPijSuHKoAuF6nDQXm6M/b8MBf SNpXPZxMY2P07kdjDM/MPA5By0XUFV0Cp+mw8wYzDD2Y5WPdM1v8acR/4ZFKEupb AvoaI5cdLdGp3Zgnixtpa/1/VJKe65EvThrjl3zPPODqHQs2pdUh5uZx3XZV+pvB xuYHfiF8WY7CprC+UFtcJOkLDYCZhsW0IcAWGFdI9aTzKTBWbgNIllFRqR3y50/u Y5sgQvBIDj0VGD2geK+AVXAMIV6Z+okgHYjnwlBWu1WoyhI= -----END CERTIFICATE-----Generated at Sat Oct 10 19:56:23 2026 by rpki-client