$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/855174e9-ee86-3ff3-9c98-5b654b4eb7be.roa File: 855174e9-ee86-3ff3-9c98-5b654b4eb7be.roa (raw, json) Hash identifier: 5AzkKQDwIuiTK55PZK2qku3DmH+naTJrovrlRJiXo/o= Subject key identifier: 1D:27:32:30:C2:63:6A:F2:D5:30:89:4F:BC:F1:18:18:71:E2:B6:0F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F08545A6D6705DD0EB63A6680 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/855174e9-ee86-3ff3-9c98-5b654b4eb7be.roa Signing time: Tue 01 Sep 2026 17:11:53 +0000 ROA not before: Tue 01 Sep 2026 17:11:53 +0000 ROA not after: Mon 30 Nov 2026 18:11:53 +0000 asID: 397423 IP address blocks: 66.253.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:08:54:5a:6d:67:05:dd:0e:b6:3a:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 1 17:11:53 2026 GMT Not After : Nov 30 18:11:53 2026 GMT Subject: CN=04808452-1556-4922-a837-3724427ab4fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:42:5e:70:83:3f:56:79:82:0a:24:46:d8:ba: 61:a0:09:e2:4d:76:cb:40:64:5c:9b:3f:2d:b9:b3: 59:40:e8:72:9e:b9:e3:8e:3d:a5:4a:7d:db:d3:3f: 31:b6:63:5e:e5:b3:2b:08:8f:1a:bc:ee:2c:dd:bf: f6:24:c3:90:6f:da:34:da:7f:84:6b:c3:b9:28:bb: 2f:92:86:bc:01:b5:66:53:d5:90:83:68:bb:94:d9: de:42:f5:0f:cc:52:20:99:14:51:1a:26:e4:89:e9: e6:6c:14:87:7d:12:bf:4a:4e:52:7e:88:0b:3e:eb: 42:06:65:bf:7c:7f:fd:13:4f:df:c4:5f:83:3e:09: 41:e3:58:07:7f:88:51:7a:c2:74:7e:50:a5:6b:d4: 8e:68:39:63:e3:5c:60:f3:50:28:e8:81:83:be:ee: 91:6d:a0:d1:94:a1:d5:5a:40:d8:aa:2b:8d:fe:92: 1f:61:9b:38:c5:2b:27:51:b2:8a:75:69:42:a2:c6: 3f:40:f3:23:a6:c5:92:32:c7:4f:d6:1a:ec:09:f3: cd:6f:49:64:e6:5e:ef:cc:c3:11:52:e4:70:c6:8a: 68:43:0c:4a:fe:dd:52:da:9d:76:77:16:dc:62:6c: 27:69:11:c7:88:23:58:53:93:ce:44:3e:ee:de:fc: 53:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:27:32:30:C2:63:6A:F2:D5:30:89:4F:BC:F1:18:18:71:E2:B6:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/855174e9-ee86-3ff3-9c98-5b654b4eb7be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:29:c7:6d:5c:9a:c0:6b:c9:8b:8c:43:75:08:21:ae:8a:54: 31:94:ac:4e:f8:84:b8:6a:fd:31:bb:a5:2d:82:b2:1e:8f:98: 7b:c0:84:de:6c:38:d0:b8:0c:51:59:5c:13:a1:35:53:aa:43: 56:52:3d:5a:ee:ab:32:32:b8:dc:02:e4:7c:15:c4:5a:a8:44: 4d:08:75:2b:7f:d1:2b:7e:a1:e9:fe:f2:06:a7:f0:52:b7:69: 90:6e:e4:37:38:d1:94:b8:df:a1:07:75:73:a7:73:cb:95:eb: f8:c9:1e:69:0c:9f:09:71:64:d7:b4:6d:26:c8:99:d3:10:28: 10:18:00:da:04:7d:7f:b0:37:8e:13:4c:ca:4c:02:28:7e:c5: 26:9f:af:a3:81:36:2a:46:01:4b:e5:71:d5:33:5d:50:5e:e3: 2b:37:98:cd:2a:ad:86:4c:9b:c8:33:8a:cf:03:2f:5e:98:05: 6c:c7:1a:dc:4e:37:1d:33:cb:08:40:f7:72:97:a6:50:ad:fc: 07:a1:ed:34:8a:a1:a4:62:94:3d:c6:ad:f9:2f:41:86:07:3d: 5f:69:db:e4:3a:79:a6:25:38:49:13:84:a4:f9:5b:44:ab:3c: cb:bf:86:d4:f8:12:2b:04:6b:f6:ab:2c:b3:08:6f:c5:dc:40: eb:9e:dc:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8IVFptZwXdDrY6ZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwMTE3MTE1M1oXDTI2MTEzMDE4MTE1M1owLzEtMCsGA1UEAxMk MDQ4MDg0NTItMTU1Ni00OTIyLWE4MzctMzcyNDQyN2FiNGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEJecIM/VnmCCiRG2LphoAniTXbLQGRcmz8t ubNZQOhynrnjjj2lSn3b0z8xtmNe5bMrCI8avO4s3b/2JMOQb9o02n+Ea8O5KLsv koa8AbVmU9WQg2i7lNneQvUPzFIgmRRRGibkienmbBSHfRK/Sk5SfogLPutCBmW/ fH/9E0/fxF+DPglB41gHf4hResJ0flCla9SOaDlj41xg81Ao6IGDvu6RbaDRlKHV WkDYqiuN/pIfYZs4xSsnUbKKdWlCosY/QPMjpsWSMsdP1hrsCfPNb0lk5l7vzMMR UuRwxopoQwxK/t1S2p12dxbcYmwnaRHHiCNYU5PORD7u3vxTYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0nMjDCY2ry1TCJT7zxGBhx4rYPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODU1MTc0ZTktZWU4Ni0z ZmYzLTljOTgtNWI2NTRiNGViN2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv1kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKApx21cmsBryYuMQ3UIIa6KVDGUrE74hLhq/TG7pS2Csh6PmHvAhN5s ONC4DFFZXBOhNVOqQ1ZSPVruqzIyuNwC5HwVxFqoRE0IdSt/0St+oen+8gan8FK3 aZBu5Dc40ZS436EHdXOnc8uV6/jJHmkMnwlxZNe0bSbImdMQKBAYANoEfX+wN44T TMpMAih+xSafr6OBNipGAUvlcdUzXVBe4ys3mM0qrYZMm8gzis8DL16YBWzHGtxO Nx0zywhA93KXplCt/Aeh7TSKoaRilD3GrfkvQYYHPV9p2+Q6eaYlOEkThKT5W0Sr PMu/htT4EisEa/arLLMIb8XcQOue3E0= -----END CERTIFICATE-----Generated at Tue Sep 22 18:54:23 2026 by rpki-client