$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/115a7e1b-a257-37f5-90ca-8eb7a7e49072.roa File: 115a7e1b-a257-37f5-90ca-8eb7a7e49072.roa (raw, json) Hash identifier: wbLSuqAamhDs9pcBzRIJ6MewyY5wSPjHSfJp41xq/EU= Subject key identifier: A1:90:48:5A:9D:CF:13:CA:BA:AF:0C:A1:E7:66:93:F3:54:D1:2F:71 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F5BBB380B98AD0200A9209B00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/115a7e1b-a257-37f5-90ca-8eb7a7e49072.roa Signing time: Thu 01 Oct 2026 14:11:14 +0000 ROA not before: Thu 01 Oct 2026 14:11:14 +0000 ROA not after: Wed 30 Dec 2026 15:11:14 +0000 asID: 6079 IP address blocks: 68.166.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:bb:38:0b:98:ad:02:00:a9:20:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 1 14:11:14 2026 GMT Not After : Dec 30 15:11:14 2026 GMT Subject: CN=a8135d98-dea4-46d8-bc66-2ff8b4ea602f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b7:5c:0c:a0:93:8e:e8:57:94:81:ad:2c:06: 4c:4f:ea:45:4a:3f:23:7c:c7:20:4a:4d:9a:70:6e: eb:40:05:4c:f2:90:b9:06:93:54:59:d7:0a:b8:d6: 12:2f:77:27:b6:87:1f:d8:05:69:56:df:0e:06:61: 92:21:22:68:fa:28:be:13:a7:bf:50:15:8b:f3:d8: 37:8d:df:6b:08:3f:1b:c4:54:f5:bf:8f:67:da:33: 84:3c:0a:bc:84:79:c9:82:42:b3:8f:9c:af:74:49: ab:cd:74:83:7c:33:72:21:21:0b:06:10:06:3b:18: 01:e1:6f:a9:ec:bf:e6:1f:78:8f:bd:95:d7:84:b7: 9a:a4:8e:27:99:3a:2b:6f:83:12:3e:20:01:e0:46: f5:3f:1d:57:1e:46:3f:a4:e2:84:3b:f5:63:a5:18: 08:26:3f:2a:33:ff:61:ae:88:fd:31:36:98:a7:ce: b6:af:cd:9d:cc:de:86:14:a2:fc:a2:4f:95:e6:e1: 76:66:00:d0:f1:be:ad:19:5a:dd:69:92:dd:ce:eb: 6e:1c:04:a4:46:66:6c:d0:79:19:a8:5a:5c:1c:9f: d4:33:ee:83:9d:ed:72:4b:26:be:0e:21:b9:ac:0b: 12:74:43:30:31:8f:06:73:a2:93:6d:9f:3e:a1:f5: c8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:90:48:5A:9D:CF:13:CA:BA:AF:0C:A1:E7:66:93:F3:54:D1:2F:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/115a7e1b-a257-37f5-90ca-8eb7a7e49072.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.166.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:c0:23:cc:c2:31:ac:b5:aa:80:dc:41:76:74:a3:e9:a8:48: 56:03:46:43:81:41:91:30:5f:5b:ca:0a:67:48:39:3f:90:70: 47:fd:55:26:4c:35:d0:21:cd:a1:fc:55:21:6d:6c:b6:dd:ed: 10:15:71:f6:45:92:59:fe:e5:21:b0:36:f2:15:a9:65:fa:d3: 78:ca:d3:53:2a:1a:4a:7b:94:f6:de:9a:96:06:91:53:1e:12: c6:ba:63:33:0f:76:2f:bb:0e:bc:01:07:a6:1c:8d:6c:2a:31: df:c2:73:86:b9:13:8d:34:80:39:34:3f:e6:b8:a9:72:4f:c7: 09:9c:5a:89:45:3d:af:79:b4:37:37:d1:37:c5:18:da:87:56: 85:40:9f:b5:59:cc:6a:5c:d6:c0:27:c9:b2:23:19:0a:6e:31: 0f:6f:e5:c6:23:4e:8c:e1:8a:09:5f:93:6d:ca:69:c4:bc:57: a4:1c:32:7c:4e:95:c5:75:1f:c0:8d:39:95:13:37:49:14:3b: 4a:0c:38:36:43:04:70:e5:a7:88:3c:3d:20:e8:1c:12:2f:04: c8:a3:86:ff:97:4f:2c:89:7c:4e:ff:a2:d6:d1:b4:21:42:c0: 65:a9:b6:54:71:f2:4d:0e:de:c2:f2:1a:88:d0:e2:01:04:8e: 45:d3:46:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9buzgLmK0CAKkgmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwMTE0MTExNFoXDTI2MTIzMDE1MTExNFowLzEtMCsGA1UEAxMk YTgxMzVkOTgtZGVhNC00NmQ4LWJjNjYtMmZmOGI0ZWE2MDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrdcDKCTjuhXlIGtLAZMT+pFSj8jfMcgSk2a cG7rQAVM8pC5BpNUWdcKuNYSL3cntocf2AVpVt8OBmGSISJo+ii+E6e/UBWL89g3 jd9rCD8bxFT1v49n2jOEPAq8hHnJgkKzj5yvdEmrzXSDfDNyISELBhAGOxgB4W+p 7L/mH3iPvZXXhLeapI4nmTorb4MSPiAB4Eb1Px1XHkY/pOKEO/VjpRgIJj8qM/9h roj9MTaYp862r82dzN6GFKL8ok+V5uF2ZgDQ8b6tGVrdaZLdzutuHASkRmZs0HkZ qFpcHJ/UM+6Dne1ySya+DiG5rAsSdEMwMY8Gc6KTbZ8+ofXIdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGQSFqdzxPKuq8Moedmk/NU0S9xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMTE1YTdlMWItYTI1Ny0z N2Y1LTkwY2EtOGViN2E3ZTQ5MDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKblMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDAI8zCMay1qoDcQXZ0o+moSFYDRkOBQZEwX1vKCmdIOT+QcEf9VSZM NdAhzaH8VSFtbLbd7RAVcfZFkln+5SGwNvIVqWX603jK01MqGkp7lPbempYGkVMe Esa6YzMPdi+7DrwBB6YcjWwqMd/Cc4a5E400gDk0P+a4qXJPxwmcWolFPa95tDc3 0TfFGNqHVoVAn7VZzGpc1sAnybIjGQpuMQ9v5cYjTozhiglfk23KacS8V6QcMnxO lcV1H8CNOZUTN0kUO0oMODZDBHDlp4g8PSDoHBIvBMijhv+XTyyJfE7/otbRtCFC wGWptlRx8k0O3sLyGojQ4gEEjkXTRsA= -----END CERTIFICATE-----Generated at Sat Oct 10 10:42:55 2026 by rpki-client