$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/411b71d2-b0d2-3acf-820a-10fff7ad7752.roa File: 411b71d2-b0d2-3acf-820a-10fff7ad7752.roa (raw, json) Hash identifier: RdTG0DFP6kchyV9GWzpmbDD/NcQeYiDNKkExwX0RY5c= Subject key identifier: 7F:CE:AF:46:CF:E6:5C:DF:14:9E:BE:07:E4:F1:1E:EA:DF:9D:15:D0 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F49733B86026051A8338C0F40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/411b71d2-b0d2-3acf-820a-10fff7ad7752.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15830 IP address blocks: 67.200.52.0/23 maxlen: 24 67.200.56.0/23 maxlen: 24 67.200.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:3b:86:02:60:51:a8:33:8c:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7df18e2b-1f52-4986-85b7-9791b1780ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c1:10:51:a4:ec:4d:a5:1b:9a:c6:5b:d5:0a: 85:c6:38:82:da:47:29:de:af:58:f9:c9:e2:c1:eb: 49:e2:7b:71:7c:fb:26:50:b0:14:d1:12:43:33:c3: d7:6e:f5:95:8b:c4:9a:f3:9e:08:c2:26:27:40:80: f3:64:23:ca:01:a7:b3:02:df:b5:68:7c:11:c8:a9: 25:b4:97:78:60:3f:4a:35:84:5e:c4:aa:ab:2e:82: d7:98:d5:93:58:21:1c:0b:03:eb:e6:f2:65:79:ef: 1c:13:42:84:9c:9c:79:2d:3b:1b:6e:96:b6:e1:6b: ba:2f:5b:49:a9:86:f2:d8:6f:12:66:ad:c6:73:3d: 23:1a:7d:a1:2d:43:81:1a:2c:e2:68:87:0b:8c:ea: 43:6d:6b:22:14:97:7c:91:d4:19:54:64:fe:59:02: 98:78:2e:fb:67:3f:dd:54:e9:9d:72:45:00:39:eb: 66:de:e7:2d:ac:dd:69:30:de:a3:b0:50:0b:57:c3: 65:60:e2:cc:ea:7e:08:d5:75:16:2e:4e:e4:a8:eb: 5a:68:7e:7a:96:50:2e:fa:97:fb:61:2d:59:f7:ec: 62:39:a9:b4:37:17:24:fa:63:27:ed:97:60:a7:bb: d6:10:52:64:dd:d7:46:75:c3:ac:85:8f:d6:9e:f5: 20:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:CE:AF:46:CF:E6:5C:DF:14:9E:BE:07:E4:F1:1E:EA:DF:9D:15:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/411b71d2-b0d2-3acf-820a-10fff7ad7752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 67.200.52.0/23 67.200.56.0/23 67.200.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:fc:56:88:56:c5:a5:36:c7:9b:43:42:5c:80:db:fa:f5:72: c3:ee:d6:cb:d4:7f:61:ba:f8:23:31:86:dc:7d:90:57:6a:0a: b0:65:2a:12:30:22:95:2a:c1:77:fa:67:60:7d:ba:58:60:24: f7:bc:ae:f7:84:4a:1e:5c:0c:a0:16:08:bc:dd:80:66:f7:b6: c7:d5:83:2f:77:21:82:40:b5:b7:49:e7:27:0b:40:6e:05:4e: 4f:a0:ef:a8:70:d7:a5:f4:f3:33:44:c1:81:7b:51:32:d5:f1: d0:66:ae:4f:05:f8:fc:33:25:47:7b:ca:39:04:2f:12:2c:13: c7:cc:9e:a2:8c:f0:c1:8f:66:64:3c:c3:ce:89:ed:e1:a7:5d: 38:c9:17:ae:a4:68:13:c3:60:c5:7e:62:9d:46:9f:7e:a6:6e: 98:59:dc:ba:6c:d1:12:25:0d:3c:00:16:ad:8b:dd:c4:4f:15: 6c:c7:8e:45:36:a5:74:c0:e2:5e:db:82:fa:17:d6:b2:27:a4: 05:34:f8:3b:d5:89:f6:eb:09:83:00:94:00:fd:d8:db:57:54: 96:6d:01:d3:53:2b:36:00:8d:9e:53:f6:26:53:a5:40:75:53: 53:a4:9e:91:fa:21:af:40:73:e2:5d:8b:70:22:21:33:e9:4f: 7f:a4:2d:31 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9JczuGAmBRqDOMD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2RmMThlMmItMWY1Mi00OTg2LTg1YjctOTc5MWIxNzgwY2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8EQUaTsTaUbmsZb1QqFxjiC2kcp3q9Y+cni wetJ4ntxfPsmULAU0RJDM8PXbvWVi8Sa854IwiYnQIDzZCPKAaezAt+1aHwRyKkl tJd4YD9KNYRexKqrLoLXmNWTWCEcCwPr5vJlee8cE0KEnJx5LTsbbpa24Wu6L1tJ qYby2G8SZq3Gcz0jGn2hLUOBGiziaIcLjOpDbWsiFJd8kdQZVGT+WQKYeC77Zz/d VOmdckUAOetm3uctrN1pMN6jsFALV8NlYOLM6n4I1XUWLk7kqOtaaH56llAu+pf7 YS1Z9+xiOam0Nxck+mMn7Zdgp7vWEFJk3ddGdcOshY/WnvUgWwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFH/Or0bP5lzfFJ6+B+TxHurfnRXQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDExYjcxZDItYjBkMi0z YWNmLTgyMGEtMTBmZmY3YWQ3NzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBQ8g0AwQB Q8g4AwQBQ8h0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABr8VohWxaU2x5tDQlyA2/r1csPu1svUf2G6+CMx htx9kFdqCrBlKhIwIpUqwXf6Z2B9ulhgJPe8rveESh5cDKAWCLzdgGb3tsfVgy93 IYJAtbdJ5ycLQG4FTk+g76hw16X08zNEwYF7UTLV8dBmrk8F+PwzJUd7yjkELxIs E8fMnqKM8MGPZmQ8w86J7eGnXTjJF66kaBPDYMV+Yp1Gn36mbphZ3Lps0RIlDTwA Fq2L3cRPFWzHjkU2pXTA4l7bgvoX1rInpAU0+DvVifbrCYMAlAD92NtXVJZtAdNT KzYAjZ5T9iZTpUB1U1OknpH6Ia9Ac+Jdi3AiITPpT3+kLTE= -----END CERTIFICATE-----Generated at Mon Sep 28 05:49:59 2026 by rpki-client