$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1e8a6fde-56ce-31a9-bc2d-3e7e70a58678.roa File: 1e8a6fde-56ce-31a9-bc2d-3e7e70a58678.roa (raw, json) Hash identifier: QfpZwMTXrulIESJlmxArf0EB3Okoiz1mQbi+gioBcak= Subject key identifier: A1:8E:C9:2E:56:9D:CE:92:50:30:52:8A:50:67:BA:CD:E6:BF:65:8B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F668317C9A651C6D8410AFB00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1e8a6fde-56ce-31a9-bc2d-3e7e70a58678.roa Signing time: Mon 05 Oct 2026 10:52:02 +0000 ROA not before: Mon 05 Oct 2026 10:52:02 +0000 ROA not after: Sun 03 Jan 2027 11:52:02 +0000 asID: 213476 IP address blocks: 68.164.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:83:17:c9:a6:51:c6:d8:41:0a:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 5 10:52:02 2026 GMT Not After : Jan 3 11:52:02 2027 GMT Subject: CN=c0730500-f238-4e4c-8632-18b0868d27ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7d:34:f5:5c:fe:db:0f:e6:75:23:ab:a5:0c: 5c:cb:4a:91:cb:33:26:a9:8b:80:a9:36:43:d8:0a: b7:26:50:52:1e:2f:5b:3f:7b:6c:05:f2:be:7c:d6: 36:38:71:36:23:e8:10:fc:ff:7b:da:47:bf:61:e6: e4:cf:13:60:9d:1b:c8:6d:39:69:d2:f4:33:17:38: f9:05:bc:86:43:b1:d5:e0:02:4a:54:ce:57:cb:61: e6:99:27:28:b8:1c:b1:40:b4:86:d2:60:ab:51:8d: c7:e0:e8:e0:64:66:e4:51:6d:5d:06:49:c5:45:33: 60:30:9f:65:bd:77:07:78:0e:45:cb:00:7e:06:da: a8:da:e4:ef:f4:fc:69:aa:1f:90:96:8e:7e:9d:61: 6c:16:b9:c1:bf:3f:72:83:f3:89:8c:10:e4:5a:cc: b7:8a:67:3e:96:b2:12:44:d8:4b:a5:11:c2:7e:1a: d7:3e:be:e1:7c:84:87:f5:46:d2:bd:d8:13:fb:e8: fa:75:3b:f5:cc:bb:39:8f:14:cb:b9:7e:15:f1:d0: 9b:01:34:b7:5c:59:f6:10:8b:66:3b:ad:77:bb:67: 1c:d6:1e:e4:47:0c:9d:9c:25:de:a4:c8:e8:4a:eb: b2:4d:b5:8e:1c:fd:35:fc:66:0f:20:78:03:b8:81: 56:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8E:C9:2E:56:9D:CE:92:50:30:52:8A:50:67:BA:CD:E6:BF:65:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1e8a6fde-56ce-31a9-bc2d-3e7e70a58678.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:f3:3f:a9:c9:20:05:c1:d9:60:49:81:0f:a1:8e:2a:00:ba: 03:dc:44:ef:19:67:e4:f1:cd:24:9d:97:e2:7d:f8:df:09:19: 01:f6:bd:25:a5:a2:6d:80:43:78:b2:2b:12:3c:4f:a2:09:9b: 5a:05:17:cf:a6:f6:45:d1:7d:cf:23:da:db:12:eb:ac:20:39: bb:3e:4b:12:8a:57:8b:31:96:8b:ad:b4:21:f0:56:53:da:f7: a9:b1:d1:50:e4:5a:66:e9:d7:81:63:a0:5e:c5:81:91:1e:09: 9a:5d:ac:ed:f6:07:96:c1:a0:9c:d8:36:d5:c6:98:b6:46:0b: 09:5d:fd:f7:43:a9:c1:9f:97:e7:89:f8:59:48:83:85:84:2f: 8a:b8:84:74:ff:9e:15:85:6f:d8:0e:63:ce:21:fc:fd:b7:e8: 68:f2:8c:5e:6a:d6:69:ef:5e:34:5f:45:9f:63:10:27:92:95: 64:15:61:13:bd:c6:ac:62:4a:29:22:71:d6:bd:11:fb:69:b4: 9e:68:3f:64:4b:ed:f9:12:e7:f4:52:5e:d2:38:06:d8:4d:d4: 24:6e:eb:a6:de:87:7f:bf:09:87:01:8f:b5:71:5e:fe:66:4e: a1:ed:66:f0:48:8b:e4:73:ce:2a:7d:1a:80:0f:22:7c:84:6e: 6f:48:a1:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9mgxfJplHG2EEK+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwNTEwNTIwMloXDTI3MDEwMzExNTIwMlowLzEtMCsGA1UEAxMk YzA3MzA1MDAtZjIzOC00ZTRjLTg2MzItMThiMDg2OGQyN2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln009Vz+2w/mdSOrpQxcy0qRyzMmqYuAqTZD 2Aq3JlBSHi9bP3tsBfK+fNY2OHE2I+gQ/P972ke/YebkzxNgnRvIbTlp0vQzFzj5 BbyGQ7HV4AJKVM5Xy2HmmScouByxQLSG0mCrUY3H4OjgZGbkUW1dBknFRTNgMJ9l vXcHeA5FywB+Btqo2uTv9Pxpqh+Qlo5+nWFsFrnBvz9yg/OJjBDkWsy3imc+lrIS RNhLpRHCfhrXPr7hfISH9UbSvdgT++j6dTv1zLs5jxTLuX4V8dCbATS3XFn2EItm O613u2cc1h7kRwydnCXepMjoSuuyTbWOHP01/GYPIHgDuIFWmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGOyS5Wnc6SUDBSilBnus3mv2WLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMWU4YTZmZGUtNTZjZS0z MWE5LWJjMmQtM2U3ZTcwYTU4Njc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbzP6nJIAXB2WBJgQ+hjioAugPcRO8ZZ+TxzSSdl+J9+N8JGQH2vSWl om2AQ3iyKxI8T6IJm1oFF8+m9kXRfc8j2tsS66wgObs+SxKKV4sxlouttCHwVlPa 96mx0VDkWmbp14FjoF7FgZEeCZpdrO32B5bBoJzYNtXGmLZGCwld/fdDqcGfl+eJ +FlIg4WEL4q4hHT/nhWFb9gOY84h/P236GjyjF5q1mnvXjRfRZ9jECeSlWQVYRO9 xqxiSikicda9EftptJ5oP2RL7fkS5/RSXtI4BthN1CRu66beh3+/CYcBj7VxXv5m TqHtZvBIi+Rzzip9GoAPInyEbm9Iobw= -----END CERTIFICATE-----Generated at Sat Oct 10 05:53:53 2026 by rpki-client