$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aaf5e9d3-9a33-31e3-9b0b-05f7f77dafa3.roa File: aaf5e9d3-9a33-31e3-9b0b-05f7f77dafa3.roa (raw, json) Hash identifier: sKXSj7NDyh8P3xkKo01S/HgbfDBu2yIxTS1HfMdSYPg= Subject key identifier: A0:15:EB:0B:8E:0D:71:30:1E:9B:2F:A1:DC:F9:D8:E3:78:C4:4B:02 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EFB5EEA6C35E56283576CBE20 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aaf5e9d3-9a33-31e3-9b0b-05f7f77dafa3.roa Signing time: Fri 28 Aug 2026 01:47:39 +0000 ROA not before: Fri 28 Aug 2026 01:47:39 +0000 ROA not after: Thu 26 Nov 2026 02:47:39 +0000 asID: 152179 IP address blocks: 68.166.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fb:5e:ea:6c:35:e5:62:83:57:6c:be:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 28 01:47:39 2026 GMT Not After : Nov 26 02:47:39 2026 GMT Subject: CN=d23f6087-73a1-4a12-a89c-fa0a5037249f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:95:36:00:d5:9b:31:c3:cf:f3:18:04:c2:7e: e0:6e:d0:d0:90:15:d2:6b:5b:04:64:bf:f2:15:35: 12:17:e3:1c:d3:59:2e:70:62:ce:34:f7:9f:a8:e9: f6:28:42:3f:89:b1:cd:ef:4e:02:2e:57:e2:19:31: 42:58:4c:62:33:27:35:c9:35:ae:97:eb:e4:04:94: ef:55:61:17:69:8a:aa:4f:f6:e3:77:f7:c1:18:5e: 06:f6:63:52:0e:c9:0c:3b:43:a9:6f:5e:9c:fd:6a: 46:8a:bb:5d:6e:34:63:50:3c:64:ee:fe:76:7f:5d: c2:1f:95:31:72:4e:bc:21:f7:16:42:b6:ac:6a:88: 99:e2:91:07:25:7c:49:c1:c3:9c:8d:5f:df:56:11: eb:c0:22:4e:b6:bf:c5:de:d7:93:32:75:a7:1e:d5: 04:06:27:bd:cb:fd:23:51:40:99:6a:9c:4e:3c:a8: be:80:46:17:18:53:1e:e6:31:f7:37:85:52:41:24: 4b:e7:fb:44:44:51:25:69:ad:88:99:22:9c:1f:58: 6c:a3:d5:ca:b8:a9:e1:1c:75:2e:65:8e:2f:1b:bf: de:ed:28:10:e4:a2:2a:7c:a7:b3:ae:12:d2:a8:18: e1:ea:c7:12:ec:aa:d7:b9:77:39:9e:b4:4c:10:81: 94:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:15:EB:0B:8E:0D:71:30:1E:9B:2F:A1:DC:F9:D8:E3:78:C4:4B:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aaf5e9d3-9a33-31e3-9b0b-05f7f77dafa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.166.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:82:1c:78:86:89:b3:59:f3:98:3d:f6:40:0b:a2:8e:46:d6: 24:cd:84:93:96:14:17:41:1a:c1:63:17:2e:8c:ae:39:de:18: 0a:44:a7:46:63:59:34:e6:18:2d:01:44:71:6e:5e:c0:93:36: 9b:a3:55:a5:c2:1a:86:34:5c:59:6b:8e:7b:2d:f1:db:9d:25: 2f:ac:7b:8c:87:75:5b:2d:74:41:7a:10:35:fd:d1:78:20:ee: d6:7e:c9:96:65:15:db:d6:d0:17:ae:bc:f9:29:bb:38:d4:67: 2c:eb:b1:76:62:a0:73:31:2d:08:c0:56:5c:d6:9a:58:26:33: ee:4e:0e:51:f4:0d:d8:7d:ef:32:60:56:c1:45:f1:6a:36:6f: 4a:ca:23:54:2b:06:a4:3e:15:63:66:72:32:86:ba:d2:1f:72: 40:54:42:8e:90:03:b7:01:3f:f8:aa:93:18:a5:01:cb:bf:8e: 4f:47:e6:e0:07:2c:c3:99:ac:4d:54:81:69:23:bc:b6:7b:fc: 5e:89:1d:fe:0f:cd:d8:c1:80:75:70:68:19:2b:90:46:55:bc: 1e:7d:f0:e6:ac:0f:9c:b6:8d:a6:d4:65:55:3d:a2:dc:4d:d2: 43:8b:bc:5f:47:3b:73:3b:cf:b8:70:46:1a:17:3e:3d:04:5d: 33:06:a5:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE77XupsNeVig1dsviAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgyODAxNDczOVoXDTI2MTEyNjAyNDczOVowLzEtMCsGA1UEAxMk ZDIzZjYwODctNzNhMS00YTEyLWE4OWMtZmEwYTUwMzcyNDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJU2ANWbMcPP8xgEwn7gbtDQkBXSa1sEZL/y FTUSF+Mc01kucGLONPefqOn2KEI/ibHN704CLlfiGTFCWExiMyc1yTWul+vkBJTv VWEXaYqqT/bjd/fBGF4G9mNSDskMO0Opb16c/WpGirtdbjRjUDxk7v52f13CH5Ux ck68IfcWQrasaoiZ4pEHJXxJwcOcjV/fVhHrwCJOtr/F3teTMnWnHtUEBie9y/0j UUCZapxOPKi+gEYXGFMe5jH3N4VSQSRL5/tERFElaa2ImSKcH1hso9XKuKnhHHUu ZY4vG7/e7SgQ5KIqfKezrhLSqBjh6scS7KrXuXc5nrRMEIGUVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAV6wuODXEwHpsvodz52ON4xEsCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWFmNWU5ZDMtOWEzMy0z MWUzLTliMGItMDVmN2Y3N2RhZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKbbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqCHHiGibNZ85g99kALoo5G1iTNhJOWFBdBGsFjFy6MrjneGApEp0Zj WTTmGC0BRHFuXsCTNpujVaXCGoY0XFlrjnst8dudJS+se4yHdVstdEF6EDX90Xgg 7tZ+yZZlFdvW0BeuvPkpuzjUZyzrsXZioHMxLQjAVlzWmlgmM+5ODlH0Ddh97zJg VsFF8Wo2b0rKI1QrBqQ+FWNmcjKGutIfckBUQo6QA7cBP/iqkxilAcu/jk9H5uAH LMOZrE1UgWkjvLZ7/F6JHf4PzdjBgHVwaBkrkEZVvB598OasD5y2jabUZVU9otxN 0kOLvF9HO3M7z7hwRhoXPj0EXTMGpXk= -----END CERTIFICATE-----Generated at Thu Sep 3 22:29:38 2026 by rpki-client