$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b7fe3a45-9657-3034-ba86-1cd8aad08b4e.roa File: b7fe3a45-9657-3034-ba86-1cd8aad08b4e.roa (raw, json) Hash identifier: ed8xe5oU3nr9YrLiRa49UE+4MH0aJvi/HY12flgs/vs= Subject key identifier: 84:3C:D9:FC:AD:7D:7B:9E:E9:11:14:42:A4:0A:5B:98:16:26:7B:BC Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F58CD655C428D9F41DF849240 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b7fe3a45-9657-3034-ba86-1cd8aad08b4e.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 834 IP address blocks: 68.164.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:65:5c:42:8d:9f:41:df:84:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=d8b9ff7a-bde9-4300-831d-32113bf8dea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1b:6f:9b:58:8e:bc:81:fa:fe:93:86:8f:41: 38:d9:1b:68:06:c2:0a:41:3d:e8:63:22:78:20:00: 8a:c8:af:41:2b:12:aa:fe:ad:33:88:01:d0:fa:89: a2:a0:23:2c:7a:78:60:82:22:23:3c:06:7a:cf:f4: 1b:57:c4:07:10:55:88:56:fc:40:64:f2:6f:75:22: 08:60:6b:04:f7:00:54:0c:1a:6b:15:b3:36:12:79: 63:50:f5:71:e0:93:74:1f:b9:af:7b:6a:5a:bd:90: 05:58:65:f7:12:e4:a9:d7:8f:58:fe:c6:13:e1:e4: 3c:e8:23:f2:20:8c:8f:c7:f4:4b:00:0d:d4:a6:bd: 3f:56:84:f4:9d:12:50:51:f2:0a:37:4e:f8:bc:2d: 07:c0:da:80:ba:ac:0f:b1:8a:9f:3a:23:c7:41:9b: ae:69:a8:23:8a:f8:54:66:6b:67:aa:27:d7:5c:f2: 2a:93:70:3a:fd:91:58:9a:d8:0e:43:b6:b3:58:53: 11:d2:ce:1e:9d:23:a4:52:59:bd:fe:79:3a:b1:8d: 0d:4c:8b:78:93:82:c7:5e:57:ce:e9:01:c4:d1:bd: 55:53:b2:e4:85:9a:39:b6:3c:56:85:0b:49:12:42: cb:af:a2:a8:cb:dd:fc:68:db:f4:d8:38:53:08:1f: f4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:3C:D9:FC:AD:7D:7B:9E:E9:11:14:42:A4:0A:5B:98:16:26:7B:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b7fe3a45-9657-3034-ba86-1cd8aad08b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:bb:16:1b:4b:ba:74:8b:cf:cb:e0:2d:89:1f:d3:1d:97:19: b6:bf:80:e2:63:f0:cb:c9:d2:9f:bf:f8:85:54:17:56:37:1f: 3d:26:40:01:95:02:1d:8b:2a:50:e7:64:9e:55:2f:c3:b6:de: 0b:76:0d:3c:6f:67:9a:0f:22:11:89:1d:ca:1b:a7:b1:34:34: ce:97:8a:20:c1:35:30:78:84:ac:4d:18:42:59:07:a9:9d:66: 08:e5:6c:35:35:99:31:67:a4:0b:47:e8:6a:df:c2:13:1c:71: 73:80:fb:4a:c0:e6:ee:f3:41:fa:eb:91:c6:c3:22:1f:13:bb: 11:74:5a:ba:11:41:21:c2:72:9c:16:f7:5a:cc:bb:8b:47:4d: 17:d9:b4:e4:40:37:49:a2:c3:b7:fd:9f:6f:ad:97:12:72:fc: d2:1f:3b:98:d7:e8:cc:f7:7e:67:37:19:b3:ce:e1:10:a3:08: ea:10:35:e6:87:a0:67:ed:8a:e9:cd:3b:05:bf:36:92:82:93: ac:81:71:18:ae:55:3a:15:4b:ee:3f:5c:e5:1d:a5:31:90:36: b6:7c:d6:c9:c7:96:50:32:7c:0f:57:0a:4c:ae:22:10:86:49: 20:b5:90:62:7e:44:a7:6f:16:a1:af:6f:d2:82:c8:a8:c6:f5: 25:03:8b:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzWVcQo2fQd+EkkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk ZDhiOWZmN2EtYmRlOS00MzAwLTgzMWQtMzIxMTNiZjhkZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBtvm1iOvIH6/pOGj0E42RtoBsIKQT3oYyJ4 IACKyK9BKxKq/q0ziAHQ+omioCMsenhggiIjPAZ6z/QbV8QHEFWIVvxAZPJvdSII YGsE9wBUDBprFbM2EnljUPVx4JN0H7mve2pavZAFWGX3EuSp149Y/sYT4eQ86CPy IIyPx/RLAA3Upr0/VoT0nRJQUfIKN074vC0HwNqAuqwPsYqfOiPHQZuuaagjivhU ZmtnqifXXPIqk3A6/ZFYmtgOQ7azWFMR0s4enSOkUlm9/nk6sY0NTIt4k4LHXlfO 6QHE0b1VU7LkhZo5tjxWhQtJEkLLr6Koy938aNv02DhTCB/08QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQ82fytfXue6REUQqQKW5gWJnu8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjdmZTNhNDUtOTY1Ny0z MDM0LWJhODYtMWNkOGFhZDA4YjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKTcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE67FhtLunSLz8vgLYkf0x2XGba/gOJj8MvJ0p+/+IVUF1Y3Hz0mQAGV Ah2LKlDnZJ5VL8O23gt2DTxvZ5oPIhGJHcobp7E0NM6XiiDBNTB4hKxNGEJZB6md ZgjlbDU1mTFnpAtH6GrfwhMccXOA+0rA5u7zQfrrkcbDIh8TuxF0WroRQSHCcpwW 91rMu4tHTRfZtORAN0miw7f9n2+tlxJy/NIfO5jX6Mz3fmc3GbPO4RCjCOoQNeaH oGftiunNOwW/NpKCk6yBcRiuVToVS+4/XOUdpTGQNrZ81snHllAyfA9XCkyuIhCG SSC1kGJ+RKdvFqGvb9KCyKjG9SUDi78= -----END CERTIFICATE-----Generated at Sun Oct 11 01:05:16 2026 by rpki-client