$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/357aa51b-5dd6-3163-9d73-52f111c3fde8.roa File: 357aa51b-5dd6-3163-9d73-52f111c3fde8.roa (raw, json) Hash identifier: af5YxXaGQhrNwdKgF5eMVVEOPLij8KvhpH+cJjXmkng= Subject key identifier: 1B:7C:43:5F:97:D6:F8:D9:04:A9:5C:3D:C6:56:2D:6F:A9:98:DC:E7 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F6773C65505EA5498E64806F0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/357aa51b-5dd6-3163-9d73-52f111c3fde8.roa Signing time: Mon 05 Oct 2026 18:56:59 +0000 ROA not before: Mon 05 Oct 2026 18:56:59 +0000 ROA not after: Sun 03 Jan 2027 19:56:59 +0000 asID: 212238 IP address blocks: 64.204.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:67:73:c6:55:05:ea:54:98:e6:48:06:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 5 18:56:59 2026 GMT Not After : Jan 3 19:56:59 2027 GMT Subject: CN=d3f7f471-ce40-4bdd-b2a5-869cca5b5755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1a:b4:8f:75:0d:26:be:a1:a8:b7:a9:d6:d1: d8:4b:ed:ac:3a:5f:89:0b:da:70:a1:7e:19:c5:f3: 96:f7:2c:11:41:5e:38:3c:31:ec:ce:9a:f1:3c:ec: c2:0a:60:95:c6:64:21:6a:24:0b:b0:86:f4:89:d4: 79:b4:15:b4:a7:ea:32:14:99:76:62:7e:36:45:c8: 34:b9:21:94:f7:f7:09:e6:70:e1:9e:c4:b6:48:36: f8:a6:88:95:25:29:ea:08:e6:b5:f6:94:e4:21:f6: ea:be:64:45:e8:63:01:1d:c8:a9:76:35:93:14:17: 5b:e5:72:d6:ec:90:40:83:c8:83:34:cc:9e:29:15: c9:71:97:94:e5:b1:ed:e8:fc:a2:16:b3:f7:88:43: c6:ae:31:d0:45:3c:05:20:6e:23:79:5f:11:f8:fd: ea:68:97:60:1d:ca:b7:d8:7e:4b:52:2b:d2:d5:d1: 01:55:c8:cb:57:42:1f:a5:a6:58:94:e9:34:c8:20: 24:3e:36:88:37:5b:73:94:8f:24:72:0d:46:1f:1b: 5d:46:22:69:e2:3f:6b:9b:41:36:2e:54:b0:5b:cc: 9b:fa:b1:9c:26:3e:dc:ff:37:53:a3:90:72:41:1a: 56:f9:ca:5e:8b:5a:46:f6:9d:70:07:30:26:57:53: de:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7C:43:5F:97:D6:F8:D9:04:A9:5C:3D:C6:56:2D:6F:A9:98:DC:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/357aa51b-5dd6-3163-9d73-52f111c3fde8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ae:67:cc:60:91:43:c3:e8:c5:aa:9d:7e:0f:d5:e0:4d:b5: 07:00:01:00:d1:70:2b:de:82:9f:18:dd:b2:73:eb:51:70:42: 76:39:10:1c:63:ce:9d:a2:5f:52:7c:f1:62:61:88:59:64:ec: d4:81:e1:1a:c2:f4:d6:90:43:e3:4c:8d:bc:69:65:6f:2a:b1: 36:04:97:b6:46:6a:be:18:29:3d:87:c4:90:96:ae:78:1b:23: c9:8c:d7:f3:7f:56:3a:d3:b1:2d:3a:d1:94:dd:76:05:0f:32: a4:44:45:8c:48:d0:0d:c6:84:a7:88:df:86:43:48:7a:9d:8f: 3b:d0:5f:48:90:f2:90:e1:6b:5d:68:96:cb:80:91:d6:b1:c4: 95:f7:76:69:6b:b2:fe:9d:95:3d:e4:ac:9d:ab:49:b6:ba:78: db:46:b6:57:71:b7:3a:99:6e:46:2f:27:ba:a9:86:db:76:ff: 8b:26:f8:53:35:9e:bf:fa:41:03:a3:a5:24:5f:fc:7b:25:38: 9c:c8:98:62:1b:ca:5f:4b:95:74:01:37:66:3c:97:63:86:2c: d0:c9:5d:71:a2:02:0c:2e:6e:93:95:e8:c3:67:67:b7:01:be: 9a:61:2b:23:2a:fd:80:0d:74:4a:59:8a:c5:5b:b3:b6:42:69: 74:ec:60:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9nc8ZVBepUmOZIBvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwNTE4NTY1OVoXDTI3MDEwMzE5NTY1OVowLzEtMCsGA1UEAxMk ZDNmN2Y0NzEtY2U0MC00YmRkLWIyYTUtODY5Y2NhNWI1NzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxq0j3UNJr6hqLep1tHYS+2sOl+JC9pwoX4Z xfOW9ywRQV44PDHszprxPOzCCmCVxmQhaiQLsIb0idR5tBW0p+oyFJl2Yn42Rcg0 uSGU9/cJ5nDhnsS2SDb4poiVJSnqCOa19pTkIfbqvmRF6GMBHcipdjWTFBdb5XLW 7JBAg8iDNMyeKRXJcZeU5bHt6PyiFrP3iEPGrjHQRTwFIG4jeV8R+P3qaJdgHcq3 2H5LUivS1dEBVcjLV0IfpaZYlOk0yCAkPjaIN1tzlI8kcg1GHxtdRiJp4j9rm0E2 LlSwW8yb+rGcJj7c/zdTo5ByQRpW+cpei1pG9p1wBzAmV1PeOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBt8Q1+X1vjZBKlcPcZWLW+pmNznMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzU3YWE1MWItNWRkNi0z MTYzLTlkNzMtNTJmMTExYzNmZGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMzsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmuZ8xgkUPD6MWqnX4P1eBNtQcAAQDRcCvegp8Y3bJz61FwQnY5EBxj zp2iX1J88WJhiFlk7NSB4RrC9NaQQ+NMjbxpZW8qsTYEl7ZGar4YKT2HxJCWrngb I8mM1/N/VjrTsS060ZTddgUPMqRERYxI0A3GhKeI34ZDSHqdjzvQX0iQ8pDha11o lsuAkdaxxJX3dmlrsv6dlT3krJ2rSba6eNtGtldxtzqZbkYvJ7qphtt2/4sm+FM1 nr/6QQOjpSRf/HslOJzImGIbyl9LlXQBN2Y8l2OGLNDJXXGiAgwubpOV6MNnZ7cB vpphKyMq/YANdEpZisVbs7ZCaXTsYK8= -----END CERTIFICATE-----Generated at Sun Oct 11 19:00:56 2026 by rpki-client