$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0e80816a-0042-3c9c-87e8-bcbac7a77775.roa File: 0e80816a-0042-3c9c-87e8-bcbac7a77775.roa (raw, json) Hash identifier: 3y1xMUbyaQvjAdmEfwoE7X0XltFBBbMmlBDD5XkBYbY= Subject key identifier: 73:67:0F:4C:68:A3:D8:BB:83:5F:2A:F5:E9:F9:5C:FF:DD:5F:1D:40 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F1021B75EA8A68B0CF675C500 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0e80816a-0042-3c9c-87e8-bcbac7a77775.roa Signing time: Fri 04 Sep 2026 12:16:19 +0000 ROA not before: Fri 04 Sep 2026 12:16:19 +0000 ROA not after: Thu 03 Dec 2026 13:16:19 +0000 asID: 402265 IP address blocks: 68.166.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:21:b7:5e:a8:a6:8b:0c:f6:75:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 4 12:16:19 2026 GMT Not After : Dec 3 13:16:19 2026 GMT Subject: CN=573669b2-752b-4742-93f9-20199b782d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a0:d6:e8:f6:21:71:c6:9c:2b:97:25:b7:0d: 11:28:9c:20:53:84:fa:92:78:3c:88:cf:c3:00:a3: c5:28:eb:44:7f:14:aa:60:c2:91:7c:06:6b:01:c1: 2b:59:69:5f:91:51:55:e2:16:6c:9f:38:3d:92:d9: 97:97:32:6e:33:ec:cc:9a:11:37:18:21:f7:f2:93: c0:61:bf:6d:3d:69:f5:6b:c8:e9:27:1b:81:4f:d2: 4f:5b:5f:36:2a:ee:ed:89:26:5f:f9:9b:fd:cd:31: b3:95:59:f6:1a:bb:69:7f:9c:2f:62:3e:3f:a5:a4: 31:62:67:2e:d0:b2:72:a1:a7:9a:3b:a2:ff:8d:45: c5:ea:1a:56:bd:15:c3:7b:cc:d6:47:d2:b7:ee:b8: e0:8d:a5:b0:07:92:36:97:5d:c5:fc:ec:f0:d9:4d: 0b:86:90:9f:cb:07:19:6e:54:ba:0c:40:a2:2d:3c: 04:f2:63:3f:2a:da:e4:07:73:ee:b1:85:d0:f5:14: bc:49:00:6e:d0:40:61:96:c1:95:c4:3b:20:d1:3a: 83:4c:fc:51:4f:74:f7:5b:c3:66:9a:09:73:ac:7e: 9a:c0:8c:73:73:7c:fa:cf:99:05:d2:e9:fc:6a:db: c4:76:e4:9c:28:69:4c:71:81:44:2d:50:b8:66:22: 7e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:67:0F:4C:68:A3:D8:BB:83:5F:2A:F5:E9:F9:5C:FF:DD:5F:1D:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0e80816a-0042-3c9c-87e8-bcbac7a77775.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.166.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:18:49:54:9e:2c:2e:2e:1e:55:a5:e0:5d:8b:6e:d2:b9:53: 6c:c3:01:df:c4:89:6d:3c:ee:78:47:92:6d:5b:6a:1b:62:11: e0:60:06:76:2d:d2:7d:17:ad:b7:d0:22:20:fd:3d:cd:bd:e6: 64:e8:1a:10:75:fd:e4:1e:3e:59:e6:76:58:49:4b:c3:8c:ce: a5:f1:93:8e:83:d8:70:f8:cc:22:91:02:3d:5d:d8:4a:b3:a1: 14:6b:18:35:fd:8d:49:b0:77:88:c9:a6:b8:3b:60:75:01:8a: 85:32:27:b2:d8:52:09:ec:4e:9d:0c:e5:4a:1e:89:99:88:95: 26:5d:09:b6:ec:9f:37:a2:be:68:24:a1:0e:6a:c3:5f:03:53: bf:5a:75:4f:07:e7:65:41:41:b4:4e:0f:93:3f:be:b0:0d:f1: b8:45:d9:5d:b7:b6:92:12:d7:ea:be:bd:53:3a:ce:d9:06:8b: d5:68:da:ac:0f:d9:cd:b6:ae:c5:58:a5:06:ab:75:d0:9f:b0: 4f:66:d1:2b:8d:f1:eb:9c:ed:c6:eb:6c:fc:68:ad:e3:97:0b: ba:4f:42:e6:ab:fb:5f:cb:cd:e9:45:e5:a9:37:a3:5e:9d:97: 0f:2d:4a:60:96:58:db:68:4f:86:04:13:37:2d:c5:19:e7:6a: 67:8d:0f:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QIbdeqKaLDPZ1xQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwNDEyMTYxOVoXDTI2MTIwMzEzMTYxOVowLzEtMCsGA1UEAxMk NTczNjY5YjItNzUyYi00NzQyLTkzZjktMjAxOTliNzgyZDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6DW6PYhccacK5cltw0RKJwgU4T6kng8iM/D AKPFKOtEfxSqYMKRfAZrAcErWWlfkVFV4hZsnzg9ktmXlzJuM+zMmhE3GCH38pPA Yb9tPWn1a8jpJxuBT9JPW182Ku7tiSZf+Zv9zTGzlVn2Grtpf5wvYj4/paQxYmcu 0LJyoaeaO6L/jUXF6hpWvRXDe8zWR9K37rjgjaWwB5I2l13F/Ozw2U0LhpCfywcZ blS6DECiLTwE8mM/KtrkB3PusYXQ9RS8SQBu0EBhlsGVxDsg0TqDTPxRT3T3W8Nm mglzrH6awIxzc3z6z5kF0un8atvEduScKGlMcYFELVC4ZiJ+kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNnD0xoo9i7g18q9en5XP/dXx1AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGU4MDgxNmEtMDA0Mi0z YzljLTg3ZTgtYmNiYWM3YTc3Nzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKbPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUYSVSeLC4uHlWl4F2LbtK5U2zDAd/EiW087nhHkm1bahtiEeBgBnYt 0n0XrbfQIiD9Pc295mToGhB1/eQePlnmdlhJS8OMzqXxk46D2HD4zCKRAj1d2Eqz oRRrGDX9jUmwd4jJprg7YHUBioUyJ7LYUgnsTp0M5UoeiZmIlSZdCbbsnzeivmgk oQ5qw18DU79adU8H52VBQbROD5M/vrAN8bhF2V23tpIS1+q+vVM6ztkGi9Vo2qwP 2c22rsVYpQarddCfsE9m0SuN8euc7cbrbPxoreOXC7pPQuar+1/LzelF5ak3o16d lw8tSmCWWNtoT4YEEzctxRnnameND/I= -----END CERTIFICATE-----Generated at Mon Sep 28 06:20:27 2026 by rpki-client