$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ef4e877c-b377-3f54-a267-e8dcb7fa50b2.roa File: ef4e877c-b377-3f54-a267-e8dcb7fa50b2.roa (raw, json) Hash identifier: MYW9HWEvCRWLu6/zrlAJuR9qnOjfAa7rbyIzKx8FEMg= Subject key identifier: CD:90:FB:78:7D:2F:34:CD:D4:01:88:B8:6E:77:5A:A6:26:D6:17:51 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F49873863EA05B436B4B01780 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ef4e877c-b377-3f54-a267-e8dcb7fa50b2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 211415 IP address blocks: 64.204.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:38:63:ea:05:b4:36:b4:b0:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=596054e6-6392-4ee3-be72-8b6fece95fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:92:6c:0a:67:32:cb:8d:ab:3d:9e:48:b7:f4: b3:e8:e1:c6:68:4d:f1:13:1c:9f:eb:cd:48:d0:cf: 20:94:65:5d:27:fe:1e:45:f0:3f:c0:66:2e:12:18: b6:e1:79:60:e0:5d:7b:81:7f:12:ed:88:37:a0:c4: 7e:cd:f2:04:03:6a:28:5a:68:a8:91:a3:fb:b1:7a: f1:8b:75:e6:ba:82:ba:87:7d:16:ee:d8:52:b6:ac: 1e:fa:79:72:e6:77:d5:4b:6a:62:af:99:49:68:e4: 86:7b:b9:22:e7:59:4e:13:2e:ad:d5:fb:6f:0e:54: bc:d1:27:91:11:38:76:de:0d:53:b4:fe:08:b0:01: fe:85:cb:a7:c4:3a:9e:85:1b:9a:e5:91:b3:17:08: 38:a3:31:1d:65:c3:d2:a0:77:88:82:cf:81:86:1b: 08:e0:18:86:62:74:fa:99:7f:ee:38:73:f6:cf:61: 3e:af:9d:24:d1:77:13:27:c2:2f:6c:63:d2:ce:62: 7d:05:ac:e8:08:12:48:2b:d9:ac:f6:1f:f8:2d:e0: 2e:c7:38:3a:8d:b3:d6:bd:71:16:bb:0f:bd:8b:2b: b4:f1:71:19:2d:54:e1:0f:9e:e0:0e:20:c0:39:64: 34:7a:1e:d9:81:0e:3b:fe:0e:8f:55:a1:df:24:34: 2c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:90:FB:78:7D:2F:34:CD:D4:01:88:B8:6E:77:5A:A6:26:D6:17:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ef4e877c-b377-3f54-a267-e8dcb7fa50b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:b8:9e:d1:fd:3e:e2:50:08:6a:4e:de:49:1a:04:c3:33:85: c8:b9:80:75:04:85:61:e5:2f:83:66:c5:0c:3b:e9:34:21:ff: 07:3d:94:7e:0f:a6:2c:04:1b:c1:8c:d1:6a:6f:1a:fa:e0:67: 8e:75:3e:c5:05:25:19:1a:1c:0f:99:9f:3b:14:dd:6b:e3:8b: 6a:b8:21:35:d8:90:5d:bd:00:dd:cc:1b:e6:b6:75:d8:b8:20: c3:bc:71:bd:81:b5:c1:75:f7:55:e6:e7:9b:b5:a3:1f:b2:9a: d1:da:b7:07:72:62:92:ac:1f:84:95:4b:48:62:a8:a1:eb:1b: 08:f5:5d:09:ce:a0:4a:c8:4b:a8:12:52:bd:bc:95:4f:5c:2e: 7b:b6:d6:3e:0b:21:8d:b8:ab:ff:16:18:38:a1:ee:2c:b7:2e: d7:c2:c2:65:bf:d5:37:92:89:06:85:33:a4:83:5a:cb:44:90: 42:b8:4f:5e:db:53:3d:8b:49:f2:b4:aa:23:c1:90:47:1b:9c: 55:21:6d:28:57:24:e7:93:e8:a8:cb:8a:1a:41:a7:1a:1f:25: c3:03:8d:3f:a7:08:d1:dd:cd:cd:ff:d4:cf:02:8c:2c:9b:20: bd:38:45:06:4b:7a:af:a3:77:4a:2b:91:99:31:d9:06:b9:5a: 53:84:30:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhzhj6gW0NrSwF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTk2MDU0ZTYtNjM5Mi00ZWUzLWJlNzItOGI2ZmVjZTk1ZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpJsCmcyy42rPZ5It/Sz6OHGaE3xExyf681I 0M8glGVdJ/4eRfA/wGYuEhi24Xlg4F17gX8S7Yg3oMR+zfIEA2ooWmiokaP7sXrx i3XmuoK6h30W7thStqwe+nly5nfVS2pir5lJaOSGe7ki51lOEy6t1ftvDlS80SeR ETh23g1TtP4IsAH+hcunxDqehRua5ZGzFwg4ozEdZcPSoHeIgs+BhhsI4BiGYnT6 mX/uOHP2z2E+r50k0XcTJ8IvbGPSzmJ9BazoCBJIK9ms9h/4LeAuxzg6jbPWvXEW uw+9iyu08XEZLVThD57gDiDAOWQ0eh7ZgQ47/g6PVaHfJDQsyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2Q+3h9LzTN1AGIuG53WqYm1hdRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZWY0ZTg3N2MtYjM3Ny0z ZjU0LWEyNjctZThkY2I3ZmE1MGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMwTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ24ntH9PuJQCGpO3kkaBMMzhci5gHUEhWHlL4NmxQw76TQh/wc9lH4P piwEG8GM0WpvGvrgZ451PsUFJRkaHA+ZnzsU3Wvji2q4ITXYkF29AN3MG+a2ddi4 IMO8cb2BtcF191Xm55u1ox+ymtHatwdyYpKsH4SVS0hiqKHrGwj1XQnOoErIS6gS Ur28lU9cLnu21j4LIY24q/8WGDih7iy3LtfCwmW/1TeSiQaFM6SDWstEkEK4T17b Uz2LSfK0qiPBkEcbnFUhbShXJOeT6KjLihpBpxofJcMDjT+nCNHdzc3/1M8CjCyb IL04RQZLeq+jd0orkZkx2Qa5WlOEMKA= -----END CERTIFICATE-----Generated at Sun Oct 11 01:04:40 2026 by rpki-client