$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/393039fd-21e4-32bf-83f2-00a678ce590e.roa File: 393039fd-21e4-32bf-83f2-00a678ce590e.roa (raw, json) Hash identifier: HQW6y7ayGAL4ozNb4tFZ7g5Om6n07lAbUH0WI7fWJYY= Subject key identifier: BE:84:24:58:1A:5E:B5:43:0D:85:84:70:A3:B9:A0:F5:BC:19:B3:35 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F576829F741CFBE082C6CBE30 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/393039fd-21e4-32bf-83f2-00a678ce590e.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 6079 IP address blocks: 65.86.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:29:f7:41:cf:be:08:2c:6c:be:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=c29aec18-a6f7-4666-96f3-faab72c71f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:26:8f:e2:f5:f7:07:4a:2d:a7:4d:ba:43:98: a3:4b:c6:c5:7c:cd:37:0f:66:bf:77:6a:f0:d0:77: 03:44:c2:8a:67:51:95:e2:79:a8:db:30:19:2f:dd: fa:84:e6:11:5b:f1:6e:68:50:5e:61:81:0a:bb:fa: 2c:8f:9b:3f:85:98:08:7b:8f:c9:95:db:f3:fd:1b: 5a:45:00:bc:da:f8:fc:ba:23:5d:67:58:fd:3f:ce: 65:d4:62:de:34:a0:cb:ce:16:15:14:85:59:c1:8e: 48:23:c3:f0:a4:c3:d0:2b:b0:43:a8:a2:ee:f5:35: 98:3e:93:6d:2f:e6:b3:16:7b:95:34:c7:f5:d8:0e: 93:1b:5c:45:76:d9:af:18:a5:98:56:21:36:d4:f6: 9c:4f:e8:80:0d:20:74:1e:67:3d:fa:6a:26:75:a8: 89:df:e4:29:15:e6:94:1f:b6:fe:75:d5:ff:18:ae: 33:e6:85:9b:6f:e3:cc:78:4f:76:aa:d8:0b:a3:87: fc:e6:62:25:e6:c9:1f:f3:10:c5:ea:7c:5b:53:c4: e5:8b:4d:9f:18:cd:e6:c6:2a:46:e0:cb:f2:a9:21: b6:a6:d6:59:62:e8:14:a7:86:d2:6c:03:82:2b:3d: 69:7f:2d:ed:85:47:de:aa:63:b7:38:4b:27:ab:37: 1d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:84:24:58:1A:5E:B5:43:0D:85:84:70:A3:B9:A0:F5:BC:19:B3:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/393039fd-21e4-32bf-83f2-00a678ce590e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:d5:c2:53:13:d4:fd:0d:f1:4b:91:56:08:36:24:5a:a7:67: 73:72:b0:2a:23:41:57:71:87:cb:d9:03:6b:c3:5b:45:aa:1e: ef:fc:b5:5e:56:92:77:1e:d5:00:f2:82:43:3c:68:db:52:4c: 3d:02:fb:b9:9a:cf:7c:aa:b2:5d:d4:46:4e:1f:cf:65:57:c7: 40:3d:4a:89:d0:1f:c4:ec:42:8e:9f:0b:49:68:c5:4f:6f:0d: 7d:a6:38:01:0f:82:99:59:12:ff:30:0d:bb:0b:73:67:13:1d: 0d:ba:a0:e6:7b:40:05:84:54:5a:79:71:0f:e8:04:7e:82:f0: 61:8f:94:4a:ab:ae:18:6a:3b:13:64:6c:0b:cb:5f:43:cd:af: 7c:63:41:fb:f2:af:63:6d:a4:02:09:8a:b6:0f:fb:c1:66:91: 95:c0:ed:8f:5a:e7:36:21:1f:8a:95:43:1e:e8:db:16:02:4e: db:d4:7c:cb:54:9b:dc:e1:9f:2c:35:d6:00:47:bb:33:f0:48: 7d:9a:71:48:59:25:e8:33:01:60:91:49:82:77:a2:d3:08:42: 8e:b0:1b:f2:8a:e6:68:b6:3a:15:ce:2a:22:e3:7c:c7:f9:19: ff:a3:cd:4d:60:78:8b:04:0d:22:20:6c:e9:67:a6:0d:5f:9d: 31:83:3b:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XaCn3Qc++CCxsvjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk YzI5YWVjMTgtYTZmNy00NjY2LTk2ZjMtZmFhYjcyYzcxZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCaP4vX3B0otp026Q5ijS8bFfM03D2a/d2rw 0HcDRMKKZ1GV4nmo2zAZL936hOYRW/FuaFBeYYEKu/osj5s/hZgIe4/Jldvz/Rta RQC82vj8uiNdZ1j9P85l1GLeNKDLzhYVFIVZwY5II8PwpMPQK7BDqKLu9TWYPpNt L+azFnuVNMf12A6TG1xFdtmvGKWYViE21PacT+iADSB0Hmc9+momdaiJ3+QpFeaU H7b+ddX/GK4z5oWbb+PMeE92qtgLo4f85mIl5skf8xDF6nxbU8Tli02fGM3mxipG 4MvyqSG2ptZZYugUp4bSbAOCKz1pfy3thUfeqmO3OEsnqzcdXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6EJFgaXrVDDYWEcKO5oPW8GbM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzkzMDM5ZmQtMjFlNC0z MmJmLTgzZjItMDBhNjc4Y2U1OTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQVbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXVwlMT1P0N8UuRVgg2JFqnZ3NysCojQVdxh8vZA2vDW0WqHu/8tV5W knce1QDygkM8aNtSTD0C+7maz3yqsl3URk4fz2VXx0A9SonQH8TsQo6fC0loxU9v DX2mOAEPgplZEv8wDbsLc2cTHQ26oOZ7QAWEVFp5cQ/oBH6C8GGPlEqrrhhqOxNk bAvLX0PNr3xjQfvyr2NtpAIJirYP+8FmkZXA7Y9a5zYhH4qVQx7o2xYCTtvUfMtU m9zhnyw11gBHuzPwSH2acUhZJegzAWCRSYJ3otMIQo6wG/KK5mi2OhXOKiLjfMf5 Gf+jzU1geIsEDSIgbOlnpg1fnTGDO7M= -----END CERTIFICATE-----Generated at Mon Oct 12 10:02:22 2026 by rpki-client