$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3298aee7-bac4-364f-a625-9bdc294f30e2.roa File: 3298aee7-bac4-364f-a625-9bdc294f30e2.roa (raw, json) Hash identifier: oDx60Qu94k20RMrD1M3OkWB6s9iC/nbzW5ewRa1W374= Subject key identifier: 42:E2:73:57:A5:E6:CE:90:FE:40:D6:B2:49:64:6E:C8:87:B5:15:A6 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F52DC83DA0ACE12111D126A20 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3298aee7-bac4-364f-a625-9bdc294f30e2.roa Signing time: Mon 28 Sep 2026 09:56:03 +0000 ROA not before: Mon 28 Sep 2026 09:56:03 +0000 ROA not after: Sun 27 Dec 2026 10:56:03 +0000 asID: 218797 IP address blocks: 68.164.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:52:dc:83:da:0a:ce:12:11:1d:12:6a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 28 09:56:03 2026 GMT Not After : Dec 27 10:56:03 2026 GMT Subject: CN=5ec9f489-3bea-43a1-9168-7da27969787e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:89:8c:bb:39:7a:06:ab:e8:28:0a:5f:1d:a0: 62:24:3e:d5:92:c7:11:b9:78:cd:ba:0c:a1:4f:f3: 2f:05:7d:67:f1:6a:e7:1e:2d:63:27:ca:76:ac:69: 61:d1:8b:9f:7d:fe:e5:9e:bc:31:ed:e9:62:15:f4: 66:d4:ed:1d:05:cb:f2:40:4b:43:8a:1b:ec:ec:37: 18:9c:a3:92:84:a6:da:fc:ae:32:6a:0e:49:fb:e1: 14:65:ce:17:41:ca:b8:ed:43:96:2c:ec:32:69:8d: 81:ae:f0:88:98:7d:21:a8:79:e9:b2:ff:b5:08:21: 78:96:bd:df:2c:5d:c9:af:af:2b:d5:d9:42:cb:51: ba:08:59:1c:f7:e6:a9:df:ba:01:6e:ce:5b:67:9c: ae:d6:52:52:1b:17:b5:72:79:b9:8f:be:63:31:1e: 43:c1:c3:52:8d:56:63:10:9b:01:84:b3:bd:25:5d: 5d:e1:ef:11:fc:fb:c7:12:c3:f6:4e:f5:1e:f3:59: f4:b9:cc:2a:33:86:fc:d8:f2:5f:08:56:69:24:06: ff:98:20:df:4b:d0:8e:f3:9f:fd:7f:7c:bd:10:db: 18:03:b9:a5:02:0f:0c:7a:fc:91:33:ec:01:5d:de: ea:3b:2a:60:f0:01:ec:30:82:fb:63:44:3d:86:af: 19:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E2:73:57:A5:E6:CE:90:FE:40:D6:B2:49:64:6E:C8:87:B5:15:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3298aee7-bac4-364f-a625-9bdc294f30e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:fc:af:26:fb:4c:27:7d:e8:19:8e:5a:1c:ca:6f:69:6b:12: 73:41:83:7a:8c:8e:e7:5a:45:3b:32:cb:ce:60:75:b3:45:49: 61:65:15:77:be:c5:4c:a2:f7:d1:ac:9d:d1:64:33:ae:b1:a5: ea:00:10:df:aa:80:50:b8:1f:21:b0:92:f8:53:ee:26:46:c1: e4:33:99:f8:f5:99:0b:27:bf:b5:c5:62:6c:f8:2c:77:b6:cb: 86:0d:42:d0:8e:9e:2e:e3:67:fa:ec:e9:3c:a6:07:82:4c:7d: 31:98:31:22:81:3b:cd:98:0b:87:12:f0:3d:bf:e8:83:a2:9a: 34:93:3c:fc:05:af:77:fb:a2:c9:1d:eb:21:62:16:63:2e:43: 36:84:a4:85:00:e2:bc:d8:70:99:18:00:08:0c:a2:8b:53:6b: 70:d6:0c:ea:5a:95:5d:a8:d3:21:4b:05:59:da:db:23:6d:c8: da:3a:3e:cd:12:16:67:e4:ea:a7:26:b0:34:b5:af:7b:74:19: 13:ec:c5:fa:eb:2f:bd:7b:93:3a:7f:a5:62:38:df:93:1c:6a: 7f:e4:50:93:98:37:cc:c8:9a:9f:86:97:b2:d1:ca:45:bc:8e: b9:1c:9d:cb:11:1d:96:ea:92:8e:20:cb:4a:6e:0c:64:80:69: 5a:e4:fb:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9S3IPaCs4SER0SaiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyODA5NTYwM1oXDTI2MTIyNzEwNTYwM1owLzEtMCsGA1UEAxMk NWVjOWY0ODktM2JlYS00M2ExLTkxNjgtN2RhMjc5Njk3ODdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4mMuzl6BqvoKApfHaBiJD7VkscRuXjNugyh T/MvBX1n8WrnHi1jJ8p2rGlh0Yufff7lnrwx7eliFfRm1O0dBcvyQEtDihvs7DcY nKOShKba/K4yag5J++EUZc4XQcq47UOWLOwyaY2BrvCImH0hqHnpsv+1CCF4lr3f LF3Jr68r1dlCy1G6CFkc9+ap37oBbs5bZ5yu1lJSGxe1cnm5j75jMR5DwcNSjVZj EJsBhLO9JV1d4e8R/PvHEsP2TvUe81n0ucwqM4b82PJfCFZpJAb/mCDfS9CO85/9 f3y9ENsYA7mlAg8MevyRM+wBXd7qOypg8AHsMIL7Y0Q9hq8ZtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELic1el5s6Q/kDWsklkbsiHtRWmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzI5OGFlZTctYmFjNC0z NjRmLWE2MjUtOWJkYzI5NGYzMGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKQ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIz8ryb7TCd96BmOWhzKb2lrEnNBg3qMjudaRTsyy85gdbNFSWFlFXe+ xUyi99GsndFkM66xpeoAEN+qgFC4HyGwkvhT7iZGweQzmfj1mQsnv7XFYmz4LHe2 y4YNQtCOni7jZ/rs6TymB4JMfTGYMSKBO82YC4cS8D2/6IOimjSTPPwFr3f7oskd 6yFiFmMuQzaEpIUA4rzYcJkYAAgMootTa3DWDOpalV2o0yFLBVna2yNtyNo6Ps0S Fmfk6qcmsDS1r3t0GRPsxfrrL717kzp/pWI435Mcan/kUJOYN8zImp+Gl7LRykW8 jrkcncsRHZbqko4gy0puDGSAaVrk+0k= -----END CERTIFICATE-----Generated at Sun Oct 11 15:13:02 2026 by rpki-client