$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5a4033be-2216-3910-b354-de5c6d1bf3ee.roa File: 5a4033be-2216-3910-b354-de5c6d1bf3ee.roa (raw, json) Hash identifier: ktRTUjy2Cp6M3p5hAd2uaH4noB5u1WDTjjOX0z4TyRE= Subject key identifier: 36:F5:DD:BB:07:0A:1D:CC:2D:4B:72:C2:DD:F5:3F:AB:87:A3:32:47 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4974729F2AA1D03850758D60 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5a4033be-2216-3910-b354-de5c6d1bf3ee.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6079 IP address blocks: 66.253.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:72:9f:2a:a1:d0:38:50:75:8d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b3b055d1-dfa3-40b1-bbd8-f4c5109d6d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:30:e2:db:de:e9:08:57:25:43:0a:ef:cc: f2:27:36:a6:9a:cb:5b:1f:8d:3d:a4:e1:72:78:80: 06:12:0f:a8:da:3c:57:a3:0c:f9:74:ba:1c:47:ca: 5d:8e:e9:2d:39:ab:5e:35:cb:01:95:89:ca:cd:87: 69:24:4a:f5:a8:a8:43:16:aa:1a:b5:d2:d5:f1:5b: 16:12:6e:14:b0:e5:2f:47:7e:56:4a:83:a5:14:7d: 03:76:cf:c7:70:e9:ef:79:3f:7f:68:63:c6:b6:54: 59:ba:7c:ef:cc:d0:16:03:ad:1a:01:b4:34:92:25: c0:8b:05:7c:49:18:e0:65:35:11:b0:35:06:8e:36: a7:b5:d8:b9:29:68:7f:11:ee:f1:e4:f6:df:11:21: 0e:4e:ba:52:1d:3b:75:fe:0e:13:8c:9e:90:2d:53: 34:00:da:ef:45:55:06:56:7d:c8:e7:8c:05:c7:2b: 15:5b:ef:d7:36:82:b5:32:d5:99:c7:fb:93:3a:02: 30:58:f4:c3:62:74:31:6b:d5:af:20:16:92:3c:7a: 62:fb:54:c7:bc:8d:02:1b:d6:d0:3e:b7:17:dc:50: 70:c8:58:69:20:80:c0:69:00:57:c1:d7:0f:fc:f5: 92:2c:ee:fb:84:dc:43:6e:0d:70:e9:20:2f:96:a8: bd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F5:DD:BB:07:0A:1D:CC:2D:4B:72:C2:DD:F5:3F:AB:87:A3:32:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5a4033be-2216-3910-b354-de5c6d1bf3ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:75:62:64:80:56:68:36:2c:c8:a3:71:a0:fb:21:a0:ef:bb: 21:cb:b4:1a:a2:1b:c3:78:d0:7b:1f:95:f5:9c:f2:2b:64:af: ac:76:23:0e:0d:91:b6:08:21:02:16:7f:56:91:f1:4c:9d:e6: 43:04:75:b2:b6:22:59:d5:20:ae:c6:73:41:7b:36:91:4b:1a: 7b:3f:a0:dd:a7:37:01:fc:40:75:25:82:96:68:89:2c:61:e4: 6c:5c:01:ae:80:8f:d8:6f:17:5e:78:af:a5:58:86:79:85:d0: 2f:ee:4d:51:87:0d:33:f3:37:17:00:ea:9c:6e:f4:3e:62:93: ab:16:f8:c3:80:ea:9b:20:5d:97:d8:a8:21:73:ca:a5:49:85: 88:14:8b:37:dc:c0:bc:cb:a9:94:21:0d:e7:c4:15:e3:7e:ee: 5e:c9:50:75:b8:04:75:c6:2d:42:f3:96:2c:a4:19:fa:15:63: 83:28:4c:16:68:f7:e4:3d:3c:8e:5d:a9:4e:b3:e8:c5:f3:8f: 70:ad:8f:75:a8:88:84:d6:99:3f:93:56:8c:58:7a:70:2a:19: 0f:ca:2b:52:68:4e:89:84:69:a7:6a:bc:f2:5d:ea:18:44:ca: 74:df:c2:76:82:8b:c0:44:39:39:5c:12:af:af:f6:6f:bf:19: 39:e2:c2:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdHKfKqHQOFB1jWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjNiMDU1ZDEtZGZhMy00MGIxLWJiZDgtZjRjNTEwOWQ2ZDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCww4tve6QhXJUMK78zyJzammstbH409pOFy eIAGEg+o2jxXowz5dLocR8pdjuktOateNcsBlYnKzYdpJEr1qKhDFqoatdLV8VsW Em4UsOUvR35WSoOlFH0Dds/HcOnveT9/aGPGtlRZunzvzNAWA60aAbQ0kiXAiwV8 SRjgZTURsDUGjjantdi5KWh/Ee7x5PbfESEOTrpSHTt1/g4TjJ6QLVM0ANrvRVUG Vn3I54wFxysVW+/XNoK1MtWZx/uTOgIwWPTDYnQxa9WvIBaSPHpi+1THvI0CG9bQ PrcX3FBwyFhpIIDAaQBXwdcP/PWSLO77hNxDbg1w6SAvlqi9zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDb13bsHCh3MLUtywt31P6uHozJHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNWE0MDMzYmUtMjIxNi0z OTEwLWIzNTQtZGU1YzZkMWJmM2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv1nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJ1YmSAVmg2LMijcaD7IaDvuyHLtBqiG8N40HsflfWc8itkr6x2Iw4N kbYIIQIWf1aR8Uyd5kMEdbK2IlnVIK7Gc0F7NpFLGns/oN2nNwH8QHUlgpZoiSxh 5GxcAa6Aj9hvF154r6VYhnmF0C/uTVGHDTPzNxcA6pxu9D5ik6sW+MOA6psgXZfY qCFzyqVJhYgUizfcwLzLqZQhDefEFeN+7l7JUHW4BHXGLULzliykGfoVY4MoTBZo 9+Q9PI5dqU6z6MXzj3Ctj3WoiITWmT+TVoxYenAqGQ/KK1JoTomEaadqvPJd6hhE ynTfwnaCi8BEOTlcEq+v9m+/GTniwjE= -----END CERTIFICATE-----Generated at Sat Oct 10 23:29:36 2026 by rpki-client