$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/94a50294-1d9f-318b-9e65-450b359ac66f.roa File: 94a50294-1d9f-318b-9e65-450b359ac66f.roa (raw, json) Hash identifier: nU+2KwBaeWJqAtY+vQr9pqjs/DbnUHigkbLYhYw2PF4= Subject key identifier: FD:96:86:0E:EA:8A:63:45:19:3D:AC:DD:B5:48:C7:0A:0F:3A:C7:76 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F1828E865665F999D95AFD600 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/94a50294-1d9f-318b-9e65-450b359ac66f.roa Signing time: Mon 07 Sep 2026 09:17:16 +0000 ROA not before: Mon 07 Sep 2026 09:17:16 +0000 ROA not after: Sun 06 Dec 2026 10:17:16 +0000 asID: 30088 IP address blocks: 68.166.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:28:e8:65:66:5f:99:9d:95:af:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 7 09:17:16 2026 GMT Not After : Dec 6 10:17:16 2026 GMT Subject: CN=8b13e535-ae80-44d4-9cd3-f4ac7c1d9943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0d:8c:f7:ab:bb:b9:d1:ef:22:64:5a:46:72: a9:ad:e1:8f:d1:89:8b:1f:65:a7:e6:ba:d9:f3:d0: ca:6c:40:ac:7e:06:4c:b8:45:e5:84:07:d7:88:9f: 25:b8:1d:38:24:0f:62:48:1e:e4:6d:e0:11:d5:05: be:11:89:20:3b:35:6d:54:f4:73:7e:be:65:0d:dd: 7e:43:0b:bd:d0:b7:bc:a5:72:eb:d2:34:76:58:ea: b2:63:cc:9e:d8:47:71:84:cc:cd:c2:cb:cb:ab:d1: 32:76:25:3d:8c:fb:b2:7d:fd:2c:2c:dd:f2:e3:5c: c0:29:20:d6:64:49:16:12:a1:88:42:8f:e8:fc:86: e9:36:f7:81:b4:b0:fe:a0:1e:8c:39:2c:68:02:42: fc:04:50:47:01:9c:37:85:fe:69:d8:4b:c7:1b:c2: 80:15:4f:c8:ee:86:ae:9e:bd:fb:b0:b3:a6:82:f7: 55:d0:86:1c:55:24:18:2e:d6:ce:75:5e:0c:30:1b: fd:d3:c2:69:46:b8:3f:ba:56:cb:46:90:76:b4:d1: ca:e3:9d:61:8b:4e:84:8e:11:c0:dc:43:50:f6:8f: bf:bb:6a:39:00:55:25:9c:16:2b:7b:f3:f0:35:b7: 50:5b:e6:15:e7:e3:76:ae:1b:dc:97:61:92:40:08: cf:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:96:86:0E:EA:8A:63:45:19:3D:AC:DD:B5:48:C7:0A:0F:3A:C7:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/94a50294-1d9f-318b-9e65-450b359ac66f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.166.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:2d:fa:0d:35:a7:d0:b3:ab:51:83:81:19:c3:96:b5:e5:99: ab:83:ec:7b:7f:7d:1f:2c:11:d1:85:ba:47:01:bc:e8:e5:d1: 4b:51:8b:97:e2:1e:d8:67:40:79:f4:f5:e7:51:9c:57:d6:98: c7:3b:21:cb:63:74:f5:0f:5a:3c:66:b7:34:76:0e:d5:c4:5d: dd:11:74:b7:60:53:df:c9:13:06:3b:01:3c:cf:a5:d2:ad:9d: 81:4f:7e:08:2a:ee:68:cc:75:7d:51:29:28:a9:2a:16:eb:2f: b8:ec:40:73:78:57:a3:8b:6b:40:9a:64:4f:c9:86:15:b7:ac: 5e:90:b1:a9:33:69:8f:94:57:2f:24:e1:6a:97:90:f4:77:a6: 0b:e9:00:84:c1:22:56:b9:48:6c:ec:3e:4e:a6:9c:41:d1:bf: 5a:3e:d0:2b:71:d5:b7:cc:5f:f3:6a:1b:40:57:d9:72:cb:9f: ac:30:f2:59:5d:33:d9:de:10:52:ce:cb:32:2c:a1:c0:4b:7b: ae:43:e0:60:e9:86:6b:90:c5:ce:32:b8:0b:fd:b9:f1:48:16: 80:ba:34:a6:26:5c:ee:6b:12:9d:de:79:75:af:a9:47:a7:48: 45:1c:58:90:4c:79:74:75:cd:22:89:fa:80:7b:d3:35:cb:48: 25:1b:99:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8YKOhlZl+ZnZWv1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwNzA5MTcxNloXDTI2MTIwNjEwMTcxNlowLzEtMCsGA1UEAxMk OGIxM2U1MzUtYWU4MC00NGQ0LTljZDMtZjRhYzdjMWQ5OTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQ2M96u7udHvImRaRnKpreGP0YmLH2Wn5rrZ 89DKbECsfgZMuEXlhAfXiJ8luB04JA9iSB7kbeAR1QW+EYkgOzVtVPRzfr5lDd1+ Qwu90Le8pXLr0jR2WOqyY8ye2EdxhMzNwsvLq9EydiU9jPuyff0sLN3y41zAKSDW ZEkWEqGIQo/o/IbpNveBtLD+oB6MOSxoAkL8BFBHAZw3hf5p2EvHG8KAFU/I7oau nr37sLOmgvdV0IYcVSQYLtbOdV4MMBv908JpRrg/ulbLRpB2tNHK451hi06EjhHA 3ENQ9o+/u2o5AFUlnBYre/PwNbdQW+YV5+N2rhvcl2GSQAjPQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2Whg7qimNFGT2s3bVIxwoPOsd2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTRhNTAyOTQtMWQ5Zi0z MThiLTllNjUtNDUwYjM1OWFjNjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKbBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUt+g01p9Czq1GDgRnDlrXlmauD7Ht/fR8sEdGFukcBvOjl0UtRi5fi HthnQHn09edRnFfWmMc7IctjdPUPWjxmtzR2DtXEXd0RdLdgU9/JEwY7ATzPpdKt nYFPfggq7mjMdX1RKSipKhbrL7jsQHN4V6OLa0CaZE/JhhW3rF6QsakzaY+UVy8k 4WqXkPR3pgvpAITBIla5SGzsPk6mnEHRv1o+0Ctx1bfMX/NqG0BX2XLLn6ww8lld M9neEFLOyzIsocBLe65D4GDphmuQxc4yuAv9ufFIFoC6NKYmXO5rEp3eeXWvqUen SEUcWJBMeXR1zSKJ+oB70zXLSCUbmb4= -----END CERTIFICATE-----Generated at Mon Sep 7 19:49:10 2026 by rpki-client