$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/207f6168-be7a-3be6-8789-a9d60f5a5c36.roa File: 207f6168-be7a-3be6-8789-a9d60f5a5c36.roa (raw, json) Hash identifier: yX7u+t2DP8Hq4HoacCb1c7w6hSFlyKHlwzsZsim7Y78= Subject key identifier: 80:C9:31:D9:30:38:0B:B9:F3:93:77:EE:46:C2:E0:93:1F:E5:AA:6A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F5BB8A5BAAE7F7DF798D2CE80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/207f6168-be7a-3be6-8789-a9d60f5a5c36.roa Signing time: Thu 01 Oct 2026 14:06:03 +0000 ROA not before: Thu 01 Oct 2026 14:06:03 +0000 ROA not after: Wed 30 Dec 2026 15:06:03 +0000 asID: 6079 IP address blocks: 64.205.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:b8:a5:ba:ae:7f:7d:f7:98:d2:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 1 14:06:03 2026 GMT Not After : Dec 30 15:06:03 2026 GMT Subject: CN=e654335a-4b99-4fbf-a2ba-dd47854cbbfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:74:43:b9:5a:ba:51:c9:11:3f:bc:e8:ba: d2:36:ac:86:a5:95:a9:fb:0d:fe:d7:17:85:24:84: a6:63:16:41:da:1b:ab:21:25:f0:b1:47:62:c5:e4: 09:52:b1:e4:9b:4e:3d:41:d3:d1:43:48:8a:21:dc: b2:57:e7:a2:1a:8c:65:74:fb:80:d2:e3:31:ea:f5: 28:db:57:12:ec:7c:69:ce:ff:ce:72:fb:36:cb:64: 83:a0:22:e0:de:7a:e4:32:87:53:0f:ed:11:b6:b8: 9f:06:fa:2e:d7:b2:c2:05:f4:04:75:32:a7:96:ae: 72:36:4f:04:32:e6:ae:d2:cc:35:0b:a7:d8:a1:11: a8:0b:6f:b0:5b:c9:17:92:ed:ac:b1:36:50:01:97: 1f:9c:d2:96:48:cd:36:12:c9:81:b0:b0:75:29:dd: f6:77:b8:5b:69:12:cc:b7:df:96:b8:c8:ba:32:e6: 6c:65:10:09:db:41:f6:9a:03:3a:04:f6:1d:75:b5: 23:32:b3:2e:b1:c6:06:20:a0:0a:04:ec:e7:1b:ba: 54:0b:85:8a:85:b9:a1:15:f2:ad:a7:c1:f8:d1:e8: 2d:7d:1b:ae:8d:13:f2:30:ad:5a:57:36:26:8b:47: 8f:c6:e9:f5:5c:09:9a:6f:c2:aa:a5:f3:73:3f:d1: 42:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C9:31:D9:30:38:0B:B9:F3:93:77:EE:46:C2:E0:93:1F:E5:AA:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/207f6168-be7a-3be6-8789-a9d60f5a5c36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.205.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:0f:d7:b1:bd:18:e5:e3:0c:0e:7a:5d:e7:02:17:1f:57:a2: c2:9c:8a:27:9d:b0:cb:58:77:d5:14:e9:13:c3:07:9e:d6:d2: c4:36:c7:0a:e6:ef:31:d6:06:f4:d6:a4:09:0e:64:e3:ee:16: a3:af:ec:90:96:e3:81:ee:dc:9c:74:a9:e5:ff:40:75:a4:3f: 32:8d:d4:aa:b8:50:ef:ea:e3:c8:23:23:ff:5f:12:c2:6a:ea: e9:08:dd:6e:49:d3:1f:0a:de:e7:f7:9e:41:5f:1a:6a:e5:78: c9:a1:3d:ad:19:2b:ee:21:85:d7:1f:b4:ec:2a:f4:10:15:08: de:c1:56:02:dc:3d:86:d5:25:30:e6:8f:01:c2:71:b8:83:81: 46:f5:02:5a:bc:c3:43:9e:64:35:ae:84:14:13:42:d4:0d:df: ca:2a:56:f9:8e:b8:8f:40:ce:1e:24:fc:87:e7:f2:7e:62:47: 09:e3:4a:d1:30:4e:70:d2:8d:b4:56:4b:b3:58:4f:37:7d:9f: 98:b5:fc:a0:79:9c:8d:1c:6d:3b:08:57:30:a2:c3:8c:a0:0f: 24:95:d2:51:c3:90:16:e3:15:a6:4a:3c:e2:a4:a8:f0:a5:75: e5:0a:4e:79:ee:f1:57:88:e8:e6:2c:d2:2f:69:97:37:e6:72: a1:f5:60:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9buKW6rn9995jSzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwMTE0MDYwM1oXDTI2MTIzMDE1MDYwM1owLzEtMCsGA1UEAxMk ZTY1NDMzNWEtNGI5OS00ZmJmLWEyYmEtZGQ0Nzg1NGNiYmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHx0Q7laulHJET+86LrSNqyGpZWp+w3+1xeF JISmYxZB2hurISXwsUdixeQJUrHkm049QdPRQ0iKIdyyV+eiGoxldPuA0uMx6vUo 21cS7Hxpzv/Ocvs2y2SDoCLg3nrkModTD+0RtrifBvou17LCBfQEdTKnlq5yNk8E Muau0sw1C6fYoRGoC2+wW8kXku2ssTZQAZcfnNKWSM02EsmBsLB1Kd32d7hbaRLM t9+WuMi6MuZsZRAJ20H2mgM6BPYddbUjMrMuscYGIKAKBOznG7pUC4WKhbmhFfKt p8H40egtfRuujRPyMK1aVzYmi0ePxun1XAmab8KqpfNzP9FCPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDJMdkwOAu585N37kbC4JMf5apqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjA3ZjYxNjgtYmU3YS0z YmU2LTg3ODktYTlkNjBmNWE1YzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQM1eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUP17G9GOXjDA56XecCFx9XosKciiedsMtYd9UU6RPDB57W0sQ2xwrm 7zHWBvTWpAkOZOPuFqOv7JCW44Hu3Jx0qeX/QHWkPzKN1Kq4UO/q48gjI/9fEsJq 6ukI3W5J0x8K3uf3nkFfGmrleMmhPa0ZK+4hhdcftOwq9BAVCN7BVgLcPYbVJTDm jwHCcbiDgUb1Alq8w0OeZDWuhBQTQtQN38oqVvmOuI9Azh4k/Ifn8n5iRwnjStEw TnDSjbRWS7NYTzd9n5i1/KB5nI0cbTsIVzCiw4ygDySV0lHDkBbjFaZKPOKkqPCl deUKTnnu8VeI6OYs0i9plzfmcqH1YOA= -----END CERTIFICATE-----Generated at Sun Oct 11 17:32:34 2026 by rpki-client