$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/30917701-7704-3cd6-8491-a94194143387.roa File: 30917701-7704-3cd6-8491-a94194143387.roa (raw, json) Hash identifier: WHcPkIf2C7Io9jHn4O1lRzExid3RnwqlVVGiapCSQK0= Subject key identifier: E8:98:C3:A8:F6:DB:E9:6D:75:F2:4A:53:AF:67:22:14:F9:13:7F:7B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F07D7769ECEADACFC07E8C100 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/30917701-7704-3cd6-8491-a94194143387.roa Signing time: Tue 01 Sep 2026 13:00:12 +0000 ROA not before: Tue 01 Sep 2026 13:00:12 +0000 ROA not after: Mon 30 Nov 2026 14:00:12 +0000 asID: 397423 IP address blocks: 64.205.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:d7:76:9e:ce:ad:ac:fc:07:e8:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 1 13:00:12 2026 GMT Not After : Nov 30 14:00:12 2026 GMT Subject: CN=0b73088e-cef1-47c4-8e4d-cefc19c90f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2f:b4:4d:b8:ba:af:d0:16:54:f4:d7:22:d5: 89:bd:4a:63:84:8d:58:35:48:a1:96:28:a1:3f:1c: dd:5f:2a:e2:4b:69:c2:c6:e1:fa:7f:28:24:2e:c9: 4b:e3:71:3b:ab:24:26:90:0d:d5:65:1d:0e:b7:d5: 5a:8c:e1:72:ce:e6:fd:7a:65:c2:c2:d9:1e:80:3e: 96:da:e6:78:29:38:23:e1:b1:02:cb:3e:31:e7:3b: 8e:0a:64:71:de:ad:54:70:3b:cf:76:c6:16:cd:4f: 10:f8:2f:47:cb:57:bd:89:89:44:ad:2f:8d:5b:41: e4:38:57:62:af:d7:87:49:5b:93:72:20:49:04:26: b1:5f:0c:64:2d:9a:bd:e7:78:4a:3e:1c:21:d6:ab: 00:c9:ec:16:f6:78:c8:0d:9b:46:48:9f:53:f0:26: 15:48:c4:40:dc:22:fc:73:9c:08:c3:b9:91:9b:23: 86:5d:12:96:20:70:23:84:27:75:e5:c2:a8:34:fe: 60:d1:b4:4c:e6:9a:e4:7c:cc:92:be:d8:bf:60:fd: 54:32:7a:dc:4f:b7:53:15:8f:5b:84:d1:c2:dc:fc: 8a:7a:84:fa:08:5e:81:52:9c:6d:14:a0:b8:45:28: a7:0c:44:48:e2:ba:a1:df:dc:3a:d7:f0:31:af:4e: 5e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:98:C3:A8:F6:DB:E9:6D:75:F2:4A:53:AF:67:22:14:F9:13:7F:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/30917701-7704-3cd6-8491-a94194143387.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.205.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:40:a6:00:7d:1e:d3:31:b0:49:df:bf:c3:c7:65:97:ed:1b: 13:26:5a:a6:e3:dd:2a:cd:8a:10:98:95:8a:b7:50:3c:c5:78: fe:cf:f3:c0:bb:15:f4:5d:b9:f8:52:8a:0b:73:c9:f6:68:2e: f8:3d:4f:79:f0:10:7a:79:ee:11:57:e2:4c:ab:de:38:5f:8f: f4:97:9d:c5:78:3e:3a:6b:81:8f:e2:fb:01:11:e1:d4:57:bf: 0e:75:89:72:93:ab:f4:a1:95:4d:40:42:59:79:d7:21:81:4c: a2:c7:f6:75:5c:f8:90:5e:14:9b:60:44:f4:23:e1:fc:9b:1b: 6f:1b:f2:df:c1:ea:0b:25:73:c9:ec:1d:84:91:f4:91:73:d3: f8:28:0a:94:00:96:fb:03:f6:b7:86:b1:59:63:c5:8e:11:17: 0b:a7:0b:15:92:db:b8:d5:2f:12:ca:97:18:28:e9:6b:7f:c4: 8e:42:0a:97:f1:1b:50:2a:99:45:68:be:df:92:7a:3a:39:34: 7f:74:d7:49:71:5f:a0:e6:a0:66:8d:8b:cf:d7:a2:fe:69:d2: 25:c9:fc:1b:99:af:c3:f9:25:28:eb:f7:d4:c3:a9:fd:83:33: b6:43:e6:53:4f:df:77:08:7f:15:14:10:63:5c:bb:ec:04:d2: 89:86:14:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8H13aezq2s/AfowQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwMTEzMDAxMloXDTI2MTEzMDE0MDAxMlowLzEtMCsGA1UEAxMk MGI3MzA4OGUtY2VmMS00N2M0LThlNGQtY2VmYzE5YzkwZjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji+0Tbi6r9AWVPTXItWJvUpjhI1YNUihliih PxzdXyriS2nCxuH6fygkLslL43E7qyQmkA3VZR0Ot9VajOFyzub9emXCwtkegD6W 2uZ4KTgj4bECyz4x5zuOCmRx3q1UcDvPdsYWzU8Q+C9Hy1e9iYlErS+NW0HkOFdi r9eHSVuTciBJBCaxXwxkLZq953hKPhwh1qsAyewW9njIDZtGSJ9T8CYVSMRA3CL8 c5wIw7mRmyOGXRKWIHAjhCd15cKoNP5g0bRM5prkfMySvti/YP1UMnrcT7dTFY9b hNHC3PyKeoT6CF6BUpxtFKC4RSinDERI4rqh39w61/Axr05e8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiYw6j22+ltdfJKU69nIhT5E397MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzA5MTc3MDEtNzcwNC0z Y2Q2LTg0OTEtYTk0MTk0MTQzMzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQM3cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxApgB9HtMxsEnfv8PHZZftGxMmWqbj3SrNihCYlYq3UDzFeP7P88C7 FfRdufhSigtzyfZoLvg9T3nwEHp57hFX4kyr3jhfj/SXncV4PjprgY/i+wER4dRX vw51iXKTq/ShlU1AQll51yGBTKLH9nVc+JBeFJtgRPQj4fybG28b8t/B6gslc8ns HYSR9JFz0/goCpQAlvsD9reGsVljxY4RFwunCxWS27jVLxLKlxgo6Wt/xI5CCpfx G1AqmUVovt+Sejo5NH9010lxX6DmoGaNi8/Xov5p0iXJ/BuZr8P5JSjr99TDqf2D M7ZD5lNP33cIfxUUEGNcu+wE0omGFKU= -----END CERTIFICATE-----Generated at Sun Oct 11 10:15:35 2026 by rpki-client