$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d42d89bf-e4c8-3a1d-8658-704b49748a84.roa File: d42d89bf-e4c8-3a1d-8658-704b49748a84.roa (raw, json) Hash identifier: 22mCuAP5KV3/R51/R88VAFluoi8m3AeJHssN8Fu8Ap4= Subject key identifier: C3:B0:99:E5:34:F6:96:BE:C2:B8:98:C8:09:93:F7:8A:27:9A:9B:7A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EF69F4169931CB83D7B5FD000 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d42d89bf-e4c8-3a1d-8658-704b49748a84.roa Signing time: Wed 26 Aug 2026 08:58:15 +0000 ROA not before: Wed 26 Aug 2026 08:58:15 +0000 ROA not after: Tue 24 Nov 2026 09:58:15 +0000 asID: 1299 IP address blocks: 68.164.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f6:9f:41:69:93:1c:b8:3d:7b:5f:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 26 08:58:15 2026 GMT Not After : Nov 24 09:58:15 2026 GMT Subject: CN=b2edf2e3-bb99-4d19-b35d-cc09605701af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:89:fb:80:d2:1d:e5:2f:27:91:4d:6e:1b:bb: 9e:34:a6:51:28:ad:4e:45:db:a3:22:75:b4:6b:c7: 14:1c:10:7c:dd:e0:db:94:ec:29:7b:15:f0:7b:25: 03:5c:83:1b:4f:73:73:fe:8c:d1:8d:13:46:0e:80: 5d:a0:c0:86:25:85:3e:e6:8c:75:71:bf:f6:ba:15: 18:0b:dd:3b:03:d7:b1:35:d2:33:bf:27:a8:d8:5b: 25:f5:27:25:c9:0b:73:2f:65:16:2f:bb:93:b2:67: 12:2c:21:b2:c9:36:96:a0:98:d0:d1:7f:c9:91:ce: 87:d6:49:28:dc:9c:c5:e3:ec:fd:5b:a9:34:30:53: eb:6d:cd:fe:d5:16:5c:92:8d:24:0c:26:de:7b:c0: fa:98:8c:bc:0f:bf:e7:54:e6:a8:3d:f1:20:86:b5: c7:0d:4d:68:cc:c2:ed:4f:7b:fb:55:a4:da:8d:2b: 3e:22:bc:97:ca:f6:95:06:86:b4:d1:95:28:7f:95: d4:23:18:b3:9a:d3:5b:37:d2:45:a1:18:0e:01:ec: e3:ea:2b:a4:f4:82:b9:9f:6e:e2:55:cb:fc:9a:2e: 30:65:ee:a5:4d:dc:28:62:76:8c:df:10:9a:8d:34: 6e:4f:6a:32:88:5d:df:a0:5f:80:e8:5b:bf:62:f1: e9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B0:99:E5:34:F6:96:BE:C2:B8:98:C8:09:93:F7:8A:27:9A:9B:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d42d89bf-e4c8-3a1d-8658-704b49748a84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:3e:b0:df:c4:56:ea:06:65:cb:e0:28:85:df:fc:fa:c5:53: e5:46:90:50:8d:89:d1:e2:4e:97:0c:fb:3f:9a:8c:bd:84:4f: 44:ce:b2:3f:5f:8d:c6:6e:9d:00:1e:1e:e0:9e:30:68:dd:ff: d2:5b:81:45:dd:54:64:af:8f:76:64:e1:23:f3:a3:8e:77:be: 94:42:0a:dc:0f:8c:03:da:69:ed:9b:0b:6a:2d:21:52:fe:5d: 18:64:38:fc:91:28:79:35:c1:7c:54:0a:b4:ab:19:80:7b:22: ed:c7:4c:aa:0d:69:3e:61:de:0a:b9:e2:b7:9b:d4:5e:32:09: 86:47:2f:2d:f5:53:b2:d3:27:d3:94:53:8e:1d:a5:7e:5e:eb: c4:29:54:fd:f3:15:09:3d:3f:73:56:34:17:0f:1d:df:22:fc: 88:ee:d8:6c:f3:75:e4:85:37:12:ad:f7:6a:db:c2:6a:0c:25: 54:6d:4a:9e:17:9f:3d:0c:b2:7c:33:9b:81:67:6d:a7:23:d2: ec:49:22:52:b8:b6:22:7f:1c:f6:7e:e6:05:0a:45:3e:9c:9a: 0f:bf:cf:9d:16:ad:f2:e5:24:c6:6e:c4:fe:25:8b:a2:55:45: 7d:ee:f9:bc:e3:fd:73:f7:d8:5a:7c:d4:da:1c:88:21:b9:dc: ca:de:69:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE72n0Fpkxy4PXtf0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgyNjA4NTgxNVoXDTI2MTEyNDA5NTgxNVowLzEtMCsGA1UEAxMk YjJlZGYyZTMtYmI5OS00ZDE5LWIzNWQtY2MwOTYwNTcwMWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYn7gNId5S8nkU1uG7ueNKZRKK1ORdujInW0 a8cUHBB83eDblOwpexXweyUDXIMbT3Nz/ozRjRNGDoBdoMCGJYU+5ox1cb/2uhUY C907A9exNdIzvyeo2Fsl9SclyQtzL2UWL7uTsmcSLCGyyTaWoJjQ0X/Jkc6H1kko 3JzF4+z9W6k0MFPrbc3+1RZcko0kDCbee8D6mIy8D7/nVOaoPfEghrXHDU1ozMLt T3v7VaTajSs+IryXyvaVBoa00ZUof5XUIxizmtNbN9JFoRgOAezj6iuk9IK5n27i Vcv8mi4wZe6lTdwoYnaM3xCajTRuT2oyiF3foF+A6Fu/YvHp7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOwmeU09pa+wriYyAmT94onmpt6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDQyZDg5YmYtZTRjOC0z YTFkLTg2NTgtNzA0YjQ5NzQ4YTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKTTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIk+sN/EVuoGZcvgKIXf/PrFU+VGkFCNidHiTpcM+z+ajL2ET0TOsj9f jcZunQAeHuCeMGjd/9JbgUXdVGSvj3Zk4SPzo453vpRCCtwPjAPaae2bC2otIVL+ XRhkOPyRKHk1wXxUCrSrGYB7Iu3HTKoNaT5h3gq54reb1F4yCYZHLy31U7LTJ9OU U44dpX5e68QpVP3zFQk9P3NWNBcPHd8i/Iju2GzzdeSFNxKt92rbwmoMJVRtSp4X nz0Msnwzm4Fnbacj0uxJIlK4tiJ/HPZ+5gUKRT6cmg+/z50WrfLlJMZuxP4li6JV RX3u+bzj/XP32Fp81NociCG53MreaUc= -----END CERTIFICATE-----Generated at Sat Sep 5 00:44:50 2026 by rpki-client