$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1caa5efd-6c29-3c48-a47e-8ed1a8c1133c.roa File: 1caa5efd-6c29-3c48-a47e-8ed1a8c1133c.roa (raw, json) Hash identifier: 9YQvfApJ81QE2AiQQvsxdhTKu6Zg6FhSvkQqVw9BZWg= Subject key identifier: FC:D0:22:34:2D:71:88:AC:7E:41:87:42:2E:63:50:90:CE:27:3B:00 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F910FCC3FA5322E8CCE9BAC40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1caa5efd-6c29-3c48-a47e-8ed1a8c1133c.roa Signing time: Tue 20 Oct 2026 16:39:29 +0000 ROA not before: Tue 20 Oct 2026 16:39:29 +0000 ROA not after: Mon 18 Jan 2027 17:39:29 +0000 asID: 136809 IP address blocks: 68.164.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:91:0f:cc:3f:a5:32:2e:8c:ce:9b:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 20 16:39:29 2026 GMT Not After : Jan 18 17:39:29 2027 GMT Subject: CN=76f93866-b9ae-40e7-833f-548f3a801033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:29:92:c1:97:be:e9:4b:59:69:ed:8f:b8:5b: f2:19:8a:24:6c:00:90:e6:6c:01:e6:2a:89:db:f0: d4:ef:30:e8:db:22:db:e3:7b:06:9d:e9:47:2b:98: d0:77:e2:99:00:d3:f8:54:b8:97:11:ac:c3:28:20: 7c:f9:91:a4:dc:73:ef:2f:27:b3:a7:df:f2:a9:f6: 69:a0:1e:87:57:4f:22:e5:41:ae:36:43:4f:da:60: 61:cc:26:fc:fc:c6:f2:b4:a2:66:09:de:4b:1e:7b: 0f:da:81:be:9e:18:10:b6:5b:a8:f0:32:4e:e5:b1: 26:eb:56:da:50:aa:9e:00:26:ef:cb:00:bf:e9:a2: 8e:8b:d1:7d:c8:8d:a0:84:b6:4e:1c:71:94:69:ab: 6e:c0:21:23:d5:7c:6a:14:8d:2f:0f:1c:76:a8:05: d2:72:30:ef:93:a8:48:14:6a:f4:91:a5:a8:dc:0b: b5:5c:fe:ba:63:7b:3b:aa:3e:63:88:ed:b6:b0:28: e1:b1:60:f4:51:88:c0:f3:73:0c:4a:5a:d7:82:a6: a4:7c:72:a3:c8:0c:21:82:b7:75:26:ef:a9:c4:50: 94:2f:ce:c3:9e:b7:ef:97:ab:ef:17:dc:51:ee:a4: 2c:ee:9e:75:c4:c6:64:1d:ee:0f:4f:f4:fa:a0:0f: 72:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D0:22:34:2D:71:88:AC:7E:41:87:42:2E:63:50:90:CE:27:3B:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1caa5efd-6c29-3c48-a47e-8ed1a8c1133c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:90:48:6d:94:85:7d:dd:d2:2f:72:2a:09:ae:1b:22:d7:65: 0b:3c:5a:53:15:bf:0f:fa:8a:cc:fd:43:d1:34:7e:ab:5c:f2: f5:9b:43:9f:2e:9d:81:e1:ef:2e:92:01:70:ec:cc:27:91:6b: 90:4b:b1:4b:e5:2d:30:bb:19:1c:36:6f:65:41:17:7f:58:4c: b8:06:46:46:5c:ee:30:38:42:99:1a:66:02:37:6c:6a:75:31: d7:02:a5:c3:c1:d3:2b:d9:9f:7b:d0:5c:dd:0f:e7:73:69:2d: f5:78:97:37:6c:6b:ab:ac:3f:70:89:ff:0a:59:71:f5:3c:e9: 01:11:d4:39:83:b1:28:b8:f3:96:21:7f:fc:a2:d7:72:4f:69: 3a:34:5b:4f:9c:47:f9:0a:4b:33:5d:09:fa:fc:74:16:6e:13: 09:1f:52:b3:52:11:50:1d:68:72:56:40:1c:6e:11:c3:11:3f: 13:b2:ee:18:4c:86:8d:36:58:3d:a5:0f:82:3a:09:14:40:aa: ab:89:07:65:32:03:f9:7e:a8:19:f9:a9:a1:c5:e2:00:9e:ec: 92:a7:11:ef:80:82:e8:0e:c5:ed:8f:8e:e1:ff:9c:59:61:db: 05:b8:42:74:bf:82:25:d8:89:6b:f9:fe:af:19:0b:e8:d0:f9: c0:65:52:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+RD8w/pTIujM6brEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAyMDE2MzkyOVoXDTI3MDExODE3MzkyOVowLzEtMCsGA1UEAxMk NzZmOTM4NjYtYjlhZS00MGU3LTgzM2YtNTQ4ZjNhODAxMDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoimSwZe+6UtZae2PuFvyGYokbACQ5mwB5iqJ 2/DU7zDo2yLb43sGnelHK5jQd+KZANP4VLiXEazDKCB8+ZGk3HPvLyezp9/yqfZp oB6HV08i5UGuNkNP2mBhzCb8/MbytKJmCd5LHnsP2oG+nhgQtluo8DJO5bEm61ba UKqeACbvywC/6aKOi9F9yI2ghLZOHHGUaatuwCEj1XxqFI0vDxx2qAXScjDvk6hI FGr0kaWo3Au1XP66Y3s7qj5jiO22sCjhsWD0UYjA83MMSlrXgqakfHKjyAwhgrd1 Ju+pxFCUL87Dnrfvl6vvF9xR7qQs7p51xMZkHe4PT/T6oA9yRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzQIjQtcYisfkGHQi5jUJDOJzsAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMWNhYTVlZmQtNmMyOS0z YzQ4LWE0N2UtOGVkMWE4YzExMzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKQJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCQSG2UhX3d0i9yKgmuGyLXZQs8WlMVvw/6isz9Q9E0fqtc8vWbQ58u nYHh7y6SAXDszCeRa5BLsUvlLTC7GRw2b2VBF39YTLgGRkZc7jA4QpkaZgI3bGp1 MdcCpcPB0yvZn3vQXN0P53NpLfV4lzdsa6usP3CJ/wpZcfU86QER1DmDsSi485Yh f/yi13JPaTo0W0+cR/kKSzNdCfr8dBZuEwkfUrNSEVAdaHJWQBxuEcMRPxOy7hhM ho02WD2lD4I6CRRAqquJB2UyA/l+qBn5qaHF4gCe7JKnEe+AgugOxe2PjuH/nFlh 2wW4QnS/giXYiWv5/q8ZC+jQ+cBlUv4= -----END CERTIFICATE-----Generated at Mon Oct 26 06:23:07 2026 by rpki-client