$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4f93acbb-9d0b-3e8d-98ee-21d261e2d48d.roa File: 4f93acbb-9d0b-3e8d-98ee-21d261e2d48d.roa (raw, json) Hash identifier: 3gtqPlWEF+ctpGCl+YY9xakNJ/gsYaXV1+mj+Vs/JN4= Subject key identifier: 85:6E:07:4A:4A:7D:19:F1:06:CF:5B:3C:D4:44:63:02:0B:29:78:32 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F498A9AF4297B0E79ABD37C00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4f93acbb-9d0b-3e8d-98ee-21d261e2d48d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 211826 IP address blocks: 64.204.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:9a:f4:29:7b:0e:79:ab:d3:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=52a5f965-d1df-4743-af11-2bd7c43d2e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b7:56:ef:ee:4d:eb:7b:75:c1:45:ee:63:db: 83:ec:64:30:78:c2:77:28:fd:b6:65:e7:4f:63:01: bf:cb:3f:e7:cd:f0:60:8d:95:33:b5:de:5b:95:f7: cd:e7:0c:1a:29:5f:c4:a1:66:f0:00:24:e5:81:85: d1:7d:e7:ea:f1:05:2d:ba:16:93:af:40:5c:59:1d: 9f:8f:36:e4:27:8f:10:73:a1:92:8d:8d:81:5e:f5: 50:97:93:76:90:d5:61:10:e8:a2:3e:e3:82:42:1c: 46:1a:91:4a:af:f8:56:82:b7:ef:68:6f:e3:16:b2: 7a:67:ab:56:49:1d:c2:fa:80:58:92:c7:62:ab:d8: f7:80:93:19:d8:9b:27:80:da:65:2e:ff:12:8e:da: a6:fb:48:80:76:12:a0:3f:a0:17:83:f1:c9:3e:fb: a1:98:17:eb:39:27:04:d4:a5:1b:cc:d3:0a:37:87: c8:3a:21:1a:fd:8a:3a:7f:2d:1a:8a:89:ad:d5:a3: 3a:f1:e7:1a:6a:bc:c0:4a:f6:24:a2:97:1f:08:35: 3e:a2:99:23:38:f3:01:39:21:33:85:34:85:ab:b9: a2:03:a3:45:b6:68:20:e7:29:bf:e6:8a:c6:4a:8c: d5:a0:a3:4a:eb:56:88:53:bc:36:bb:08:d1:58:a9: 6b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6E:07:4A:4A:7D:19:F1:06:CF:5B:3C:D4:44:63:02:0B:29:78:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4f93acbb-9d0b-3e8d-98ee-21d261e2d48d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:55:3d:f8:bb:95:88:f6:1e:d8:85:3a:52:a6:54:a3:19:83: b6:d1:8d:c9:ed:15:c2:70:f4:df:78:8c:df:20:ea:69:da:4d: 86:f7:fb:27:ae:13:57:9e:df:e5:06:6e:2f:f5:eb:e0:d6:32: 26:e8:df:f8:5e:b0:36:e6:f2:42:d2:6a:a6:15:60:63:98:d4: 1b:79:5c:6e:73:e3:37:18:60:56:81:63:b8:b7:21:f8:3a:0d: 80:87:1e:76:d0:44:3b:12:41:e8:5c:c4:61:51:87:9e:2b:ec: 56:9b:3a:9d:ad:38:4a:11:e5:3c:2a:5c:47:8b:73:c1:92:aa: 7d:67:2d:7b:56:03:f2:60:ef:6e:9d:53:3e:6a:c0:61:c7:e9: 81:b4:62:19:0a:b0:36:d0:fb:83:21:f0:75:48:a6:f1:f0:11: 0e:e1:c0:c0:1b:65:91:58:a0:5d:8c:9e:c3:c0:02:93:6e:5e: b0:39:61:e8:96:ba:fb:32:a5:6e:e2:7c:62:7e:91:fd:b5:0a: be:15:82:ff:d8:4c:1f:db:32:68:3d:0d:0d:73:2a:e9:16:98: 50:74:c8:8b:b4:8d:6e:26:41:31:99:20:1d:38:7c:30:e6:f0: 29:1e:10:29:02:93:fb:64:2e:b4:0d:98:21:07:1c:5d:c2:92: 39:49:4b:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jipr0KXsOeavTfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTJhNWY5NjUtZDFkZi00NzQzLWFmMTEtMmJkN2M0M2QyZTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbdW7+5N63t1wUXuY9uD7GQweMJ3KP22ZedP YwG/yz/nzfBgjZUztd5blffN5wwaKV/EoWbwACTlgYXRfefq8QUtuhaTr0BcWR2f jzbkJ48Qc6GSjY2BXvVQl5N2kNVhEOiiPuOCQhxGGpFKr/hWgrfvaG/jFrJ6Z6tW SR3C+oBYksdiq9j3gJMZ2JsngNplLv8Sjtqm+0iAdhKgP6AXg/HJPvuhmBfrOScE 1KUbzNMKN4fIOiEa/Yo6fy0aiomt1aM68ecaarzASvYkopcfCDU+opkjOPMBOSEz hTSFq7miA6NFtmgg5ym/5orGSozVoKNK61aIU7w2uwjRWKlrAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVuB0pKfRnxBs9bPNREYwILKXgyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGY5M2FjYmItOWQwYi0z ZThkLTk4ZWUtMjFkMjYxZTJkNDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMzVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMpVPfi7lYj2HtiFOlKmVKMZg7bRjcntFcJw9N94jN8g6mnaTYb3+yeu E1ee3+UGbi/16+DWMibo3/hesDbm8kLSaqYVYGOY1Bt5XG5z4zcYYFaBY7i3Ifg6 DYCHHnbQRDsSQehcxGFRh54r7FabOp2tOEoR5TwqXEeLc8GSqn1nLXtWA/Jg726d Uz5qwGHH6YG0YhkKsDbQ+4Mh8HVIpvHwEQ7hwMAbZZFYoF2MnsPAApNuXrA5YeiW uvsypW7ifGJ+kf21Cr4Vgv/YTB/bMmg9DQ1zKukWmFB0yIu0jW4mQTGZIB04fDDm 8CkeECkCk/tkLrQNmCEHHF3CkjlJSxk= -----END CERTIFICATE-----Generated at Mon Sep 28 16:29:24 2026 by rpki-client