$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8374a9c0-eefd-3666-b19d-22da9b24a7c3.roa File: 8374a9c0-eefd-3666-b19d-22da9b24a7c3.roa (raw, json) Hash identifier: 0IburHukvrk8S7FThpRh2nhFRnFE8z9UBLuCTipab3Q= Subject key identifier: 17:5D:E2:37:08:0B:CF:6D:78:67:FE:8F:89:3E:C7:9B:7C:B7:EA:1D Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584F30525F55E65C16A3596A0B80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8374a9c0-eefd-3666-b19d-22da9b24a7c3.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 11404 IP address blocks: 64.85.224.0/19 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:5f:55:e6:5c:16:a3:59:6a:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=1761f4b1-7044-465b-8173-4a87730a1d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d4:81:93:30:17:e5:1b:ee:9a:84:24:0d:d0: 96:fa:2a:64:9c:af:b8:46:86:cd:bc:3c:8f:7c:3d: f7:fa:43:b7:e8:b4:46:a8:bc:9c:09:80:01:12:ec: 37:d8:3a:c1:9e:cf:03:60:95:37:21:f5:5f:5f:c2: 2b:f1:07:4b:d7:a0:c0:56:00:82:96:83:a7:cc:a4: b7:29:91:3c:4a:74:b1:a3:89:92:b0:c5:eb:09:24: fc:6e:62:5b:bd:59:3d:37:71:54:fb:cf:48:af:6f: f6:84:d2:de:9d:b6:85:54:21:a4:29:d1:fa:52:1f: 51:92:a3:e8:39:ef:83:57:11:e9:b4:72:b6:14:91: 8f:93:13:e3:4a:39:a1:3c:d2:fc:57:33:93:0a:90: 73:bf:61:a4:1b:bf:da:89:0d:f4:d6:09:c6:30:69: 88:88:92:f1:44:91:15:99:ed:e0:b4:29:2f:35:fc: 8f:50:94:89:a1:d9:d0:8d:34:b9:41:3d:dc:38:6e: 79:6d:8c:a5:75:15:b9:41:ca:5d:5d:92:5c:a7:a2: 93:cb:5b:7e:be:04:f9:21:64:da:72:7e:a6:5c:d1: 14:e4:ae:d7:e9:44:44:fb:e9:ae:69:ca:c5:14:31: df:87:b0:ed:e6:ef:04:55:db:34:d3:30:6e:ed:bb: ee:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5D:E2:37:08:0B:CF:6D:78:67:FE:8F:89:3E:C7:9B:7C:B7:EA:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8374a9c0-eefd-3666-b19d-22da9b24a7c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 64.85.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:cf:55:d6:ff:41:81:21:5f:d2:cf:1c:99:d2:5d:da:8b:d8: 6b:ff:8b:58:64:bd:94:7d:9b:7d:ed:8d:1f:eb:07:d8:f7:4d: 8e:28:1a:77:5e:b2:d9:66:08:58:9b:07:3b:f2:3c:ef:f8:a7: b6:12:51:ee:45:f2:2f:64:50:b3:67:30:77:94:3d:7b:48:88: e2:89:4d:30:7e:e0:93:2b:29:36:56:2e:bc:7d:59:3c:77:56: 32:d5:2b:37:cc:88:2a:59:4e:ae:0c:d4:bb:cf:1d:ef:7c:68: 78:00:ce:0b:84:56:5e:0f:d2:da:fa:1e:fb:3c:93:b4:54:e1: c9:02:f8:34:0d:02:a0:8f:06:6d:32:07:7a:db:d9:ea:f1:b4: 53:15:f9:c7:b9:84:9f:df:c3:36:70:0b:af:cf:6c:0b:38:4a: cc:46:3e:64:21:03:b6:ae:88:c4:1a:4a:44:21:23:02:9e:d1: ba:41:c7:b8:37:6b:c1:01:b5:58:57:af:00:73:3b:fd:b5:aa: 7a:83:b8:b3:46:f0:c5:b6:a4:52:78:6c:03:7c:dd:73:56:ca: c3:a0:64:7f:dd:65:a4:b6:9d:ff:c4:db:0e:aa:30:55:53:b4: 1f:a9:14:20:00:d3:d7:b8:62:51:26:21:d8:0d:5a:aa:c9:a2: 14:4d:4f:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUl9V5lwWo1lqC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk MTc2MWY0YjEtNzA0NC00NjViLTgxNzMtNGE4NzczMGExZDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdSBkzAX5RvumoQkDdCW+ipknK+4RobNvDyP fD33+kO36LRGqLycCYABEuw32DrBns8DYJU3IfVfX8Ir8QdL16DAVgCCloOnzKS3 KZE8SnSxo4mSsMXrCST8bmJbvVk9N3FU+89Ir2/2hNLenbaFVCGkKdH6Uh9RkqPo Oe+DVxHptHK2FJGPkxPjSjmhPNL8VzOTCpBzv2GkG7/aiQ301gnGMGmIiJLxRJEV me3gtCkvNfyPUJSJodnQjTS5QT3cOG55bYyldRW5QcpdXZJcp6KTy1t+vgT5IWTa cn6mXNEU5K7X6URE++muacrFFDHfh7Dt5u8EVds00zBu7bvuMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdd4jcIC89teGf+j4k+x5t8t+odMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvODM3NGE5YzAtZWVmZC0z NjY2LWIxOWQtMjJkYTliMjRhN2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQFXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbPVdb/QYEhX9LPHJnSXdqL2Gv/i1hkvZR9m33tjR/rB9j3TY4oGnde stlmCFibBzvyPO/4p7YSUe5F8i9kULNnMHeUPXtIiOKJTTB+4JMrKTZWLrx9WTx3 VjLVKzfMiCpZTq4M1LvPHe98aHgAzguEVl4P0tr6Hvs8k7RU4ckC+DQNAqCPBm0y B3rb2erxtFMV+ce5hJ/fwzZwC6/PbAs4SsxGPmQhA7auiMQaSkQhIwKe0bpBx7g3 a8EBtVhXrwBzO/21qnqDuLNG8MW2pFJ4bAN83XNWysOgZH/dZaS2nf/E2w6qMFVT tB+pFCAA09e4YlEmIdgNWqrJohRNT38= -----END CERTIFICATE-----Generated at Mon Sep 21 09:13:15 2026 by rpki-client