$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2af37a59-9260-3d00-bba9-f68e49018c5b.roa File: 2af37a59-9260-3d00-bba9-f68e49018c5b.roa (raw, json) Hash identifier: 6U+KhXf9Jmw07zArUDEqpGkYFm1ShkC1IZVET6X6rHo= Subject key identifier: 83:FA:C4:FC:E1:6E:70:A2:4E:57:DC:4F:06:10:60:3A:90:89:65:51 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F6B9D0AF13B4417F03528CCC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2af37a59-9260-3d00-bba9-f68e49018c5b.roa Signing time: Wed 07 Oct 2026 06:43:22 +0000 ROA not before: Wed 07 Oct 2026 06:43:22 +0000 ROA not after: Tue 05 Jan 2027 07:43:22 +0000 asID: 402898 IP address blocks: 68.164.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6b:9d:0a:f1:3b:44:17:f0:35:28:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 7 06:43:22 2026 GMT Not After : Jan 5 07:43:22 2027 GMT Subject: CN=59812b57-07c5-45ba-8c99-2b69ad20e27f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:81:0c:d2:cd:92:3c:c3:d2:79:b0:3c:5a:b4: 44:d9:e9:35:a8:5b:1a:f1:97:0c:bf:7d:7d:3b:24: 62:28:b1:ae:fc:84:79:18:25:3b:8e:5f:98:3b:55: 71:8e:00:68:93:0a:2a:7c:ac:b7:20:8c:b3:d7:0d: e1:98:70:13:ec:55:3a:1a:0e:c4:b6:29:37:73:be: dc:c1:2c:5d:41:48:ef:93:7a:6a:69:0a:51:71:ad: be:55:e2:a9:ff:07:ab:54:fc:87:dc:ea:c5:9f:6c: 92:9b:48:a4:76:5d:3b:e0:6e:0b:e4:c6:5f:fb:77: 09:b3:3f:88:47:be:ad:dd:93:a6:7a:f1:1c:72:35: 21:5c:a7:71:eb:de:f7:e5:54:90:68:1a:3c:d5:93: 58:0e:7b:4d:e2:76:33:0c:e3:cf:e4:52:29:11:c2: 0a:b5:de:f4:3b:d4:b2:9b:17:4f:03:80:d8:b1:91: 82:2f:30:03:9c:c7:fa:51:be:8d:2c:5e:98:d0:00: ca:6c:a9:44:74:33:1a:50:0d:b4:68:7b:dc:34:81: ff:3a:42:72:26:96:2d:58:74:bd:3e:30:d5:5b:f7: ca:c5:b9:52:a4:e8:2e:b6:fc:d5:81:21:e6:d5:ea: 20:6c:77:7e:81:08:a1:32:a7:ef:9a:a8:d0:b3:76: cf:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FA:C4:FC:E1:6E:70:A2:4E:57:DC:4F:06:10:60:3A:90:89:65:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2af37a59-9260-3d00-bba9-f68e49018c5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:13:75:2b:6d:52:0f:52:e5:f9:6d:12:8e:ff:2e:04:0f:1e: 76:b0:56:a8:c0:2d:3a:b8:97:92:ca:61:64:74:bc:70:81:b5: 64:b4:bb:b0:58:a9:dd:0e:59:e6:41:5f:78:c7:90:92:69:2f: fc:05:de:83:79:f1:6a:29:3d:ea:dd:7e:51:4d:b9:0c:dc:71: c9:77:18:09:ce:44:fd:f4:67:68:25:89:13:a9:d8:c2:47:81: d0:bd:66:86:27:7e:75:a7:d1:fe:45:36:ed:f5:75:1d:97:f2: c2:f8:2b:33:98:05:45:6e:5a:fd:c7:54:65:eb:f5:9e:1a:10: 49:4f:ec:24:12:ff:71:3b:4e:0e:dc:a5:2a:c4:bb:77:b2:ac: ee:c0:1f:af:50:9d:52:75:8c:59:d3:f2:62:aa:c8:16:69:77: 46:db:4a:f6:7f:75:b7:f6:ba:1c:ea:2d:f3:16:d0:13:7d:d2: b0:a4:4f:31:ba:f2:bf:8a:5d:9d:9f:ec:35:c6:0a:10:88:f1: 14:4b:da:59:f1:2a:bd:5d:7d:89:4c:c2:ee:af:dc:4b:11:22: a2:ad:85:7e:9f:f4:44:ab:d7:62:ec:eb:31:5c:32:c3:9d:fc: 59:78:cd:c6:cd:b3:c4:8d:17:bd:40:56:bc:ff:1c:e2:77:a6: 8a:a1:b4:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9rnQrxO0QX8DUozMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwNzA2NDMyMloXDTI3MDEwNTA3NDMyMlowLzEtMCsGA1UEAxMk NTk4MTJiNTctMDdjNS00NWJhLThjOTktMmI2OWFkMjBlMjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIEM0s2SPMPSebA8WrRE2ek1qFsa8ZcMv319 OyRiKLGu/IR5GCU7jl+YO1VxjgBokwoqfKy3IIyz1w3hmHAT7FU6Gg7Etik3c77c wSxdQUjvk3pqaQpRca2+VeKp/werVPyH3OrFn2ySm0ikdl074G4L5MZf+3cJsz+I R76t3ZOmevEccjUhXKdx69735VSQaBo81ZNYDntN4nYzDOPP5FIpEcIKtd70O9Sy mxdPA4DYsZGCLzADnMf6Ub6NLF6Y0ADKbKlEdDMaUA20aHvcNIH/OkJyJpYtWHS9 PjDVW/fKxblSpOgutvzVgSHm1eogbHd+gQihMqfvmqjQs3bPrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIP6xPzhbnCiTlfcTwYQYDqQiWVRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmFmMzdhNTktOTI2MC0z ZDAwLWJiYTktZjY4ZTQ5MDE4YzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRKQiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACATdSttUg9S5fltEo7/LgQPHnawVqjALTq4l5LKYWR0vHCBtWS0u7BY qd0OWeZBX3jHkJJpL/wF3oN58WopPerdflFNuQzcccl3GAnORP30Z2gliROp2MJH gdC9ZoYnfnWn0f5FNu31dR2X8sL4KzOYBUVuWv3HVGXr9Z4aEElP7CQS/3E7Tg7c pSrEu3eyrO7AH69QnVJ1jFnT8mKqyBZpd0bbSvZ/dbf2uhzqLfMW0BN90rCkTzG6 8r+KXZ2f7DXGChCI8RRL2lnxKr1dfYlMwu6v3EsRIqKthX6f9ESr12Ls6zFcMsOd /Fl4zcbNs8SNF71AVrz/HOJ3poqhtLY= -----END CERTIFICATE-----Generated at Sun Oct 11 17:32:11 2026 by rpki-client