$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/986918ab-abef-3606-ae29-510677bb63de.roa File: 986918ab-abef-3606-ae29-510677bb63de.roa (raw, json) Hash identifier: c2X1s2+TU7+JqRdxf5TEpAKb5zJ7SJtZrUBvfhB0XAY= Subject key identifier: 20:39:F6:1F:CA:D8:BC:78:9D:04:93:F4:00:D2:8D:04:AF:DA:ED:F1 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F3B7D1B3019D26967FD8A6F80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/986918ab-abef-3606-ae29-510677bb63de.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 6079 IP address blocks: 64.204.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:1b:30:19:d2:69:67:fd:8a:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=c6dc6918-a31f-482b-9308-f25c71b479f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c0:32:65:07:18:00:c5:ac:22:4d:9d:08:ce: 5c:b4:c0:21:87:01:fc:20:20:59:8e:15:12:59:9b: 9d:78:5a:ca:99:96:cf:84:86:ae:00:af:fb:41:8e: 16:75:45:42:dd:21:bc:c4:00:4c:ab:b2:86:92:ac: ee:bc:d4:9d:34:0e:39:bc:4f:64:b9:71:8e:6a:d9: 23:be:2f:9a:8e:47:5f:40:a1:87:38:ad:84:01:43: f1:4e:db:f3:8b:e4:97:b7:2d:ee:b1:b3:cd:a5:78: 2f:91:d3:86:9f:c6:72:fb:e1:e3:88:e4:4a:c6:7d: b0:c4:40:3a:e7:c6:13:e7:87:6a:f3:53:07:06:9d: 55:5d:df:f1:a8:97:d9:d4:d9:18:5a:6e:5c:a6:70: 0d:f1:9c:25:52:cb:7a:59:96:96:51:a3:80:93:50: 42:53:95:93:8a:34:13:07:cd:01:4d:89:c5:04:21: 15:e6:b1:cb:22:62:ab:ba:18:20:7d:4f:cb:44:c1: 3e:0f:08:31:ec:fa:15:99:fc:1a:a4:97:68:18:b8: d2:d4:6f:7a:0e:0e:ae:30:fa:7c:9b:7d:cb:83:bd: 65:0b:9c:97:26:97:cb:a2:eb:31:8f:92:27:5c:50: 36:fc:7e:4c:b0:cd:5c:5d:33:41:e1:66:64:43:12: ba:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:39:F6:1F:CA:D8:BC:78:9D:04:93:F4:00:D2:8D:04:AF:DA:ED:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/986918ab-abef-3606-ae29-510677bb63de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:b1:d2:11:02:1b:57:22:71:91:d2:24:29:06:01:29:9e:45: b5:6b:b2:46:4f:e3:92:8c:ec:95:4e:f4:9d:81:b5:60:9d:94: 6b:ee:42:91:4b:d3:78:fe:7b:76:bd:77:13:67:7f:9a:ba:48: dd:90:a2:fe:de:86:2d:23:6a:e2:5a:aa:6e:a9:bb:be:06:cb: e4:70:ce:a7:70:68:4b:26:19:12:53:8e:fd:96:88:b8:19:1d: 15:28:eb:0a:ae:bc:15:77:da:32:b3:41:4e:e9:b7:4a:e0:a8: 4d:b2:a6:ba:58:79:71:87:b6:09:64:67:24:54:9e:7a:dc:1a: 14:59:48:7d:c2:09:b8:d1:e4:07:31:c0:cf:f8:73:28:3d:76: 1a:f8:45:f0:55:b7:39:b7:d8:bf:e4:0e:9c:79:64:1d:58:dc: e2:ef:0c:64:1f:d8:d9:85:a2:a0:43:90:a4:6e:ae:31:2f:0d: 32:be:78:0d:cc:e3:0b:2f:ef:98:36:8a:aa:f7:cb:41:b8:19: a7:2f:e8:15:5b:34:e5:d5:f1:4f:8d:05:de:6b:6a:3e:4b:cb: 60:1f:6c:6e:c1:8b:49:7e:3e:e5:cd:0e:3d:3c:44:40:1a:06: 7a:92:a7:98:30:d1:b2:3e:2a:d4:81:32:56:98:9b:62:89:d7: e5:11:c3:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fRswGdJpZ/2Kb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk YzZkYzY5MTgtYTMxZi00ODJiLTkzMDgtZjI1YzcxYjQ3OWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncAyZQcYAMWsIk2dCM5ctMAhhwH8ICBZjhUS WZudeFrKmZbPhIauAK/7QY4WdUVC3SG8xABMq7KGkqzuvNSdNA45vE9kuXGOatkj vi+ajkdfQKGHOK2EAUPxTtvzi+SXty3usbPNpXgvkdOGn8Zy++HjiORKxn2wxEA6 58YT54dq81MHBp1VXd/xqJfZ1NkYWm5cpnAN8ZwlUst6WZaWUaOAk1BCU5WTijQT B80BTYnFBCEV5rHLImKruhggfU/LRME+Dwgx7PoVmfwapJdoGLjS1G96Dg6uMPp8 m33Lg71lC5yXJpfLousxj5InXFA2/H5MsM1cXTNB4WZkQxK6eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCA59h/K2Lx4nQST9ADSjQSv2u3xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTg2OTE4YWItYWJlZi0z NjA2LWFlMjktNTEwNjc3YmI2M2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMxyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyx0hECG1cicZHSJCkGASmeRbVrskZP45KM7JVO9J2BtWCdlGvuQpFL 03j+e3a9dxNnf5q6SN2Qov7ehi0jauJaqm6pu74Gy+RwzqdwaEsmGRJTjv2WiLgZ HRUo6wquvBV32jKzQU7pt0rgqE2yprpYeXGHtglkZyRUnnrcGhRZSH3CCbjR5Acx wM/4cyg9dhr4RfBVtzm32L/kDpx5ZB1Y3OLvDGQf2NmFoqBDkKRurjEvDTK+eA3M 4wsv75g2iqr3y0G4Gacv6BVbNOXV8U+NBd5raj5Ly2AfbG7Bi0l+PuXNDj08REAa BnqSp5gw0bI+KtSBMlaYm2KJ1+URwyg= -----END CERTIFICATE-----Generated at Sat Oct 10 22:24:56 2026 by rpki-client