$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0aa6234c-9561-3df8-9691-8c720c3ccbf2.roa File: 0aa6234c-9561-3df8-9691-8c720c3ccbf2.roa (raw, json) Hash identifier: +5PuVOeR3MB7XICAMqiorZQ+IT8lSQUmPNzx2Jy+07E= Subject key identifier: 72:10:B5:19:6C:8F:C1:EB:88:4C:79:FD:98:E8:65:35:55:F8:66:65 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EFE1210721E36EF8FB9A95280 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0aa6234c-9561-3df8-9691-8c720c3ccbf2.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 64267 IP address blocks: 66.253.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:10:72:1e:36:ef:8f:b9:a9:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=f2dd00eb-4d12-4064-a1f7-e0a31181e79f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:04:ac:99:3a:85:66:fe:a4:40:e5:0a:28:a4: 62:cd:d5:1b:92:4b:85:b1:0c:9d:08:02:c4:6e:f9: a3:7f:12:15:5e:86:84:20:ed:cf:0d:07:dc:65:e7: 82:fe:cd:c2:f5:15:df:78:e8:9d:d4:39:9a:5f:75: 97:2a:6c:6b:39:fd:88:81:ff:82:15:d3:59:77:3b: 5f:df:3b:5a:5a:20:f1:b8:ba:8e:43:84:0a:ea:b0: 50:a2:5f:f5:40:2c:f1:68:8d:19:b3:3d:e4:f1:57: 5f:78:6a:7e:90:8d:cc:df:a1:de:94:8f:7f:8b:9d: fc:b0:95:50:7e:84:2c:ee:4b:8c:a3:26:66:09:b8: f7:3e:bc:9a:11:17:40:28:4e:30:c4:63:b6:b6:82: 71:76:be:52:39:07:dd:0e:7c:b8:b8:8e:82:c6:ab: 0f:b1:f2:e0:9a:87:90:94:30:47:3d:3a:79:0f:1f: 43:d8:20:7b:39:fb:f0:a9:d2:8f:dc:dc:13:a6:cb: 73:3b:0b:eb:27:f8:d4:01:25:f8:e6:f7:ff:e5:e3: e4:b6:bf:07:c4:4b:19:7a:0a:d3:63:5a:b4:40:3b: 65:c0:4a:9d:2c:f1:02:40:83:f0:b7:6a:3b:fe:30: 2b:06:21:1f:04:fb:71:a2:eb:f0:8e:08:9f:5d:2c: 72:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:10:B5:19:6C:8F:C1:EB:88:4C:79:FD:98:E8:65:35:55:F8:66:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0aa6234c-9561-3df8-9691-8c720c3ccbf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:d9:09:22:19:3e:e2:79:da:dc:ac:a1:10:de:cc:b2:b3:7e: f7:d0:14:04:c9:8b:dc:13:9e:06:79:7a:7d:87:c0:ce:71:6a: 73:15:1a:c9:a9:f9:e7:75:99:e3:7e:fe:ad:8e:6a:3f:2d:56: 75:81:45:a7:0f:83:bb:57:37:f5:6f:b8:39:c7:46:b2:a7:7d: 52:1e:cc:53:65:3b:5d:bd:07:c4:52:e1:5c:a5:5e:01:84:6a: cc:3c:a5:0e:b2:36:05:1c:58:44:fd:48:f9:69:4e:2b:f5:21: d2:2e:a8:d8:f4:8a:2b:0d:11:6e:b2:9d:e8:0b:3c:5e:3d:d1: 47:97:3d:1b:cd:98:78:99:d8:8c:e5:7d:d0:b6:61:e2:8e:3d: 92:c2:13:14:5f:05:bf:c5:76:b8:5f:54:74:75:d6:6f:e0:76: 40:af:f2:53:a1:16:7b:ed:c6:1b:4f:aa:ea:15:64:a0:83:78: 09:5d:9d:76:38:ba:1e:53:6e:3f:db:b1:e3:0c:e6:a4:f8:19: ac:01:f4:76:96:dc:59:bf:de:33:6f:8d:c4:a3:42:ad:d6:8e: 41:0c:46:98:87:c3:89:b6:30:52:6c:3b:00:91:0e:03:f2:65: d6:0b:9f:4d:2a:e1:71:8d:72:27:8c:04:1a:bc:d3:f5:b1:fe: 3a:40:3c:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+EhByHjbvj7mpUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk ZjJkZDAwZWItNGQxMi00MDY0LWExZjctZTBhMzExODFlNzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgSsmTqFZv6kQOUKKKRizdUbkkuFsQydCALE bvmjfxIVXoaEIO3PDQfcZeeC/s3C9RXfeOid1DmaX3WXKmxrOf2Igf+CFdNZdztf 3ztaWiDxuLqOQ4QK6rBQol/1QCzxaI0Zsz3k8VdfeGp+kI3M36HelI9/i538sJVQ foQs7kuMoyZmCbj3PryaERdAKE4wxGO2toJxdr5SOQfdDny4uI6CxqsPsfLgmoeQ lDBHPTp5Dx9D2CB7OfvwqdKP3NwTpstzOwvrJ/jUASX45vf/5ePktr8HxEsZegrT Y1q0QDtlwEqdLPECQIPwt2o7/jArBiEfBPtxouvwjgifXSxyowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIQtRlsj8HriEx5/ZjoZTVV+GZlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGFhNjIzNGMtOTU2MS0z ZGY4LTk2OTEtOGM3MjBjM2NjYmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv1iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLZCSIZPuJ52tysoRDezLKzfvfQFATJi9wTngZ5en2HwM5xanMVGsmp +ed1meN+/q2Oaj8tVnWBRacPg7tXN/VvuDnHRrKnfVIezFNlO129B8RS4VylXgGE asw8pQ6yNgUcWET9SPlpTiv1IdIuqNj0iisNEW6ynegLPF490UeXPRvNmHiZ2Izl fdC2YeKOPZLCExRfBb/FdrhfVHR11m/gdkCv8lOhFnvtxhtPquoVZKCDeAldnXY4 uh5Tbj/bseMM5qT4GawB9HaW3Fm/3jNvjcSjQq3WjkEMRpiHw4m2MFJsOwCRDgPy ZdYLn00q4XGNcieMBBq80/Wx/jpAPJ8= -----END CERTIFICATE-----Generated at Sat Oct 10 14:43:31 2026 by rpki-client