$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7043ff1e-a5d1-375c-89b3-60db0a304b49.roa File: 7043ff1e-a5d1-375c-89b3-60db0a304b49.roa (raw, json) Hash identifier: oW+L5o5B6h1e6JYI2MjMOTtI0ys4RjqTFDCuy2F+UYI= Subject key identifier: 5E:1A:1F:FA:78:4D:77:53:D2:A3:08:B8:9D:30:9A:54:79:4D:3A:08 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F678C519FF094E7943264BB80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7043ff1e-a5d1-375c-89b3-60db0a304b49.roa Signing time: Mon 05 Oct 2026 19:46:26 +0000 ROA not before: Mon 05 Oct 2026 19:46:26 +0000 ROA not after: Sun 03 Jan 2027 20:46:26 +0000 asID: 402072 IP address blocks: 64.205.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:67:8c:51:9f:f0:94:e7:94:32:64:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 5 19:46:26 2026 GMT Not After : Jan 3 20:46:26 2027 GMT Subject: CN=ce5dd763-0407-4bfe-948b-08278025f83a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1e:26:10:74:ff:b1:4e:6f:f6:42:a0:3d:5d: 7a:0a:ba:c5:36:37:f8:b1:1b:d1:a7:70:74:41:54: 93:d4:19:bf:24:6b:9e:63:9e:94:d2:55:ec:bd:e8: 06:1f:d3:ec:bb:61:71:a2:34:3a:5e:b4:22:75:0d: e0:6f:de:f8:49:41:37:24:d5:52:4a:d6:8a:e4:5a: 4b:cc:24:51:0f:1a:48:99:a5:dd:6d:dc:b0:b9:2c: db:53:f2:08:65:10:97:4d:39:5e:7c:02:c2:28:90: d4:5f:02:b3:4b:06:c1:fa:ef:c8:c1:af:2a:dc:68: 97:3b:9e:e0:2b:81:5a:f7:4e:ab:69:09:2e:70:5c: c9:63:ff:94:1a:cf:16:94:6c:27:00:f0:c6:30:9d: 99:5d:61:08:dc:d0:5b:fa:69:43:ea:a5:5f:80:dd: 38:76:4b:71:97:00:cd:42:d4:0c:e5:5d:05:55:d3: 32:4f:15:cd:bc:e0:54:67:26:0f:92:70:b7:bf:5d: 1d:b5:f2:f9:11:76:c3:1f:39:1b:03:ab:2e:1b:a7: 66:a0:91:70:9b:7b:9d:ba:e7:80:5e:26:41:9f:bc: 1e:e5:70:73:29:d6:37:2e:83:83:4b:1b:97:49:d1: 1f:ad:fa:5e:75:66:75:ba:dd:57:6a:c3:ee:d3:9b: 28:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1A:1F:FA:78:4D:77:53:D2:A3:08:B8:9D:30:9A:54:79:4D:3A:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7043ff1e-a5d1-375c-89b3-60db0a304b49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.205.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:af:c9:99:dd:6f:34:be:3e:f9:64:35:63:0b:35:78:5e:a5: 2c:4c:1b:e4:ab:4a:ce:4b:39:fb:5a:61:d2:2a:bd:46:ae:62: 58:82:79:e9:59:eb:fd:cf:b6:9c:34:29:f8:20:b2:58:90:3a: 6d:fc:62:0f:46:4a:e4:6f:51:e3:4a:d4:e6:8a:17:83:05:1d: 91:ad:00:5b:d7:72:55:fc:d9:65:3b:50:ea:7f:1a:78:cc:20: 8a:54:3c:0a:ba:d0:eb:53:1f:ab:bf:ab:45:87:51:d2:b5:5a: e8:92:5b:34:4d:53:2f:9b:e7:3a:10:98:ea:7d:36:e4:62:b7: f1:9d:2f:ff:ec:c8:82:a9:b3:db:4a:da:0c:d9:f2:25:88:dd: 78:99:db:5b:b4:1b:b6:cc:33:2f:87:de:36:08:fa:b1:3b:cb: 17:2c:1d:e0:b3:5a:21:60:f4:44:5a:4c:b1:82:d6:7e:b4:7c: 9d:24:f5:c6:23:de:71:0b:ed:11:f7:49:11:dc:71:f2:b4:9a: ff:7c:91:a0:06:42:a8:f9:80:91:ea:a8:2c:76:41:80:23:a7: c6:da:fe:64:17:b7:9a:22:31:5d:08:6f:75:92:4d:10:58:d1: 3e:5b:a1:58:23:c2:49:e8:81:2a:75:90:87:59:7f:21:dc:67: 83:7b:ec:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9njFGf8JTnlDJku4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwNTE5NDYyNloXDTI3MDEwMzIwNDYyNlowLzEtMCsGA1UEAxMk Y2U1ZGQ3NjMtMDQwNy00YmZlLTk0OGItMDgyNzgwMjVmODNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlx4mEHT/sU5v9kKgPV16CrrFNjf4sRvRp3B0 QVST1Bm/JGueY56U0lXsvegGH9Psu2FxojQ6XrQidQ3gb974SUE3JNVSStaK5FpL zCRRDxpImaXdbdywuSzbU/IIZRCXTTlefALCKJDUXwKzSwbB+u/Iwa8q3GiXO57g K4Fa906raQkucFzJY/+UGs8WlGwnAPDGMJ2ZXWEI3NBb+mlD6qVfgN04dktxlwDN QtQM5V0FVdMyTxXNvOBUZyYPknC3v10dtfL5EXbDHzkbA6suG6dmoJFwm3uduueA XiZBn7we5XBzKdY3LoODSxuXSdEfrfpedWZ1ut1XasPu05sohwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4aH/p4TXdT0qMIuJ0wmlR5TToIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNzA0M2ZmMWUtYTVkMS0z NzVjLTg5YjMtNjBkYjBhMzA0YjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQM0+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIivyZndbzS+PvlkNWMLNXhepSxMG+SrSs5LOftaYdIqvUauYliCeelZ 6/3Ptpw0KfggsliQOm38Yg9GSuRvUeNK1OaKF4MFHZGtAFvXclX82WU7UOp/GnjM IIpUPAq60OtTH6u/q0WHUdK1WuiSWzRNUy+b5zoQmOp9NuRit/GdL//syIKps9tK 2gzZ8iWI3XiZ21u0G7bMMy+H3jYI+rE7yxcsHeCzWiFg9ERaTLGC1n60fJ0k9cYj 3nEL7RH3SRHccfK0mv98kaAGQqj5gJHqqCx2QYAjp8ba/mQXt5oiMV0Ib3WSTRBY 0T5boVgjwknogSp1kIdZfyHcZ4N77As= -----END CERTIFICATE-----Generated at Sun Oct 11 06:42:19 2026 by rpki-client