$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dea0ffe9-0f82-3f9e-af30-23d432fe1c95.roa File: dea0ffe9-0f82-3f9e-af30-23d432fe1c95.roa (raw, json) Hash identifier: mnDtAZdej37VyVaGaA/j2KaQXIJRj7NXK0mOhcqceHA= Subject key identifier: 29:3A:77:33:33:08:8C:B5:BF:17:D0:9B:86:6E:5D:B7:A3:B4:B7:4D Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EDB2C94E257FDED4CA094CBC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dea0ffe9-0f82-3f9e-af30-23d432fe1c95.roa Signing time: Sun 16 Aug 2026 13:00:12 +0000 ROA not before: Sun 16 Aug 2026 13:00:12 +0000 ROA not after: Sat 14 Nov 2026 14:00:12 +0000 asID: 3257 IP address blocks: 68.167.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:db:2c:94:e2:57:fd:ed:4c:a0:94:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 16 13:00:12 2026 GMT Not After : Nov 14 14:00:12 2026 GMT Subject: CN=3efea789-05b5-4eca-b1e5-f847574b8dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:46:40:7a:d8:f5:13:84:75:c3:63:6e:ac:f4: 96:ca:44:d9:a6:23:84:b6:59:95:61:35:77:21:c3: 56:10:e3:70:12:fb:b5:6f:5b:6f:f4:ae:eb:19:ad: d1:bc:92:60:71:75:75:06:da:0c:0f:20:35:28:1d: 2c:1f:50:88:6e:ae:10:26:fc:c1:86:02:08:fb:b5: 7f:cf:b8:b4:5d:10:9c:1e:aa:5f:12:7e:04:6c:10: 8d:1a:25:73:82:59:c1:46:ca:fd:85:a9:55:02:11: 76:13:ea:9c:76:12:ec:d4:c7:2a:b9:36:94:ae:a4: d9:ac:84:dc:6f:c8:91:70:a3:57:d9:c6:b1:e6:e8: 5d:bc:0a:76:89:df:26:61:b9:ec:cd:74:11:ac:76: 9a:0a:5c:e6:af:61:91:74:65:9d:dc:f7:84:fd:1c: ad:e9:4c:57:c8:4d:c0:6c:be:1f:3e:74:36:ff:b2: 24:6a:42:2b:39:66:05:ee:52:7c:47:61:fc:a5:cc: 2c:c0:9a:bc:99:d1:a4:ba:0a:7c:55:89:7c:f4:bb: 81:93:af:74:a5:12:5f:3d:3c:bb:5b:9c:1f:21:13: 84:84:32:46:0f:12:67:92:28:32:0a:18:37:a3:2d: 70:f7:67:70:7b:b9:2e:70:cd:95:a9:70:cb:dd:c4: f3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3A:77:33:33:08:8C:B5:BF:17:D0:9B:86:6E:5D:B7:A3:B4:B7:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dea0ffe9-0f82-3f9e-af30-23d432fe1c95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:01:35:f8:27:e1:aa:7c:e8:50:65:ee:22:27:cb:49:0d:61: 39:8e:70:27:a3:db:57:4e:34:eb:ac:bf:78:fe:11:bf:d0:53: 09:31:00:b2:a5:f1:ac:b0:18:14:f0:23:b8:41:86:ce:52:85: 2c:5a:5b:57:52:6f:64:20:5e:ee:91:63:14:75:fa:5d:84:5b: a0:d1:90:9f:63:03:93:1a:28:c0:15:42:e4:d9:2f:a1:a3:c2: 37:2e:d4:2e:c5:2b:13:79:d3:e6:80:fa:ea:d6:8f:b6:f3:59: 77:1e:71:fd:7d:52:32:12:05:c2:47:f6:6f:21:28:0a:af:7e: d6:98:22:5e:d6:e7:d7:e7:67:40:ff:dc:8a:60:87:d7:3a:2a: b4:d2:d2:35:f5:dc:c8:dd:72:20:3a:7b:62:cb:ad:bd:38:3e: 59:6b:29:3b:47:80:6b:d6:37:a0:67:35:83:dc:97:0a:ee:12: 10:bb:94:82:26:b8:fd:74:e8:23:46:98:3f:84:04:44:9b:58: 7d:e8:93:36:4e:a4:75:71:ee:fe:60:9a:64:ad:ff:00:11:a9: f0:d8:63:f5:ff:83:bc:a1:25:42:44:bb:33:01:2e:9b:79:b4: c6:11:9a:b2:26:4e:f8:f0:61:1d:7e:2f:a3:93:d7:d0:27:2d: c4:5e:3f:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7bLJTiV/3tTKCUy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgxNjEzMDAxMloXDTI2MTExNDE0MDAxMlowLzEtMCsGA1UEAxMk M2VmZWE3ODktMDViNS00ZWNhLWIxZTUtZjg0NzU3NGI4ZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEZAetj1E4R1w2NurPSWykTZpiOEtlmVYTV3 IcNWEONwEvu1b1tv9K7rGa3RvJJgcXV1BtoMDyA1KB0sH1CIbq4QJvzBhgII+7V/ z7i0XRCcHqpfEn4EbBCNGiVzglnBRsr9halVAhF2E+qcdhLs1McquTaUrqTZrITc b8iRcKNX2cax5uhdvAp2id8mYbnszXQRrHaaClzmr2GRdGWd3PeE/Ryt6UxXyE3A bL4fPnQ2/7IkakIrOWYF7lJ8R2H8pcwswJq8mdGkugp8VYl89LuBk690pRJfPTy7 W5wfIROEhDJGDxJnkigyChg3oy1w92dwe7kucM2VqXDL3cTzcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCk6dzMzCIy1vxfQm4ZuXbejtLdNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGVhMGZmZTktMGY4Mi0z ZjllLWFmMzAtMjNkNDMyZmUxYzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKf/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkBNfgn4ap86FBl7iIny0kNYTmOcCej21dONOusv3j+Eb/QUwkxALKl 8aywGBTwI7hBhs5ShSxaW1dSb2QgXu6RYxR1+l2EW6DRkJ9jA5MaKMAVQuTZL6Gj wjcu1C7FKxN50+aA+urWj7bzWXcecf19UjISBcJH9m8hKAqvftaYIl7W59fnZ0D/ 3Ipgh9c6KrTS0jX13MjdciA6e2LLrb04PllrKTtHgGvWN6BnNYPclwruEhC7lIIm uP106CNGmD+EBESbWH3okzZOpHVx7v5gmmSt/wARqfDYY/X/g7yhJUJEuzMBLpt5 tMYRmrImTvjwYR1+L6OT19AnLcReP/o= -----END CERTIFICATE-----Generated at Wed Aug 26 15:14:02 2026 by rpki-client