$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6a285f23-a6d5-3a05-839f-d1320f1944eb.roa File: 6a285f23-a6d5-3a05-839f-d1320f1944eb.roa (raw, json) Hash identifier: OT4P9bsT4OE/Kar+1sing3uJC3nxb4626C7YBmSiqjo= Subject key identifier: 9C:03:ED:FA:EB:0D:2E:84:1A:27:90:4B:62:B0:22:67:99:27:55:1F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4974659A5384F0C536B1BD30 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6a285f23-a6d5-3a05-839f-d1320f1944eb.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3257 IP address blocks: 68.165.106.0/23 maxlen: 24 68.166.188.0/23 maxlen: 24 68.167.64.0/23 maxlen: 24 68.167.68.0/23 maxlen: 24 68.167.70.0/23 maxlen: 24 68.167.144.0/23 maxlen: 24 68.167.182.0/23 maxlen: 24 68.167.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:65:9a:53:84:f0:c5:36:b1:bd:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=20db98c1-c3f3-49c2-9436-27fb5e9a4ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9c:20:3e:7c:f0:2c:bf:21:ca:b3:41:d2:aa: 40:54:99:64:23:ea:b5:50:88:85:bf:47:cd:d4:51: 3c:02:68:14:cd:50:cb:c2:32:ee:04:46:b1:23:75: bd:53:19:2f:03:31:da:52:8f:85:f8:a9:99:29:51: 32:63:b0:c1:f9:61:0b:6c:75:d6:f0:8a:00:24:10: 8c:f4:f1:d2:2a:21:62:9b:be:27:85:b2:d0:03:0a: ae:08:e4:5a:3b:90:b3:91:5d:cf:13:51:d0:73:60: c7:65:f6:a1:c2:f3:6c:0a:7e:df:70:1a:d2:ed:78: b5:dc:95:56:4b:c6:72:33:ac:11:79:66:7e:c8:fe: be:d7:25:dc:cd:5b:27:58:1c:89:c5:f8:21:39:5e: ee:78:e6:e2:18:0d:5e:1f:5c:14:88:d9:be:38:ed: dc:64:08:8a:24:bc:33:13:09:d7:38:e8:37:47:c0: 82:d1:a9:fc:e7:ba:a1:74:20:d4:6b:da:57:35:99: ab:09:ba:1b:3b:2c:a1:e8:42:8f:9f:bb:56:2f:5a: 47:53:72:c3:b3:d8:a0:17:97:4d:b2:0c:3e:47:e8: aa:2c:90:f7:4a:e1:22:db:c4:92:9f:f7:03:fc:f9: 92:fb:b4:bc:c0:5a:60:6e:58:52:d0:bf:85:43:02: 82:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:03:ED:FA:EB:0D:2E:84:1A:27:90:4B:62:B0:22:67:99:27:55:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6a285f23-a6d5-3a05-839f-d1320f1944eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.165.106.0/23 68.166.188.0/23 68.167.64.0/23 68.167.68.0/22 68.167.144.0/23 68.167.182.0/23 68.167.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:51:87:b8:bd:b9:37:c2:7d:f2:e4:66:84:45:1f:34:64:f9: 76:3a:31:07:ca:e1:bc:70:cf:c9:c3:a8:b5:5d:5b:fd:2a:63: 95:bd:40:9d:33:98:a6:06:91:b8:1b:32:aa:36:37:21:ab:fe: 85:75:fe:5c:89:3e:67:cb:7d:c3:47:32:c8:7e:ed:ba:e2:cc: 9f:15:7a:b5:63:d5:b2:8d:e7:23:87:c8:2d:b0:3e:43:c0:90: af:23:0a:bd:6d:f3:c8:a0:77:2f:ec:08:6b:88:de:ba:bb:e8: ee:2b:f6:f8:84:fa:d1:79:cc:2f:32:40:a7:04:37:27:d6:7a: a8:3c:c2:4e:be:ce:49:f4:33:63:ed:09:b3:66:fd:32:69:b6: e8:e7:13:33:11:81:77:0c:4a:8a:30:90:9a:f2:19:91:05:10: 96:d7:06:0f:28:bc:8e:3b:e7:00:b2:72:ce:34:b5:e1:ce:9b: 46:a1:20:22:5d:84:e2:06:b2:1d:66:c0:84:ac:40:42:1e:bb: 8c:35:e6:07:7a:0c:5b:6e:46:2e:81:42:1a:00:ac:cb:6e:30: 9d:75:03:65:64:0e:42:0d:c6:8c:0d:23:10:b9:cf:72:f0:8c: b6:4e:40:0a:d9:8a:ef:38:10:43:a5:e8:80:32:8c:cf:f2:24: 10:24:a5:d8 -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWE9JdGWaU4TwxTaxvTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjBkYjk4YzEtYzNmMy00OWMyLTk0MzYtMjdmYjVlOWE0ZmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJwgPnzwLL8hyrNB0qpAVJlkI+q1UIiFv0fN 1FE8AmgUzVDLwjLuBEaxI3W9UxkvAzHaUo+F+KmZKVEyY7DB+WELbHXW8IoAJBCM 9PHSKiFim74nhbLQAwquCORaO5CzkV3PE1HQc2DHZfahwvNsCn7fcBrS7Xi13JVW S8ZyM6wReWZ+yP6+1yXczVsnWByJxfghOV7ueObiGA1eH1wUiNm+OO3cZAiKJLwz EwnXOOg3R8CC0an857qhdCDUa9pXNZmrCbobOyyh6EKPn7tWL1pHU3LDs9igF5dN sgw+R+iqLJD3SuEi28SSn/cD/PmS+7S8wFpgblhS0L+FQwKCtwIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFJwD7frrDS6EGieQS2KwImeZJ1UfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNmEyODVmMjMtYTZkNS0z YTA1LTgzOWYtZDEzMjBmMTk0NGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBRKVqAwQB RKa8AwQBRKdAAwQCRKdEAwQBRKeQAwQBRKe2AwQBRKfEMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABtRh7i9 uTfCffLkZoRFHzRk+XY6MQfK4bxwz8nDqLVdW/0qY5W9QJ0zmKYGkbgbMqo2NyGr /oV1/lyJPmfLfcNHMsh+7brizJ8VerVj1bKN5yOHyC2wPkPAkK8jCr1t88igdy/s CGuI3rq76O4r9viE+tF5zC8yQKcENyfWeqg8wk6+zkn0M2PtCbNm/TJptujnEzMR gXcMSoowkJryGZEFEJbXBg8ovI475wCycs40teHOm0ahICJdhOIGsh1mwISsQEIe u4w15gd6DFtuRi6BQhoArMtuMJ11A2VkDkINxowNIxC5z3LwjLZOQArZiu84EEOl 6IAyjM/yJBAkpdg= -----END CERTIFICATE-----Generated at Sat Oct 10 13:35:15 2026 by rpki-client