$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ed1a2cb7-674b-3f7d-b272-19b157b9b452.roa File: ed1a2cb7-674b-3f7d-b272-19b157b9b452.roa (raw, json) Hash identifier: bZG4XegaJewrdZMNqUCP0OO85cZpg25GUjIMSEtp/Qw= Subject key identifier: 02:38:A4:32:9F:24:0F:FA:C3:17:42:C5:8C:C1:A2:4D:45:64:AF:F0 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F9C447920B965EBEB6B37BE00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ed1a2cb7-674b-3f7d-b272-19b157b9b452.roa Signing time: Sat 24 Oct 2026 16:59:31 +0000 ROA not before: Sat 24 Oct 2026 16:59:31 +0000 ROA not after: Fri 22 Jan 2027 17:59:31 +0000 asID: 218911 IP address blocks: 65.86.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9c:44:79:20:b9:65:eb:eb:6b:37:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 24 16:59:31 2026 GMT Not After : Jan 22 17:59:31 2027 GMT Subject: CN=0f8aeac1-c242-45ce-addf-587155ef45ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:67:f7:6c:9d:f6:79:34:42:41:2f:65:c8:8d: 61:b2:10:0d:2c:ed:67:14:c6:d8:b9:9d:e5:91:43: 6f:6d:80:fc:02:86:69:e5:42:db:4f:a9:c3:90:66: 90:4b:8e:ea:a7:f6:f2:45:5f:fc:7d:83:5f:d4:79: 82:c5:77:5f:fd:23:b7:2e:d2:91:f6:f6:44:ab:05: 49:61:31:93:ad:3f:1f:23:75:a4:cb:6c:b7:51:df: f6:1b:62:86:ba:50:df:62:6a:be:ea:56:df:ce:fc: 6e:6e:22:a5:a3:bf:fb:8c:cf:6a:9d:a0:c1:fa:19: 40:0e:12:59:d1:1a:e1:8d:b6:64:c3:d6:73:4d:34: 63:09:af:f2:66:de:91:18:2f:79:a3:f8:6b:26:64: bd:87:48:c4:35:74:a0:02:17:13:d7:73:ca:ae:01: f5:95:88:78:bc:7c:4d:3a:81:b4:20:7e:de:ce:f6: 99:5c:1a:37:33:7f:6f:4d:8d:30:11:ea:07:b5:76: 1e:fa:5e:d8:4f:43:4a:59:fe:08:46:bc:06:9b:af: 0a:74:b2:59:4c:4e:6f:3c:07:23:47:35:ef:5b:16: e4:41:18:f4:94:a0:13:0e:66:8d:8e:7c:3e:a4:fc: 90:bf:1b:e9:f5:50:dd:db:da:99:1f:f7:d7:69:e9: 57:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:38:A4:32:9F:24:0F:FA:C3:17:42:C5:8C:C1:A2:4D:45:64:AF:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ed1a2cb7-674b-3f7d-b272-19b157b9b452.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:a8:d5:d0:5c:d4:d1:68:4a:cb:9a:5d:61:71:da:87:cb:fa: 1f:b7:26:86:0e:07:33:d8:bd:ce:9c:27:02:df:50:85:26:32: cf:02:af:2b:82:7c:47:35:00:7f:24:31:40:d0:f7:3f:21:22: f2:91:3e:4d:74:a5:5a:de:4b:d4:dd:0b:98:28:d8:a4:cf:8a: fd:a6:00:dc:21:e6:ae:66:10:04:b7:a8:40:05:3f:62:9e:a6: 90:a2:3a:ea:fc:76:65:32:57:2b:fc:53:eb:5a:d2:cf:fd:5d: 96:e9:6b:03:a7:18:5c:d2:4b:aa:ab:3b:98:7b:76:b6:21:3e: 1f:67:4e:1b:2f:b8:76:5c:de:10:cb:fb:0c:6f:61:98:29:1f: b0:0f:4e:31:21:15:3c:56:ba:13:4d:38:79:7c:94:e1:d6:4a: d3:f9:d6:4f:0e:c5:36:25:99:91:e8:ce:61:1b:53:19:fc:19: 92:65:fa:9d:a7:9d:32:4c:28:c6:cc:bb:60:30:b1:46:22:6b: 64:3c:20:18:a5:da:4e:13:62:f3:f8:0d:18:77:39:88:b7:1e: 18:aa:ff:09:5b:2b:54:6b:4f:7a:f1:9b:7c:23:8f:a4:8c:45: 4f:3c:b8:d4:02:56:ce:0a:05:e4:e7:36:a2:9c:d0:b8:03:65: c5:af:dd:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+cRHkguWXr62s3vgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAyNDE2NTkzMVoXDTI3MDEyMjE3NTkzMVowLzEtMCsGA1UEAxMk MGY4YWVhYzEtYzI0Mi00NWNlLWFkZGYtNTg3MTU1ZWY0NWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmf3bJ32eTRCQS9lyI1hshANLO1nFMbYuZ3l kUNvbYD8AoZp5ULbT6nDkGaQS47qp/byRV/8fYNf1HmCxXdf/SO3LtKR9vZEqwVJ YTGTrT8fI3Wky2y3Ud/2G2KGulDfYmq+6lbfzvxubiKlo7/7jM9qnaDB+hlADhJZ 0RrhjbZkw9ZzTTRjCa/yZt6RGC95o/hrJmS9h0jENXSgAhcT13PKrgH1lYh4vHxN OoG0IH7ezvaZXBo3M39vTY0wEeoHtXYe+l7YT0NKWf4IRrwGm68KdLJZTE5vPAcj RzXvWxbkQRj0lKATDmaNjnw+pPyQvxvp9VDd29qZH/fXaelXpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAI4pDKfJA/6wxdCxYzBok1FZK/wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZWQxYTJjYjctNjc0Yi0z ZjdkLWIyNzItMTliMTU3YjliNDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL2o1dBc1NFoSsuaXWFx2ofL+h+3JoYOBzPYvc6cJwLfUIUmMs8CryuC fEc1AH8kMUDQ9z8hIvKRPk10pVreS9TdC5go2KTPiv2mANwh5q5mEAS3qEAFP2Ke ppCiOur8dmUyVyv8U+ta0s/9XZbpawOnGFzSS6qrO5h7drYhPh9nThsvuHZc3hDL +wxvYZgpH7APTjEhFTxWuhNNOHl8lOHWStP51k8OxTYlmZHozmEbUxn8GZJl+p2n nTJMKMbMu2AwsUYia2Q8IBil2k4TYvP4DRh3OYi3Hhiq/wlbK1RrT3rxm3wjj6SM RU88uNQCVs4KBeTnNqKc0LgDZcWv3Wk= -----END CERTIFICATE-----Generated at Mon Oct 26 06:23:36 2026 by rpki-client