$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7e5b571f-70b1-36e2-8dbd-756957d0c9a5.roa File: 7e5b571f-70b1-36e2-8dbd-756957d0c9a5.roa (raw, json) Hash identifier: AJ8xI/GlvdKECzv0WsF7TzD+7lNYPZBbZdNSstzmV9M= Subject key identifier: 97:B0:6E:7C:1C:42:54:52:DB:E7:4D:25:FA:A2:85:D6:62:C1:D5:61 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F506D6736FA5A987A700DCFC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7e5b571f-70b1-36e2-8dbd-756957d0c9a5.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 8881 IP address blocks: 64.204.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:67:36:fa:5a:98:7a:70:0d:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=3b2e42ea-fd1d-4457-a935-60452a60c3cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:81:5c:51:54:6e:fe:ec:cf:00:ff:86:e4:44: 96:06:00:46:4e:f9:b0:14:6c:09:2e:6d:7b:b1:48: fb:a2:7c:ba:57:55:b9:11:e5:aa:14:dd:ec:c2:33: 93:6c:2b:32:13:e3:1e:71:d6:ef:ee:4f:4e:6f:33: 86:f3:b7:04:82:d0:04:db:de:17:a8:54:ee:79:51: 07:12:0a:c0:0b:e5:e3:fe:dd:04:ef:25:ed:10:86: a6:24:44:2a:04:ce:36:58:f8:fa:6d:a9:b4:40:a3: 00:05:6b:36:32:59:a1:b9:de:ce:91:43:57:73:11: ed:ab:92:3d:21:7c:c1:c9:e2:96:1f:7a:ef:2c:8b: 79:34:63:05:e6:cf:25:2c:fe:e7:20:08:65:36:03: b7:5c:49:5e:54:52:72:a8:07:86:0d:88:82:c4:7a: 35:79:27:23:0f:a1:0a:62:23:d2:e3:04:be:75:8c: 60:94:e8:99:26:57:32:c2:a5:8e:f7:c4:01:83:05: 9d:09:22:f7:09:1e:e5:28:e1:11:a4:3f:7a:40:e6: 3a:12:31:e1:ed:d0:3a:87:0c:97:7a:65:f5:cc:ba: 29:51:85:a2:85:b5:d9:f5:cd:51:c3:43:f8:91:2b: dc:84:2d:ac:6e:62:08:93:fd:cc:b2:38:44:f1:ed: f1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B0:6E:7C:1C:42:54:52:DB:E7:4D:25:FA:A2:85:D6:62:C1:D5:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7e5b571f-70b1-36e2-8dbd-756957d0c9a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:5a:24:16:28:7c:3b:04:c3:ea:01:36:72:d1:0a:af:46:25: 5f:9c:dd:f0:db:7d:4d:4c:f7:56:4c:c9:45:28:3d:49:92:bb: 1e:a8:27:7b:7d:ca:c5:b0:21:3a:a6:a6:86:6c:8b:d5:08:ca: 2e:fe:8b:31:74:77:a2:cd:8c:20:f8:38:67:ff:1e:a0:d8:25: 12:5e:ac:aa:58:ba:5e:ea:90:ca:72:59:9e:e3:67:87:f0:7d: 56:71:35:7e:d1:0b:e4:1a:08:7c:f1:8d:50:4e:47:8e:fe:3b: 3c:4f:bc:5c:dc:ef:60:70:b8:88:b5:b7:55:ac:73:1f:02:d7: 90:55:06:7e:6c:6d:bd:65:aa:4b:a5:29:9b:70:d2:a6:36:ec: 62:4c:cb:19:a7:06:68:26:28:2b:01:27:ec:26:b2:56:0e:1f: 42:14:3f:02:2b:ce:21:bc:86:97:1d:8e:4d:59:ff:e0:50:8c: d0:1f:4b:b5:ef:9f:4d:e4:08:e5:18:fc:ed:5f:c6:62:cd:c4: a5:0c:67:60:1b:01:bf:c0:08:d9:2e:9b:24:42:c1:c9:1e:01: 55:72:90:27:6b:b8:96:c6:e2:cf:e9:12:a7:b3:d2:df:ce:27: a5:a4:cb:48:45:f5:23:e7:9e:27:dc:75:2c:42:a3:5b:28:bf: 44:35:90:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWc2+lqYenANz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk M2IyZTQyZWEtZmQxZC00NDU3LWE5MzUtNjA0NTJhNjBjM2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYFcUVRu/uzPAP+G5ESWBgBGTvmwFGwJLm17 sUj7ony6V1W5EeWqFN3swjOTbCsyE+Mecdbv7k9ObzOG87cEgtAE294XqFTueVEH EgrAC+Xj/t0E7yXtEIamJEQqBM42WPj6bam0QKMABWs2Mlmhud7OkUNXcxHtq5I9 IXzByeKWH3rvLIt5NGMF5s8lLP7nIAhlNgO3XEleVFJyqAeGDYiCxHo1eScjD6EK YiPS4wS+dYxglOiZJlcywqWO98QBgwWdCSL3CR7lKOERpD96QOY6EjHh7dA6hwyX emX1zLopUYWihbXZ9c1Rw0P4kSvchC2sbmIIk/3MsjhE8e3xuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJewbnwcQlRS2+dNJfqihdZiwdVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvN2U1YjU3MWYtNzBiMS0z NmUyLThkYmQtNzU2OTU3ZDBjOWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQMzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxaJBYofDsEw+oBNnLRCq9GJV+c3fDbfU1M91ZMyUUoPUmSux6oJ3t9 ysWwITqmpoZsi9UIyi7+izF0d6LNjCD4OGf/HqDYJRJerKpYul7qkMpyWZ7jZ4fw fVZxNX7RC+QaCHzxjVBOR47+OzxPvFzc72BwuIi1t1Wscx8C15BVBn5sbb1lqkul KZtw0qY27GJMyxmnBmgmKCsBJ+wmslYOH0IUPwIrziG8hpcdjk1Z/+BQjNAfS7Xv n03kCOUY/O1fxmLNxKUMZ2AbAb/ACNkumyRCwckeAVVykCdruJbG4s/pEqez0t/O J6Wky0hF9SPnnifcdSxCo1sov0Q1kLA= -----END CERTIFICATE-----Generated at Mon Oct 12 18:35:16 2026 by rpki-client