$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3214918b-04c1-3ef7-b223-ae35c2aece3d.roa File: 3214918b-04c1-3ef7-b223-ae35c2aece3d.roa (raw, json) Hash identifier: 9Z14IlpcCcOtOOUXP6kMOppfp2TB7nRPTsPOrMPMJuQ= Subject key identifier: 68:A2:24:CA:01:52:79:AE:81:17:C4:4E:61:53:9B:9C:B3:39:07:F4 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EF69F34E39755DB65D5199200 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3214918b-04c1-3ef7-b223-ae35c2aece3d.roa Signing time: Wed 26 Aug 2026 08:58:09 +0000 ROA not before: Wed 26 Aug 2026 08:58:09 +0000 ROA not after: Tue 24 Nov 2026 09:58:09 +0000 asID: 1299 IP address blocks: 68.164.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f6:9f:34:e3:97:55:db:65:d5:19:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 26 08:58:09 2026 GMT Not After : Nov 24 09:58:09 2026 GMT Subject: CN=a1ad38d1-03d2-41ba-85e8-495c29e83cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6b:5e:78:4f:92:5f:c4:9e:e9:e2:e5:6a:7c: 89:15:f5:ec:e6:cb:89:2f:b2:e1:58:b3:a8:72:e7: 83:f3:58:c5:5a:93:9b:1d:8e:63:d7:8d:00:c0:48: d5:56:80:c3:0a:de:57:ce:39:48:07:f8:6b:9e:b5: e7:7e:20:dd:fa:e4:03:a7:86:35:a0:4e:71:78:1b: d9:b8:54:88:c2:12:5d:ec:c8:13:b3:9f:1e:8d:9b: 71:73:19:0c:e6:5d:c1:60:c7:3c:35:b1:eb:fb:2c: 9b:4a:0d:31:1a:dd:97:b1:52:3b:f1:9e:e8:49:74: 09:80:6a:9c:ea:e2:4b:e8:9e:bf:ff:a8:82:05:9c: b1:3c:f6:eb:28:30:81:ab:ad:b5:64:fb:d9:b7:57: d2:ba:14:26:05:a5:e4:db:e2:99:f7:65:f3:9d:e7: 32:07:ae:41:6b:2d:cc:e9:0c:c5:ca:1f:93:79:8c: d6:22:96:ba:f3:0e:6b:35:9a:9e:b4:88:50:5a:bd: 23:4e:1b:96:f5:bf:69:f5:13:47:b3:97:ec:e2:6a: 23:6b:d7:21:cf:db:74:a8:d6:01:54:19:10:f1:ba: 40:6e:67:06:03:26:5d:bf:3a:8a:37:3a:df:1d:0b: a6:bd:9d:41:38:2c:95:4f:a6:dc:70:d8:e3:53:44: 57:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A2:24:CA:01:52:79:AE:81:17:C4:4E:61:53:9B:9C:B3:39:07:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3214918b-04c1-3ef7-b223-ae35c2aece3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:4c:e2:76:98:76:71:84:55:60:9a:63:02:9a:98:59:42:c0: 8e:18:c7:30:b5:ef:6e:29:e5:e0:24:fa:b9:1d:9e:41:7a:dc: 3f:17:f7:79:ea:bb:0f:0c:1d:cf:77:0e:f6:7e:c0:1c:66:82: f2:f9:a3:92:b0:9e:42:e3:09:79:ee:62:3c:44:d9:5f:99:f7: 20:23:af:e1:de:4e:30:8c:76:d8:cf:89:39:46:ed:43:fd:21: f7:a3:aa:37:e0:81:08:88:4e:fc:5b:39:f4:69:7d:8c:a4:60: 8b:fe:fa:5b:8d:e0:ec:8c:a6:56:34:23:37:46:79:22:f5:89: 4c:73:8d:ba:4f:93:9d:13:b2:27:df:33:03:fc:11:17:a7:bc: 23:8a:6e:96:33:c2:25:29:b1:c2:7a:9c:29:76:94:57:bc:fd: 70:33:a1:14:7f:c0:6b:34:16:23:18:43:a5:dd:79:23:df:38: 19:c4:97:04:c1:5a:97:9a:6e:2b:65:fa:da:26:ff:2f:b8:88: 72:62:9d:78:01:b4:03:76:6e:fa:9c:fa:cd:04:00:a6:61:b6: 19:0b:d8:e9:f5:18:1d:4e:cb:92:6a:c6:2c:93:0c:a7:08:b4: 6e:61:c7:eb:bd:51:2c:7e:a9:6e:a8:44:84:4c:aa:28:24:5c: 45:5a:7e:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE72nzTjl1XbZdUZkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgyNjA4NTgwOVoXDTI2MTEyNDA5NTgwOVowLzEtMCsGA1UEAxMk YTFhZDM4ZDEtMDNkMi00MWJhLTg1ZTgtNDk1YzI5ZTgzY2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2teeE+SX8Se6eLlanyJFfXs5suJL7LhWLOo cueD81jFWpObHY5j140AwEjVVoDDCt5XzjlIB/hrnrXnfiDd+uQDp4Y1oE5xeBvZ uFSIwhJd7MgTs58ejZtxcxkM5l3BYMc8NbHr+yybSg0xGt2XsVI78Z7oSXQJgGqc 6uJL6J6//6iCBZyxPPbrKDCBq621ZPvZt1fSuhQmBaXk2+KZ92XznecyB65Bay3M 6QzFyh+TeYzWIpa68w5rNZqetIhQWr0jThuW9b9p9RNHs5fs4moja9chz9t0qNYB VBkQ8bpAbmcGAyZdvzqKNzrfHQumvZ1BOCyVT6bccNjjU0RXVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiiJMoBUnmugRfETmFTm5yzOQf0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzIxNDkxOGItMDRjMS0z ZWY3LWIyMjMtYWUzNWMyYWVjZTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKTSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1M4naYdnGEVWCaYwKamFlCwI4YxzC1724p5eAk+rkdnkF63D8X93nq uw8MHc93DvZ+wBxmgvL5o5KwnkLjCXnuYjxE2V+Z9yAjr+HeTjCMdtjPiTlG7UP9 IfejqjfggQiITvxbOfRpfYykYIv++luN4OyMplY0IzdGeSL1iUxzjbpPk50Tsiff MwP8ERenvCOKbpYzwiUpscJ6nCl2lFe8/XAzoRR/wGs0FiMYQ6XdeSPfOBnElwTB Wpeabitl+tom/y+4iHJinXgBtAN2bvqc+s0EAKZhthkL2On1GB1Oy5JqxiyTDKcI tG5hx+u9USx+qW6oRIRMqigkXEVafoA= -----END CERTIFICATE-----Generated at Sat Sep 5 00:45:58 2026 by rpki-client