$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1be7f3e8-c09d-3492-bf0b-ae663bbcdaa8.roa File: 1be7f3e8-c09d-3492-bf0b-ae663bbcdaa8.roa (raw, json) Hash identifier: J0db2pYhIIi0GvRzKSHFvg3/JiAPODYMGZvMbmJ5dgc= Subject key identifier: D8:D3:08:98:C8:1E:49:82:C6:38:C7:A7:E7:A0:CB:15:6E:74:20:26 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F3B7D1B51BAC14B116CE96F80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1be7f3e8-c09d-3492-bf0b-ae663bbcdaa8.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 6079 IP address blocks: 64.204.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:1b:51:ba:c1:4b:11:6c:e9:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=8ac94b03-0e40-4ecf-b30c-aef16374af1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3e:f7:05:65:03:8e:18:bf:e6:dc:95:d0:98: cf:3f:16:18:c1:5e:5c:52:be:38:a1:b0:68:58:89: 7b:ca:2e:00:d7:69:cb:36:72:c4:f0:d0:bc:14:2e: 43:68:80:ac:91:0c:b3:bb:40:69:6d:79:2a:ab:6d: 5c:a1:0f:fe:8e:78:71:a8:39:43:1b:52:71:2b:3a: 6d:9b:0a:e4:df:85:85:cc:09:08:81:68:a2:d2:da: a2:4a:ff:c2:93:d2:85:37:1b:27:9f:5a:b9:c2:35: 7c:92:d0:fc:3d:61:f5:b1:33:8b:60:7b:70:10:cf: 4a:81:3a:21:93:69:44:61:ab:b9:4c:68:74:8c:7c: 0e:fe:92:a6:ac:cd:2a:d0:14:b0:2f:98:f6:ed:b3: 24:26:3d:22:80:52:b9:7b:22:aa:d9:92:b4:1b:74: 60:0e:e8:2d:4c:69:8d:a9:aa:54:ad:9e:1f:d2:87: 40:0d:70:6e:8d:2f:9c:6f:9a:06:22:5d:73:fd:3a: 5e:65:8e:d8:53:0c:00:e7:fb:dd:1f:06:ce:df:23: fc:6a:26:4b:3a:1f:ed:80:bb:54:bf:88:98:44:de: 87:50:b2:62:46:1e:bd:d7:c4:ff:34:2c:75:a8:fd: 36:34:a5:0d:d2:d9:07:3b:3f:0e:ed:52:b2:03:c3: 20:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D3:08:98:C8:1E:49:82:C6:38:C7:A7:E7:A0:CB:15:6E:74:20:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1be7f3e8-c09d-3492-bf0b-ae663bbcdaa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:d8:4f:97:5d:43:df:33:f9:f9:30:e3:c8:4b:e3:a1:f0:fa: 29:1f:6b:bb:d0:33:16:4e:8d:4a:e1:d0:37:f5:2c:7b:fd:6d: 08:8b:bb:91:28:9e:31:2e:79:70:7e:fb:26:b3:b6:00:77:2f: 5e:41:86:9f:41:2f:ee:cb:df:d0:eb:4a:db:88:32:fc:6b:51: ab:ff:48:9f:d9:c9:9c:b9:7b:07:3e:50:6a:72:64:59:05:ca: 41:53:1e:7b:f1:d8:5b:9d:c8:4a:d1:b8:b2:a2:2e:54:68:6e: 8a:60:ed:09:f3:c2:09:7e:91:f6:ca:50:f3:00:5f:47:4a:8a: ea:51:d1:d4:28:28:6a:4a:88:51:d2:62:dd:c4:17:2a:03:80: 4a:ef:07:69:90:19:3a:e2:5a:0e:22:d3:ca:fd:42:43:75:2e: 65:78:89:fa:ac:cf:18:0d:f4:11:2b:f9:06:34:a1:c0:96:4d: 05:3b:0d:b2:30:10:0d:d5:c7:a7:ea:1f:d8:f4:37:f3:61:d7: 4e:5f:a2:6d:ad:1e:29:69:bc:5f:36:17:c7:6f:c4:b0:73:da: f4:14:f7:17:ad:91:4d:af:dd:70:a8:88:75:97:81:77:d3:01: e6:3b:a2:28:67:cb:8f:e7:60:f1:ca:7c:ec:78:54:c0:ba:20: 48:71:f9:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fRtRusFLEWzpb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk OGFjOTRiMDMtMGU0MC00ZWNmLWIzMGMtYWVmMTYzNzRhZjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz73BWUDjhi/5tyV0JjPPxYYwV5cUr44obBo WIl7yi4A12nLNnLE8NC8FC5DaICskQyzu0BpbXkqq21coQ/+jnhxqDlDG1JxKzpt mwrk34WFzAkIgWii0tqiSv/Ck9KFNxsnn1q5wjV8ktD8PWH1sTOLYHtwEM9KgToh k2lEYau5TGh0jHwO/pKmrM0q0BSwL5j27bMkJj0igFK5eyKq2ZK0G3RgDugtTGmN qapUrZ4f0odADXBujS+cb5oGIl1z/TpeZY7YUwwA5/vdHwbO3yP8aiZLOh/tgLtU v4iYRN6HULJiRh6918T/NCx1qP02NKUN0tkHOz8O7VKyA8MgwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjTCJjIHkmCxjjHp+egyxVudCAmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMWJlN2YzZTgtYzA5ZC0z NDkyLWJmMGItYWU2NjNiYmNkYWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMx8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPYT5ddQ98z+fkw48hL46Hw+ikfa7vQMxZOjUrh0Df1LHv9bQiLu5Eo njEueXB++yaztgB3L15Bhp9BL+7L39DrStuIMvxrUav/SJ/ZyZy5ewc+UGpyZFkF ykFTHnvx2FudyErRuLKiLlRobopg7Qnzwgl+kfbKUPMAX0dKiupR0dQoKGpKiFHS Yt3EFyoDgErvB2mQGTriWg4i08r9QkN1LmV4ifqszxgN9BEr+QY0ocCWTQU7DbIw EA3Vx6fqH9j0N/Nh105fom2tHilpvF82F8dvxLBz2vQU9xetkU2v3XCoiHWXgXfT AeY7oihny4/nYPHKfOx4VMC6IEhx+cc= -----END CERTIFICATE-----Generated at Sun Sep 20 17:46:16 2026 by rpki-client