$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0967a404-535b-33a2-ac3d-d69269633dc4.roa File: 0967a404-535b-33a2-ac3d-d69269633dc4.roa (raw, json) Hash identifier: La75aX4Ma3Bz0p1rIufZbPv/FnL8/HPjjNpatXtfJ8I= Subject key identifier: 86:F0:E2:EF:51:D3:C2:17:1B:48:13:B5:58:FF:3D:39:17:2F:FF:51 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F56612101A8BC1D04610F58D0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0967a404-535b-33a2-ac3d-d69269633dc4.roa Signing time: Tue 29 Sep 2026 16:10:40 +0000 ROA not before: Tue 29 Sep 2026 16:10:40 +0000 ROA not after: Mon 28 Dec 2026 17:10:40 +0000 asID: 218797 IP address blocks: 68.164.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:56:61:21:01:a8:bc:1d:04:61:0f:58:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 29 16:10:40 2026 GMT Not After : Dec 28 17:10:40 2026 GMT Subject: CN=86630da3-1b54-48e4-8ce5-611b26b903e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:02:76:07:ab:3c:8b:5c:ee:2e:2a:fd:60:29: 0e:98:dc:41:0b:18:5c:9d:d3:b1:b9:b1:6a:a5:45: 2c:9d:36:3a:ef:f8:9a:30:53:ee:48:1b:9a:cf:1e: ba:29:4e:03:69:e3:b4:42:45:6d:53:58:d5:fa:55: 7b:4d:d1:0b:5c:33:fa:1f:fc:a9:a9:3f:7a:fb:1c: ee:8a:13:52:3d:f0:e9:81:45:57:b2:44:22:5c:3d: 15:f4:32:a2:d5:19:5b:fe:90:ec:11:de:3c:49:c6: 21:87:71:9c:6d:d7:a4:81:c9:eb:43:da:b9:ec:7a: 45:22:79:d4:c2:7f:0b:49:d9:d2:98:3a:b4:cb:a1: cc:48:56:29:12:a3:c4:01:c0:65:c4:d0:17:28:e3: 20:62:fc:06:d7:4c:1a:64:2b:63:38:35:bb:51:23: d6:a7:10:3a:7e:91:08:7a:66:23:69:ae:cf:31:0e: 44:d3:cb:c8:d4:67:ac:69:78:aa:56:27:57:7c:7f: 81:fa:16:fe:3e:b3:a4:53:27:23:96:52:22:c1:7e: 72:a9:fa:98:86:0c:07:81:62:76:3f:c9:7b:97:f4: 0c:0f:fb:58:08:62:7b:50:37:9c:bb:47:92:56:29: e6:b4:00:3b:90:45:cb:ab:21:95:ea:bc:a7:27:0a: e8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F0:E2:EF:51:D3:C2:17:1B:48:13:B5:58:FF:3D:39:17:2F:FF:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0967a404-535b-33a2-ac3d-d69269633dc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:53:fa:19:f7:30:87:e0:77:06:c8:c4:e6:64:51:12:8e:9e: a5:88:9a:d1:27:de:15:b5:0c:0e:49:f4:f2:dc:29:17:26:ac: 7e:3b:ee:9a:9f:35:eb:c1:e6:50:f3:39:14:eb:15:73:1c:11: 17:cc:a1:fb:cd:dd:80:1d:cb:fd:4a:4b:8c:70:cf:d3:b6:d6: f9:32:64:87:98:63:c8:b8:5b:8d:04:12:4b:5d:ab:86:ae:ec: e2:58:01:7a:56:ba:9e:b0:7a:6e:04:84:1c:df:28:0f:bf:ab: 3a:e6:a2:32:5e:86:ce:23:bd:41:85:d0:36:5f:43:fd:08:36: a7:10:97:99:14:8c:ff:cd:94:a4:97:1c:0a:3b:18:1b:dc:6b: cb:04:c8:e2:00:5e:37:41:2b:c4:e8:3c:62:74:3e:55:7a:26: af:a0:c1:2f:41:ab:d4:a2:27:ab:0f:d5:56:ab:5a:8d:31:34: 98:8a:2b:ed:a1:b3:7d:d4:c8:9c:74:6e:75:3e:ad:c7:46:8b: 1f:12:d0:6a:f2:d5:07:a1:18:d2:9d:25:e2:4e:16:00:38:a4: 12:52:06:9f:53:44:79:58:8c:9f:9b:bf:1b:57:33:76:a4:dc: db:60:a7:f0:f0:b1:08:1d:81:d4:35:cf:c6:e1:61:e1:6e:33: ae:5f:09:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9WYSEBqLwdBGEPWNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyOTE2MTA0MFoXDTI2MTIyODE3MTA0MFowLzEtMCsGA1UEAxMk ODY2MzBkYTMtMWI1NC00OGU0LThjZTUtNjExYjI2YjkwM2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQJ2B6s8i1zuLir9YCkOmNxBCxhcndOxubFq pUUsnTY67/iaMFPuSBuazx66KU4DaeO0QkVtU1jV+lV7TdELXDP6H/ypqT96+xzu ihNSPfDpgUVXskQiXD0V9DKi1Rlb/pDsEd48ScYhh3GcbdekgcnrQ9q57HpFInnU wn8LSdnSmDq0y6HMSFYpEqPEAcBlxNAXKOMgYvwG10waZCtjODW7USPWpxA6fpEI emYjaa7PMQ5E08vI1GesaXiqVidXfH+B+hb+PrOkUycjllIiwX5yqfqYhgwHgWJ2 P8l7l/QMD/tYCGJ7UDecu0eSVinmtAA7kEXLqyGV6rynJwrofwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbw4u9R08IXG0gTtVj/PTkXL/9RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDk2N2E0MDQtNTM1Yi0z M2EyLWFjM2QtZDY5MjY5NjMzZGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKSMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdT+hn3MIfgdwbIxOZkURKOnqWImtEn3hW1DA5J9PLcKRcmrH477pqf NevB5lDzORTrFXMcERfMofvN3YAdy/1KS4xwz9O21vkyZIeYY8i4W40EEktdq4au 7OJYAXpWup6wem4EhBzfKA+/qzrmojJehs4jvUGF0DZfQ/0INqcQl5kUjP/NlKSX HAo7GBvca8sEyOIAXjdBK8ToPGJ0PlV6Jq+gwS9Bq9SiJ6sP1VarWo0xNJiKK+2h s33UyJx0bnU+rcdGix8S0Gry1QehGNKdJeJOFgA4pBJSBp9TRHlYjJ+bvxtXM3ak 3Ntgp/DwsQgdgdQ1z8bhYeFuM65fCd4= -----END CERTIFICATE-----Generated at Sun Oct 11 09:22:00 2026 by rpki-client