$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/66ba988d-3975-3add-946c-71fd18af2977.roa File: 66ba988d-3975-3add-946c-71fd18af2977.roa (raw, json) Hash identifier: IUavPRRG9quyj8p5698wQPw4lmYZPtvV05+6Rur6Xag= Subject key identifier: 97:62:43:24:29:04:23:9A:98:F3:5F:7A:E4:09:12:7C:EC:24:39:00 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F5E6109820A443A6248664A70 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/66ba988d-3975-3add-946c-71fd18af2977.roa Signing time: Fri 02 Oct 2026 12:56:57 +0000 ROA not before: Fri 02 Oct 2026 12:56:57 +0000 ROA not after: Thu 31 Dec 2026 13:56:57 +0000 asID: 402899 IP address blocks: 68.164.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:61:09:82:0a:44:3a:62:48:66:4a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 2 12:56:57 2026 GMT Not After : Dec 31 13:56:57 2026 GMT Subject: CN=b9aaa7ab-5a13-4a9f-99a7-bb752996b84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:dd:6e:d7:8d:29:34:78:78:7f:19:b3:76:61: a7:bc:d1:87:3d:a2:74:f7:64:1b:90:66:0b:83:be: a8:e9:ca:a9:e7:1d:80:b7:29:60:13:51:37:03:55: 22:7e:dc:17:7e:43:44:60:36:24:52:56:82:28:8e: 59:e0:0e:e0:84:2d:72:d6:b0:16:04:40:ab:c5:36: 47:48:11:fe:66:81:40:d1:2e:b8:fd:b0:83:c8:73: 56:a4:8a:48:85:b3:fc:1e:9f:fa:b6:6b:0f:e5:01: 7d:87:62:55:cd:3f:d6:75:58:b7:4e:2e:dd:40:ee: ce:c7:97:72:c0:a8:b4:41:42:0f:e0:54:23:76:06: 9b:a3:f3:35:0e:cd:85:ef:1d:00:a1:08:35:0e:5a: e0:f7:c0:1c:ff:5e:f8:7e:e0:ac:2c:8c:3d:47:f0: a6:50:ff:c1:be:78:63:f0:9a:25:6e:5f:b7:9f:71: d0:08:c2:12:c2:69:75:ba:65:94:8f:9f:8d:34:e6: cd:7f:af:98:00:95:ff:6f:00:0e:9d:3c:81:fb:e1: 8a:dc:ab:a9:d8:f5:55:af:b2:d5:4f:54:06:28:fc: 35:d6:d6:1a:76:3b:f9:7a:64:fc:6c:d7:65:fd:b0: 92:ab:62:99:25:d3:e7:9c:d3:04:db:99:f3:96:3d: 86:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:62:43:24:29:04:23:9A:98:F3:5F:7A:E4:09:12:7C:EC:24:39:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/66ba988d-3975-3add-946c-71fd18af2977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:a0:17:cf:de:8e:af:12:fa:b2:55:f0:f3:99:00:f2:c3:b6: 99:51:33:b5:83:17:71:a9:ee:cf:b2:3f:2a:16:5b:89:27:a1: 69:ec:f1:e7:d8:3a:6a:fd:90:93:e0:aa:21:9e:e1:b8:23:2f: 79:de:4e:a2:5e:9b:80:c5:b7:20:17:61:97:c3:db:c4:7e:e4: d6:72:fc:75:44:ba:e9:a4:ce:ef:72:33:4d:69:a8:59:9d:8d: 7e:dd:67:73:ee:31:20:a9:51:bf:a0:9a:a6:30:ca:3e:e4:7f: 41:ae:20:24:94:e6:c8:c0:b5:0a:90:b3:82:3c:a5:04:d3:33: 30:ea:5a:43:c6:35:d4:f2:2b:a0:3b:11:98:9c:e5:e0:07:2c: 9f:b1:9c:72:d2:c1:cb:86:4c:4b:74:13:7f:1e:b2:a5:e4:77: 44:be:70:43:e2:2f:8e:0f:58:c0:05:4d:3d:b1:1e:08:47:3b: 34:e0:77:61:84:7a:5e:da:8d:2e:9b:fd:a6:32:78:2d:09:63: df:5a:e8:d4:e3:e6:a2:d7:50:08:7a:aa:7f:ca:04:ee:24:b0: e1:86:5b:96:0f:93:c7:3c:23:33:45:cd:e8:86:6d:f4:2b:39: 52:3a:63:e2:14:5d:e1:45:0e:74:18:6f:59:f3:62:64:38:d2: 62:e4:46:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYQmCCkQ6YkhmSnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwMjEyNTY1N1oXDTI2MTIzMTEzNTY1N1owLzEtMCsGA1UEAxMk YjlhYWE3YWItNWExMy00YTlmLTk5YTctYmI3NTI5OTZiODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd1u140pNHh4fxmzdmGnvNGHPaJ092QbkGYL g76o6cqp5x2AtylgE1E3A1UiftwXfkNEYDYkUlaCKI5Z4A7ghC1y1rAWBECrxTZH SBH+ZoFA0S64/bCDyHNWpIpIhbP8Hp/6tmsP5QF9h2JVzT/WdVi3Ti7dQO7Ox5dy wKi0QUIP4FQjdgabo/M1Ds2F7x0AoQg1Dlrg98Ac/174fuCsLIw9R/CmUP/Bvnhj 8Jolbl+3n3HQCMISwml1umWUj5+NNObNf6+YAJX/bwAOnTyB++GK3Kup2PVVr7LV T1QGKPw11tYadjv5emT8bNdl/bCSq2KZJdPnnNME25nzlj2GhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdiQyQpBCOamPNfeuQJEnzsJDkAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjZiYTk4OGQtMzk3NS0z YWRkLTk0NmMtNzFmZDE4YWYyOTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKT4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAugF8/ejq8S+rJV8POZAPLDtplRM7WDF3Gp7s+yPyoWW4knoWns8efY Omr9kJPgqiGe4bgjL3neTqJem4DFtyAXYZfD28R+5NZy/HVEuumkzu9yM01pqFmd jX7dZ3PuMSCpUb+gmqYwyj7kf0GuICSU5sjAtQqQs4I8pQTTMzDqWkPGNdTyK6A7 EZic5eAHLJ+xnHLSwcuGTEt0E38esqXkd0S+cEPiL44PWMAFTT2xHghHOzTgd2GE el7ajS6b/aYyeC0JY99a6NTj5qLXUAh6qn/KBO4ksOGGW5YPk8c8IzNFzeiGbfQr OVI6Y+IUXeFFDnQYb1nzYmQ40mLkRhY= -----END CERTIFICATE-----Generated at Sun Oct 11 09:32:02 2026 by rpki-client