$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2b781970-c151-332b-a147-dfa9b6917404.roa File: 2b781970-c151-332b-a147-dfa9b6917404.roa (raw, json) Hash identifier: AsyIo8bJ/d1rX5zMLQrjBYVaElU1syK+9GlYD26VDAo= Subject key identifier: 15:D3:6C:69:1F:EF:77:B5:5B:82:3E:31:91:EB:AD:2A:C7:41:42:AC Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4972B888B8D5E7A86AA6DEA0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2b781970-c151-332b-a147-dfa9b6917404.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 212238 IP address blocks: 68.167.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:b8:88:b8:d5:e7:a8:6a:a6:de:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0ad5d9f5-162f-4e9d-86d9-0cb82fe98ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1e:c0:62:7e:0c:0c:be:f2:3e:4d:5f:4b:a3: b3:28:d0:8b:39:e7:01:f6:a8:7a:8e:61:05:cd:c4: c6:68:e2:14:0c:e3:40:5a:1b:5e:ad:29:16:e8:c5: ce:1e:d8:b0:21:81:3d:a5:89:bf:1c:7c:85:ea:27: 6c:d8:ea:f5:25:36:f4:1f:ea:13:75:c9:b3:71:40: b0:9b:46:43:28:22:e6:0d:6e:e1:75:48:88:84:e7: f4:19:44:be:dc:6e:3f:06:65:9a:d7:f5:47:ea:30: d5:0e:0a:61:a5:c5:a9:51:43:90:3f:bf:4c:21:ac: 93:74:cb:99:ee:33:2b:bd:9c:e6:9d:c4:22:9b:4e: c3:a7:bc:e3:a4:05:5f:eb:40:07:ac:fa:fd:31:73: 06:cc:96:2e:91:32:b7:b4:28:30:9c:85:fe:26:c7: d0:94:01:ae:58:a6:06:9a:f2:e2:d8:40:90:bb:77: 1b:25:f3:b5:70:00:9e:5b:a8:04:71:92:26:1c:9a: 07:3f:27:68:5a:97:8f:71:c4:76:d3:d1:50:8c:7d: f8:92:ec:2e:77:ff:e1:20:7f:8c:20:bc:29:11:9e: 08:1d:3f:b3:f5:9c:b2:4b:e9:3f:70:84:a4:15:78: 0b:3b:cf:e1:4a:db:79:e1:f6:c3:a2:a2:01:05:5e: 15:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D3:6C:69:1F:EF:77:B5:5B:82:3E:31:91:EB:AD:2A:C7:41:42:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2b781970-c151-332b-a147-dfa9b6917404.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:02:8d:8f:93:e2:47:7f:ee:3f:1e:ba:61:cf:1e:2b:44:b5: 51:e3:e4:d0:a3:43:d8:9b:38:10:28:74:e9:4a:81:fd:35:58: 44:52:fd:cf:c4:d9:b1:ed:fb:0e:cf:eb:a1:51:e7:b7:ed:70: a3:a5:29:88:2c:3c:8e:f9:27:82:1a:68:5c:4d:96:38:20:47: b1:5b:25:8c:91:62:f1:3e:d8:3a:99:43:01:ff:8b:bc:f6:e5: 1c:c0:b2:3e:7c:01:46:e5:ea:fa:05:36:b0:2d:b3:ab:bd:db: 92:a9:aa:71:36:bd:bf:ff:12:6d:71:9e:34:9f:17:86:da:16: 78:38:14:c7:05:ea:1c:06:ea:97:1c:07:e6:cd:ce:fb:08:62: c0:20:28:01:d4:51:5f:5f:ef:0f:d8:88:84:34:64:28:c4:5c: 35:7f:2f:0b:08:c4:d9:04:a6:77:e6:96:f8:22:38:db:99:8d: d3:8e:38:25:38:83:0f:63:46:49:32:8c:51:d7:8c:b5:30:95: 0b:be:82:73:ff:bd:b9:94:23:b2:1d:7b:7b:a2:3a:9a:af:42: 22:4e:cf:43:60:d9:7a:f3:77:b8:01:25:8a:1a:13:31:4a:ac: d5:78:ec:fb:46:56:01:ad:1c:d7:47:ad:ef:fd:3c:52:f0:89: 15:e8:49:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcriIuNXnqGqm3qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGFkNWQ5ZjUtMTYyZi00ZTlkLTg2ZDktMGNiODJmZTk4YWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR7AYn4MDL7yPk1fS6OzKNCLOecB9qh6jmEF zcTGaOIUDONAWhterSkW6MXOHtiwIYE9pYm/HHyF6ids2Or1JTb0H+oTdcmzcUCw m0ZDKCLmDW7hdUiIhOf0GUS+3G4/BmWa1/VH6jDVDgphpcWpUUOQP79MIayTdMuZ 7jMrvZzmncQim07Dp7zjpAVf60AHrPr9MXMGzJYukTK3tCgwnIX+JsfQlAGuWKYG mvLi2ECQu3cbJfO1cACeW6gEcZImHJoHPydoWpePccR209FQjH34kuwud//hIH+M ILwpEZ4IHT+z9ZyyS+k/cISkFXgLO8/hStt54fbDoqIBBV4VmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXTbGkf73e1W4I+MZHrrSrHQUKsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmI3ODE5NzAtYzE1MS0z MzJiLWExNDctZGZhOWI2OTE3NDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKcLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMCjY+T4kd/7j8eumHPHitEtVHj5NCjQ9ibOBAodOlKgf01WERS/c/E 2bHt+w7P66FR57ftcKOlKYgsPI75J4IaaFxNljggR7FbJYyRYvE+2DqZQwH/i7z2 5RzAsj58AUbl6voFNrAts6u925KpqnE2vb//Em1xnjSfF4baFng4FMcF6hwG6pcc B+bNzvsIYsAgKAHUUV9f7w/YiIQ0ZCjEXDV/LwsIxNkEpnfmlvgiONuZjdOOOCU4 gw9jRkkyjFHXjLUwlQu+gnP/vbmUI7Ide3uiOpqvQiJOz0Ng2Xrzd7gBJYoaEzFK rNV47PtGVgGtHNdHre/9PFLwiRXoSVY= -----END CERTIFICATE-----Generated at Sat Oct 3 11:04:01 2026 by rpki-client