$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/de43b843-7e32-30b0-9407-e8dca58980c1.roa File: de43b843-7e32-30b0-9407-e8dca58980c1.roa (raw, json) Hash identifier: QXfy1h2pu56QfNReJ9jr7XUtjri2IRGmzvDLFdTHCGE= Subject key identifier: 1D:2F:DC:65:2D:42:E3:20:B5:EB:2D:DF:11:F5:26:CD:50:9B:D5:68 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F5A32F31FE7F75756DAB7E800 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/de43b843-7e32-30b0-9407-e8dca58980c1.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 152689 IP address blocks: 68.164.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:f3:1f:e7:f7:57:56:da:b7:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=0d4723b9-9ad6-4b6b-9f42-047344a0d8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ff:25:48:68:17:4b:aa:82:16:6d:fa:f4:00: dc:64:5b:01:4c:60:e0:66:38:b5:a4:93:07:1b:2a: ea:9b:fa:74:ea:18:cc:74:53:b8:bf:18:78:11:26: 45:64:bb:62:f6:27:b7:25:c5:d1:89:31:f5:36:a5: 4e:29:e4:65:96:6b:71:cb:b9:ce:30:ed:b8:50:6c: d6:f7:ea:d5:83:3f:c6:dc:a2:d3:79:ee:ed:bc:d4: fc:85:31:79:8a:7b:7b:89:db:9f:cf:a1:8d:52:fd: aa:13:28:db:d9:a5:04:eb:93:aa:d2:7a:ff:bf:3c: 9e:d2:d7:f2:98:cd:fd:a5:4d:bf:62:f9:89:64:db: d7:cf:bb:07:ed:21:50:3b:66:0e:cd:c3:88:85:58: 6c:65:e8:e1:9a:1c:02:e1:ea:ca:d9:5b:f2:75:1d: 19:a3:0f:f5:83:f9:3a:08:38:ec:40:d0:48:f7:90: 68:c9:d3:2a:c9:0b:81:9a:ff:5c:c0:5f:92:d8:fb: 4e:c7:e7:ba:12:74:5a:7a:40:50:4a:da:4f:ac:73: 99:bf:fd:f2:42:28:89:97:ef:15:5c:3c:6d:4d:eb: 6e:01:5e:5e:05:02:ef:f0:54:ff:5d:22:2d:d3:aa: 6c:5f:78:a4:ea:88:c5:fb:85:af:29:fe:6b:18:20: bf:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2F:DC:65:2D:42:E3:20:B5:EB:2D:DF:11:F5:26:CD:50:9B:D5:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/de43b843-7e32-30b0-9407-e8dca58980c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:cb:f9:a5:aa:67:54:fd:36:ef:f1:62:69:d9:98:92:04:de: 71:4c:1e:16:9a:0a:a1:75:07:10:59:97:cc:d8:bb:a6:28:80: 3c:14:52:2c:75:f0:4b:d4:d7:3f:5e:79:5c:80:7e:5e:85:7e: f8:94:2d:8e:b8:54:cb:c8:bb:d1:55:f9:23:86:02:5f:d4:d4: 72:01:6f:b5:23:52:9e:e7:82:08:c3:bc:02:47:13:d0:00:cb: 0a:00:6d:d1:78:14:04:a9:0c:48:66:04:c9:e4:e8:1f:8c:cb: dd:3c:23:92:e1:d0:24:e6:5d:86:ee:99:2e:09:c2:30:c7:7d: cb:25:c5:9c:00:d6:fb:5d:8f:59:97:7a:e4:c5:70:9a:6c:05: fd:60:ac:aa:10:c3:19:76:b8:3b:fc:27:dd:c7:ac:23:3e:f9: 7b:00:0c:38:0e:b7:4f:f2:89:dc:d8:0a:03:9e:25:d7:60:3f: 32:96:00:48:41:7d:bb:a5:c0:91:c0:fc:5f:30:18:ba:f1:b6: 71:eb:f9:63:48:c2:de:46:b2:94:2a:79:05:db:31:c8:80:9c: fd:96:3a:6b:63:0b:e5:a0:00:97:e0:86:41:3e:51:26:63:a4: e6:a2:58:22:1b:e2:83:56:ac:66:33:a5:1c:5f:52:b9:e3:8e: 49:91:7d:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMvMf5/dXVtq36AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk MGQ0NzIzYjktOWFkNi00YjZiLTlmNDItMDQ3MzQ0YTBkOGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf8lSGgXS6qCFm369ADcZFsBTGDgZji1pJMH Gyrqm/p06hjMdFO4vxh4ESZFZLti9ie3JcXRiTH1NqVOKeRllmtxy7nOMO24UGzW 9+rVgz/G3KLTee7tvNT8hTF5int7idufz6GNUv2qEyjb2aUE65Oq0nr/vzye0tfy mM39pU2/YvmJZNvXz7sH7SFQO2YOzcOIhVhsZejhmhwC4erK2VvydR0Zow/1g/k6 CDjsQNBI95BoydMqyQuBmv9cwF+S2PtOx+e6EnRaekBQStpPrHOZv/3yQiiJl+8V XDxtTetuAV5eBQLv8FT/XSIt06psX3ik6ojF+4WvKf5rGCC/DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0v3GUtQuMgtest3xH1Js1Qm9VoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGU0M2I4NDMtN2UzMi0z MGIwLTk0MDctZThkY2E1ODk4MGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKSkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPL+aWqZ1T9Nu/xYmnZmJIE3nFMHhaaCqF1BxBZl8zYu6YogDwUUix1 8EvU1z9eeVyAfl6FfviULY64VMvIu9FV+SOGAl/U1HIBb7UjUp7nggjDvAJHE9AA ywoAbdF4FASpDEhmBMnk6B+My908I5Lh0CTmXYbumS4JwjDHfcslxZwA1vtdj1mX euTFcJpsBf1grKoQwxl2uDv8J93HrCM++XsADDgOt0/yidzYCgOeJddgPzKWAEhB fbulwJHA/F8wGLrxtnHr+WNIwt5GspQqeQXbMciAnP2WOmtjC+WgAJfghkE+USZj pOaiWCIb4oNWrGYzpRxfUrnjjkmRfSQ= -----END CERTIFICATE-----Generated at Sun Oct 11 06:23:55 2026 by rpki-client