$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5042cc41-f7fc-3345-b9ef-7cad1a5cbd12.roa File: 5042cc41-f7fc-3345-b9ef-7cad1a5cbd12.roa (raw, json) Hash identifier: x+wLR7ujt16aDjQ4gwMiTx6SC99+sBUu42R6HbKabRc= Subject key identifier: E8:68:68:91:5B:02:56:2F:DC:15:CA:31:00:AD:D9:55:C0:CA:EC:BF Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F67000892CAF16610B9ACE780 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5042cc41-f7fc-3345-b9ef-7cad1a5cbd12.roa Signing time: Mon 05 Oct 2026 15:03:47 +0000 ROA not before: Mon 05 Oct 2026 15:03:47 +0000 ROA not after: Sun 03 Jan 2027 16:03:47 +0000 asID: 154132 IP address blocks: 68.164.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:67:00:08:92:ca:f1:66:10:b9:ac:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 5 15:03:47 2026 GMT Not After : Jan 3 16:03:47 2027 GMT Subject: CN=c658b2ab-ca51-40a2-99da-42ab95ab1870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:62:75:61:cd:98:a3:6c:f4:99:e6:64:54:8d: 3a:31:39:2a:d9:6f:d7:56:19:0e:0b:ae:0e:47:e0: 25:df:88:5e:a4:b1:6f:b5:ff:d4:90:95:3b:d0:44: a8:94:c0:e1:5b:d3:60:3a:34:e6:e9:ca:78:48:c9: a0:83:7e:4a:c0:62:fe:eb:64:c4:e6:7c:02:19:77: 8a:e2:5b:03:ab:9b:50:d7:82:07:34:8a:aa:3b:7b: a0:3e:3f:8c:4c:06:2e:18:ba:7b:ed:6e:88:d5:e6: b3:ca:23:ab:8d:95:aa:dd:21:30:3f:50:ce:f8:22: 50:91:83:e4:3e:91:6c:05:a0:23:85:c8:36:ff:98: 83:e8:ed:45:d4:1b:81:a8:ba:2b:b3:f9:1c:70:86: de:22:06:ce:5f:6b:a1:5b:a4:3b:83:ce:d0:cf:89: f8:4b:c8:5e:ae:90:42:0a:4b:da:60:ef:2d:be:5a: 35:2f:70:c4:da:84:17:09:41:47:75:f5:ac:7a:ee: 70:df:f0:ef:55:15:e4:a6:fc:90:63:42:1f:94:b7: b7:9d:2f:12:c0:e6:4f:e0:e3:eb:49:f5:f0:5a:4a: f0:04:b8:1c:11:9e:23:5e:59:2f:59:8d:a7:44:1c: 7a:39:c2:6c:3e:26:33:bf:de:a1:35:81:24:f6:86: 80:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:68:68:91:5B:02:56:2F:DC:15:CA:31:00:AD:D9:55:C0:CA:EC:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5042cc41-f7fc-3345-b9ef-7cad1a5cbd12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:1b:a5:12:9b:e6:73:53:90:a8:ef:0b:29:27:93:d1:43:36: f6:a6:6e:b8:ad:21:ab:77:77:ea:1b:3a:46:66:ff:65:d8:c3: 2f:15:10:d8:ae:f7:ae:b9:a0:6f:35:83:3f:4e:20:6f:31:e6: 18:84:d8:1a:fa:7e:0a:58:c4:a9:01:a4:bc:9c:e4:b2:8f:4f: 5c:5c:06:9e:94:22:5c:28:ba:1d:3f:6b:1a:46:fa:05:21:a5: 8d:7e:74:e2:1e:c7:c8:50:e6:31:a5:7b:4a:51:fa:83:ba:46: 00:0e:22:36:78:bd:37:cf:04:24:d2:f8:80:ec:0f:9a:e7:9a: 63:5b:2a:28:18:0a:31:43:a7:66:fe:f7:f6:09:cc:b7:af:d8: 8b:51:0e:fc:dd:cb:ab:1b:82:54:ab:1a:88:32:ba:96:d4:2f: f0:1b:4e:fc:00:1d:b4:c0:46:76:29:ff:b9:62:93:c7:89:e7: 32:f6:b3:55:71:43:a2:6a:67:11:1b:09:96:1f:75:bb:fa:03: 34:72:5c:4a:69:a3:cf:80:6f:50:33:94:ef:a9:b6:46:af:a5: 05:37:2b:5c:89:07:58:19:21:63:9a:09:80:a8:67:9c:f3:e1: fe:2c:da:c9:ea:fb:46:90:62:24:ac:10:46:44:1e:c1:e4:86: b7:21:5a:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9nAAiSyvFmELms54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwNTE1MDM0N1oXDTI3MDEwMzE2MDM0N1owLzEtMCsGA1UEAxMk YzY1OGIyYWItY2E1MS00MGEyLTk5ZGEtNDJhYjk1YWIxODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2J1Yc2Yo2z0meZkVI06MTkq2W/XVhkOC64O R+Al34hepLFvtf/UkJU70ESolMDhW9NgOjTm6cp4SMmgg35KwGL+62TE5nwCGXeK 4lsDq5tQ14IHNIqqO3ugPj+MTAYuGLp77W6I1eazyiOrjZWq3SEwP1DO+CJQkYPk PpFsBaAjhcg2/5iD6O1F1BuBqLors/kccIbeIgbOX2uhW6Q7g87Qz4n4S8herpBC CkvaYO8tvlo1L3DE2oQXCUFHdfWseu5w3/DvVRXkpvyQY0IflLe3nS8SwOZP4OPr SfXwWkrwBLgcEZ4jXlkvWY2nRBx6OcJsPiYzv96hNYEk9oaAIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhoaJFbAlYv3BXKMQCt2VXAyuy/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNTA0MmNjNDEtZjdmYy0z MzQ1LWI5ZWYtN2NhZDFhNWNiZDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKREMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYbpRKb5nNTkKjvCyknk9FDNvambritIat3d+obOkZm/2XYwy8VENiu 9665oG81gz9OIG8x5hiE2Br6fgpYxKkBpLyc5LKPT1xcBp6UIlwouh0/axpG+gUh pY1+dOIex8hQ5jGle0pR+oO6RgAOIjZ4vTfPBCTS+IDsD5rnmmNbKigYCjFDp2b+ 9/YJzLev2ItRDvzdy6sbglSrGogyupbUL/AbTvwAHbTARnYp/7lik8eJ5zL2s1Vx Q6JqZxEbCZYfdbv6AzRyXEppo8+Ab1AzlO+ptkavpQU3K1yJB1gZIWOaCYCoZ5zz 4f4s2snq+0aQYiSsEEZEHsHkhrchWuw= -----END CERTIFICATE-----Generated at Sun Oct 11 10:12:20 2026 by rpki-client