$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d42d89bf-e4c8-3a1d-8658-704b49748a84.roa File: d42d89bf-e4c8-3a1d-8658-704b49748a84.roa (raw, json) Hash identifier: aE47YhlEBCsZgGkV/RBxk6OsAkDH70UuzUgKGWpkCzY= Subject key identifier: BC:27:15:5A:53:D4:37:EE:BD:92:C7:6F:CF:F5:63:D4:8E:B2:A2:F4 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F9903087372E17D63B73BA200 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d42d89bf-e4c8-3a1d-8658-704b49748a84.roa Signing time: Fri 23 Oct 2026 13:00:12 +0000 ROA not before: Fri 23 Oct 2026 13:00:12 +0000 ROA not after: Thu 21 Jan 2027 14:00:12 +0000 asID: 1299 IP address blocks: 68.164.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:99:03:08:73:72:e1:7d:63:b7:3b:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 23 13:00:12 2026 GMT Not After : Jan 21 14:00:12 2027 GMT Subject: CN=67bf2b43-77e1-45fa-b68b-d4be8083a76f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:21:70:ca:27:9c:ab:0b:be:59:fd:4f:6b:29: a2:1d:b4:45:22:2d:f2:e3:51:0a:73:e6:29:24:91: ab:34:87:03:2a:3b:19:cb:cb:88:d6:bc:ae:be:97: 7d:8d:31:8f:4f:94:04:05:a2:bb:51:55:c2:1f:58: 1f:16:b1:e5:3f:c2:d2:f3:47:7f:d2:e4:43:54:e3: e7:f1:73:67:fc:27:33:f0:68:50:db:35:98:70:05: 89:ef:7d:34:53:53:07:03:15:2a:85:05:0b:aa:5e: 32:d3:d6:05:40:02:7d:bc:47:b3:98:9e:cf:98:6f: a8:82:6f:81:ee:4b:fb:58:44:03:8a:39:5f:a4:b0: 82:a5:b7:17:ce:88:51:49:f9:5e:19:85:a4:7a:33: d6:54:84:5e:d5:44:e0:60:4e:79:cd:35:90:c7:89: 03:7a:a7:ec:a5:91:2f:d7:b4:b8:ae:c5:4b:c8:3f: ac:83:25:a5:be:d0:03:d6:58:06:d4:aa:52:26:29: 4a:d2:b3:32:12:b8:a2:28:6a:53:df:7b:91:e1:81: c8:8f:d7:f4:3f:c4:c8:74:ae:f3:26:5f:60:13:75: 6c:08:2d:af:ee:fc:80:e0:de:74:9a:0f:30:fc:4e: d3:b9:20:6a:99:6a:91:a0:43:f5:eb:9d:7a:05:e8: 49:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:27:15:5A:53:D4:37:EE:BD:92:C7:6F:CF:F5:63:D4:8E:B2:A2:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d42d89bf-e4c8-3a1d-8658-704b49748a84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:61:58:48:3c:9c:30:c1:b7:04:b1:7e:fa:25:46:2a:22:6b: e0:f5:70:33:3b:c9:6f:c9:8c:f5:de:e6:13:16:8f:78:b6:6e: f8:e9:83:0c:27:e9:8b:c1:70:3d:e0:f2:83:42:a4:2b:ff:f9: 0d:a3:89:01:ba:c4:d3:a5:19:f1:6f:5b:01:cb:c8:44:ea:53: 0e:5c:43:46:66:90:7e:cd:5e:9a:9a:54:e3:fa:e6:43:38:1a: 16:8f:77:43:7f:f6:2e:12:0b:13:5e:09:c2:e7:18:1b:98:bc: 3a:ca:a1:48:2d:50:da:43:bf:4d:0e:4d:37:fe:8b:7e:00:00: 83:21:12:9d:43:bb:4f:51:22:da:38:c4:8e:9f:23:d9:12:88: c0:74:26:28:73:32:fe:ea:0b:71:e4:ce:1d:23:00:f0:7a:b3: 41:27:fc:cb:eb:70:fd:68:69:49:7c:6d:b9:ee:ec:a2:05:2d: 01:37:fd:6b:5d:c9:b3:b2:af:80:af:46:f2:47:9e:61:da:88: 18:aa:a3:a1:c8:b7:b3:e9:1c:13:8b:71:51:c5:35:69:b9:45: c9:01:15:f1:f5:f1:f4:26:d4:cc:87:84:d2:33:f9:1a:0f:cf: 8f:4b:f7:f6:a3:df:61:f9:3a:17:1d:d1:8e:ec:f4:0c:12:34: c0:3d:ac:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+ZAwhzcuF9Y7c7ogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAyMzEzMDAxMloXDTI3MDEyMTE0MDAxMlowLzEtMCsGA1UEAxMk NjdiZjJiNDMtNzdlMS00NWZhLWI2OGItZDRiZTgwODNhNzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSFwyiecqwu+Wf1PaymiHbRFIi3y41EKc+Yp JJGrNIcDKjsZy8uI1ryuvpd9jTGPT5QEBaK7UVXCH1gfFrHlP8LS80d/0uRDVOPn 8XNn/Ccz8GhQ2zWYcAWJ7300U1MHAxUqhQULql4y09YFQAJ9vEezmJ7PmG+ogm+B 7kv7WEQDijlfpLCCpbcXzohRSfleGYWkejPWVIRe1UTgYE55zTWQx4kDeqfspZEv 17S4rsVLyD+sgyWlvtAD1lgG1KpSJilK0rMyEriiKGpT33uR4YHIj9f0P8TIdK7z Jl9gE3VsCC2v7vyA4N50mg8w/E7TuSBqmWqRoEP16516BehJmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwnFVpT1DfuvZLHb8/1Y9SOsqL0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDQyZDg5YmYtZTRjOC0z YTFkLTg2NTgtNzA0YjQ5NzQ4YTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKTTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9hWEg8nDDBtwSxfvolRioia+D1cDM7yW/JjPXe5hMWj3i2bvjpgwwn 6YvBcD3g8oNCpCv/+Q2jiQG6xNOlGfFvWwHLyETqUw5cQ0ZmkH7NXpqaVOP65kM4 GhaPd0N/9i4SCxNeCcLnGBuYvDrKoUgtUNpDv00OTTf+i34AAIMhEp1Du09RIto4 xI6fI9kSiMB0JihzMv7qC3Hkzh0jAPB6s0En/MvrcP1oaUl8bbnu7KIFLQE3/Wtd ybOyr4CvRvJHnmHaiBiqo6HIt7PpHBOLcVHFNWm5RckBFfH18fQm1MyHhNIz+RoP z49L9/aj32H5Ohcd0Y7s9AwSNMA9rEw= -----END CERTIFICATE-----Generated at Sun Oct 25 01:19:22 2026 by rpki-client