$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/41772a0a-b865-36c4-968b-18928847cc2f.roa File: 41772a0a-b865-36c4-968b-18928847cc2f.roa (raw, json) Hash identifier: nqwzgY4oLD3Q+FXLj+OWcnul9kSVI7IeDNjIPrtmkoc= Subject key identifier: B0:4E:8D:EC:0F:A6:63:2D:C2:EE:F3:DC:9B:E2:9F:A2:1F:09:78:2A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F5BB93ADB0C6FF9BC715E1200 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/41772a0a-b865-36c4-968b-18928847cc2f.roa Signing time: Thu 01 Oct 2026 14:07:13 +0000 ROA not before: Thu 01 Oct 2026 14:07:13 +0000 ROA not after: Wed 30 Dec 2026 15:07:13 +0000 asID: 6079 IP address blocks: 64.205.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:b9:3a:db:0c:6f:f9:bc:71:5e:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 1 14:07:13 2026 GMT Not After : Dec 30 15:07:13 2026 GMT Subject: CN=21240f94-1996-478c-88dc-1ce462ab0d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:93:14:ad:ce:ef:e8:47:06:c5:a0:f1:d2:ee: c9:e9:9f:74:8e:b7:e6:49:1d:09:eb:bb:57:a4:08: f0:f1:99:51:79:1e:56:bc:9e:10:4f:63:e0:22:0e: e8:e8:ac:3f:a1:a5:65:27:5c:d9:f1:38:72:a1:3b: 7e:37:42:02:48:e0:cb:d7:e5:79:f3:b2:6e:57:75: 47:d4:07:68:02:ff:78:36:7d:18:10:35:d5:cf:7b: 3e:3e:7d:58:80:9d:ed:ba:0e:8c:bf:ee:e1:65:7b: aa:5d:ae:ad:cb:9a:14:4c:19:c5:e8:af:b8:90:75: 8c:5a:6a:86:7a:86:34:df:a6:ae:06:54:d8:c7:42: 84:f6:65:b5:53:3f:f7:17:61:e3:b6:ec:0e:f8:78: f3:84:5e:74:45:5c:12:0d:14:5a:21:ed:90:dc:c5: e2:7d:20:6b:70:43:68:53:9d:0e:a2:13:2e:2f:f0: 2f:39:7a:02:09:e3:30:f2:31:21:ba:0a:dd:c3:de: 0e:7e:6c:66:4d:ee:ed:9e:51:0e:4f:79:c1:0a:36: dd:9f:73:f5:b5:e1:b2:0f:8c:fd:b2:a6:cd:0d:7d: 43:d9:61:1e:86:fc:73:c8:b0:8f:d4:c0:99:69:29: 39:94:e9:a6:00:64:5c:cb:6c:b0:57:26:5a:86:15: 01:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4E:8D:EC:0F:A6:63:2D:C2:EE:F3:DC:9B:E2:9F:A2:1F:09:78:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/41772a0a-b865-36c4-968b-18928847cc2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.205.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:37:3c:38:d1:c3:9a:30:ed:57:1a:f7:17:92:a7:2f:62:b1: d6:e1:e8:a1:8b:17:f4:80:ae:33:65:13:ff:cb:e1:fb:cb:27: f1:b6:46:81:a0:eb:fb:7f:f1:9a:1f:bb:72:9f:1b:de:e8:f7: 82:c1:1b:70:3c:d2:77:6a:80:cc:f3:54:db:d2:f7:92:15:42: ac:f4:7e:58:f2:5d:0b:8a:96:40:39:ff:a3:c1:f0:dc:92:3d: e9:70:57:9f:dc:c4:d4:52:88:43:71:2e:b9:58:57:36:ff:32: f1:c9:64:a9:53:65:51:2f:92:59:5e:a8:88:a1:f9:4d:53:39: 74:bb:a2:0c:44:a8:7c:fc:73:e3:98:c5:26:6d:6a:00:88:00: da:50:62:b9:f6:79:65:dd:d9:27:14:46:ec:9c:77:d5:9a:54: 05:ab:d7:a2:da:fb:c6:17:bc:50:b2:d5:37:bb:3a:9c:05:3c: 66:24:b8:17:5f:b5:52:1f:25:31:b5:2f:24:90:2b:d3:f6:91: 39:9c:69:b7:1f:75:fd:85:b6:5b:30:f3:c1:c1:d7:fa:13:eb: 4d:ef:62:f0:45:6c:67:6d:ed:50:29:6e:e2:5c:33:8b:ae:3a: 3f:36:c4:78:2e:59:fc:df:0b:43:40:4e:bc:39:c3:54:f7:7b: fa:ac:a4:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9buTrbDG/5vHFeEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwMTE0MDcxM1oXDTI2MTIzMDE1MDcxM1owLzEtMCsGA1UEAxMk MjEyNDBmOTQtMTk5Ni00NzhjLTg4ZGMtMWNlNDYyYWIwZDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipMUrc7v6EcGxaDx0u7J6Z90jrfmSR0J67tX pAjw8ZlReR5WvJ4QT2PgIg7o6Kw/oaVlJ1zZ8ThyoTt+N0ICSODL1+V587JuV3VH 1AdoAv94Nn0YEDXVz3s+Pn1YgJ3tug6Mv+7hZXuqXa6ty5oUTBnF6K+4kHWMWmqG eoY036auBlTYx0KE9mW1Uz/3F2HjtuwO+HjzhF50RVwSDRRaIe2Q3MXifSBrcENo U50OohMuL/AvOXoCCeMw8jEhugrdw94OfmxmTe7tnlEOT3nBCjbdn3P1teGyD4z9 sqbNDX1D2WEehvxzyLCP1MCZaSk5lOmmAGRcy2ywVyZahhUBOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBOjewPpmMtwu7z3Jvin6IfCXgqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDE3NzJhMGEtYjg2NS0z NmM0LTk2OGItMTg5Mjg4NDdjYzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQM10MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABE3PDjRw5ow7Vca9xeSpy9isdbh6KGLF/SArjNlE//L4fvLJ/G2RoGg 6/t/8Zofu3KfG97o94LBG3A80ndqgMzzVNvS95IVQqz0fljyXQuKlkA5/6PB8NyS PelwV5/cxNRSiENxLrlYVzb/MvHJZKlTZVEvklleqIih+U1TOXS7ogxEqHz8c+OY xSZtagCIANpQYrn2eWXd2ScURuycd9WaVAWr16La+8YXvFCy1Te7OpwFPGYkuBdf tVIfJTG1LySQK9P2kTmcabcfdf2Ftlsw88HB1/oT603vYvBFbGdt7VApbuJcM4uu Oj82xHguWfzfC0NATrw5w1T3e/qspDk= -----END CERTIFICATE-----Generated at Sun Oct 11 06:42:27 2026 by rpki-client