$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/630a49d2-2c69-32b5-949c-3e5e0bca6647.roa File: 630a49d2-2c69-32b5-949c-3e5e0bca6647.roa (raw, json) Hash identifier: Zty7hyqzWyyY91QbvfDQF314bj/E/tFBVqowcInWhCU= Subject key identifier: F1:C0:45:7E:F4:85:1B:81:AA:2B:3F:97:A8:F5:9F:88:38:08:37:2A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F1335B498B51EF1C3B0DADD20 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/630a49d2-2c69-32b5-949c-3e5e0bca6647.roa Signing time: Sat 05 Sep 2026 14:44:01 +0000 ROA not before: Sat 05 Sep 2026 14:44:01 +0000 ROA not after: Fri 04 Dec 2026 15:44:01 +0000 asID: 214483 IP address blocks: 64.204.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:35:b4:98:b5:1e:f1:c3:b0:da:dd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 5 14:44:01 2026 GMT Not After : Dec 4 15:44:01 2026 GMT Subject: CN=cb45e594-206f-462b-bc1e-d9d8d3f4f19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5e:15:0a:12:ae:02:8a:71:f8:28:8b:b6:c2: ba:53:50:87:ca:f4:f7:6d:2c:f1:6d:0a:34:67:19: f7:73:54:a8:89:6d:91:c2:76:09:9f:51:53:b1:7c: 26:17:41:e6:e6:ec:c0:de:2b:5c:9c:d1:0f:31:7b: e1:b9:80:2b:d3:96:f8:5a:b8:91:f9:fb:4d:d2:b7: b0:31:89:2c:fa:6e:0b:cc:c2:51:76:d8:25:6e:d4: e8:78:c7:f8:42:b1:c3:7c:db:5a:4d:53:8d:48:89: 6b:b1:1d:62:cc:d3:f5:d2:1d:39:a3:ef:6c:0c:ff: 83:47:8f:09:83:60:13:e3:e4:d2:06:a4:60:fa:c5: fa:2d:ff:eb:c9:56:2e:f0:c3:57:24:a2:8a:76:11: b6:0c:2d:f0:89:65:4d:be:7c:b3:94:e9:96:c1:d1: 56:41:19:0a:42:e2:7c:16:7a:3e:d8:f0:bb:fe:76: fa:f4:94:93:54:23:44:83:4b:36:09:8d:45:e9:b2: 0d:14:e8:ff:94:be:51:8b:27:01:5c:b1:81:80:30: 71:24:94:62:48:16:e6:36:84:d1:67:4b:b2:30:9c: 74:ee:17:84:58:76:75:9a:03:27:c4:0a:4c:51:a6: b6:db:0b:ea:8d:26:a9:81:da:32:7b:47:b0:1c:5c: b0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C0:45:7E:F4:85:1B:81:AA:2B:3F:97:A8:F5:9F:88:38:08:37:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/630a49d2-2c69-32b5-949c-3e5e0bca6647.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:1c:74:87:e9:ad:ca:8a:5b:6f:7d:fe:44:77:c1:95:f4:e9: 33:f0:12:9e:0c:16:77:c9:2b:16:00:12:d5:f3:17:29:f0:cd: b2:9c:00:8d:af:a3:54:b5:5b:fe:e4:9a:ad:47:30:87:57:43: 73:d4:8e:7d:4f:18:d4:c9:9c:17:a9:c1:20:08:ce:4c:3c:9d: e0:c7:6e:81:cd:7c:57:76:47:75:6f:29:e9:4f:69:c4:1d:fa: d9:1a:eb:06:50:6c:7a:2b:b7:27:3f:3b:28:98:70:02:21:e8: a6:bd:da:68:2a:20:15:5b:94:d9:e8:83:5b:40:35:e1:28:22: 3c:81:40:5c:61:a6:5a:b0:f6:3a:1c:0c:db:c4:cb:d2:97:f5: ad:1f:0d:7d:ac:5e:d8:00:10:51:ac:6d:55:91:cc:0f:15:2a: 50:02:2e:fd:61:10:f2:c4:27:63:6f:4e:9c:56:e8:fe:be:6b: 9e:ed:86:bb:58:8b:43:91:4b:70:42:61:96:a9:26:fb:8c:95: 2a:6f:72:a5:c3:85:d5:c1:b7:3c:33:88:3f:59:98:e0:b4:85: 1f:4f:99:39:f0:56:85:92:e4:3a:a2:4c:f8:85:cc:06:19:b8: ea:02:eb:37:06:76:75:e8:3d:9c:6b:80:58:b9:2f:31:46:52: 27:4f:8b:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TNbSYtR7xw7Da3SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwNTE0NDQwMVoXDTI2MTIwNDE1NDQwMVowLzEtMCsGA1UEAxMk Y2I0NWU1OTQtMjA2Zi00NjJiLWJjMWUtZDlkOGQzZjRmMTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV4VChKuAopx+CiLtsK6U1CHyvT3bSzxbQo0 Zxn3c1SoiW2RwnYJn1FTsXwmF0Hm5uzA3itcnNEPMXvhuYAr05b4WriR+ftN0rew MYks+m4LzMJRdtglbtToeMf4QrHDfNtaTVONSIlrsR1izNP10h05o+9sDP+DR48J g2AT4+TSBqRg+sX6Lf/ryVYu8MNXJKKKdhG2DC3wiWVNvnyzlOmWwdFWQRkKQuJ8 Fno+2PC7/nb69JSTVCNEg0s2CY1F6bINFOj/lL5RiycBXLGBgDBxJJRiSBbmNoTR Z0uyMJx07heEWHZ1mgMnxApMUaa22wvqjSapgdoye0ewHFyw3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHARX70hRuBqis/l6j1n4g4CDcqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjMwYTQ5ZDItMmM2OS0z MmI1LTk0OWMtM2U1ZTBiY2E2NjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkcdIfprcqKW299/kR3wZX06TPwEp4MFnfJKxYAEtXzFynwzbKcAI2v o1S1W/7kmq1HMIdXQ3PUjn1PGNTJnBepwSAIzkw8neDHboHNfFd2R3VvKelPacQd +tka6wZQbHortyc/OyiYcAIh6Ka92mgqIBVblNnog1tANeEoIjyBQFxhplqw9joc DNvEy9KX9a0fDX2sXtgAEFGsbVWRzA8VKlACLv1hEPLEJ2NvTpxW6P6+a57thrtY i0ORS3BCYZapJvuMlSpvcqXDhdXBtzwziD9ZmOC0hR9PmTnwVoWS5DqiTPiFzAYZ uOoC6zcGdnXoPZxrgFi5LzFGUidPi3w= -----END CERTIFICATE-----Generated at Fri Sep 11 03:30:09 2026 by rpki-client