$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cf0653ab-a2ae-312c-86a6-e8ca6cd3f0ae.roa File: cf0653ab-a2ae-312c-86a6-e8ca6cd3f0ae.roa (raw, json) Hash identifier: 7WdtAfOtPLhwasYHF6dZdCAprwbSq72WY4juoaGMnVc= Subject key identifier: 77:22:66:32:B1:83:1B:74:83:9E:6D:59:FF:4A:BF:34:1D:12:E6:B2 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F66C2BC609C03FF8CC6159140 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cf0653ab-a2ae-312c-86a6-e8ca6cd3f0ae.roa Signing time: Mon 05 Oct 2026 13:00:13 +0000 ROA not before: Mon 05 Oct 2026 13:00:13 +0000 ROA not after: Sun 03 Jan 2027 14:00:13 +0000 asID: 2914 IP address blocks: 68.167.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:c2:bc:60:9c:03:ff:8c:c6:15:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 5 13:00:13 2026 GMT Not After : Jan 3 14:00:13 2027 GMT Subject: CN=b2168f5d-9248-49ed-bfb5-b649cd98e593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ca:58:93:e6:67:24:b8:59:4e:6f:70:37:bf: ec:de:0a:73:3f:61:fe:92:c5:8b:db:65:e5:e3:bc: 17:77:27:25:e3:e9:f9:7f:07:d7:14:49:ee:82:7c: 01:f7:10:27:d6:68:b7:df:69:36:f9:98:d7:93:42: ba:1c:53:43:6d:41:0c:7e:2a:72:6d:b6:e9:d3:51: fe:2a:cf:0c:14:9a:dc:06:33:72:b9:a6:1e:eb:38: 17:0c:8a:40:62:11:e5:29:70:96:a3:2d:6a:52:e3: d5:5e:2c:61:b3:15:09:16:66:2b:fe:d9:3d:bd:51: ee:ea:f0:f3:5e:c6:a0:6f:b5:3f:89:70:c5:4c:92: ba:14:bb:93:a8:4c:55:ba:c4:aa:2c:f2:09:a2:97: c4:81:d4:d5:a4:87:e3:73:a0:70:fb:1a:fa:fe:09: d4:38:af:39:72:38:57:0c:a3:50:cc:31:fb:06:4c: 89:65:f3:87:4a:9f:aa:f0:bd:7b:c8:ec:dc:6e:f9: b8:ed:5f:57:33:6a:5f:77:bc:f0:f3:67:8b:09:a9: 0f:cb:09:14:12:65:05:f9:a7:6b:53:2f:f0:86:b0: 9a:e5:72:80:9a:ad:e1:7f:10:87:21:37:dc:4b:39: 71:15:58:77:b0:90:f2:11:96:83:ba:93:ff:1e:0a: 22:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:22:66:32:B1:83:1B:74:83:9E:6D:59:FF:4A:BF:34:1D:12:E6:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cf0653ab-a2ae-312c-86a6-e8ca6cd3f0ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:90:37:ec:4f:e3:35:7f:76:5a:7a:02:75:f8:ad:19:be:49: f6:6d:c1:4d:65:45:49:60:1f:04:11:e5:ea:34:15:14:5c:cd: e5:66:76:ce:48:ad:28:1f:8f:4c:92:cb:c6:ec:e1:a4:63:2a: b7:d9:25:61:8d:99:c6:a7:e0:5a:de:0e:c6:fd:f7:d4:d0:87: 91:31:19:46:cc:3f:78:db:50:60:20:7f:c6:63:7c:2f:7c:56: d5:1f:7c:06:af:45:ae:0f:4d:f5:33:0d:c6:fd:e9:58:2a:45: 86:de:4e:65:de:7f:12:25:4c:cd:46:91:95:33:8a:7e:01:75: ef:7d:43:17:57:6f:26:8f:6b:a9:d4:e0:43:7a:03:b3:be:54: 74:be:08:8d:75:eb:40:78:f5:83:e3:cc:e9:9b:eb:36:75:98: 44:d8:86:8b:6c:78:e5:3b:fe:cc:39:cf:c5:74:75:4f:22:22: 05:e3:08:2f:85:81:66:2c:2c:b9:22:56:3b:8a:0a:33:e5:7d: ca:56:d0:60:3b:5b:98:60:b7:85:08:bf:1f:a8:5b:79:c2:e4: 59:b3:6d:3b:a8:84:0f:c0:ef:73:4a:b0:93:ad:ee:21:1c:ac: b4:9f:b3:5a:6b:8f:e5:16:dd:53:35:01:24:31:d0:0a:79:75: 61:08:55:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9mwrxgnAP/jMYVkUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwNTEzMDAxM1oXDTI3MDEwMzE0MDAxM1owLzEtMCsGA1UEAxMk YjIxNjhmNWQtOTI0OC00OWVkLWJmYjUtYjY0OWNkOThlNTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAospYk+ZnJLhZTm9wN7/s3gpzP2H+ksWL22Xl 47wXdycl4+n5fwfXFEnugnwB9xAn1mi332k2+ZjXk0K6HFNDbUEMfipybbbp01H+ Ks8MFJrcBjNyuaYe6zgXDIpAYhHlKXCWoy1qUuPVXixhsxUJFmYr/tk9vVHu6vDz Xsagb7U/iXDFTJK6FLuTqExVusSqLPIJopfEgdTVpIfjc6Bw+xr6/gnUOK85cjhX DKNQzDH7BkyJZfOHSp+q8L17yOzcbvm47V9XM2pfd7zw82eLCakPywkUEmUF+adr Uy/whrCa5XKAmq3hfxCHITfcSzlxFVh3sJDyEZaDupP/HgoilwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHciZjKxgxt0g55tWf9KvzQdEuayMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2YwNjUzYWItYTJhZS0z MTJjLTg2YTYtZThjYTZjZDNmMGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRKe6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeQN+xP4zV/dlp6AnX4rRm+SfZtwU1lRUlgHwQR5eo0FRRczeVmds5I rSgfj0ySy8bs4aRjKrfZJWGNmcan4FreDsb999TQh5ExGUbMP3jbUGAgf8ZjfC98 VtUffAavRa4PTfUzDcb96VgqRYbeTmXefxIlTM1GkZUzin4Bde99QxdXbyaPa6nU 4EN6A7O+VHS+CI1160B49YPjzOmb6zZ1mETYhotseOU7/sw5z8V0dU8iIgXjCC+F gWYsLLkiVjuKCjPlfcpW0GA7W5hgt4UIvx+oW3nC5FmzbTuohA/A73NKsJOt7iEc rLSfs1prj+UW3VM1ASQx0Ap5dWEIVZc= -----END CERTIFICATE-----Generated at Sun Oct 11 01:04:34 2026 by rpki-client