$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7a6d2b13-3349-35f5-a10a-291527b13a13.roa File: 7a6d2b13-3349-35f5-a10a-291527b13a13.roa (raw, json) Hash identifier: A5Y4+4XDA38JPJ3NQ9tjTUVImZCQQ80xGhB89lEfgYM= Subject key identifier: 68:4C:68:1F:D0:EF:07:36:8E:B7:8A:3B:BF:3E:CC:1B:1F:CA:EA:7A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F5BBB007689AEAF7DD969C480 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7a6d2b13-3349-35f5-a10a-291527b13a13.roa Signing time: Thu 01 Oct 2026 14:10:48 +0000 ROA not before: Thu 01 Oct 2026 14:10:48 +0000 ROA not after: Wed 30 Dec 2026 15:10:48 +0000 asID: 6079 IP address blocks: 68.166.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:bb:00:76:89:ae:af:7d:d9:69:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 1 14:10:48 2026 GMT Not After : Dec 30 15:10:48 2026 GMT Subject: CN=5c470a93-0b27-4f2a-8f5d-251f1d052f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:d9:77:84:a8:ba:9e:eb:bf:2d:ce:d9:ac: 96:ae:0c:c7:79:08:3f:12:e4:3a:c0:72:03:0c:6a: 19:3b:9f:28:ea:8a:61:3a:2d:d8:8d:4f:7c:ee:aa: 57:24:1f:c6:82:08:3d:a5:e9:6f:2a:7e:17:5b:c8: e6:da:d3:37:01:3b:79:4b:e5:3c:34:17:4d:a2:6f: 12:21:e1:a0:9c:1c:45:b7:b5:e6:e5:e8:fc:33:c2: 6d:f7:03:7d:30:cf:a3:c4:72:01:9f:72:aa:ac:25: 97:65:4b:88:37:5f:70:54:3d:d1:df:67:1f:75:13: 91:31:fc:2a:47:69:e8:74:f3:40:3d:b4:7d:d6:0e: 58:a5:b2:f4:31:ad:d4:39:8c:29:fa:52:ef:76:9c: e5:f4:11:fa:e2:9d:7a:35:3a:d1:ed:d1:b5:2c:9c: 53:52:07:e5:d5:85:2d:af:7d:b4:57:08:54:21:89: 15:f3:7f:7c:3e:08:f0:c5:8a:90:4f:65:35:c1:a5: e7:46:58:94:2f:f9:7f:6f:a6:c0:64:6f:2a:96:4b: 7d:f4:98:72:c6:ee:64:54:13:6c:f0:89:4b:71:33: 2a:0e:75:71:63:d1:24:62:c0:1f:5e:e0:02:d0:5d: 47:96:8f:c2:b2:e9:32:06:a5:8f:7b:04:37:ab:1d: a3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4C:68:1F:D0:EF:07:36:8E:B7:8A:3B:BF:3E:CC:1B:1F:CA:EA:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7a6d2b13-3349-35f5-a10a-291527b13a13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.166.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:c7:06:de:dc:a0:92:52:cc:9c:64:3f:c3:08:ad:f5:41:e8: b7:ab:ae:fc:f3:1e:f0:cd:d2:59:41:85:a4:b8:51:30:66:a6: 08:ff:bc:06:eb:48:87:55:9d:1c:7a:fe:ce:76:44:d3:3a:8e: 47:2d:5c:5b:1b:4e:9c:70:d2:49:dd:73:64:4f:eb:22:17:97: 6c:4c:9b:ff:89:8d:91:fc:eb:41:28:dc:84:5e:c7:2f:93:d1: 20:cc:03:6e:a0:e1:5f:e7:1e:9e:2b:82:a4:b1:9f:19:03:ae: bf:ec:c1:e6:b0:33:21:d6:31:5f:3e:e2:47:4e:7f:c9:71:e0: b1:cd:ff:de:4b:08:0f:af:f6:84:50:20:50:4d:4d:16:76:18: aa:f9:c5:e0:a3:43:1e:a5:11:b4:17:26:f2:0c:5e:14:5c:94: 5a:ec:87:9d:f4:74:75:70:b5:41:dd:22:98:72:5e:9f:7a:9f: 55:8e:75:70:b5:a5:98:1b:f9:6c:ae:3c:e3:a5:6e:8a:e0:d0: f3:eb:d7:d7:2f:11:ca:7c:3c:82:1f:be:d0:c2:50:74:0a:29: d9:06:d8:d0:60:b1:3e:47:b8:44:8a:b6:b8:64:b9:b2:f0:67: 01:4f:88:4b:13:c3:76:4a:52:36:80:af:59:7f:1c:31:79:3b: 84:f1:eb:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9buwB2ia6vfdlpxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwMTE0MTA0OFoXDTI2MTIzMDE1MTA0OFowLzEtMCsGA1UEAxMk NWM0NzBhOTMtMGIyNy00ZjJhLThmNWQtMjUxZjFkMDUyZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwLZd4Soup7rvy3O2ayWrgzHeQg/EuQ6wHID DGoZO58o6ophOi3YjU987qpXJB/Gggg9pelvKn4XW8jm2tM3ATt5S+U8NBdNom8S IeGgnBxFt7Xm5ej8M8Jt9wN9MM+jxHIBn3KqrCWXZUuIN19wVD3R32cfdRORMfwq R2nodPNAPbR91g5YpbL0Ma3UOYwp+lLvdpzl9BH64p16NTrR7dG1LJxTUgfl1YUt r320VwhUIYkV8398PgjwxYqQT2U1waXnRliUL/l/b6bAZG8qlkt99Jhyxu5kVBNs 8IlLcTMqDnVxY9EkYsAfXuAC0F1Hlo/CsukyBqWPewQ3qx2jnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhMaB/Q7wc2jreKO78+zBsfyup6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvN2E2ZDJiMTMtMzM0OS0z NWY1LWExMGEtMjkxNTI3YjEzYTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKbdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPHBt7coJJSzJxkP8MIrfVB6LerrvzzHvDN0llBhaS4UTBmpgj/vAbr SIdVnRx6/s52RNM6jkctXFsbTpxw0kndc2RP6yIXl2xMm/+JjZH860Eo3IRexy+T 0SDMA26g4V/nHp4rgqSxnxkDrr/sweawMyHWMV8+4kdOf8lx4LHN/95LCA+v9oRQ IFBNTRZ2GKr5xeCjQx6lEbQXJvIMXhRclFrsh530dHVwtUHdIphyXp96n1WOdXC1 pZgb+WyuPOOlborg0PPr19cvEcp8PIIfvtDCUHQKKdkG2NBgsT5HuESKtrhkubLw ZwFPiEsTw3ZKUjaAr1l/HDF5O4Tx6zE= -----END CERTIFICATE-----Generated at Sat Oct 10 18:02:11 2026 by rpki-client