$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3ee962ca-4e6d-3459-843a-a268b77afda4.roa File: 3ee962ca-4e6d-3459-843a-a268b77afda4.roa (raw, json) Hash identifier: IHdT1zLEYjD535LqJagVhqAPKm7dtpAxlzhMs6oKhb4= Subject key identifier: 81:B1:5F:0F:25:2B:70:08:44:F5:2F:CF:2B:E6:28:3B:64:99:88:D0 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4973867E93141A31164CCD00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3ee962ca-4e6d-3459-843a-a268b77afda4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 5650 IP address blocks: 64.205.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:86:7e:93:14:1a:31:16:4c:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=76bd0361-8bee-4ac0-8dad-2473fb732faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:76:2d:b2:01:41:b4:07:37:37:57:b1:0b:70: 1a:af:ed:25:dd:2a:f0:42:70:ed:9c:5f:90:b0:11: 72:fe:fc:95:81:89:78:73:aa:8d:9a:d4:c8:82:15: 91:87:b6:67:87:4f:99:35:25:52:bb:cd:33:d8:c0: b9:73:d2:c2:8b:be:71:f7:fd:a0:a4:bb:21:13:cf: 9d:39:fd:d9:91:79:90:bb:ae:16:04:e2:2a:90:9f: 50:27:24:68:e1:9c:c4:e0:58:0b:e1:ec:db:5b:72: 36:61:e9:d8:26:db:d1:c6:2f:db:14:e3:99:44:2b: f1:e7:3b:c9:0b:b5:fd:5a:5e:bb:25:29:b6:c6:f5: d9:d4:b5:52:d9:95:51:4b:4a:ca:2b:5d:4b:a8:f2: 91:bf:ba:0d:31:69:7a:21:b8:b3:c3:3c:f5:a0:54: e9:e1:d7:6a:df:3c:56:35:72:e7:ea:9c:b8:8d:3d: 3d:e3:87:2e:e2:4e:77:55:b5:c2:a2:e7:b8:dc:f8: 1f:04:d1:3a:54:c6:90:a6:8a:c1:31:cb:80:22:15: a6:2f:ae:c5:66:f2:9f:fb:49:5e:65:32:33:6a:b8: 75:af:ac:a8:88:cc:dd:5f:04:4b:aa:77:4a:83:dc: 45:75:8b:4f:9a:d1:3d:69:74:93:1c:e1:27:80:a5: 22:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B1:5F:0F:25:2B:70:08:44:F5:2F:CF:2B:E6:28:3B:64:99:88:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3ee962ca-4e6d-3459-843a-a268b77afda4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.205.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:ce:58:fb:70:cd:59:52:e1:9a:5d:06:97:98:8b:64:0e:0b: ce:8f:2d:19:5e:d5:f4:ea:a1:65:cf:92:b1:f6:01:3a:03:f8: 3d:70:fd:df:6f:05:98:bd:82:c1:a4:8a:af:01:be:b4:a1:a1: 34:f8:4f:e3:5b:25:0a:a4:38:a2:12:71:d0:92:03:1d:0d:8c: c8:d7:96:cc:33:c6:d2:59:36:9c:f6:bd:64:2f:3d:b6:6b:f8: 42:4c:80:03:12:47:0d:4c:64:eb:9e:05:85:14:6b:0d:75:f0: 55:47:3b:d7:71:c1:f9:a5:84:5e:89:83:af:a4:69:4b:ab:b8: d8:65:b7:c6:10:f2:b8:7b:79:c6:a3:f5:4a:60:06:d7:94:3d: 37:57:b9:6c:7e:97:fa:c9:45:4d:ed:c6:4d:c8:ee:d7:58:a5: be:fd:64:34:e0:c1:2e:b7:4f:aa:22:96:89:e9:80:b1:52:3d: a6:f4:a2:f0:d5:f6:95:d8:22:89:1f:df:9e:37:ac:f0:e8:69: 87:f7:2d:b3:96:06:81:f3:24:9d:1b:cc:7e:0d:20:24:45:c5: 91:d3:77:43:f6:43:fc:76:08:61:aa:e5:1b:ba:6d:a5:ee:a3: b6:66:7a:bb:34:a1:4d:02:08:68:82:6c:1b:f9:90:4e:8b:5e: d9:50:80:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc4Z+kxQaMRZMzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzZiZDAzNjEtOGJlZS00YWMwLThkYWQtMjQ3M2ZiNzMyZmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHYtsgFBtAc3N1exC3Aar+0l3SrwQnDtnF+Q sBFy/vyVgYl4c6qNmtTIghWRh7Znh0+ZNSVSu80z2MC5c9LCi75x9/2gpLshE8+d Of3ZkXmQu64WBOIqkJ9QJyRo4ZzE4FgL4ezbW3I2YenYJtvRxi/bFOOZRCvx5zvJ C7X9Wl67JSm2xvXZ1LVS2ZVRS0rKK11LqPKRv7oNMWl6Ibizwzz1oFTp4ddq3zxW NXLn6py4jT0944cu4k53VbXCoue43PgfBNE6VMaQporBMcuAIhWmL67FZvKf+0le ZTIzarh1r6yoiMzdXwRLqndKg9xFdYtPmtE9aXSTHOEngKUiJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGxXw8lK3AIRPUvzyvmKDtkmYjQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2VlOTYyY2EtNGU2ZC0z NDU5LTg0M2EtYTI2OGI3N2FmZGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQM0VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALrOWPtwzVlS4ZpdBpeYi2QOC86PLRle1fTqoWXPkrH2AToD+D1w/d9v BZi9gsGkiq8BvrShoTT4T+NbJQqkOKIScdCSAx0NjMjXlswzxtJZNpz2vWQvPbZr +EJMgAMSRw1MZOueBYUUaw118FVHO9dxwfmlhF6Jg6+kaUuruNhlt8YQ8rh7ecaj 9UpgBteUPTdXuWx+l/rJRU3txk3I7tdYpb79ZDTgwS63T6oilonpgLFSPab0ovDV 9pXYIokf3543rPDoaYf3LbOWBoHzJJ0bzH4NICRFxZHTd0P2Q/x2CGGq5Ru6baXu o7Zmers0oU0CCGiCbBv5kE6LXtlQgPY= -----END CERTIFICATE-----Generated at Sat Sep 26 02:53:30 2026 by rpki-client