$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/545c06f5-7221-3668-836d-0f506a5c2be2.roa File: 545c06f5-7221-3668-836d-0f506a5c2be2.roa (raw, json) Hash identifier: kGUfeeD4Lo16+o/7tv7O4Nbw8/WjJ8fnX/7cl+ARqS4= Subject key identifier: 3F:03:25:2D:14:93:38:9F:0E:2B:5D:6B:8E:0B:09:AE:F5:4D:A2:CD Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F0A6503EC1D3CA97493B83C00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/545c06f5-7221-3668-836d-0f506a5c2be2.roa Signing time: Wed 02 Sep 2026 10:57:04 +0000 ROA not before: Wed 02 Sep 2026 10:57:04 +0000 ROA not after: Tue 01 Dec 2026 11:57:04 +0000 asID: 6939 IP address blocks: 64.204.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:65:03:ec:1d:3c:a9:74:93:b8:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 2 10:57:04 2026 GMT Not After : Dec 1 11:57:04 2026 GMT Subject: CN=0cef1999-d93b-4108-80cc-152013d46bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:40:30:5e:73:40:a0:c9:66:80:02:c1:3e:a8: fb:90:2c:aa:e9:0c:70:33:0c:d6:04:21:bd:e7:15: ba:d7:64:76:df:b9:fc:a0:62:96:02:b1:17:00:fa: fa:76:93:5e:ff:07:02:b1:46:0c:02:87:d4:70:ae: 19:0a:af:38:c6:8d:a1:a1:ce:8f:0e:52:42:c1:44: 86:f9:bd:5e:f5:55:8b:d2:3d:59:d3:81:df:f5:a4: 17:c2:83:c5:30:1a:94:c1:e4:22:35:4e:ad:f0:64: 4b:41:00:f2:36:09:2a:e4:21:cc:62:e2:ee:ec:d4: 5b:90:0c:7a:1a:ac:da:e1:24:bd:44:57:d7:2b:fa: f3:52:92:85:ef:c8:04:62:3e:9a:7e:55:45:99:0b: bf:4d:51:ed:3b:21:d7:7e:e2:9a:f7:71:f8:45:d3: 32:4b:88:f2:57:60:7b:b7:8d:20:6b:40:10:41:ae: 7d:2f:9d:79:aa:04:24:63:dc:75:06:d1:12:01:29: f6:95:8e:3b:83:64:77:86:23:ea:3d:cb:3a:93:38: 47:8b:ba:31:32:e5:8d:e3:ad:22:cf:23:9b:0f:78: c7:60:59:21:39:c9:21:e6:ae:0a:aa:4f:3a:14:18: b1:71:dc:54:5e:92:14:ce:31:db:b7:6b:f8:8a:2c: d0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:03:25:2D:14:93:38:9F:0E:2B:5D:6B:8E:0B:09:AE:F5:4D:A2:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/545c06f5-7221-3668-836d-0f506a5c2be2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:75:b3:1e:e5:25:c0:08:f5:d6:e8:fa:e6:7e:52:68:29:fa: 12:4a:e4:b2:eb:13:25:47:60:c0:c8:c5:bd:ff:7d:54:62:44: c1:db:6d:d9:49:98:ac:be:d4:a5:10:e0:3b:88:26:36:e0:00: f7:19:80:8e:29:bc:e4:f9:62:58:aa:5d:3d:af:90:fc:26:d5: d7:97:0e:dd:c4:b5:d6:23:82:d5:8a:ca:b0:d0:10:a2:3b:56: 37:d5:07:05:2a:69:37:96:c2:3c:38:64:66:0a:86:6b:19:3b: c7:a9:a0:13:47:db:c9:a6:a9:5f:ba:c7:cc:87:71:00:39:43: 5e:76:49:b6:0e:a6:6a:eb:35:6c:9e:43:03:a2:da:be:e0:62: 83:42:36:c3:47:1a:e1:4c:4f:8d:dd:41:23:93:66:37:de:84: 1b:29:0b:98:08:1f:1f:f6:e1:99:50:6f:94:48:b8:88:c1:65: d1:3b:63:a0:d5:b6:7f:31:bc:60:31:ac:4e:c4:60:95:50:ec: f1:09:b2:98:28:c5:e5:1d:8f:4b:ca:24:6f:a0:18:ee:88:38: 31:1f:98:6e:51:36:ae:66:1d:e5:db:79:79:59:ea:f2:45:75: b8:a2:68:42:a8:8f:c2:e4:41:47:d2:5a:a7:1f:a2:04:08:53: ab:43:4d:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8KZQPsHTypdJO4PAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwMjEwNTcwNFoXDTI2MTIwMTExNTcwNFowLzEtMCsGA1UEAxMk MGNlZjE5OTktZDkzYi00MTA4LTgwY2MtMTUyMDEzZDQ2YmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUAwXnNAoMlmgALBPqj7kCyq6QxwMwzWBCG9 5xW612R237n8oGKWArEXAPr6dpNe/wcCsUYMAofUcK4ZCq84xo2hoc6PDlJCwUSG +b1e9VWL0j1Z04Hf9aQXwoPFMBqUweQiNU6t8GRLQQDyNgkq5CHMYuLu7NRbkAx6 Gqza4SS9RFfXK/rzUpKF78gEYj6aflVFmQu/TVHtOyHXfuKa93H4RdMyS4jyV2B7 t40ga0AQQa59L515qgQkY9x1BtESASn2lY47g2R3hiPqPcs6kzhHi7oxMuWN460i zyObD3jHYFkhOckh5q4Kqk86FBixcdxUXpIUzjHbt2v4iizQ9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8DJS0UkzifDitda44LCa71TaLNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNTQ1YzA2ZjUtNzIyMS0z NjY4LTgzNmQtMGY1MDZhNWMyYmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMwDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJ1sx7lJcAI9dbo+uZ+Umgp+hJK5LLrEyVHYMDIxb3/fVRiRMHbbdlJ mKy+1KUQ4DuIJjbgAPcZgI4pvOT5YliqXT2vkPwm1deXDt3EtdYjgtWKyrDQEKI7 VjfVBwUqaTeWwjw4ZGYKhmsZO8epoBNH28mmqV+6x8yHcQA5Q152SbYOpmrrNWye QwOi2r7gYoNCNsNHGuFMT43dQSOTZjfehBspC5gIHx/24ZlQb5RIuIjBZdE7Y6DV tn8xvGAxrE7EYJVQ7PEJspgoxeUdj0vKJG+gGO6IODEfmG5RNq5mHeXbeXlZ6vJF dbiiaEKoj8LkQUfSWqcfogQIU6tDTeA= -----END CERTIFICATE-----Generated at Tue Sep 22 23:07:35 2026 by rpki-client