$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bb205a5d-8676-3ed1-9055-660e7c53799b.roa File: bb205a5d-8676-3ed1-9055-660e7c53799b.roa (raw, json) Hash identifier: LhD3XF1/IvlFXF4rXGxsVlQKpuEiTbeYmhYpir7mCyU= Subject key identifier: A4:5D:7B:25:4D:28:A5:98:41:43:AB:04:AA:32:80:CF:77:D0:E1:79 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EF69F8E73BE15E206D98ACE00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bb205a5d-8676-3ed1-9055-660e7c53799b.roa Signing time: Wed 26 Aug 2026 08:58:51 +0000 ROA not before: Wed 26 Aug 2026 08:58:51 +0000 ROA not after: Tue 24 Nov 2026 09:58:51 +0000 asID: 1299 IP address blocks: 68.164.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f6:9f:8e:73:be:15:e2:06:d9:8a:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 26 08:58:51 2026 GMT Not After : Nov 24 09:58:51 2026 GMT Subject: CN=760e4c3d-e4fa-44be-8df2-9f973c04370f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1b:e8:47:ed:ee:d9:d3:fe:7e:47:cd:1a:ae: f2:3c:82:40:fd:35:7c:4f:7f:64:83:70:ca:8c:3e: 36:8d:c9:04:99:8c:f8:c6:30:13:2b:fc:b2:1b:5b: 7f:19:e0:d9:0e:47:2c:98:0e:6e:d5:be:2e:f8:80: f3:59:4c:5e:88:4e:cd:af:ce:36:8b:85:d9:8d:db: 92:08:74:0d:48:23:a7:bc:ae:bc:4d:04:96:0b:6d: 96:72:f8:05:da:3f:1f:de:6c:51:27:04:5d:ae:03: f9:8e:9e:16:78:d5:d1:48:7a:39:9e:fd:77:d0:e3: bb:bb:1b:dd:c5:39:41:ac:98:fe:c1:33:bb:5a:29: e4:cf:11:c6:2a:21:61:5b:e4:42:26:a4:99:d0:b6: 6b:0b:7f:de:51:5d:95:92:86:b3:54:61:c5:44:ce: 20:75:aa:de:02:62:92:03:e9:90:63:94:13:17:7f: 0b:12:fc:99:f3:19:67:d7:16:34:10:2a:b9:b5:39: e1:a4:3f:34:ba:6d:fa:37:59:eb:37:b9:ad:d4:d6: 94:7a:8a:12:1c:56:a6:28:e9:25:73:3c:98:45:50: dc:e9:96:7d:95:e4:5c:0c:a0:10:13:ee:e2:d3:7a: 8a:cb:62:b1:7e:d7:e5:36:25:79:4f:71:82:46:d1: c4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:5D:7B:25:4D:28:A5:98:41:43:AB:04:AA:32:80:CF:77:D0:E1:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bb205a5d-8676-3ed1-9055-660e7c53799b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:85:50:57:61:bb:c4:fa:da:06:92:df:8d:27:c4:0d:9d:9e: 6c:9f:7b:3b:86:ec:69:e3:f0:93:6a:39:2e:6a:25:92:99:27: 91:e3:2a:37:1c:fb:c9:06:38:54:2c:55:99:f7:32:bd:22:2d: f0:a4:cc:5e:1a:4d:ea:e9:14:1e:fb:7a:17:2b:55:b9:dd:95: 20:95:ca:e4:08:4c:cd:5f:9f:fc:71:e2:fe:80:79:ab:16:5c: 46:e6:c0:53:5f:59:f9:e0:4c:9e:8f:56:33:4d:fe:ac:c9:2c: 84:13:57:ed:22:c9:16:72:29:0d:27:09:4f:8c:d5:d3:36:02: 1b:0d:2a:e9:24:9e:38:5d:53:eb:99:22:58:f4:00:b7:d1:33: e6:39:3c:ec:ce:b8:56:d5:16:09:7a:12:b7:08:81:14:8c:d6: 54:b3:8b:2b:7b:a4:15:23:20:41:72:ff:11:29:c3:e3:c0:3b: 28:9f:29:c1:95:34:4f:bd:54:1d:38:24:c5:27:db:76:37:93: 71:1a:82:7c:9a:4f:af:7b:2a:2e:4e:cb:b5:9b:df:ad:8b:bb: 18:3d:96:e6:38:ff:f1:34:9b:b5:36:3d:81:34:5f:95:62:a7: a7:ba:57:9d:9c:79:5c:60:40:64:ba:0d:50:8d:a5:27:6c:da: 23:33:fd:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE72n45zvhXiBtmKzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgyNjA4NTg1MVoXDTI2MTEyNDA5NTg1MVowLzEtMCsGA1UEAxMk NzYwZTRjM2QtZTRmYS00NGJlLThkZjItOWY5NzNjMDQzNzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRvoR+3u2dP+fkfNGq7yPIJA/TV8T39kg3DK jD42jckEmYz4xjATK/yyG1t/GeDZDkcsmA5u1b4u+IDzWUxeiE7Nr842i4XZjduS CHQNSCOnvK68TQSWC22WcvgF2j8f3mxRJwRdrgP5jp4WeNXRSHo5nv130OO7uxvd xTlBrJj+wTO7WinkzxHGKiFhW+RCJqSZ0LZrC3/eUV2VkoazVGHFRM4gdareAmKS A+mQY5QTF38LEvyZ8xln1xY0ECq5tTnhpD80um36N1nrN7mt1NaUeooSHFamKOkl czyYRVDc6ZZ9leRcDKAQE+7i03qKy2KxftflNiV5T3GCRtHEcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRdeyVNKKWYQUOrBKoygM930OF5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmIyMDVhNWQtODY3Ni0z ZWQxLTkwNTUtNjYwZTdjNTM3OTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKTWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECFUFdhu8T62gaS340nxA2dnmyfezuG7Gnj8JNqOS5qJZKZJ5HjKjcc +8kGOFQsVZn3Mr0iLfCkzF4aTerpFB77ehcrVbndlSCVyuQITM1fn/xx4v6AeasW XEbmwFNfWfngTJ6PVjNN/qzJLIQTV+0iyRZyKQ0nCU+M1dM2AhsNKukknjhdU+uZ Ilj0ALfRM+Y5POzOuFbVFgl6ErcIgRSM1lSziyt7pBUjIEFy/xEpw+PAOyifKcGV NE+9VB04JMUn23Y3k3EagnyaT697Ki5Oy7Wb362Luxg9luY4//E0m7U2PYE0X5Vi p6e6V52ceVxgQGS6DVCNpSds2iMz/ak= -----END CERTIFICATE-----Generated at Sat Sep 5 03:17:07 2026 by rpki-client