$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dca9e796-95b4-3e08-b1fc-6c8b5ef10dc5.roa File: dca9e796-95b4-3e08-b1fc-6c8b5ef10dc5.roa (raw, json) Hash identifier: twKkHIwJfsKtdiMUrrqz0e/31b8f80GusraOzken9fc= Subject key identifier: 99:FC:63:52:2E:E3:27:10:21:AB:61:AC:E8:8F:DE:F4:0C:B7:EB:57 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F498A133BD09470AF8A13F180 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dca9e796-95b4-3e08-b1fc-6c8b5ef10dc5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 393427 IP address blocks: 66.253.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:13:3b:d0:94:70:af:8a:13:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=85a3e9e6-66d1-40ba-8fbb-49791aaab44c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f6:cf:2d:f3:a5:8f:f6:fe:e7:28:1e:ba:28: fe:c3:2f:7a:b1:7c:e2:6e:d3:2b:f7:5d:af:4c:ef: 8f:c0:60:85:41:c3:3c:3b:0a:8c:06:0f:e9:13:b6: 7b:6c:bd:ac:84:41:f4:73:b0:e6:76:1b:97:58:93: 31:12:03:16:a1:d3:02:37:91:15:c9:49:b2:98:3f: ba:99:ab:8f:e6:16:a8:3c:0b:87:b7:a6:d1:db:19: 7d:13:9f:e5:00:48:8b:e2:e4:43:63:37:a2:a2:38: 8f:c4:e9:af:f8:b6:83:18:38:69:4d:5d:08:b0:93: a0:4f:3d:47:26:10:6f:13:dd:85:84:1a:df:e0:79: 2d:8d:7b:f6:2a:42:aa:a5:14:b1:67:38:5c:46:3e: d7:37:f5:7e:82:30:e6:ec:8d:d4:6c:f6:88:0d:bb: e7:80:3d:d3:5e:5b:29:d3:31:bb:72:eb:5a:65:35: e8:1c:07:87:50:26:90:37:24:1d:f5:f1:57:d5:d6: e3:9d:b7:83:55:30:8d:5b:49:c2:14:8c:be:ca:7b: 2f:20:2e:26:f9:fd:1b:96:72:ee:d5:59:37:2a:d7: 4d:82:db:b4:00:3d:ef:d8:af:3e:1a:a5:02:ef:90: 20:e3:50:3a:fe:b2:05:4d:57:44:57:bb:6f:2a:aa: e4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FC:63:52:2E:E3:27:10:21:AB:61:AC:E8:8F:DE:F4:0C:B7:EB:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dca9e796-95b4-3e08-b1fc-6c8b5ef10dc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:29:3d:05:43:9b:1c:b6:6d:a4:ac:37:07:b0:68:af:b6:6f: 8b:3b:c9:ed:41:ad:5e:fb:10:38:ad:13:3e:a9:da:a5:dc:97: 2c:7b:6a:52:0f:7d:1c:56:42:20:a9:73:8a:14:89:01:a8:40: ce:b3:70:bf:99:dc:68:2b:cb:28:2e:4e:9f:54:35:11:51:5f: ae:f4:38:df:de:d3:d1:6d:a0:0e:91:52:b8:20:e1:9b:90:6d: 44:03:49:7e:10:3f:f2:19:3e:8d:85:38:91:6b:c4:ac:88:a2: f6:ee:f7:e4:0f:cf:6a:56:2e:bd:97:19:d9:53:d4:a8:80:a1: db:65:4e:00:c0:43:7f:94:30:7c:66:b0:be:8f:8e:6e:a6:ab: 6b:ea:dc:31:31:47:d2:3c:d6:ef:97:1c:e5:31:d0:ee:c1:c4: be:cb:68:a1:91:39:52:c5:82:d1:62:b8:c7:8c:9c:ff:85:24: 8c:92:75:49:b7:12:76:f4:8b:64:f3:05:00:69:c7:45:6f:80: 30:6f:f0:dd:d0:3c:24:37:27:7c:59:b5:79:fb:d8:96:b5:cc: d3:56:44:b2:fe:74:60:33:09:78:21:2d:e4:71:7e:86:e1:9f: 0a:bf:c5:86:12:66:52:5a:a3:4e:4c:e4:25:81:b1:e0:91:bb: b9:50:b1:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JihM70JRwr4oT8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODVhM2U5ZTYtNjZkMS00MGJhLThmYmItNDk3OTFhYWFiNDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/bPLfOlj/b+5ygeuij+wy96sXzibtMr912v TO+PwGCFQcM8OwqMBg/pE7Z7bL2shEH0c7DmdhuXWJMxEgMWodMCN5EVyUmymD+6 mauP5haoPAuHt6bR2xl9E5/lAEiL4uRDYzeiojiPxOmv+LaDGDhpTV0IsJOgTz1H JhBvE92FhBrf4HktjXv2KkKqpRSxZzhcRj7XN/V+gjDm7I3UbPaIDbvngD3TXlsp 0zG7cutaZTXoHAeHUCaQNyQd9fFX1dbjnbeDVTCNW0nCFIy+ynsvIC4m+f0blnLu 1Vk3KtdNgtu0AD3v2K8+GqUC75Ag41A6/rIFTVdEV7tvKqrkFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJn8Y1Iu4ycQIathrOiP3vQMt+tXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGNhOWU3OTYtOTViNC0z ZTA4LWIxZmMtNmM4YjVlZjEwZGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQv1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHApPQVDmxy2baSsNwewaK+2b4s7ye1BrV77EDitEz6p2qXclyx7alIP fRxWQiCpc4oUiQGoQM6zcL+Z3GgryyguTp9UNRFRX670ON/e09FtoA6RUrgg4ZuQ bUQDSX4QP/IZPo2FOJFrxKyIovbu9+QPz2pWLr2XGdlT1KiAodtlTgDAQ3+UMHxm sL6Pjm6mq2vq3DExR9I81u+XHOUx0O7BxL7LaKGROVLFgtFiuMeMnP+FJIySdUm3 Enb0i2TzBQBpx0VvgDBv8N3QPCQ3J3xZtXn72Ja1zNNWRLL+dGAzCXghLeRxfobh nwq/xYYSZlJao05M5CWBseCRu7lQsVg= -----END CERTIFICATE-----Generated at Mon Oct 12 19:12:37 2026 by rpki-client