$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/50ead573-dae1-314f-bc6e-7bc478fd3962.roa File: 50ead573-dae1-314f-bc6e-7bc478fd3962.roa (raw, json) Hash identifier: wKSl5NNRnDx697q+TmHZxVXNHit4C8qvbe08TlOvzBA= Subject key identifier: B0:67:9B:75:6A:19:BA:89:9D:4A:7D:49:05:75:77:39:5B:2B:6A:35 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F3B7D1C2D3DC36FBC2034AFDC Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/50ead573-dae1-314f-bc6e-7bc478fd3962.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 6079 IP address blocks: 64.204.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:1c:2d:3d:c3:6f:bc:20:34:af:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=ac445a16-81b9-405a-b233-c64c3f6077fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b3:59:12:a1:ff:a8:16:d5:0b:f2:94:8e:17: 60:09:3f:6e:3b:50:53:f3:ad:e1:c5:43:83:ff:4a: 63:f3:f8:5a:ae:49:28:87:a4:5a:42:ff:b0:ea:69: 87:81:fe:7e:c8:18:0e:c2:fe:f4:c2:70:bf:da:d4: ee:b4:13:19:c9:d9:b3:80:44:44:0b:9c:a3:6e:b2: 0d:8b:61:5d:e9:4b:d0:05:f1:6c:1e:40:2c:f8:54: 37:97:a6:b9:7f:6c:03:e6:04:0f:17:dc:ba:11:b5: f9:1a:e3:c5:79:cd:eb:6e:6a:1e:36:ec:ad:99:f9: e5:af:81:4b:06:5c:77:63:ba:54:a2:09:7f:5c:8e: 59:b8:cd:9a:78:a9:2d:27:52:a9:95:4d:a1:c3:3b: 1e:ae:ec:32:db:f6:6d:ec:75:3a:69:73:3b:90:db: 69:f0:1d:68:65:1b:42:42:e1:56:68:b0:93:e8:bd: dd:dc:8f:02:9d:a5:e4:22:61:6c:81:7f:4e:be:ff: 34:7d:7f:fb:1d:13:a2:81:0f:88:28:e9:fb:3f:b5: 14:25:9d:15:68:25:7d:47:f3:ca:35:25:62:7b:c2: 37:c6:37:2b:b7:81:6a:39:f3:48:90:79:e5:48:19: b8:5f:13:dc:8b:cf:df:48:25:07:5c:31:a7:ca:f9: 09:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:67:9B:75:6A:19:BA:89:9D:4A:7D:49:05:75:77:39:5B:2B:6A:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/50ead573-dae1-314f-bc6e-7bc478fd3962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:c7:cd:09:d2:05:31:0a:75:18:bf:ae:a1:52:20:ab:d4:46: c5:16:a1:69:e2:2e:9a:d7:d8:aa:68:ce:e6:d8:e8:96:53:51: 2f:50:97:5f:48:92:03:2c:b6:77:b1:bf:a5:07:c4:a5:3c:e1: 36:f6:e0:49:cd:a2:a2:c2:87:8f:46:a4:b0:f2:45:b3:fc:d5: 6a:b9:11:23:7d:66:42:d4:91:4a:41:fc:24:99:92:9a:e8:62: 5f:61:ed:6f:b3:86:23:2e:92:a4:a4:08:08:d8:1b:36:fd:d9: c1:74:00:97:7f:b6:d8:84:29:39:bb:2b:11:3b:1f:3b:1d:07: 0d:53:a5:e3:2c:97:18:3c:fa:c1:e3:c6:1d:3c:89:c3:d9:d0: f0:97:40:42:e6:56:53:a3:bf:d6:43:d5:70:17:f8:5e:93:f8: 42:60:97:d5:ad:17:4a:6b:14:37:75:72:44:c9:87:50:0e:eb: ab:98:2e:da:c9:00:04:bd:fd:d7:fc:03:2c:f2:29:c7:a5:b2: ad:53:e9:f4:3d:25:d1:16:56:76:73:cf:62:78:d3:a1:e4:04: 20:ce:2f:2f:4d:74:5d:a0:b3:43:13:2d:43:7b:e6:5d:e0:d9: 6d:d8:e1:b9:7d:7d:4a:2a:88:22:dd:e5:d4:0f:d8:62:ba:61: b2:a2:2d:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fRwtPcNvvCA0r9wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk YWM0NDVhMTYtODFiOS00MDVhLWIyMzMtYzY0YzNmNjA3N2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLNZEqH/qBbVC/KUjhdgCT9uO1BT863hxUOD /0pj8/harkkoh6RaQv+w6mmHgf5+yBgOwv70wnC/2tTutBMZydmzgEREC5yjbrIN i2Fd6UvQBfFsHkAs+FQ3l6a5f2wD5gQPF9y6EbX5GuPFec3rbmoeNuytmfnlr4FL Blx3Y7pUogl/XI5ZuM2aeKktJ1KplU2hwzseruwy2/Zt7HU6aXM7kNtp8B1oZRtC QuFWaLCT6L3d3I8CnaXkImFsgX9Ovv80fX/7HROigQ+IKOn7P7UUJZ0VaCV9R/PK NSVie8I3xjcrt4FqOfNIkHnlSBm4XxPci8/fSCUHXDGnyvkJawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBnm3VqGbqJnUp9SQV1dzlbK2o1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNTBlYWQ1NzMtZGFlMS0z MTRmLWJjNmUtN2JjNDc4ZmQzOTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMzhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzHzQnSBTEKdRi/rqFSIKvURsUWoWniLprX2KpozubY6JZTUS9Ql19I kgMstnexv6UHxKU84Tb24EnNoqLCh49GpLDyRbP81Wq5ESN9ZkLUkUpB/CSZkpro Yl9h7W+zhiMukqSkCAjYGzb92cF0AJd/ttiEKTm7KxE7HzsdBw1TpeMslxg8+sHj xh08icPZ0PCXQELmVlOjv9ZD1XAX+F6T+EJgl9WtF0prFDd1ckTJh1AO66uYLtrJ AAS9/df8AyzyKcelsq1T6fQ9JdEWVnZzz2J406HkBCDOLy9NdF2gs0MTLUN75l3g 2W3Y4bl9fUoqiCLd5dQP2GK6YbKiLSA= -----END CERTIFICATE-----Generated at Tue Sep 22 20:39:21 2026 by rpki-client