$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/125e4156-7110-329f-afdf-2415c5de25b3.roa File: 125e4156-7110-329f-afdf-2415c5de25b3.roa (raw, json) Hash identifier: BruVEvsCsrsUG2OSG5+zhg+y+kQpktLx4QYf3yfUXT8= Subject key identifier: 63:A2:41:C1:7A:62:42:C7:AF:E3:44:66:DA:48:1E:7F:8F:89:3F:95 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F6DA0BBDCDE99AA6180F69600 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/125e4156-7110-329f-afdf-2415c5de25b3.roa Signing time: Thu 08 Oct 2026 00:02:25 +0000 ROA not before: Thu 08 Oct 2026 00:02:25 +0000 ROA not after: Wed 06 Jan 2027 01:02:25 +0000 asID: 834 IP address blocks: 64.204.50.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6d:a0:bb:dc:de:99:aa:61:80:f6:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 8 00:02:25 2026 GMT Not After : Jan 6 01:02:25 2027 GMT Subject: CN=5e7d94b0-141c-456e-94aa-921cb3ad4e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1d:91:60:c0:8c:9c:89:a4:02:89:97:bb:3f: 6a:d5:7a:5d:06:a6:66:b3:5e:a6:74:b1:75:34:68: 31:fd:06:4f:3e:4e:ea:b9:2c:90:bf:c5:76:1b:51: 26:7c:df:cb:a2:53:01:1d:c9:fb:d0:f2:c4:5d:25: 1a:db:44:30:69:e0:11:ef:6c:e5:57:43:6b:dd:e1: 7e:c4:61:ae:62:87:af:29:ac:3f:a0:18:75:00:36: ae:ad:04:56:87:c2:c6:a1:e5:9f:40:ce:a0:03:5d: 7b:1b:d7:c3:7c:b1:d0:d9:73:e3:2e:73:5f:25:77: a9:24:06:c5:dd:3d:06:d5:86:2d:cb:92:99:c7:88: 6a:79:a0:e7:2e:a4:ed:93:1c:73:ad:b9:04:e5:b6: e6:c3:83:cf:54:07:9f:00:86:0d:ff:49:d9:51:6f: e0:7b:36:f2:95:5c:84:ac:b1:2f:d6:3d:a7:0c:89: a0:29:31:39:9c:9d:fb:42:a5:5f:43:49:ed:e2:d7: 45:a3:9b:18:13:04:20:ea:26:79:65:52:37:a5:c3: 1d:80:87:80:d0:0f:f7:86:6c:60:40:28:88:25:16: 28:0e:d0:75:d3:1f:07:20:c6:fc:46:d5:7e:5a:5d: cc:db:c5:ca:b2:93:83:c8:be:f6:88:22:96:0b:ae: c6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A2:41:C1:7A:62:42:C7:AF:E3:44:66:DA:48:1E:7F:8F:89:3F:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/125e4156-7110-329f-afdf-2415c5de25b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.50.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:f2:f6:de:7e:ac:b0:a9:5d:5c:de:2b:db:73:04:5f:52:3f: dc:80:f3:77:b0:50:35:b7:60:3e:b3:8b:c6:4d:08:4d:9f:de: 43:bd:cb:9f:d8:29:98:3e:2e:dd:5c:4b:a7:2f:50:f1:cf:5a: 78:b2:1b:94:49:38:bb:82:15:bd:35:4b:b3:d1:35:d1:5f:53: 5f:b0:a0:8f:df:50:02:48:38:4e:80:bf:24:b4:6e:a1:57:be: bb:a8:a5:f4:c9:4b:1e:cf:dd:ac:f2:fd:4d:77:15:d1:f8:87: 14:0e:dd:fd:ec:4f:86:2c:ed:0b:3a:79:6c:9e:d3:8d:ae:f7: f6:fb:a6:07:4e:86:59:38:10:0d:96:a7:55:c0:c1:f5:35:2b: f0:60:a5:78:41:6b:55:1d:69:ef:14:dc:a3:11:cc:f9:fc:79: 85:3f:e9:e3:6a:55:47:b6:0c:2b:e0:b4:da:ad:9c:57:bc:84: 88:78:33:9b:80:c4:01:c5:bf:27:10:78:09:ac:37:81:21:d8: dc:93:53:0d:cb:af:f2:32:2d:f8:09:cb:b5:23:76:1f:b6:69: 61:d2:bf:15:93:7b:e9:fc:a5:b1:4b:9e:62:fd:dd:53:62:58: f6:81:02:58:1c:80:cf:fd:f8:05:9f:fd:99:92:03:90:34:1a: cd:24:4f:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9toLvc3pmqYYD2lgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwODAwMDIyNVoXDTI3MDEwNjAxMDIyNVowLzEtMCsGA1UEAxMk NWU3ZDk0YjAtMTQxYy00NTZlLTk0YWEtOTIxY2IzYWQ0ZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2R2RYMCMnImkAomXuz9q1XpdBqZms16mdLF1 NGgx/QZPPk7quSyQv8V2G1EmfN/LolMBHcn70PLEXSUa20QwaeAR72zlV0Nr3eF+ xGGuYoevKaw/oBh1ADaurQRWh8LGoeWfQM6gA117G9fDfLHQ2XPjLnNfJXepJAbF 3T0G1YYty5KZx4hqeaDnLqTtkxxzrbkE5bbmw4PPVAefAIYN/0nZUW/gezbylVyE rLEv1j2nDImgKTE5nJ37QqVfQ0nt4tdFo5sYEwQg6iZ5ZVI3pcMdgIeA0A/3hmxg QCiIJRYoDtB10x8HIMb8RtV+Wl3M28XKspODyL72iCKWC67GgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOiQcF6YkLHr+NEZtpIHn+PiT+VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMTI1ZTQxNTYtNzExMC0z MjlmLWFmZGYtMjQxNWM1ZGUyNWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQMwyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjy9t5+rLCpXVzeK9tzBF9SP9yA83ewUDW3YD6zi8ZNCE2f3kO9y5/Y KZg+Lt1cS6cvUPHPWniyG5RJOLuCFb01S7PRNdFfU1+woI/fUAJIOE6AvyS0bqFX vruopfTJSx7P3azy/U13FdH4hxQO3f3sT4Ys7Qs6eWye042u9/b7pgdOhlk4EA2W p1XAwfU1K/BgpXhBa1Udae8U3KMRzPn8eYU/6eNqVUe2DCvgtNqtnFe8hIh4M5uA xAHFvycQeAmsN4Eh2NyTUw3Lr/IyLfgJy7Ujdh+2aWHSvxWTe+n8pbFLnmL93VNi WPaBAlgcgM/9+AWf/ZmSA5A0Gs0kT5U= -----END CERTIFICATE-----Generated at Sun Oct 11 06:51:25 2026 by rpki-client