$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21ddbda9-4e08-34fb-afaa-637033286609.roa File: 21ddbda9-4e08-34fb-afaa-637033286609.roa (raw, json) Hash identifier: AnfY3HnTl37Q20vyGhqlupS2GYlbrlZbmM4h81ACIPg= Subject key identifier: 0D:EE:35:32:2A:6A:C4:F7:11:39:02:E1:5C:16:C3:8F:F8:1F:28:66 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F6199B754AB7760D2574BCC40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21ddbda9-4e08-34fb-afaa-637033286609.roa Signing time: Sat 03 Oct 2026 16:38:35 +0000 ROA not before: Sat 03 Oct 2026 16:38:35 +0000 ROA not after: Fri 01 Jan 2027 17:38:35 +0000 asID: 834 IP address blocks: 64.204.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:99:b7:54:ab:77:60:d2:57:4b:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 3 16:38:35 2026 GMT Not After : Jan 1 17:38:35 2027 GMT Subject: CN=d6e5f664-30a3-49b5-b3b2-9703bb3123a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c0:9a:59:51:55:09:5b:f0:94:ef:28:4d:0d: 4b:8f:27:ae:2d:7c:26:d1:3a:25:0a:02:28:1a:a4: ef:d1:28:17:03:30:2f:0a:c3:b5:c7:98:23:7c:05: bb:ba:4d:0e:a4:18:77:d6:09:78:e1:f5:f5:9f:71: 25:8b:9d:3b:50:bd:30:1c:39:e0:66:a1:09:90:13: b6:e8:db:46:09:a3:5a:94:94:90:43:61:21:6b:24: 51:49:a2:d9:d3:0f:b2:77:9e:99:65:b3:87:e5:e6: 61:10:1a:d6:02:15:d0:cf:81:dd:62:54:57:cd:00: 51:6b:c7:8e:9b:47:4d:37:d7:e4:51:f7:75:d0:64: f4:e1:c6:96:85:6d:1c:64:e3:50:13:4d:f5:0b:8b: 3c:82:2b:5e:d0:b2:b9:a5:aa:aa:78:c8:ac:bc:38: ca:8b:9d:dc:03:e1:27:46:14:24:82:dd:89:20:4f: fe:7a:41:fd:60:4a:a3:97:26:70:40:81:01:3e:f1: 55:58:11:50:5c:4d:88:90:8f:61:d2:46:94:50:c8: f2:6f:f7:42:4b:38:38:85:68:5c:c4:8b:04:97:75: 41:5a:1c:8f:01:05:58:c3:fa:44:e9:c0:f1:f7:3b: 41:18:dc:d3:1f:7a:4f:9a:49:45:7c:49:ca:ef:1f: 74:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EE:35:32:2A:6A:C4:F7:11:39:02:E1:5C:16:C3:8F:F8:1F:28:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21ddbda9-4e08-34fb-afaa-637033286609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:25:b8:f5:79:12:fd:d4:fe:a9:11:41:dc:8c:30:37:ae:3d: a9:39:9f:e0:91:95:f9:92:47:ce:3c:ff:dc:7d:b1:eb:78:63: d5:bb:eb:22:f9:5b:95:db:7b:34:9e:5c:3d:75:23:35:cb:ec: 97:a4:36:61:91:21:b1:23:88:66:6b:b2:26:b2:76:60:c5:d6: 54:70:28:bb:46:88:23:d5:8a:6f:ca:8e:0e:a5:2c:70:0d:b4: 75:87:ba:50:ec:1c:33:37:b6:c6:e5:be:86:0d:50:ee:66:29: 62:4d:5a:0f:62:6f:ae:6d:a4:74:53:80:e1:ec:f9:da:e2:ae: c0:66:b6:d1:32:c3:aa:fd:f6:c6:36:c1:00:c6:71:21:d6:f1: 2f:18:67:4b:4a:74:06:d9:76:0c:a5:ef:a4:5e:c8:41:77:ef: ef:cd:37:67:0a:2b:04:59:4f:ed:d1:05:62:51:22:6e:45:22: f9:cd:84:1f:14:44:27:9c:13:a6:15:71:a5:40:4e:6e:de:1e: 93:29:74:bf:df:bd:bd:59:df:d0:ac:48:c8:9a:07:56:dc:e4: 21:0b:23:42:6d:d7:4f:aa:de:5c:7d:56:d8:31:16:30:f8:71: cb:1f:10:be:a6:fa:59:dc:21:6c:6c:3d:f5:6a:25:bb:63:a2: 67:eb:6e:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hmbdUq3dg0ldLzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwMzE2MzgzNVoXDTI3MDEwMTE3MzgzNVowLzEtMCsGA1UEAxMk ZDZlNWY2NjQtMzBhMy00OWI1LWIzYjItOTcwM2JiMzEyM2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8CaWVFVCVvwlO8oTQ1LjyeuLXwm0TolCgIo GqTv0SgXAzAvCsO1x5gjfAW7uk0OpBh31gl44fX1n3Eli507UL0wHDngZqEJkBO2 6NtGCaNalJSQQ2EhayRRSaLZ0w+yd56ZZbOH5eZhEBrWAhXQz4HdYlRXzQBRa8eO m0dNN9fkUfd10GT04caWhW0cZONQE031C4s8gite0LK5paqqeMisvDjKi53cA+En RhQkgt2JIE/+ekH9YEqjlyZwQIEBPvFVWBFQXE2IkI9h0kaUUMjyb/dCSzg4hWhc xIsEl3VBWhyPAQVYw/pE6cDx9ztBGNzTH3pPmklFfEnK7x90ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3uNTIqasT3ETkC4VwWw4/4HyhmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjFkZGJkYTktNGUwOC0z NGZiLWFmYWEtNjM3MDMzMjg2NjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYluPV5Ev3U/qkRQdyMMDeuPak5n+CRlfmSR848/9x9set4Y9W76yL5 W5XbezSeXD11IzXL7JekNmGRIbEjiGZrsiaydmDF1lRwKLtGiCPVim/Kjg6lLHAN tHWHulDsHDM3tsblvoYNUO5mKWJNWg9ib65tpHRTgOHs+drirsBmttEyw6r99sY2 wQDGcSHW8S8YZ0tKdAbZdgyl76ReyEF37+/NN2cKKwRZT+3RBWJRIm5FIvnNhB8U RCecE6YVcaVATm7eHpMpdL/fvb1Z39CsSMiaB1bc5CELI0Jt10+q3lx9VtgxFjD4 ccsfEL6m+lncIWxsPfVqJbtjomfrbp0= -----END CERTIFICATE-----Generated at Sat Oct 10 10:43:07 2026 by rpki-client