$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1cec2629-402e-3ceb-8ccc-f217d66c3876.roa File: 1cec2629-402e-3ceb-8ccc-f217d66c3876.roa (raw, json) Hash identifier: nfLIlg/WELoNkcIqbb8oz+fjDm4CLuzuPD0ABTXwMHo= Subject key identifier: 5A:97:9B:0D:52:1E:A5:14:F4:10:27:F3:88:5B:72:43:1D:23:C4:98 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F0ED2410A8E6BF441F2D1E5C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1cec2629-402e-3ceb-8ccc-f217d66c3876.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 39521 IP address blocks: 68.165.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:41:0a:8e:6b:f4:41:f2:d1:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=3474024e-536d-4aac-b486-b4f44448b0b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5d:43:81:9a:34:85:e0:ab:b9:74:34:74:72: 4c:07:c6:86:bb:d3:6b:79:db:09:9d:6a:06:76:97: 68:28:44:a7:76:90:88:e3:93:30:d1:02:d1:d9:ac: ec:c1:e4:82:54:8c:a7:de:ba:e5:ca:dd:6c:ce:35: 1c:8c:81:98:25:23:00:89:c4:05:c7:8a:b9:56:bf: 0f:53:3a:a9:87:3f:6d:2a:3b:2e:0f:6e:dd:7b:6b: ad:63:64:e6:80:1a:8c:34:7a:90:b3:51:e1:b6:2c: 2b:eb:ff:3b:e2:cd:f2:f3:b2:09:48:f4:9d:50:18: 74:5c:25:3a:35:b7:fa:74:85:aa:88:30:4b:ad:bf: c4:e2:0c:34:ad:80:c5:fa:58:9b:c2:02:09:c4:8d: 3f:b4:03:76:92:d5:5c:84:7c:bf:8b:bf:37:92:f6: 89:3c:69:d7:0f:8f:07:47:bc:93:37:11:7c:97:ad: d8:55:71:31:22:1f:03:e9:68:df:33:ce:ca:5c:9f: 1c:3c:44:54:9b:68:58:cc:8a:fd:70:9f:8e:ec:11: 0d:85:c2:b2:31:49:08:a4:2d:60:b2:9d:31:ea:a9: 6b:ee:18:0e:fe:e1:33:4c:fd:63:a8:b0:3b:a3:9c: d9:d7:08:90:29:a6:ea:53:65:b2:ec:0e:ef:ba:d4: fa:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:97:9B:0D:52:1E:A5:14:F4:10:27:F3:88:5B:72:43:1D:23:C4:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1cec2629-402e-3ceb-8ccc-f217d66c3876.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.165.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:50:a2:bd:a6:5d:de:50:ea:8e:a4:56:bd:fe:3c:d4:9d:5c: 0c:2c:f0:5d:ed:03:75:b3:df:98:c1:93:22:d2:a5:12:bf:6d: 89:1e:70:36:84:04:a5:f3:d2:13:0d:d8:38:f2:ef:1b:81:72: b1:b0:24:e5:75:8f:df:d2:40:fc:7a:e2:82:0c:1f:9c:93:05: 67:ac:5c:6e:a1:69:b5:f6:bc:f4:ff:ef:b5:a4:0b:76:b6:d4: f8:93:ff:79:67:a9:33:08:ec:0c:5b:c2:88:41:2b:ce:d1:0a: d2:6e:e8:0a:5a:bd:7f:2b:84:85:5a:da:7d:c4:59:5e:bc:82: 62:8d:94:99:2a:5e:ae:56:8e:fd:2e:12:4b:92:8e:f0:0e:97: 55:98:20:f4:ef:9c:7b:b4:1c:05:2d:16:bd:f7:17:7e:33:00: 82:f9:19:b7:b2:1c:4d:5a:9e:65:5a:4c:0d:fd:ae:91:0f:a0: 13:a4:f9:70:5d:66:6a:52:7e:bc:a6:fa:76:cc:de:4e:6f:48: b2:4f:41:7b:06:56:fa:ae:ec:2c:e7:db:3d:91:de:f3:63:c9: b8:3b:eb:ec:e2:63:8a:cd:47:a3:63:62:c7:ea:f0:53:d5:8f: 4e:0d:67:4c:b0:bc:af:eb:fc:33:e0:85:2c:c9:67:b0:5c:a8: a6:cf:cb:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0kEKjmv0QfLR5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk MzQ3NDAyNGUtNTM2ZC00YWFjLWI0ODYtYjRmNDQ0NDhiMGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF1DgZo0heCruXQ0dHJMB8aGu9NredsJnWoG dpdoKESndpCI45Mw0QLR2azsweSCVIyn3rrlyt1szjUcjIGYJSMAicQFx4q5Vr8P Uzqphz9tKjsuD27de2utY2TmgBqMNHqQs1Hhtiwr6/874s3y87IJSPSdUBh0XCU6 Nbf6dIWqiDBLrb/E4gw0rYDF+libwgIJxI0/tAN2ktVchHy/i783kvaJPGnXD48H R7yTNxF8l63YVXExIh8D6WjfM87KXJ8cPERUm2hYzIr9cJ+O7BENhcKyMUkIpC1g sp0x6qlr7hgO/uEzTP1jqLA7o5zZ1wiQKabqU2Wy7A7vutT6RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqXmw1SHqUU9BAn84hbckMdI8SYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMWNlYzI2MjktNDAyZS0z Y2ViLThjY2MtZjIxN2Q2NmMzODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhQor2mXd5Q6o6kVr3+PNSdXAws8F3tA3Wz35jBkyLSpRK/bYkecDaE BKXz0hMN2Djy7xuBcrGwJOV1j9/SQPx64oIMH5yTBWesXG6habX2vPT/77WkC3a2 1PiT/3lnqTMI7AxbwohBK87RCtJu6ApavX8rhIVa2n3EWV68gmKNlJkqXq5Wjv0u EkuSjvAOl1WYIPTvnHu0HAUtFr33F34zAIL5GbeyHE1anmVaTA39rpEPoBOk+XBd ZmpSfrym+nbM3k5vSLJPQXsGVvqu7Czn2z2R3vNjybg76+ziY4rNR6NjYsfq8FPV j04NZ0ywvK/r/DPghSzJZ7BcqKbPyz4= -----END CERTIFICATE-----Generated at Sat Oct 10 13:47:59 2026 by rpki-client