$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b6af4b27-4485-30ea-b6a2-06742e67fec8.roa File: b6af4b27-4485-30ea-b6a2-06742e67fec8.roa (raw, json) Hash identifier: qTlXfAozr+8WqYJsm8XehKztExrCZxeOX5rlVvrjsp0= Subject key identifier: 4F:1F:02:61:0E:9D:76:B9:5B:F4:94:7D:51:9B:49:02:84:19:E7:5C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F807BFE718A8BA4294A872D00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b6af4b27-4485-30ea-b6a2-06742e67fec8.roa Signing time: Wed 14 Oct 2026 18:08:45 +0000 ROA not before: Wed 14 Oct 2026 18:08:45 +0000 ROA not after: Tue 12 Jan 2027 19:08:45 +0000 asID: 6079 IP address blocks: 68.166.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:80:7b:fe:71:8a:8b:a4:29:4a:87:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 14 18:08:45 2026 GMT Not After : Jan 12 19:08:45 2027 GMT Subject: CN=147a1b1e-93b4-4aca-80d6-58adaa0c7000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4e:2d:2b:b7:46:9e:59:a7:56:bd:97:0f:40: dd:58:a7:74:02:e7:6e:51:7a:3d:4f:54:1c:16:06: 63:7b:6a:dc:fe:a1:a7:09:59:84:cc:7f:d9:3e:cf: 5a:5e:f5:1f:9c:1c:27:fd:5e:fd:f1:52:ee:62:7e: d4:c0:bf:ad:ce:8a:2d:63:b8:84:6a:91:15:17:29: 69:02:5c:63:a7:c0:ad:a5:f9:6c:4b:d3:cc:aa:a0: 01:bb:18:8e:35:23:55:b9:71:1f:48:45:8e:fb:02: c7:91:8a:ac:2d:04:4c:7f:bc:36:1d:88:d0:22:08: 12:e8:c3:be:20:c1:32:1a:f1:e5:1b:c8:ba:64:9d: e9:1f:80:ac:b1:7a:b0:2b:2a:5e:66:ff:29:01:64: c2:31:3e:3a:ad:15:2c:40:fa:8b:6a:9b:77:ea:ef: 72:b6:3c:fd:6e:03:b0:25:d6:ed:03:8e:74:29:01: 02:c0:9d:f7:cf:5c:d5:9c:d5:2e:1c:68:f3:c6:b9: 43:6a:5b:ca:f9:f1:88:0d:08:02:05:18:49:ad:11: d4:c2:d9:f6:9c:f1:fd:22:03:13:ae:6e:94:b7:f6: 37:3d:81:0f:dd:1c:7b:2a:e9:a6:b3:be:22:cb:b9: f0:eb:be:53:55:da:ee:c2:14:dc:f6:5b:88:7d:16: ec:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1F:02:61:0E:9D:76:B9:5B:F4:94:7D:51:9B:49:02:84:19:E7:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b6af4b27-4485-30ea-b6a2-06742e67fec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.166.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:fa:6c:6a:18:38:91:09:3c:a9:bc:05:62:b9:1e:cf:ca:14: 85:93:98:97:f6:fe:3f:7a:93:f7:66:0f:b5:ca:9a:bf:65:6e: 49:81:cd:82:4a:ae:0c:2a:42:67:12:b6:d9:42:25:ca:5a:e3: 00:20:9b:e3:53:91:54:0c:a8:4d:c2:bf:7d:d8:cb:69:4c:fb: 89:2c:cf:38:9e:61:47:2f:94:ba:c6:b4:e7:c6:f8:cb:23:e9: 7b:d5:91:d3:d8:ec:45:15:c0:e6:43:65:74:a1:0e:4d:c9:3a: 8c:d9:f4:43:94:7d:34:72:22:b0:79:1e:9b:04:54:1e:5f:9f: d2:b5:96:f0:30:be:50:d7:5d:fc:48:6b:5a:4c:da:00:59:b9: 3b:08:ef:71:ad:a8:76:b9:0c:6c:99:ab:bc:5a:ea:71:a8:9d: b3:17:0d:41:81:95:0a:0b:05:a2:df:09:5c:32:be:28:f2:10: 84:f1:6e:78:05:ba:92:f8:11:45:58:4e:03:9d:6e:47:fc:db: 3e:5a:32:6d:28:9a:4f:60:77:3b:09:8a:c6:03:44:94:9d:4d: 34:89:01:c0:8e:ab:94:e9:dd:4f:af:13:b7:67:43:e0:24:1a: 80:35:c6:a0:9d:47:b0:a7:75:a0:bf:28:44:11:54:0c:07:20: 9d:4f:b0:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Ae/5xioukKUqHLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAxNDE4MDg0NVoXDTI3MDExMjE5MDg0NVowLzEtMCsGA1UEAxMk MTQ3YTFiMWUtOTNiNC00YWNhLTgwZDYtNThhZGFhMGM3MDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4E4tK7dGnlmnVr2XD0DdWKd0AuduUXo9T1Qc FgZje2rc/qGnCVmEzH/ZPs9aXvUfnBwn/V798VLuYn7UwL+tzootY7iEapEVFylp Alxjp8CtpflsS9PMqqABuxiONSNVuXEfSEWO+wLHkYqsLQRMf7w2HYjQIggS6MO+ IMEyGvHlG8i6ZJ3pH4CssXqwKypeZv8pAWTCMT46rRUsQPqLapt36u9ytjz9bgOw JdbtA450KQECwJ33z1zVnNUuHGjzxrlDalvK+fGIDQgCBRhJrRHUwtn2nPH9IgMT rm6Ut/Y3PYEP3Rx7Kumms74iy7nw675TVdruwhTc9luIfRbsrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8fAmEOnXa5W/SUfVGbSQKEGedcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjZhZjRiMjctNDQ4NS0z MGVhLWI2YTItMDY3NDJlNjdmZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACL6bGoYOJEJPKm8BWK5Hs/KFIWTmJf2/j96k/dmD7XKmr9lbkmBzYJK rgwqQmcSttlCJcpa4wAgm+NTkVQMqE3Cv33Yy2lM+4kszzieYUcvlLrGtOfG+Msj 6XvVkdPY7EUVwOZDZXShDk3JOozZ9EOUfTRyIrB5HpsEVB5fn9K1lvAwvlDXXfxI a1pM2gBZuTsI73GtqHa5DGyZq7xa6nGonbMXDUGBlQoLBaLfCVwyvijyEITxbngF upL4EUVYTgOdbkf82z5aMm0omk9gdzsJisYDRJSdTTSJAcCOq5Tp3U+vE7dnQ+Ak GoA1xqCdR7CndaC/KEQRVAwHIJ1PsJU= -----END CERTIFICATE-----Generated at Mon Oct 19 00:12:13 2026 by rpki-client