$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3bfe3b2d-2b63-3fd6-a714-028faf3686d9.roa File: 3bfe3b2d-2b63-3fd6-a714-028faf3686d9.roa (raw, json) Hash identifier: Q034GB9AE7J3D7tTr7yjQWjIVk/DN5lo77DQK9naUU0= Subject key identifier: 62:8E:63:61:13:B6:B5:4B:84:4E:21:87:00:82:8B:6E:FA:E3:C9:D5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F5BBAC477AED99CE812148A90 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3bfe3b2d-2b63-3fd6-a714-028faf3686d9.roa Signing time: Thu 01 Oct 2026 14:10:19 +0000 ROA not before: Thu 01 Oct 2026 14:10:19 +0000 ROA not after: Wed 30 Dec 2026 15:10:19 +0000 asID: 6079 IP address blocks: 68.166.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:ba:c4:77:ae:d9:9c:e8:12:14:8a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 1 14:10:19 2026 GMT Not After : Dec 30 15:10:19 2026 GMT Subject: CN=dc0f8f10-75bf-437c-9e29-2d20e6cd6ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6b:77:f9:7b:40:21:7f:0d:2d:7e:92:e3:cd: 16:d2:01:c9:69:a3:78:68:46:39:50:84:80:b3:e0: ee:cf:5a:dd:de:4a:dc:46:8c:dd:13:e2:f5:3e:19: 05:2c:30:70:42:d2:f3:c8:a9:da:1f:00:56:77:a0: 73:50:a6:0a:1c:24:28:6f:eb:ff:8e:32:c6:31:21: a1:7a:3c:08:7f:e7:b3:12:b1:78:8d:e9:1d:f6:f7: 71:ac:25:58:55:a2:d1:84:fe:04:92:db:bd:41:12: 0f:89:01:5f:2f:d8:33:c9:08:b7:7a:02:7b:04:f2: e0:ec:d2:61:db:c6:91:4c:26:02:91:d9:1e:d6:ea: 50:d3:87:98:a8:47:5a:9c:c6:52:b5:bc:56:f8:f1: c4:36:ee:40:0d:fa:7a:cc:18:5d:d6:1d:49:e4:05: 61:61:64:a6:71:3d:7e:0b:8c:64:f3:6a:c2:1e:6f: d1:23:e3:66:44:06:8c:dc:3f:05:0c:96:72:a7:2f: e4:d3:cf:79:97:e4:82:1d:d1:8c:2b:05:47:c6:c9: d0:1f:12:4e:68:8f:f2:c0:0a:a7:17:75:93:ea:0b: c1:d7:bc:ed:ef:10:00:ed:2f:db:18:e3:cf:d2:65: 8d:1b:9a:c9:e8:e6:77:7e:be:f9:9d:38:a6:19:08: 95:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:8E:63:61:13:B6:B5:4B:84:4E:21:87:00:82:8B:6E:FA:E3:C9:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3bfe3b2d-2b63-3fd6-a714-028faf3686d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.166.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:dc:bb:a6:b6:54:7c:2a:27:ea:24:3f:21:f8:bd:3a:3d:b5: 7f:28:dc:48:51:9e:de:f0:de:dc:9d:d2:0d:21:0a:fc:61:50: 17:d1:fe:fa:e5:5d:27:d7:d9:e1:78:b0:2b:71:06:d0:73:7c: 01:b9:de:02:ba:23:86:48:e7:7b:42:05:0a:ae:bf:57:da:2c: bd:14:da:cc:e1:68:86:85:c1:94:82:06:35:80:8e:47:f9:e2: 88:74:11:c9:a9:82:20:7d:96:7c:c3:90:bb:b0:3a:6b:cc:e7: 78:a0:bc:a7:18:d9:18:95:e9:c7:0c:b4:af:cf:e6:b1:65:93: 5d:14:1e:12:21:f5:a2:54:28:c8:61:4b:6f:82:06:97:5a:3b: d0:e7:4b:44:7f:6b:e3:cd:3c:d9:57:fe:05:9c:d8:76:40:db: bb:a3:f2:e3:0c:35:4a:17:e6:c8:d1:a3:a8:3d:eb:74:14:8b: f3:4b:8f:b7:a3:3e:04:93:45:bf:e2:72:51:34:30:12:f6:b3: bc:7e:52:19:29:34:98:4e:69:4f:01:cb:72:3a:d7:43:75:5c: 07:70:f0:18:9e:e0:d1:24:ca:44:f7:9d:e6:cb:68:04:54:2e: aa:d9:fa:59:9f:15:ce:5d:85:76:b7:fc:f0:84:fc:e4:82:30: a5:f3:4f:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9busR3rtmc6BIUipAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwMTE0MTAxOVoXDTI2MTIzMDE1MTAxOVowLzEtMCsGA1UEAxMk ZGMwZjhmMTAtNzViZi00MzdjLTllMjktMmQyMGU2Y2Q2YWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWt3+XtAIX8NLX6S480W0gHJaaN4aEY5UISA s+Duz1rd3krcRozdE+L1PhkFLDBwQtLzyKnaHwBWd6BzUKYKHCQob+v/jjLGMSGh ejwIf+ezErF4jekd9vdxrCVYVaLRhP4Ektu9QRIPiQFfL9gzyQi3egJ7BPLg7NJh 28aRTCYCkdke1upQ04eYqEdanMZStbxW+PHENu5ADfp6zBhd1h1J5AVhYWSmcT1+ C4xk82rCHm/RI+NmRAaM3D8FDJZypy/k0895l+SCHdGMKwVHxsnQHxJOaI/ywAqn F3WT6gvB17zt7xAA7S/bGOPP0mWNG5rJ6OZ3fr75nTimGQiVWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKOY2ETtrVLhE4hhwCCi27648nVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2JmZTNiMmQtMmI2My0z ZmQ2LWE3MTQtMDI4ZmFmMzY4NmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKbTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXcu6a2VHwqJ+okPyH4vTo9tX8o3EhRnt7w3tyd0g0hCvxhUBfR/vrl XSfX2eF4sCtxBtBzfAG53gK6I4ZI53tCBQquv1faLL0U2szhaIaFwZSCBjWAjkf5 4oh0EcmpgiB9lnzDkLuwOmvM53igvKcY2RiV6ccMtK/P5rFlk10UHhIh9aJUKMhh S2+CBpdaO9DnS0R/a+PNPNlX/gWc2HZA27uj8uMMNUoX5sjRo6g963QUi/NLj7ej PgSTRb/iclE0MBL2s7x+UhkpNJhOaU8By3I610N1XAdw8Bie4NEkykT3nebLaARU LqrZ+lmfFc5dhXa3/PCE/OSCMKXzT+Y= -----END CERTIFICATE-----Generated at Sat Oct 10 08:16:14 2026 by rpki-client