$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/350e08aa-050a-32df-8ff7-0513436a2dfe.roa File: 350e08aa-050a-32df-8ff7-0513436a2dfe.roa (raw, json) Hash identifier: POuIsQqqAMQmqPcGmnmmgKxUckIDDuD6KmiJa7D5HtA= Subject key identifier: 5E:35:2C:EF:26:27:5E:8B:4A:D5:1B:01:97:24:2D:34:A9:E0:61:48 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F56445F6135C0FF2115555D00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/350e08aa-050a-32df-8ff7-0513436a2dfe.roa Signing time: Tue 29 Sep 2026 15:12:44 +0000 ROA not before: Tue 29 Sep 2026 15:12:44 +0000 ROA not after: Mon 28 Dec 2026 16:12:44 +0000 asID: 16125 IP address blocks: 64.205.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:56:44:5f:61:35:c0:ff:21:15:55:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 29 15:12:44 2026 GMT Not After : Dec 28 16:12:44 2026 GMT Subject: CN=46e654fc-8f74-4fa7-adf2-f68d96d87d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:21:d5:64:e3:86:db:6b:de:2b:fd:4f:67:91: 92:72:62:24:33:97:5e:c1:53:c6:d2:19:6e:b5:44: 45:70:b3:2f:13:3a:ba:c7:23:70:03:df:24:3c:0e: 23:70:2e:c1:a8:98:d7:db:10:cf:04:71:bb:45:6c: dc:12:00:e9:bd:86:9a:62:12:a6:5d:2f:f4:5a:37: 7c:1f:a7:07:04:aa:c0:0f:7e:6b:67:f4:49:96:52: d6:0f:33:80:74:2b:14:78:e9:59:d9:fa:42:5d:3b: 61:c9:12:55:5f:92:b1:1e:7d:6e:03:02:25:cc:b9: a7:ba:e9:1a:87:96:ff:b5:37:9c:71:43:8f:a8:b6: e2:f0:88:dc:6c:09:af:ce:e6:57:c0:26:d3:34:ed: b9:0b:d8:d6:16:c9:e3:f9:a5:7b:d1:60:70:f1:8a: 49:f7:27:be:aa:5d:10:3c:5f:2e:51:19:ea:62:9e: a9:fa:1d:41:29:be:ba:e4:d5:23:89:20:65:35:4b: fa:cb:2a:1b:eb:02:07:7b:8a:63:13:fb:d1:44:74: 5d:22:6d:2b:fa:7e:2e:f2:71:a6:98:e1:83:d3:5c: 1e:ba:26:ff:96:47:96:02:71:29:7b:3b:97:29:f5: e8:b8:56:3b:8d:2e:3c:76:38:a1:46:30:7c:90:cb: 7d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:35:2C:EF:26:27:5E:8B:4A:D5:1B:01:97:24:2D:34:A9:E0:61:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/350e08aa-050a-32df-8ff7-0513436a2dfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.205.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:16:ac:fc:80:3a:95:f2:da:09:bf:dc:d1:d5:49:24:b2:cc: 70:3c:b4:76:8d:1a:d6:68:ce:e8:f8:21:bf:50:96:91:02:e2: 20:06:14:ae:56:b7:6a:4c:f4:6c:0f:7f:b2:29:b2:49:80:9e: 5e:f2:1d:10:8a:0a:77:af:a7:a9:af:85:de:6b:49:da:0d:f9: f8:32:0a:3a:ed:b9:fd:74:b6:f9:91:d4:5a:8c:1a:5a:b7:07: 5e:9c:93:8e:44:f4:bf:8a:3d:90:cf:1f:19:e7:c4:3b:fa:48: b0:95:ef:84:73:c7:7a:3d:68:e4:27:b2:b6:b1:28:85:f0:5f: 60:d0:74:97:68:50:85:3c:d7:64:2f:9f:8e:0e:c2:1d:17:bf: c1:3d:5e:f8:18:27:f0:de:9c:c2:ad:1d:5f:a1:81:81:67:8a: a1:20:f0:56:de:31:c2:fc:49:60:53:94:89:95:b5:0a:41:b7: be:50:85:e5:48:6b:64:92:f7:64:5f:4e:3e:ee:51:69:6f:38: 1d:07:50:26:96:ae:ca:32:a6:d7:5d:73:aa:59:f6:79:f5:ff: 10:97:78:94:97:de:57:12:e0:f7:57:37:68:cc:1d:6b:e3:82: a0:3a:d5:74:2b:9a:c3:49:4a:11:35:33:26:96:10:08:fc:b5: 11:05:1d:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9WRF9hNcD/IRVVXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyOTE1MTI0NFoXDTI2MTIyODE2MTI0NFowLzEtMCsGA1UEAxMk NDZlNjU0ZmMtOGY3NC00ZmE3LWFkZjItZjY4ZDk2ZDg3ZDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCHVZOOG22veK/1PZ5GScmIkM5dewVPG0hlu tURFcLMvEzq6xyNwA98kPA4jcC7BqJjX2xDPBHG7RWzcEgDpvYaaYhKmXS/0Wjd8 H6cHBKrAD35rZ/RJllLWDzOAdCsUeOlZ2fpCXTthyRJVX5KxHn1uAwIlzLmnuuka h5b/tTeccUOPqLbi8IjcbAmvzuZXwCbTNO25C9jWFsnj+aV70WBw8YpJ9ye+ql0Q PF8uURnqYp6p+h1BKb665NUjiSBlNUv6yyob6wIHe4pjE/vRRHRdIm0r+n4u8nGm mOGD01weuib/lkeWAnEpezuXKfXouFY7jS48djihRjB8kMt9UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF41LO8mJ16LStUbAZckLTSp4GFIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzUwZTA4YWEtMDUwYS0z MmRmLThmZjctMDUxMzQzNmEyZGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQM1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcWrPyAOpXy2gm/3NHVSSSyzHA8tHaNGtZozuj4Ib9QlpEC4iAGFK5W t2pM9GwPf7IpskmAnl7yHRCKCnevp6mvhd5rSdoN+fgyCjrtuf10tvmR1FqMGlq3 B16ck45E9L+KPZDPHxnnxDv6SLCV74Rzx3o9aOQnsraxKIXwX2DQdJdoUIU812Qv n44Owh0Xv8E9XvgYJ/DenMKtHV+hgYFniqEg8FbeMcL8SWBTlImVtQpBt75QheVI a2SS92RfTj7uUWlvOB0HUCaWrsoyptddc6pZ9nn1/xCXeJSX3lcS4PdXN2jMHWvj gqA61XQrmsNJShE1MyaWEAj8tREFHe4= -----END CERTIFICATE-----Generated at Sun Oct 11 15:12:47 2026 by rpki-client