$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4bca7f4f-ee10-3b3a-abe2-d0b1ea31bb0d.roa File: 4bca7f4f-ee10-3b3a-abe2-d0b1ea31bb0d.roa (raw, json) Hash identifier: DqIOcwJmEUlh2+J51i8GIPZQG7N3xlNMm7BbCxRyyxI= Subject key identifier: 5D:22:9B:81:4B:71:2A:7E:1D:71:1B:68:8F:B5:0E:59:FD:12:7E:2F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F173238D584EB46E4B24E2B80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4bca7f4f-ee10-3b3a-abe2-d0b1ea31bb0d.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 13347 IP address blocks: 68.167.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:38:d5:84:eb:46:e4:b2:4e:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=d9a11d6d-df60-4023-9fc6-b670ccb26291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:95:76:c2:b9:52:1f:60:61:89:12:9c:5a:23: 16:d0:bc:ef:97:51:4b:e3:fd:f3:e4:96:c4:ce:38: ce:d5:c5:90:01:e0:c4:f5:ac:a1:9f:59:1b:87:32: 43:22:c7:ba:d9:0b:24:fe:ec:e0:63:8a:e8:c6:d4: f4:f5:55:93:f2:c3:b0:cb:7d:b7:dc:ac:71:b0:6f: f5:a3:36:90:73:d6:5e:ff:f9:26:c5:9f:13:cb:29: a9:ce:8f:05:39:cc:8b:5a:49:94:ae:68:85:4e:ce: b7:9e:d9:bd:d5:9f:f5:f4:6c:32:54:30:d3:d4:d7: 45:5c:ce:4c:e6:83:46:47:5b:71:12:01:78:04:b1: cc:ce:73:de:07:22:2a:0b:e8:b5:1d:60:6b:8d:a7: 7f:91:06:39:1f:77:95:0d:e6:70:eb:2a:de:48:a1: bd:d9:02:5c:95:c1:ca:7b:36:1f:3e:7c:4e:cd:80: 02:7f:57:68:c3:af:34:db:b5:45:53:30:ef:98:1d: 5d:e4:10:a5:9d:bf:f2:13:0e:af:9b:c5:b4:01:28: 5e:e0:4b:8b:51:1a:3c:b7:f5:35:d9:19:f5:7d:4f: 33:c8:06:2d:11:e9:d1:dc:ab:97:af:12:c4:b2:28: 21:67:a7:d7:0b:f4:91:33:c4:fc:0c:11:14:39:10: b4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:22:9B:81:4B:71:2A:7E:1D:71:1B:68:8F:B5:0E:59:FD:12:7E:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4bca7f4f-ee10-3b3a-abe2-d0b1ea31bb0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:be:f3:4d:9f:d7:d0:60:e2:2e:23:12:d8:ad:65:50:d4:ae: 66:14:68:63:69:d0:6c:cf:8b:01:6f:9c:e5:19:44:de:9f:46: 53:b1:78:bd:0b:40:a0:00:51:7f:69:02:e7:8e:2d:a8:bb:2b: 12:4b:12:0b:39:93:3b:d2:64:60:9d:65:8a:6c:c7:67:95:73: 43:1a:63:93:e4:a1:70:f8:6c:fa:20:7c:f6:da:55:1f:ae:23: d9:d8:6b:56:68:e3:47:39:10:97:d4:2b:f9:77:d2:b5:52:0c: 28:55:bd:97:53:61:98:de:2a:7f:ad:13:eb:fa:d3:df:b5:62: a7:ce:20:2e:87:2b:95:42:fd:92:15:6f:55:cf:49:ac:e3:6a: 47:19:5f:94:0c:c7:76:fb:28:fd:8e:fc:88:11:f9:cd:9b:4e: bb:01:d5:2e:ed:83:92:f9:f3:68:e7:6e:69:0c:9f:01:26:ed: 28:23:9c:8f:7f:37:62:ed:cd:f2:13:7f:87:71:40:c3:d6:3a: b8:db:76:af:3d:c8:3f:27:45:16:68:16:aa:bb:c5:1c:b6:96: 3a:14:06:83:9e:6b:88:c9:1c:f6:1d:0d:98:8c:df:1b:97:9c: 7b:f2:d1:0b:1a:39:17:db:c6:5c:4f:61:30:27:7f:0e:a8:66: 72:f0:0e:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMjjVhOtG5LJOK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk ZDlhMTFkNmQtZGY2MC00MDIzLTlmYzYtYjY3MGNjYjI2MjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZV2wrlSH2BhiRKcWiMW0Lzvl1FL4/3z5JbE zjjO1cWQAeDE9ayhn1kbhzJDIse62Qsk/uzgY4roxtT09VWT8sOwy3233KxxsG/1 ozaQc9Ze//kmxZ8Tyympzo8FOcyLWkmUrmiFTs63ntm91Z/19GwyVDDT1NdFXM5M 5oNGR1txEgF4BLHMznPeByIqC+i1HWBrjad/kQY5H3eVDeZw6yreSKG92QJclcHK ezYfPnxOzYACf1dow68027VFUzDvmB1d5BClnb/yEw6vm8W0AShe4EuLURo8t/U1 2Rn1fU8zyAYtEenR3KuXrxLEsighZ6fXC/SRM8T8DBEUORC0gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0im4FLcSp+HXEbaI+1Dln9En4vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGJjYTdmNGYtZWUxMC0z YjNhLWFiZTItZDBiMWVhMzFiYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL6+802f19Bg4i4jEtitZVDUrmYUaGNp0GzPiwFvnOUZRN6fRlOxeL0L QKAAUX9pAueOLai7KxJLEgs5kzvSZGCdZYpsx2eVc0MaY5PkoXD4bPogfPbaVR+u I9nYa1Zo40c5EJfUK/l30rVSDChVvZdTYZjeKn+tE+v609+1YqfOIC6HK5VC/ZIV b1XPSazjakcZX5QMx3b7KP2O/IgR+c2bTrsB1S7tg5L582jnbmkMnwEm7SgjnI9/ N2LtzfITf4dxQMPWOrjbdq89yD8nRRZoFqq7xRy2ljoUBoOea4jJHPYdDZiM3xuX nHvy0QsaORfbxlxPYTAnfw6oZnLwDrM= -----END CERTIFICATE-----Generated at Tue Sep 22 20:34:44 2026 by rpki-client