$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d9f8d583-e659-33a1-a965-5d8f506898e4.roa File: d9f8d583-e659-33a1-a965-5d8f506898e4.roa (raw, json) Hash identifier: Csl1Y2AhGeti9ifPmtfgpSe+8H02QoOwMiI7sPRESWM= Subject key identifier: 27:BC:3B:57:80:E3:1F:14:8D:D1:66:42:63:F1:F9:2D:94:1E:94:7A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F58CD672992A33035526A09C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d9f8d583-e659-33a1-a965-5d8f506898e4.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 834 IP address blocks: 68.164.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:67:29:92:a3:30:35:52:6a:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=1e39f0ac-04f3-4f2c-a185-23ed5d697f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fb:76:d2:7a:1b:b0:89:8c:f0:a7:df:55:43: 3c:a8:13:ab:9d:54:d8:7f:06:3d:04:66:34:48:3a: ea:dd:13:84:17:72:cd:92:e4:a5:95:db:41:45:3e: ad:d6:53:3c:1a:d2:c0:7b:b9:8c:8f:38:8d:dd:71: 70:d5:1c:87:14:7a:c8:68:c7:00:ab:67:91:e5:24: bd:f4:84:db:c5:a5:df:b2:85:2c:91:9a:75:50:54: 47:40:d7:ab:5b:54:0e:21:35:0c:ee:1c:47:c7:fe: c7:68:06:3a:7a:ff:c6:5b:2e:bc:66:e4:b0:7a:07: ec:73:bf:99:af:d5:8d:46:97:38:32:d2:01:2e:e0: e0:74:5c:ef:bc:d6:01:ed:a2:40:b8:00:7e:a9:38: 6b:94:39:85:42:08:eb:5e:6c:a8:31:69:f8:c8:fc: 6d:7e:54:22:e5:ee:a5:8a:23:b6:0e:27:3d:d9:f4: 47:05:1f:e4:75:f1:03:51:f5:db:cc:ea:fe:ff:c4: 43:a7:d6:09:4c:be:01:c7:68:a1:03:54:3c:5a:1a: ff:ff:a5:31:41:e1:4b:d8:5f:2c:72:2b:d4:ff:d4: ea:d0:bf:8a:b3:e3:0f:f6:1f:90:57:50:3f:34:0c: c1:3a:82:29:bb:a0:07:34:7e:5b:db:ab:6d:87:b7: 8b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BC:3B:57:80:E3:1F:14:8D:D1:66:42:63:F1:F9:2D:94:1E:94:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d9f8d583-e659-33a1-a965-5d8f506898e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:04:31:07:cd:76:3f:38:61:48:02:62:1f:f0:39:f3:c1:8d: 52:0e:91:50:80:1d:b9:e8:0f:8c:89:f8:97:ac:ea:83:8f:e0: e7:a5:a3:12:3b:a8:26:a6:fd:82:fa:03:25:f0:06:97:4b:0f: a7:11:c1:54:9b:04:b9:a2:01:aa:d7:53:9e:95:78:ad:9f:83: 0f:47:05:e2:36:13:e7:0f:b5:06:b4:4b:08:0d:09:76:f7:ae: c5:63:be:60:5a:2a:79:d5:ef:88:9a:80:23:94:d1:02:61:d3: 65:a2:63:9e:38:1c:47:a6:ff:7a:d5:2d:e6:c0:47:02:9f:7f: 89:4a:b9:40:a6:fc:9d:f4:1c:fe:10:38:08:95:20:8a:11:8a: 98:bc:24:b2:17:52:8f:dd:68:8a:75:6c:a2:81:07:18:7e:4f: 04:20:77:44:2f:b3:09:69:4f:57:95:2a:d2:74:a3:d6:e2:e3: da:13:22:c3:1c:34:81:fc:1e:a1:6c:9b:e7:98:49:7a:8b:3f: 53:ae:a9:5d:36:39:ae:0c:26:b8:e9:97:55:f4:5c:4f:2a:6f: 5d:c8:86:b6:9d:bc:c5:91:5d:2f:24:80:bb:6e:c5:be:99:ce: ce:13:ec:24:76:6a:e6:25:9b:e1:06:2c:c2:18:61:16:fc:ca: 91:7b:f1:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzWcpkqMwNVJqCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk MWUzOWYwYWMtMDRmMy00ZjJjLWExODUtMjNlZDVkNjk3ZjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPt20nobsImM8KffVUM8qBOrnVTYfwY9BGY0 SDrq3ROEF3LNkuSlldtBRT6t1lM8GtLAe7mMjziN3XFw1RyHFHrIaMcAq2eR5SS9 9ITbxaXfsoUskZp1UFRHQNerW1QOITUM7hxHx/7HaAY6ev/GWy68ZuSwegfsc7+Z r9WNRpc4MtIBLuDgdFzvvNYB7aJAuAB+qThrlDmFQgjrXmyoMWn4yPxtflQi5e6l iiO2Dic92fRHBR/kdfEDUfXbzOr+/8RDp9YJTL4Bx2ihA1Q8Whr//6UxQeFL2F8s civU/9Tq0L+Ks+MP9h+QV1A/NAzBOoIpu6AHNH5b26tth7eL4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCe8O1eA4x8UjdFmQmPx+S2UHpR6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDlmOGQ1ODMtZTY1OS0z M2ExLWE5NjUtNWQ4ZjUwNjg5OGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKTEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMIEMQfNdj84YUgCYh/wOfPBjVIOkVCAHbnoD4yJ+Jes6oOP4OeloxI7 qCam/YL6AyXwBpdLD6cRwVSbBLmiAarXU56VeK2fgw9HBeI2E+cPtQa0SwgNCXb3 rsVjvmBaKnnV74iagCOU0QJh02WiY544HEem/3rVLebARwKff4lKuUCm/J30HP4Q OAiVIIoRipi8JLIXUo/daIp1bKKBBxh+TwQgd0QvswlpT1eVKtJ0o9bi49oTIsMc NIH8HqFsm+eYSXqLP1OuqV02Oa4MJrjpl1X0XE8qb13IhradvMWRXS8kgLtuxb6Z zs4T7CR2auYlm+EGLMIYYRb8ypF78b0= -----END CERTIFICATE-----Generated at Sun Oct 11 07:40:45 2026 by rpki-client