$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5f11d823-8e5e-3fa7-b630-c972cb8b862c.roa File: 5f11d823-8e5e-3fa7-b630-c972cb8b862c.roa (raw, json) Hash identifier: kj1ua9Ciz4T5kiJtD+kcm0nqqwXpSepH1bvkw3X6h0M= Subject key identifier: 46:0F:F8:DF:48:B0:8B:E7:E1:1A:36:2F:EE:56:52:7C:71:A7:E7:9B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F1304EC4F29B7B7453BDBAA80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5f11d823-8e5e-3fa7-b630-c972cb8b862c.roa Signing time: Sat 05 Sep 2026 13:05:44 +0000 ROA not before: Sat 05 Sep 2026 13:05:44 +0000 ROA not after: Fri 04 Dec 2026 14:05:44 +0000 asID: 214483 IP address blocks: 64.204.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:04:ec:4f:29:b7:b7:45:3b:db:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 5 13:05:44 2026 GMT Not After : Dec 4 14:05:44 2026 GMT Subject: CN=0ae72bf4-47a3-4a64-bf6e-ed9b2be24002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:18:73:56:88:58:e8:ed:37:e8:3d:49:ed:57: ab:96:b0:3e:97:74:97:c8:2f:91:65:fc:6a:0c:a8: 2d:84:78:63:ff:a1:4b:49:99:aa:66:69:29:ac:31: 40:3f:e5:f9:e7:b5:11:41:f2:c8:5a:d8:6a:5c:bf: 1a:98:f0:be:ad:76:ae:29:f1:63:ed:7e:41:c3:a8: 66:92:b0:6f:2b:d7:cf:0f:48:7b:59:dd:dc:cd:5c: 1b:fa:89:77:9b:3d:0d:49:fa:eb:29:eb:6e:54:0d: a2:32:2b:11:d3:bb:9a:9a:47:79:a4:7c:d6:db:bb: 1f:95:ee:f3:94:a7:3f:fd:b2:98:83:e0:c2:cd:43: 89:28:18:ef:99:67:e1:cb:dc:cc:bf:e3:0c:84:f1: 1c:59:98:bc:dd:47:33:c4:dd:c9:03:b0:4a:29:18: 1d:75:a4:b6:24:ae:d4:31:f2:ac:52:57:bb:90:28: d7:44:56:b7:3f:a2:c8:32:c0:6d:35:b8:88:8d:d5: 08:f0:39:9b:05:32:d1:e2:2d:bc:c2:b0:06:7f:e2: b1:99:69:42:fe:f8:a7:14:c4:14:57:4e:9f:72:9b: 57:30:45:7f:f9:f8:6a:7f:fd:7d:76:4a:bd:1d:e3: 85:e1:11:41:b0:af:88:18:11:f6:2b:14:6d:4e:9c: 18:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0F:F8:DF:48:B0:8B:E7:E1:1A:36:2F:EE:56:52:7C:71:A7:E7:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5f11d823-8e5e-3fa7-b630-c972cb8b862c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:36:e0:2f:d3:5f:9a:04:3f:9b:c4:38:ea:d7:c2:88:d4:32: 6d:0d:f2:ce:9a:1d:e7:e6:3e:76:d6:1a:7f:88:d9:48:1d:fe: 11:ff:65:1b:e6:12:85:af:e7:40:5b:20:32:b9:80:03:db:69: 17:f4:da:f1:44:85:e0:e7:84:2d:91:36:84:38:5f:0c:f8:69: b6:35:bb:27:4f:8b:4f:f8:d6:92:9f:bc:6b:c0:f3:10:02:a5: d9:5b:fb:79:08:5d:b6:d9:4c:5a:0e:32:35:29:5a:51:93:40: 17:d0:8c:df:c5:ac:1a:fd:07:81:9d:4c:d1:46:b0:ab:45:f3: dd:6d:8e:64:76:e3:2e:a8:31:a0:76:0e:c6:e4:5f:59:ab:35: bc:9c:e6:90:2c:1f:12:75:ad:6b:71:c8:1e:54:db:c6:b9:21: 02:d9:f0:4b:2c:07:c0:21:ba:20:ea:3e:20:b1:76:f5:72:b6: af:8e:51:bd:3a:76:18:2e:25:31:15:c3:b4:b7:ed:ab:60:2e: 4b:fd:4d:4d:6e:e6:18:84:51:94:f3:63:83:f3:13:fa:73:75: ed:40:e3:e7:de:c3:62:dc:23:e7:20:ad:a1:24:3e:37:86:6b: 45:4b:1e:5c:66:04:bf:eb:9c:99:3c:34:88:c7:2f:b0:5c:ec: d4:56:db:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TBOxPKbe3RTvbqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwNTEzMDU0NFoXDTI2MTIwNDE0MDU0NFowLzEtMCsGA1UEAxMk MGFlNzJiZjQtNDdhMy00YTY0LWJmNmUtZWQ5YjJiZTI0MDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxhzVohY6O036D1J7VerlrA+l3SXyC+RZfxq DKgthHhj/6FLSZmqZmkprDFAP+X557URQfLIWthqXL8amPC+rXauKfFj7X5Bw6hm krBvK9fPD0h7Wd3czVwb+ol3mz0NSfrrKetuVA2iMisR07uamkd5pHzW27sfle7z lKc//bKYg+DCzUOJKBjvmWfhy9zMv+MMhPEcWZi83UczxN3JA7BKKRgddaS2JK7U MfKsUle7kCjXRFa3P6LIMsBtNbiIjdUI8DmbBTLR4i28wrAGf+KxmWlC/vinFMQU V06fcptXMEV/+fhqf/19dkq9HeOF4RFBsK+IGBH2KxRtTpwYwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYP+N9IsIvn4Ro2L+5WUnxxp+ebMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNWYxMWQ4MjMtOGU1ZS0z ZmE3LWI2MzAtYzk3MmNiOGI4NjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMwIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABc24C/TX5oEP5vEOOrXwojUMm0N8s6aHefmPnbWGn+I2Ugd/hH/ZRvm EoWv50BbIDK5gAPbaRf02vFEheDnhC2RNoQ4Xwz4abY1uydPi0/41pKfvGvA8xAC pdlb+3kIXbbZTFoOMjUpWlGTQBfQjN/FrBr9B4GdTNFGsKtF891tjmR24y6oMaB2 DsbkX1mrNbyc5pAsHxJ1rWtxyB5U28a5IQLZ8EssB8AhuiDqPiCxdvVytq+OUb06 dhguJTEVw7S37atgLkv9TU1u5hiEUZTzY4PzE/pzde1A4+few2LcI+cgraEkPjeG a0VLHlxmBL/rnJk8NIjHL7Bc7NRW25Y= -----END CERTIFICATE-----Generated at Fri Sep 11 03:30:06 2026 by rpki-client