$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4599a7ce-34bc-344e-9199-09be28d4bd86.roa File: 4599a7ce-34bc-344e-9199-09be28d4bd86.roa (raw, json) Hash identifier: PjjcoOVqA/gS7YqKw8xflmixEwN8F0ccp1bno4yTU2M= Subject key identifier: BA:8A:44:94:16:0D:0C:07:69:DD:30:F4:A8:B6:08:57:BA:9C:56:EC Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F9C4445509D0B474567BC2880 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4599a7ce-34bc-344e-9199-09be28d4bd86.roa Signing time: Sat 24 Oct 2026 16:59:07 +0000 ROA not before: Sat 24 Oct 2026 16:59:07 +0000 ROA not after: Fri 22 Jan 2027 17:59:07 +0000 asID: 218911 IP address blocks: 64.204.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9c:44:45:50:9d:0b:47:45:67:bc:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 24 16:59:07 2026 GMT Not After : Jan 22 17:59:07 2027 GMT Subject: CN=6b7f2159-0b4c-4804-b574-33eef27e175a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:64:66:d9:b8:18:c2:7f:80:a4:1a:4d:d5: db:8b:8a:38:5c:aa:45:67:5a:17:bd:52:1c:e6:b5: a9:a2:9e:68:49:98:7d:66:aa:11:a8:ea:1e:f2:93: ac:52:8a:7b:fa:30:fc:b5:a7:1e:de:b2:5a:05:bc: cd:93:8e:97:cf:90:5b:ed:f3:14:e8:9e:12:61:c7: b8:63:19:82:b6:e8:e4:36:da:c4:4a:71:91:ed:a8: 7e:56:5c:6b:18:ff:86:e4:eb:19:f5:7b:1e:44:78: 3a:04:05:f4:7e:a0:90:21:c2:05:b3:4f:74:bd:2f: 69:e4:39:d6:45:b7:b5:7c:9c:29:45:d1:63:c4:3a: 3d:af:20:e4:aa:36:ca:c9:43:0c:b1:57:e7:cf:03: 57:f5:1d:01:a0:20:39:6f:92:86:c9:9e:af:77:7c: 6f:88:a8:59:18:38:92:fe:88:4d:8d:1c:a1:fd:b3: 99:f3:dd:f9:b0:6a:de:43:7b:46:1d:4a:7f:e1:32: 3a:f9:e0:c4:3f:61:ce:3e:43:77:71:7f:df:91:cd: 86:95:20:42:08:67:c2:25:c7:30:99:14:1a:06:de: dc:4b:1d:96:f3:9a:be:89:bd:ea:2f:73:8d:30:d5: 40:c8:ee:c4:3e:d4:c6:9f:1c:7c:80:c3:f9:db:b7: be:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8A:44:94:16:0D:0C:07:69:DD:30:F4:A8:B6:08:57:BA:9C:56:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4599a7ce-34bc-344e-9199-09be28d4bd86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:8e:4e:29:0a:e7:ee:c3:5e:51:17:35:cf:7d:3c:fc:f0:8c: 30:56:79:c1:d8:3d:58:cc:92:b2:77:20:cd:a1:12:e8:38:a7: 70:dc:83:b7:b8:ab:00:9a:35:bd:65:f3:da:ff:3c:fa:23:bc: a4:59:d2:f7:42:7b:c4:56:67:25:05:31:37:6d:d8:26:58:9f: 7f:14:4e:b0:8d:41:de:78:33:b5:30:1f:0a:0a:34:6f:09:74: 8b:66:e9:e9:95:4d:f7:dd:59:b7:0c:16:74:59:e0:80:93:dc: 63:06:88:89:3d:4a:4b:e3:1b:b6:5b:d9:a6:bf:33:67:45:68: f3:64:a2:4b:7f:0c:e6:7d:7e:fc:2c:62:03:b6:89:40:84:f9: 31:fb:05:7b:76:2a:fa:10:d1:b5:99:25:89:ce:4a:2f:e2:98: 89:12:fa:81:e3:cb:a7:6b:0b:49:6a:00:42:44:48:3c:ac:f5: 92:eb:17:6d:c6:00:6f:48:7e:29:82:e6:c4:94:df:e6:ff:eb: aa:35:5d:b7:1b:83:dc:1e:e3:54:9e:1f:a4:4a:54:11:aa:e2: 28:ba:03:d9:80:5d:79:10:91:f8:16:4b:92:ad:92:cd:03:33: 0f:9a:53:5a:04:e7:29:9d:af:c3:35:bb:78:69:8b:63:1f:22: 75:cb:5d:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+cREVQnQtHRWe8KIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAyNDE2NTkwN1oXDTI3MDEyMjE3NTkwN1owLzEtMCsGA1UEAxMk NmI3ZjIxNTktMGI0Yy00ODA0LWI1NzQtMzNlZWYyN2UxNzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0JkZtm4GMJ/gKQaTdXbi4o4XKpFZ1oXvVIc 5rWpop5oSZh9ZqoRqOoe8pOsUop7+jD8tace3rJaBbzNk46Xz5Bb7fMU6J4SYce4 YxmCtujkNtrESnGR7ah+VlxrGP+G5OsZ9XseRHg6BAX0fqCQIcIFs090vS9p5DnW Rbe1fJwpRdFjxDo9ryDkqjbKyUMMsVfnzwNX9R0BoCA5b5KGyZ6vd3xviKhZGDiS /ohNjRyh/bOZ8935sGreQ3tGHUp/4TI6+eDEP2HOPkN3cX/fkc2GlSBCCGfCJccw mRQaBt7cSx2W85q+ib3qL3ONMNVAyO7EPtTGnxx8gMP527e+1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqKRJQWDQwHad0w9Ki2CFe6nFbsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDU5OWE3Y2UtMzRiYy0z NDRlLTkxOTktMDliZTI4ZDRiZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMwdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqOTikK5+7DXlEXNc99PPzwjDBWecHYPVjMkrJ3IM2hEug4p3Dcg7e4 qwCaNb1l89r/PPojvKRZ0vdCe8RWZyUFMTdt2CZYn38UTrCNQd54M7UwHwoKNG8J dItm6emVTffdWbcMFnRZ4ICT3GMGiIk9SkvjG7Zb2aa/M2dFaPNkokt/DOZ9fvws YgO2iUCE+TH7BXt2KvoQ0bWZJYnOSi/imIkS+oHjy6drC0lqAEJESDys9ZLrF23G AG9IfimC5sSU3+b/66o1Xbcbg9we41SeH6RKVBGq4ii6A9mAXXkQkfgWS5Ktks0D Mw+aU1oE5ymdr8M1u3hpi2MfInXLXdA= -----END CERTIFICATE-----Generated at Mon Oct 26 21:06:05 2026 by rpki-client