$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9011bf61-a4fa-3bd7-aabc-5f6894c62da1.roa File: 9011bf61-a4fa-3bd7-aabc-5f6894c62da1.roa (raw, json) Hash identifier: B8AqDvAWFVR3/+GVGTQiepFNls637WovOsENb57JQsY= Subject key identifier: D7:7D:30:8F:15:C1:6C:73:E7:6B:A9:BE:5A:7B:2F:C7:38:04:E5:ED Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F51D730C5BDD56F60D07113C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9011bf61-a4fa-3bd7-aabc-5f6894c62da1.roa Signing time: Mon 28 Sep 2026 01:09:30 +0000 ROA not before: Mon 28 Sep 2026 01:09:30 +0000 ROA not after: Sun 27 Dec 2026 02:09:30 +0000 asID: 63989 IP address blocks: 68.164.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d7:30:c5:bd:d5:6f:60:d0:71:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 28 01:09:30 2026 GMT Not After : Dec 27 02:09:30 2026 GMT Subject: CN=3dbdffc8-9e4d-40a4-b160-4bbbf59f39c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1d:3a:ab:54:2b:29:8f:18:a1:b9:da:fd:c6: b8:f4:1b:17:eb:fd:37:e1:a7:8e:9e:5a:a4:51:95: 24:92:12:c2:fb:f0:e3:fb:06:01:d3:7c:a8:e4:63: 4d:71:1b:68:89:1a:bf:f1:26:92:9b:60:5f:32:97: da:a7:ab:76:b1:9b:e1:8e:38:46:b6:4e:e4:77:aa: eb:29:f6:cc:14:a5:1e:6c:b4:f9:06:ff:5a:aa:f2: 95:a5:5c:8b:bd:c0:46:44:7f:1b:ae:f6:93:5b:91: b0:a1:8f:7a:d9:7d:fd:77:21:70:bf:57:c0:29:bb: 1e:8e:6b:f7:ba:db:fc:f5:49:3e:53:d3:a6:a9:75: e4:a5:15:b2:98:15:e4:3c:c2:cb:25:2d:7c:e9:1a: 78:8d:2c:fc:10:13:d7:78:85:62:72:5c:3e:2f:83: 15:87:ef:c6:e9:07:37:fa:42:3a:56:96:eb:09:9c: 67:2f:29:6d:e4:94:9b:da:93:d1:41:32:54:48:f6: 7d:08:db:7c:15:b8:bc:87:4c:59:eb:fd:ca:d3:6f: ce:54:4a:b1:a5:75:ed:bd:1e:85:e2:5b:09:1d:4a: 4a:26:aa:ff:cc:92:07:51:8f:9a:c5:3a:b2:99:bf: 9b:67:d8:c4:68:df:05:da:ec:f0:23:15:63:b6:11: 39:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7D:30:8F:15:C1:6C:73:E7:6B:A9:BE:5A:7B:2F:C7:38:04:E5:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9011bf61-a4fa-3bd7-aabc-5f6894c62da1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:e7:eb:d5:f2:c8:40:06:a7:b7:88:18:f7:6b:bb:00:d9:7b: 23:8c:a8:ec:30:d6:d9:97:8a:19:38:d1:18:14:b1:ac:25:02: a2:7d:fd:12:96:dc:07:86:57:b9:0e:6f:f3:fe:79:7b:2b:18: 58:66:76:18:50:dc:68:b4:3c:ac:7a:7c:84:81:a3:b1:20:4a: 15:d8:ff:03:fe:63:02:89:46:22:d9:c3:5c:81:37:11:e7:48: 91:ff:96:7c:b5:00:49:60:25:6a:bd:67:45:26:f8:c6:38:9b: c1:07:69:1a:c5:5e:f6:06:4c:eb:84:47:0d:c2:d5:ba:f8:58: b7:1c:29:e8:9e:a0:ec:04:1e:1b:88:88:22:0d:1a:21:8a:3c: e0:5c:20:b0:f6:af:df:df:cd:d4:14:9d:83:9d:26:9d:30:c2: 6c:11:78:d3:50:f8:11:5d:b0:70:69:d8:a3:e7:13:3b:b5:f0: 98:7d:23:33:ab:9a:b2:f1:da:58:87:b9:45:8d:64:51:d8:9d: d2:cc:08:61:c3:a1:87:7f:17:84:10:e9:47:47:80:bc:4b:5a: bc:7f:21:84:ee:eb:ee:37:04:ae:be:da:af:d2:68:c0:da:c4: 85:a7:c9:9e:85:42:0f:f5:2a:0b:72:5c:86:81:42:57:f4:bf: 00:c5:09:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R1zDFvdVvYNBxE8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyODAxMDkzMFoXDTI2MTIyNzAyMDkzMFowLzEtMCsGA1UEAxMk M2RiZGZmYzgtOWU0ZC00MGE0LWIxNjAtNGJiYmY1OWYzOWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB06q1QrKY8Yobna/ca49BsX6/034aeOnlqk UZUkkhLC+/Dj+wYB03yo5GNNcRtoiRq/8SaSm2BfMpfap6t2sZvhjjhGtk7kd6rr KfbMFKUebLT5Bv9aqvKVpVyLvcBGRH8brvaTW5GwoY962X39dyFwv1fAKbsejmv3 utv89Uk+U9OmqXXkpRWymBXkPMLLJS186Rp4jSz8EBPXeIViclw+L4MVh+/G6Qc3 +kI6VpbrCZxnLylt5JSb2pPRQTJUSPZ9CNt8Fbi8h0xZ6/3K02/OVEqxpXXtvR6F 4lsJHUpKJqr/zJIHUY+axTqymb+bZ9jEaN8F2uzwIxVjthE5uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNd9MI8VwWxz52upvlp7L8c4BOXtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTAxMWJmNjEtYTRmYS0z YmQ3LWFhYmMtNWY2ODk0YzYyZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKQ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/n69XyyEAGp7eIGPdruwDZeyOMqOww1tmXihk40RgUsawlAqJ9/RKW 3AeGV7kOb/P+eXsrGFhmdhhQ3Gi0PKx6fISBo7EgShXY/wP+YwKJRiLZw1yBNxHn SJH/lny1AElgJWq9Z0Um+MY4m8EHaRrFXvYGTOuERw3C1br4WLccKeieoOwEHhuI iCINGiGKPOBcILD2r9/fzdQUnYOdJp0wwmwReNNQ+BFdsHBp2KPnEzu18Jh9IzOr mrLx2liHuUWNZFHYndLMCGHDoYd/F4QQ6UdHgLxLWrx/IYTu6+43BK6+2q/SaMDa xIWnyZ6FQg/1KgtyXIaBQlf0vwDFCYE= -----END CERTIFICATE-----Generated at Sat Oct 10 14:45:31 2026 by rpki-client