$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/374bf0cd-9f47-34ed-9be4-3c13c1f164c9.roa File: 374bf0cd-9f47-34ed-9be4-3c13c1f164c9.roa (raw, json) Hash identifier: kYpt3pzf9Loytg+vXkdqWZMNnkBhIWB7U2F6diS2Qf0= Subject key identifier: 8F:A1:C3:B6:DF:74:D5:13:D7:C6:A2:DB:FF:AA:CC:36:AC:C8:A0:7C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F56611D36CCDDC25D27898E80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/374bf0cd-9f47-34ed-9be4-3c13c1f164c9.roa Signing time: Tue 29 Sep 2026 16:10:38 +0000 ROA not before: Tue 29 Sep 2026 16:10:38 +0000 ROA not after: Mon 28 Dec 2026 17:10:38 +0000 asID: 219075 IP address blocks: 68.164.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:56:61:1d:36:cc:dd:c2:5d:27:89:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 29 16:10:38 2026 GMT Not After : Dec 28 17:10:38 2026 GMT Subject: CN=8f5b0a88-a3c6-4ab8-9c41-c9e1a8352753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bd:f7:38:51:9a:c7:c6:a3:75:0b:24:32:9e: 64:ee:22:a2:b9:6e:29:99:b3:82:a4:a7:79:e1:69: 78:ad:09:81:15:1b:24:4b:2a:3e:65:ae:f8:20:37: 0b:d9:37:96:f7:bb:ee:6e:9d:97:71:2e:d7:2d:61: df:fc:19:c7:c7:29:01:bf:bb:1a:3b:a5:c3:8b:49: 3a:11:ad:e9:f1:82:45:46:d6:30:90:d5:46:e6:97: 78:6f:0e:a9:18:e2:da:43:90:07:4a:d5:86:ad:2a: 73:37:6a:e9:81:48:84:45:4d:a4:79:32:e7:00:84: 53:81:af:3e:d4:cc:db:79:23:95:8c:78:a7:5c:eb: 82:5a:d7:52:15:29:a5:39:81:7b:50:22:f0:34:f4: f9:65:fc:8b:e7:4b:31:d2:70:26:fd:27:4c:f8:d1: d6:fe:09:6c:65:7b:be:86:af:61:6d:87:83:ae:8e: bf:5b:a9:54:eb:4d:11:07:48:05:41:a2:0b:97:bb: a7:4a:de:c4:bd:c4:07:15:6b:5a:73:7b:2e:52:bc: 0b:0d:cf:92:8d:97:59:8d:be:f0:e9:36:6b:78:dc: 59:cb:96:b8:d5:72:75:94:7e:d3:32:3f:8f:c1:23: 6d:f2:20:13:a4:79:cf:1c:ca:26:04:f4:70:43:ea: a0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A1:C3:B6:DF:74:D5:13:D7:C6:A2:DB:FF:AA:CC:36:AC:C8:A0:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/374bf0cd-9f47-34ed-9be4-3c13c1f164c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:00:46:3a:7e:03:f7:8c:e5:6c:ff:44:bc:2e:12:6f:1b:4e: 5f:7b:9c:e2:4c:bf:4a:03:f0:15:dd:23:02:49:82:73:bb:9b: 75:49:f7:63:d9:16:ff:3d:ba:ec:79:53:42:e6:03:73:ba:cd: 7d:d1:28:25:46:65:52:47:6d:56:ae:2e:5e:d7:ff:96:3f:6a: e7:d0:68:97:e4:37:16:1e:0f:30:8c:ac:e7:81:ea:01:11:80: 63:16:68:be:4b:c8:61:eb:91:ae:5c:c4:a9:7c:df:8b:f6:77: 49:8a:26:1f:0a:e4:5a:df:8b:20:d1:71:d6:af:92:4f:c9:39: 83:f3:3d:83:20:3a:44:1b:07:f5:92:6f:09:6d:29:eb:69:ca: 3e:03:56:20:3b:94:5a:4a:ea:32:6a:7d:95:0c:7f:8c:23:68: bb:31:77:3f:8e:13:4f:19:02:a1:08:65:da:c7:3a:39:4e:21: c8:6a:e9:da:a9:c2:63:23:54:f7:70:37:82:01:f7:20:f4:e3: 2b:89:6d:ab:ff:9e:3f:24:c3:71:89:e1:6b:2e:5b:50:d9:9a: f9:12:a4:e1:25:ae:2e:54:59:07:c3:d4:20:ef:75:ac:a4:72: e9:8c:8d:9c:4b:90:8f:2b:96:4f:e9:77:5a:5c:50:82:ac:ae: b1:cb:94:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9WYR02zN3CXSeJjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyOTE2MTAzOFoXDTI2MTIyODE3MTAzOFowLzEtMCsGA1UEAxMk OGY1YjBhODgtYTNjNi00YWI4LTljNDEtYzllMWE4MzUyNzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL33OFGax8ajdQskMp5k7iKiuW4pmbOCpKd5 4Wl4rQmBFRskSyo+Za74IDcL2TeW97vubp2XcS7XLWHf/BnHxykBv7saO6XDi0k6 Ea3p8YJFRtYwkNVG5pd4bw6pGOLaQ5AHStWGrSpzN2rpgUiERU2keTLnAIRTga8+ 1MzbeSOVjHinXOuCWtdSFSmlOYF7UCLwNPT5ZfyL50sx0nAm/SdM+NHW/glsZXu+ hq9hbYeDro6/W6lU600RB0gFQaILl7unSt7EvcQHFWtac3suUrwLDc+SjZdZjb7w 6TZreNxZy5a41XJ1lH7TMj+PwSNt8iATpHnPHMomBPRwQ+qgNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+hw7bfdNUT18ai2/+qzDasyKB8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzc0YmYwY2QtOWY0Ny0z NGVkLTliZTQtM2MxM2MxZjE2NGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKSMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEARjp+A/eM5Wz/RLwuEm8bTl97nOJMv0oD8BXdIwJJgnO7m3VJ92PZ Fv89uux5U0LmA3O6zX3RKCVGZVJHbVauLl7X/5Y/aufQaJfkNxYeDzCMrOeB6gER gGMWaL5LyGHrka5cxKl834v2d0mKJh8K5FrfiyDRcdavkk/JOYPzPYMgOkQbB/WS bwltKetpyj4DViA7lFpK6jJqfZUMf4wjaLsxdz+OE08ZAqEIZdrHOjlOIchq6dqp wmMjVPdwN4IB9yD04yuJbav/nj8kw3GJ4WsuW1DZmvkSpOElri5UWQfD1CDvdayk cumMjZxLkI8rlk/pd1pcUIKsrrHLlB4= -----END CERTIFICATE-----Generated at Sun Oct 11 15:12:49 2026 by rpki-client