$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/23903a7e-eab7-3905-8755-9b8c49c0f50d.roa File: 23903a7e-eab7-3905-8755-9b8c49c0f50d.roa (raw, json) Hash identifier: lDyt9hDFK7so4noJHjaIFXC411F6mMbDuFs7Mlhv2aw= Subject key identifier: F3:46:C6:B6:83:61:56:E8:97:A4:C7:91:2B:A9:18:61:4B:E8:67:BA Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F697BDA356E958B1A03B09F80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/23903a7e-eab7-3905-8755-9b8c49c0f50d.roa Signing time: Tue 06 Oct 2026 12:24:52 +0000 ROA not before: Tue 06 Oct 2026 12:24:52 +0000 ROA not after: Mon 04 Jan 2027 13:24:52 +0000 asID: 399275 IP address blocks: 64.204.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:7b:da:35:6e:95:8b:1a:03:b0:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 6 12:24:52 2026 GMT Not After : Jan 4 13:24:52 2027 GMT Subject: CN=db881168-ca58-4174-b520-53c8c1dde8c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:52:c2:b3:bf:8f:30:9f:81:20:4a:65:38:25: 8f:48:d3:8a:df:c7:f3:ee:eb:c4:c2:70:96:a0:90: 5a:43:7d:6d:5e:c0:72:31:e3:b3:22:89:aa:d3:f1: 14:5f:3e:98:b0:68:1a:14:fb:cf:6b:92:5c:57:3f: 3e:3b:e4:5e:dd:a2:ce:b8:56:b5:24:c4:20:f5:9e: 40:b6:a2:84:c5:95:de:bf:05:b2:4e:67:c2:ed:1e: 6a:ab:78:87:09:91:d8:05:2a:8d:1c:a0:a9:1d:6a: c0:6c:31:52:bc:c4:52:71:a2:eb:f3:a7:2b:ff:86: dc:fe:35:a7:8e:fd:b2:ef:20:b1:6e:7f:73:1f:cc: e4:c3:35:c0:77:88:0c:db:0e:67:ee:b4:2f:28:2e: d1:91:f1:3a:51:5e:41:f2:36:2b:23:51:1b:0a:60: 7b:2f:f7:99:cb:85:87:55:94:67:8d:e2:7b:8a:2a: 96:4a:8d:bc:3a:ac:a7:f8:02:50:7e:b4:60:eb:6f: be:06:99:8b:c7:2c:4e:45:be:dd:85:e2:09:c3:38: 51:92:ad:69:c4:d3:ff:db:3a:87:a7:81:64:12:1b: c6:a6:c9:2b:68:9b:6a:ea:a0:3f:d2:9b:b9:c3:cc: 30:5a:15:93:ac:0c:3a:84:e6:1d:81:95:9f:d6:60: 13:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:46:C6:B6:83:61:56:E8:97:A4:C7:91:2B:A9:18:61:4B:E8:67:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/23903a7e-eab7-3905-8755-9b8c49c0f50d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:df:6b:2f:4b:e8:8b:df:88:5b:3c:7e:fc:35:52:be:45:f3: ef:21:f7:42:53:5d:68:24:64:44:34:75:d1:6d:d8:36:26:4d: d1:48:f1:b2:8e:6c:73:7b:f6:7e:9e:2f:b5:31:14:6f:55:b3: 00:9d:bf:d5:34:53:cb:db:59:9e:71:be:b4:c8:16:0b:92:c3: 35:28:4e:9e:5d:08:f1:d6:a7:a7:54:2c:93:ad:0b:03:cb:5f: aa:d8:8a:0c:4a:27:44:b7:b6:bc:fd:53:32:c8:da:fe:5e:6a: d3:d4:68:09:ae:cc:77:3e:48:e8:eb:69:89:c4:47:df:a5:e3: 8e:73:0c:e1:73:53:4b:ea:bc:5c:43:c7:3f:27:20:77:66:89: e4:15:40:24:ab:49:13:c5:69:ea:c0:e0:b5:b2:27:10:41:e6: ef:27:29:4c:ab:d4:81:28:d0:ea:6a:5a:31:b1:36:66:fb:4c: 95:42:98:f9:a2:0c:71:fa:2a:a8:0f:3d:d4:c6:cb:8b:1e:2b: 06:6d:5c:39:d4:d5:d7:12:c7:d2:da:5f:3f:66:a0:91:66:23: 49:5a:16:55:9b:fc:d9:87:ef:1f:93:22:65:f6:c8:25:40:92: 78:3f:f8:24:ee:93:22:d6:dc:43:1c:74:60:0d:d5:1e:a5:c8: 10:85:8c:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pe9o1bpWLGgOwn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwNjEyMjQ1MloXDTI3MDEwNDEzMjQ1MlowLzEtMCsGA1UEAxMk ZGI4ODExNjgtY2E1OC00MTc0LWI1MjAtNTNjOGMxZGRlOGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlLCs7+PMJ+BIEplOCWPSNOK38fz7uvEwnCW oJBaQ31tXsByMeOzIomq0/EUXz6YsGgaFPvPa5JcVz8+O+Re3aLOuFa1JMQg9Z5A tqKExZXevwWyTmfC7R5qq3iHCZHYBSqNHKCpHWrAbDFSvMRScaLr86cr/4bc/jWn jv2y7yCxbn9zH8zkwzXAd4gM2w5n7rQvKC7RkfE6UV5B8jYrI1EbCmB7L/eZy4WH VZRnjeJ7iiqWSo28Oqyn+AJQfrRg62++BpmLxyxORb7dheIJwzhRkq1pxNP/2zqH p4FkEhvGpskraJtq6qA/0pu5w8wwWhWTrAw6hOYdgZWf1mATSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNGxraDYVbol6THkSupGGFL6Ge6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjM5MDNhN2UtZWFiNy0z OTA1LTg3NTUtOWI4YzQ5YzBmNTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMwRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDfay9L6IvfiFs8fvw1Ur5F8+8h90JTXWgkZEQ0ddFt2DYmTdFI8bKO bHN79n6eL7UxFG9VswCdv9U0U8vbWZ5xvrTIFguSwzUoTp5dCPHWp6dULJOtCwPL X6rYigxKJ0S3trz9UzLI2v5eatPUaAmuzHc+SOjraYnER9+l445zDOFzU0vqvFxD xz8nIHdmieQVQCSrSRPFaerA4LWyJxBB5u8nKUyr1IEo0OpqWjGxNmb7TJVCmPmi DHH6KqgPPdTGy4seKwZtXDnU1dcSx9LaXz9moJFmI0laFlWb/NmH7x+TImX2yCVA kng/+CTukyLW3EMcdGAN1R6lyBCFjH4= -----END CERTIFICATE-----Generated at Sat Oct 10 07:56:48 2026 by rpki-client