$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bf42e99b-261e-31f7-bcd2-1e170504ecda.roa File: bf42e99b-261e-31f7-bcd2-1e170504ecda.roa (raw, json) Hash identifier: HzRRx2GblPSOUeRn3OmEQQNrGhherNMC7IciT67C4fs= Subject key identifier: CC:1A:D7:F3:03:8E:F7:86:2A:39:56:3E:E9:E4:A7:A3:F1:5A:17:D2 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F8FAECAEB71A69CB9209EA300 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bf42e99b-261e-31f7-bcd2-1e170504ecda.roa Signing time: Tue 20 Oct 2026 04:48:14 +0000 ROA not before: Tue 20 Oct 2026 04:48:14 +0000 ROA not after: Mon 18 Jan 2027 05:48:14 +0000 asID: 212238 IP address blocks: 64.204.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:ae:ca:eb:71:a6:9c:b9:20:9e:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 20 04:48:14 2026 GMT Not After : Jan 18 05:48:14 2027 GMT Subject: CN=70c82c32-9604-43d6-aeb8-9032e4c7bad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:65:9f:ea:4c:54:c9:a2:5c:09:90:c4:e5:30: 1e:37:2e:e3:ee:f1:94:fc:7c:16:3d:d9:a2:48:05: 93:7b:2d:66:c8:d2:05:f4:92:20:d3:8f:0e:53:5c: bb:1d:7e:61:ec:ee:d6:5e:74:07:bf:c3:f3:66:c3: b2:81:a4:7f:55:86:af:5b:21:7f:70:ab:b0:69:43: 73:b5:37:0e:f2:78:bb:f9:40:16:26:74:a1:d0:23: e8:82:f7:22:da:40:ea:f7:44:63:31:6f:94:35:17: a4:3d:a4:f4:81:3d:7f:95:2f:47:5d:89:25:7f:21: e3:98:87:b6:05:d9:01:66:7c:84:b0:e1:49:f4:0f: d9:9d:69:de:cc:7f:a9:cf:8b:8f:a0:55:de:d5:91: e5:2d:a8:6e:87:e1:87:38:d6:72:76:84:58:63:2f: 72:b7:62:61:98:91:d4:eb:8e:b5:31:93:96:00:0a: 5d:ac:f1:97:d0:2f:6a:15:e4:99:e7:90:93:f4:80: 37:6e:0e:d4:5d:69:08:f3:08:23:e7:0c:10:ab:8b: 2f:aa:fb:c7:cc:d6:72:2c:5c:a9:09:63:f8:0c:39: 23:f3:13:6a:82:96:d5:16:31:da:f1:61:70:a2:c7: 46:2d:1f:aa:b5:0b:ca:5b:f3:58:8d:e6:de:c5:44: 6c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1A:D7:F3:03:8E:F7:86:2A:39:56:3E:E9:E4:A7:A3:F1:5A:17:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bf42e99b-261e-31f7-bcd2-1e170504ecda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:85:eb:f3:02:c1:f6:93:8a:cf:f2:43:c5:4b:77:a4:3d:ce: 0b:ac:7c:46:c9:e5:01:bb:be:13:37:8e:74:ca:89:a3:1b:57: f2:e9:aa:25:c1:0b:b2:14:dc:54:96:e7:34:ec:0b:20:58:59: f9:bd:20:e3:26:cb:6e:0c:14:09:7d:bd:d1:c2:9a:8f:0e:e8: b2:60:71:1c:a6:ed:49:83:b7:0b:ec:19:7f:4d:7a:5a:28:31: 6a:72:01:32:91:1c:10:4b:3f:94:11:c0:e2:b8:d3:43:ff:5d: 5b:5e:60:82:66:5a:76:48:47:be:8b:c5:32:02:7c:94:7a:51: fc:e8:f2:47:d9:57:88:9d:5d:aa:73:84:dc:eb:da:44:04:cc: 05:0c:32:fc:7c:c5:79:ba:3e:95:fe:27:d6:f9:b2:94:a8:a7: 65:ff:5a:9f:2c:87:61:6a:d8:22:db:f5:5b:1c:2f:60:09:df: a4:a4:5a:49:50:92:d2:8e:e5:6b:79:4b:8c:33:d4:dc:44:48: ec:31:7b:bd:32:db:c2:ac:1a:72:83:47:ae:8d:94:9b:4c:1b: e6:01:0d:78:ce:e3:73:fa:ca:4b:83:1f:9f:54:d1:80:2f:a9: 6d:35:77:9a:c8:93:a2:f7:37:72:1b:4c:a2:0d:c1:c3:81:38: 27:93:2c:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PrsrrcaacuSCeowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAyMDA0NDgxNFoXDTI3MDExODA1NDgxNFowLzEtMCsGA1UEAxMk NzBjODJjMzItOTYwNC00M2Q2LWFlYjgtOTAzMmU0YzdiYWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWWf6kxUyaJcCZDE5TAeNy7j7vGU/HwWPdmi SAWTey1myNIF9JIg048OU1y7HX5h7O7WXnQHv8PzZsOygaR/VYavWyF/cKuwaUNz tTcO8ni7+UAWJnSh0CPogvci2kDq90RjMW+UNRekPaT0gT1/lS9HXYklfyHjmIe2 BdkBZnyEsOFJ9A/ZnWnezH+pz4uPoFXe1ZHlLahuh+GHONZydoRYYy9yt2JhmJHU 6461MZOWAApdrPGX0C9qFeSZ55CT9IA3bg7UXWkI8wgj5wwQq4svqvvHzNZyLFyp CWP4DDkj8xNqgpbVFjHa8WFwosdGLR+qtQvKW/NYjebexURsowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwa1/MDjveGKjlWPunkp6PxWhfSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmY0MmU5OWItMjYxZS0z MWY3LWJjZDItMWUxNzA1MDRlY2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMyiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMSF6/MCwfaTis/yQ8VLd6Q9zgusfEbJ5QG7vhM3jnTKiaMbV/LpqiXB C7IU3FSW5zTsCyBYWfm9IOMmy24MFAl9vdHCmo8O6LJgcRym7UmDtwvsGX9Neloo MWpyATKRHBBLP5QRwOK400P/XVteYIJmWnZIR76LxTICfJR6Ufzo8kfZV4idXapz hNzr2kQEzAUMMvx8xXm6PpX+J9b5spSop2X/Wp8sh2Fq2CLb9VscL2AJ36SkWklQ ktKO5Wt5S4wz1NxESOwxe70y28KsGnKDR66NlJtMG+YBDXjO43P6ykuDH59U0YAv qW01d5rIk6L3N3IbTKINwcOBOCeTLGY= -----END CERTIFICATE-----Generated at Thu Nov 5 11:28:34 2026 by rpki-client