$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8977efa8-54cd-365f-9902-d05efb3d9e4d.roa File: 8977efa8-54cd-365f-9902-d05efb3d9e4d.roa (raw, json) Hash identifier: SBIMT4xP83bie1nomzmmXsHBpawZKiCdkFfq81KHbgg= Subject key identifier: 19:42:C0:1D:6E:13:8E:9C:E6:BD:CC:0D:1B:54:A7:D7:05:99:BB:0A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4A911C1763292B8ABE110800 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8977efa8-54cd-365f-9902-d05efb3d9e4d.roa Signing time: Fri 25 Sep 2026 10:37:39 +0000 ROA not before: Fri 25 Sep 2026 10:37:39 +0000 ROA not after: Thu 24 Dec 2026 11:37:39 +0000 asID: 834 IP address blocks: 64.204.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:91:1c:17:63:29:2b:8a:be:11:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 10:37:39 2026 GMT Not After : Dec 24 11:37:39 2026 GMT Subject: CN=6141659e-c849-468f-89ed-cc30fa630ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:86:68:3d:52:be:87:94:90:b5:9a:7d:ce:f5: ec:f2:ee:7c:ea:ce:db:8e:ea:0b:1a:80:00:b6:e5: 59:a4:16:d6:16:3e:15:1c:ce:bc:7a:b7:bb:9f:9c: 62:04:6d:b2:21:a8:eb:6e:dc:22:fc:aa:07:03:19: d2:0c:d5:d7:2a:fd:33:41:cb:04:71:aa:5b:2d:04: 20:e0:46:37:4c:b5:e0:6e:87:98:94:53:87:66:28: 1f:43:09:a9:0d:63:0f:18:9a:5d:b1:1f:38:7d:37: 58:7e:87:c4:f4:fb:54:16:5b:73:c0:fd:dd:69:3a: bb:6f:34:ae:2e:3e:8e:56:3e:93:0f:27:ec:b1:74: 53:09:8a:4f:a1:d8:80:e7:e3:02:52:23:f4:3c:a8: 7d:e5:2e:3c:7b:40:35:4d:c2:c8:e0:91:1b:be:02: 0b:43:8a:ea:c9:53:ce:bf:03:ff:8b:db:83:b6:e2: c4:d0:00:2f:28:fe:61:86:f1:14:7e:6d:fd:1b:04: 79:36:48:1c:18:f8:fe:b6:0d:40:39:2f:c0:48:d7: 65:f6:8c:91:5f:45:34:99:20:e8:72:a4:a7:2e:7a: fe:e8:e6:4f:0c:b6:b6:c9:bf:e2:77:cf:3e:af:13: 1f:dc:e4:af:0f:b7:fb:0a:79:f1:c4:34:d7:20:5c: 34:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:42:C0:1D:6E:13:8E:9C:E6:BD:CC:0D:1B:54:A7:D7:05:99:BB:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8977efa8-54cd-365f-9902-d05efb3d9e4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:7c:49:6b:8d:ec:bb:a2:f1:82:88:7b:eb:58:1f:d8:6b:70: ff:48:e6:a7:b5:6b:30:cc:2b:70:b2:73:aa:74:fe:34:b2:49: 17:b6:49:98:22:65:7d:ee:33:7f:46:7b:58:81:9b:d4:57:a2: 32:62:89:3c:3e:d7:03:ee:93:d2:8e:4e:b9:42:04:6d:48:9a: 43:f1:c2:03:32:47:5a:68:78:12:6a:6a:2d:e5:b7:08:2d:39: e6:89:95:ae:8a:b3:66:69:5b:2f:40:02:5e:c3:84:cb:f2:30: c7:33:99:1f:d6:2b:49:0b:61:b1:82:ff:d9:47:b8:02:f5:2c: 48:c9:9f:35:90:e8:0d:e5:82:ca:29:55:5e:fe:59:7c:16:b9: bc:19:35:0e:38:66:91:22:24:86:e5:1b:24:65:d6:41:9a:ea: e7:48:f1:e9:5b:f6:d6:c6:bf:a9:0f:b1:7e:08:40:c1:3b:53: 69:88:17:42:2f:63:90:bf:ee:4d:49:46:a9:1f:6d:01:c6:60: 88:7a:75:99:b7:5b:58:8c:2c:9f:e3:85:af:87:c0:03:a9:32: cd:91:4c:db:53:b5:64:9b:23:42:19:85:ba:f0:db:ba:df:2f: 2c:84:ed:9d:b4:d1:09:35:0c:f1:17:ec:63:b4:76:03:56:53: 69:05:f4:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9KkRwXYykrir4RCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTEwMzczOVoXDTI2MTIyNDExMzczOVowLzEtMCsGA1UEAxMk NjE0MTY1OWUtYzg0OS00NjhmLTg5ZWQtY2MzMGZhNjMwZWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4ZoPVK+h5SQtZp9zvXs8u586s7bjuoLGoAA tuVZpBbWFj4VHM68ere7n5xiBG2yIajrbtwi/KoHAxnSDNXXKv0zQcsEcapbLQQg 4EY3TLXgboeYlFOHZigfQwmpDWMPGJpdsR84fTdYfofE9PtUFltzwP3daTq7bzSu Lj6OVj6TDyfssXRTCYpPodiA5+MCUiP0PKh95S48e0A1TcLI4JEbvgILQ4rqyVPO vwP/i9uDtuLE0AAvKP5hhvEUfm39GwR5NkgcGPj+tg1AOS/ASNdl9oyRX0U0mSDo cqSnLnr+6OZPDLa2yb/id88+rxMf3OSvD7f7CnnxxDTXIFw0EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlCwB1uE46c5r3MDRtUp9cFmbsKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODk3N2VmYTgtNTRjZC0z NjVmLTk5MDItZDA1ZWZiM2Q5ZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMzrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADl8SWuN7Lui8YKIe+tYH9hrcP9I5qe1azDMK3Cyc6p0/jSySRe2SZgi ZX3uM39Ge1iBm9RXojJiiTw+1wPuk9KOTrlCBG1ImkPxwgMyR1poeBJqai3ltwgt OeaJla6Ks2ZpWy9AAl7DhMvyMMczmR/WK0kLYbGC/9lHuAL1LEjJnzWQ6A3lgsop VV7+WXwWubwZNQ44ZpEiJIblGyRl1kGa6udI8elb9tbGv6kPsX4IQME7U2mIF0Iv Y5C/7k1JRqkfbQHGYIh6dZm3W1iMLJ/jha+HwAOpMs2RTNtTtWSbI0IZhbrw27rf LyyE7Z200Qk1DPEX7GO0dgNWU2kF9NA= -----END CERTIFICATE-----Generated at Sun Sep 27 10:18:46 2026 by rpki-client