$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b66ffe2f-e653-37bf-9493-1918cc23e3a7.roa File: b66ffe2f-e653-37bf-9493-1918cc23e3a7.roa (raw, json) Hash identifier: m3dTGtd2VcdlelRyAb5h07hjYWV1rsbe/A5cFNFHUTI= Subject key identifier: 0B:12:E6:F1:46:ED:A6:DF:C9:04:E9:76:71:C7:AE:0D:B0:6F:5A:EE Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F6C5853C998D1D55B5A7EECC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b66ffe2f-e653-37bf-9493-1918cc23e3a7.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 5065 IP address blocks: 216.132.198.0/24 maxlen: 24 216.132.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:53:c9:98:d1:d5:5b:5a:7e:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=8eb293a7-2b27-40c1-95fd-eab50a0230b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:16:c7:72:ea:5f:9b:1c:e5:12:c3:6d:e2:8a: b5:6c:11:96:23:f8:71:0f:72:b9:14:a8:42:9c:09: 0a:8e:c9:e3:92:72:12:16:90:61:f2:86:2e:75:12: 9e:05:06:19:c7:2b:8d:b3:da:f1:3a:ab:12:c5:cd: 4b:77:0d:a3:0c:3c:f5:0f:80:cb:b1:f9:cd:cd:4d: 93:f8:89:12:62:ee:2c:5c:71:65:8d:a0:75:ef:e3: 5c:a3:d6:d9:ce:2f:f5:08:35:5c:07:e7:19:7c:4a: eb:c1:ac:67:42:1c:3c:06:ce:e3:91:18:1a:53:dc: 60:ba:81:db:f2:e5:b9:e6:2c:5c:29:82:c0:73:ab: af:5b:f5:75:6b:dd:ba:bb:4a:f7:30:bd:ca:2e:8b: bc:35:64:09:ab:3e:59:bb:0d:f8:69:c8:db:52:56: d0:21:e7:82:24:43:51:40:26:9f:1c:db:bd:4e:f8: e7:a9:8a:c3:f8:d2:59:3e:6f:d8:af:6e:c9:dd:8e: 89:18:b5:55:5c:45:09:d8:02:d9:72:6f:30:ce:ca: a9:18:7a:67:36:18:66:9a:4e:4c:72:cd:96:67:7c: 1d:4d:be:e6:d8:5c:46:54:e4:d8:95:b6:71:ce:48: 36:8e:b0:f8:bd:86:e8:f0:85:82:5b:1d:48:ee:35: 02:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:12:E6:F1:46:ED:A6:DF:C9:04:E9:76:71:C7:AE:0D:B0:6F:5A:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b66ffe2f-e653-37bf-9493-1918cc23e3a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.198.0/24 216.132.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f6:35:b7:55:b6:f6:f0:5a:a1:1f:9d:3e:0a:45:76:ba:37: d1:bb:9f:a8:a3:62:57:1b:77:af:20:39:19:ed:94:aa:93:ca: e9:05:6a:a6:ba:e7:a3:91:87:9e:f9:f1:be:85:52:44:04:4f: ec:c5:85:40:07:60:16:9d:75:cd:3e:66:b9:83:e6:2e:2d:6a: 97:ea:f2:46:d4:73:b6:ad:42:82:a4:a9:3a:d6:c0:8e:34:17: 44:83:58:ae:e0:44:ab:a1:43:a9:d9:4b:9f:80:cd:5f:fb:58: eb:cb:d2:71:c0:f7:c0:0a:e9:9e:ff:3a:41:05:9b:d7:6d:5b: 04:94:6e:9d:b2:5c:75:3c:96:b8:f0:a9:97:25:45:3e:60:4d: 4d:aa:a8:ca:ee:4c:b0:de:db:85:ab:23:27:4b:91:70:fc:76: 75:47:5d:04:0e:56:68:83:7a:0c:69:7b:e2:68:10:86:1d:c4: e6:27:35:cd:28:fa:e9:12:97:9f:22:2a:d6:cc:d7:47:68:47: 65:c0:0b:da:fd:74:f7:fa:60:92:93:34:d6:f9:b2:09:38:c6: 7b:42:ec:7b:bc:d5:b3:9e:23:b8:7b:45:8f:1c:00:26:34:fa: 64:6d:68:0a:d3:68:59:5a:c5:d9:a1:41:10:fc:5c:d8:3f:b0: fc:a6:66:b7 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9sWFPJmNHVW1p+7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk OGViMjkzYTctMmIyNy00MGMxLTk1ZmQtZWFiNTBhMDIzMGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxbHcupfmxzlEsNt4oq1bBGWI/hxD3K5FKhC nAkKjsnjknISFpBh8oYudRKeBQYZxyuNs9rxOqsSxc1Ldw2jDDz1D4DLsfnNzU2T +IkSYu4sXHFljaB17+Nco9bZzi/1CDVcB+cZfErrwaxnQhw8Bs7jkRgaU9xguoHb 8uW55ixcKYLAc6uvW/V1a926u0r3ML3KLou8NWQJqz5Zuw34acjbUlbQIeeCJENR QCafHNu9TvjnqYrD+NJZPm/Yr27J3Y6JGLVVXEUJ2ALZcm8wzsqpGHpnNhhmmk5M cs2WZ3wdTb7m2FxGVOTYlbZxzkg2jrD4vYbo8IWCWx1I7jUCcQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAsS5vFG7abfyQTpdnHHrg2wb1ruMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjY2ZmZlMmYtZTY1My0z N2JmLTk0OTMtMTkxOGNjMjNlM2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2ITGAwQA 2ITkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIj2NbdVtvbwWqEfnT4KRXa6N9G7n6ijYlcbd68gORntlKqT yukFaqa656ORh5758b6FUkQET+zFhUAHYBaddc0+ZrmD5i4tapfq8kbUc7atQoKk qTrWwI40F0SDWK7gRKuhQ6nZS5+AzV/7WOvL0nHA98AK6Z7/OkEFm9dtWwSUbp2y XHU8lrjwqZclRT5gTU2qqMruTLDe24WrIydLkXD8dnVHXQQOVmiDegxpe+JoEIYd xOYnNc0o+ukSl58iKtbM10doR2XAC9r9dPf6YJKTNNb5sgk4xntC7Hu81bOeI7h7 RY8cACY0+mRtaArTaFlaxdmhQRD8XNg/sPymZrc= -----END CERTIFICATE-----Generated at Sun Oct 11 01:07:19 2026 by rpki-client