$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4299dbea-9279-38e8-8f15-e7cb3e998592.roa File: 4299dbea-9279-38e8-8f15-e7cb3e998592.roa (raw, json) Hash identifier: 9ptRd2EzrdUNPi8xiih0oP3bzhIBT0wPlJKTdMeBhJg= Subject key identifier: 23:28:66:A1:32:48:B5:DF:8C:D9:EB:81:32:FE:71:E4:C3:08:9C:4F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F305289AFE8A08819C357A460 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4299dbea-9279-38e8-8f15-e7cb3e998592.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 6079 IP address blocks: 64.205.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:89:af:e8:a0:88:19:c3:57:a4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=fc5ac31d-d9d4-4819-9fe5-ecbc68b7f9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:12:e8:bf:07:86:a9:70:3c:fb:21:06:23:cf: 9c:0a:e4:e1:be:bd:fe:3b:cf:33:fc:39:52:df:c8: 11:94:52:2e:44:68:92:ca:3a:96:e9:0e:38:b8:05: 61:7f:55:ee:93:58:48:83:ee:63:7c:fa:a0:d4:cd: e9:f0:b3:3d:c7:6c:08:d2:11:2e:58:fa:f5:cb:c1: 4c:a3:83:06:6d:1c:a3:77:64:db:39:a2:5a:b8:5f: a1:7e:46:57:80:0c:a0:4d:59:da:e3:24:24:2a:fd: d5:55:22:2c:3d:5d:d8:8c:32:ca:70:da:63:8e:c2: 26:a7:16:66:47:eb:b4:e9:19:51:27:84:8e:18:55: 91:6e:94:98:02:29:40:6f:49:a4:00:bc:b4:a7:48: 79:06:cc:7e:48:e7:e6:b6:d4:f7:84:e1:db:cb:80: a2:15:ae:83:8b:24:91:9c:56:8e:b9:a8:ed:8f:ee: 68:a6:b4:43:24:49:34:3b:d6:01:73:18:c0:7e:e9: 26:f8:ea:95:d0:77:8f:fa:09:f0:87:bd:43:e3:02: 94:0b:b4:04:a7:43:f9:c6:b9:1d:65:5f:74:f3:c3: 5f:a0:03:b5:b0:bf:36:43:ea:86:c1:13:c6:09:bc: b5:ae:e0:56:09:bd:ff:af:79:a0:d0:d8:eb:7a:f8: 79:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:28:66:A1:32:48:B5:DF:8C:D9:EB:81:32:FE:71:E4:C3:08:9C:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4299dbea-9279-38e8-8f15-e7cb3e998592.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.205.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:76:85:70:2e:a2:20:a1:82:26:fc:13:6b:ad:4e:8e:0c:95: e7:c6:15:64:49:b9:27:f6:01:06:20:93:55:3b:d4:90:60:92: 1b:1f:58:6c:15:b3:54:4a:fb:d2:55:d4:80:c1:a4:1a:b1:5c: 4a:60:fe:a5:91:49:0d:9e:1b:b6:2f:b0:bd:0b:db:43:6c:02: 78:d6:f6:ba:4e:d1:04:cb:04:e6:8e:08:1b:02:ca:f8:a6:bc: 42:80:04:9c:80:89:16:05:cc:e1:b2:83:73:3e:82:63:14:c8: 17:8c:f4:e3:5b:ca:30:92:16:ae:34:c1:7a:2e:a7:73:f9:b1: 92:d3:81:94:4f:04:de:24:24:c2:eb:7c:24:38:42:71:bb:9c: 1c:60:c1:a1:14:e5:38:37:e0:b1:30:6e:13:1c:ea:35:7b:db: 28:b6:80:e7:dc:9c:0a:5c:a7:38:57:57:99:52:04:78:09:05: 92:f2:a4:fe:6b:7b:cd:ae:06:8d:ed:6d:10:b8:73:e2:c5:e6: e3:6c:33:ab:5f:58:1b:02:6a:c5:a9:b0:fe:e5:81:e2:c3:f4: cc:ae:b1:ca:dd:ed:e8:09:dd:c5:5f:a3:a5:ed:26:52:7a:a5: c4:42:fa:00:f0:77:ab:2b:10:35:42:41:19:fd:87:89:95:78: 67:66:10:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUomv6KCIGcNXpGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk ZmM1YWMzMWQtZDlkNC00ODE5LTlmZTUtZWNiYzY4YjdmOWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohLovweGqXA8+yEGI8+cCuThvr3+O88z/DlS 38gRlFIuRGiSyjqW6Q44uAVhf1Xuk1hIg+5jfPqg1M3p8LM9x2wI0hEuWPr1y8FM o4MGbRyjd2TbOaJauF+hfkZXgAygTVna4yQkKv3VVSIsPV3YjDLKcNpjjsImpxZm R+u06RlRJ4SOGFWRbpSYAilAb0mkALy0p0h5Bsx+SOfmttT3hOHby4CiFa6DiySR nFaOuajtj+5oprRDJEk0O9YBcxjAfukm+OqV0HeP+gnwh71D4wKUC7QEp0P5xrkd ZV9088NfoAO1sL82Q+qGwRPGCby1ruBWCb3/r3mg0Njrevh5nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMoZqEySLXfjNnrgTL+ceTDCJxPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDI5OWRiZWEtOTI3OS0z OGU4LThmMTUtZTdjYjNlOTk4NTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQM3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL92hXAuoiChgib8E2utTo4MlefGFWRJuSf2AQYgk1U71JBgkhsfWGwV s1RK+9JV1IDBpBqxXEpg/qWRSQ2eG7YvsL0L20NsAnjW9rpO0QTLBOaOCBsCyvim vEKABJyAiRYFzOGyg3M+gmMUyBeM9ONbyjCSFq40wXoup3P5sZLTgZRPBN4kJMLr fCQ4QnG7nBxgwaEU5Tg34LEwbhMc6jV72yi2gOfcnApcpzhXV5lSBHgJBZLypP5r e82uBo3tbRC4c+LF5uNsM6tfWBsCasWpsP7lgeLD9Myuscrd7egJ3cVfo6XtJlJ6 pcRC+gDwd6srEDVCQRn9h4mVeGdmEG0= -----END CERTIFICATE-----Generated at Sat Oct 10 15:36:05 2026 by rpki-client