$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1bf053ce-273c-34bc-8110-aa141c14782d.roa File: 1bf053ce-273c-34bc-8110-aa141c14782d.roa (raw, json) Hash identifier: POMH7F/dFXROu3Jam0qHuxX0AcanxYS3ulGzgjvXrU8= Subject key identifier: 88:E4:54:98:B4:E9:F8:73:E1:B0:D6:29:2C:4F:76:8E:5B:EA:FC:E3 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F6F23157334795EEC5CEFDC00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1bf053ce-273c-34bc-8110-aa141c14782d.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 5650 IP address blocks: 64.7.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:15:73:34:79:5e:ec:5c:ef:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=1af75e81-eccb-4920-aae7-4945093ce3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c5:f4:13:0d:db:80:c7:10:1d:12:5e:ef:3a: 04:01:66:78:af:4d:be:a2:10:36:f8:18:74:27:e0: 37:a3:2d:9c:69:d0:04:f8:82:88:a4:76:c2:48:6a: 27:a5:7d:e6:86:2f:ac:dc:59:45:1c:93:bf:03:93: 1a:7c:88:ba:4c:8b:92:ac:00:d6:6c:5e:fa:56:de: 03:d4:55:a2:aa:c3:a5:02:22:fb:88:33:93:0c:32: 62:3a:e4:10:c5:7a:08:d9:cc:30:e0:5a:60:6f:1b: 74:0c:47:dc:84:bd:73:ab:98:f1:f9:b4:c7:53:3d: c0:93:2a:fd:3d:59:be:28:fa:03:32:28:ed:83:98: ce:7c:77:3d:d6:6e:d5:e8:ec:00:fc:dc:fd:e0:ad: 76:fd:f9:87:29:db:89:d7:b5:b5:36:4e:b2:83:04: 66:54:56:e0:19:82:d9:26:35:af:69:27:10:59:77: ff:76:49:01:87:38:ab:21:dd:44:23:9e:c8:44:24: 42:e7:1d:37:a1:9f:f8:be:55:c3:e2:16:68:e2:da: dd:46:6a:4d:b1:44:25:2c:22:78:ea:ee:03:81:a8: 13:10:78:b1:d5:f8:1b:28:6d:b8:24:51:a3:6b:bd: 91:f3:f9:6a:eb:7c:23:ff:c3:9e:1c:b7:ab:de:87: 99:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E4:54:98:B4:E9:F8:73:E1:B0:D6:29:2C:4F:76:8E:5B:EA:FC:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1bf053ce-273c-34bc-8110-aa141c14782d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.7.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:0e:48:f5:57:fe:2d:e3:24:82:bc:e7:4f:27:8f:e9:c9:ee: 1b:ac:a7:12:d9:a1:73:f6:74:fe:04:2f:3c:27:a9:cb:38:5d: 1c:ca:9c:5f:2e:28:54:19:6a:ba:17:67:87:9e:72:e5:32:40: 46:28:33:2f:24:6d:15:a7:6b:34:5e:9c:85:81:32:8b:58:9f: cb:c8:af:b4:46:00:08:22:e7:f4:2e:52:1d:64:d4:3b:0b:86: 0f:8e:d0:10:eb:0d:8f:a7:49:fd:07:c5:30:5f:66:19:fb:1b: ac:5f:b5:f8:58:54:48:a3:78:c9:dd:d0:48:af:49:78:05:47: eb:84:66:05:29:66:14:61:f3:76:9e:07:63:5c:47:57:17:be: 65:51:03:54:da:a3:c3:6e:e7:cc:29:99:5f:e7:d7:24:df:71: b6:da:d9:b0:1c:5c:a2:3b:bd:e4:67:08:7b:37:a4:82:40:75: 62:f4:8b:2e:82:e9:c0:30:8a:e9:a8:00:56:84:ec:f6:d1:15: 76:22:ce:8d:d6:57:2e:95:1b:f0:07:db:23:93:93:7d:6d:7a: 1c:a6:d9:f8:39:1c:a5:63:3b:95:c8:c4:86:4f:40:04:33:07: c6:14:e2:6e:26:80:53:31:de:70:3c:b5:26:86:d1:f3:8a:7f: 10:da:fd:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIxVzNHle7Fzv3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk MWFmNzVlODEtZWNjYi00OTIwLWFhZTctNDk0NTA5M2NlM2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMX0Ew3bgMcQHRJe7zoEAWZ4r02+ohA2+Bh0 J+A3oy2cadAE+IKIpHbCSGonpX3mhi+s3FlFHJO/A5MafIi6TIuSrADWbF76Vt4D 1FWiqsOlAiL7iDOTDDJiOuQQxXoI2cww4Fpgbxt0DEfchL1zq5jx+bTHUz3Akyr9 PVm+KPoDMijtg5jOfHc91m7V6OwA/Nz94K12/fmHKduJ17W1Nk6ygwRmVFbgGYLZ JjWvaScQWXf/dkkBhzirId1EI57IRCRC5x03oZ/4vlXD4hZo4trdRmpNsUQlLCJ4 6u4DgagTEHix1fgbKG24JFGja72R8/lq63wj/8OeHLer3oeZ4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjkVJi06fhz4bDWKSxPdo5b6vzjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMWJmMDUzY2UtMjczYy0z NGJjLTgxMTAtYWExNDFjMTQ3ODJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQAcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4OSPVX/i3jJIK8508nj+nJ7huspxLZoXP2dP4ELzwnqcs4XRzKnF8u KFQZaroXZ4eecuUyQEYoMy8kbRWnazRenIWBMotYn8vIr7RGAAgi5/QuUh1k1DsL hg+O0BDrDY+nSf0HxTBfZhn7G6xftfhYVEijeMnd0EivSXgFR+uEZgUpZhRh83ae B2NcR1cXvmVRA1Tao8Nu58wpmV/n1yTfcbba2bAcXKI7veRnCHs3pIJAdWL0iy6C 6cAwiumoAFaE7PbRFXYizo3WVy6VG/AH2yOTk31tehym2fg5HKVjO5XIxIZPQAQz B8YU4m4mgFMx3nA8tSaG0fOKfxDa/aE= -----END CERTIFICATE-----Generated at Sat Oct 10 22:32:41 2026 by rpki-client