$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a39552b2-65b8-312c-b308-4e58ed0e5e9e.roa File: a39552b2-65b8-312c-b308-4e58ed0e5e9e.roa (raw, json) Hash identifier: oX6xbGicbmru8fnYAwCXdF9+VxnZSDXO9BYeMKPTa4s= Subject key identifier: 80:8E:0A:CF:70:13:F6:4D:FD:2B:37:FF:AC:F0:F3:45:9C:19:FD:43 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F71ED77D3CF52E0681C5DAC60 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a39552b2-65b8-312c-b308-4e58ed0e5e9e.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 22773 IP address blocks: 64.7.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:77:d3:cf:52:e0:68:1c:5d:ac:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=a041f84e-5c41-4748-a22b-7060dbcc021c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ed:97:d5:8b:cf:da:18:8c:cc:6e:50:61:02: 4e:46:c6:5e:48:f6:bd:57:90:02:d4:5a:21:2a:ab: 42:94:41:7e:2a:12:ed:1d:4e:2b:9e:0b:d2:4b:f5: b3:52:26:f1:38:b2:cc:5b:2d:1b:f2:6e:b1:43:5e: 33:fc:02:e7:22:19:22:08:0b:91:dc:a7:56:5e:ad: 09:b8:e8:66:01:00:75:57:65:61:39:ff:14:82:03: 00:8a:4f:80:24:86:ca:78:22:61:72:e8:a6:de:28: 00:6e:15:e1:56:b6:b9:96:c5:c8:87:a9:74:26:f7: 8c:86:4d:a8:f4:28:4d:99:36:1a:95:b8:89:0d:ab: 31:ed:89:6a:22:ca:82:28:c0:0a:20:a9:08:66:59: a5:c6:d8:97:d7:7c:b7:67:f3:21:54:54:e4:11:bd: 38:2a:d8:be:ae:b9:48:06:ce:6e:4a:99:66:1e:7c: db:62:8a:33:01:1e:46:17:00:70:05:f6:10:d8:f1: 0a:f4:1a:a5:66:90:23:bd:1e:00:0a:37:49:e1:48: a0:8a:b2:5b:70:7c:60:77:ff:57:08:ee:8b:61:24: 91:a7:1c:3d:2c:05:c7:57:a4:66:79:34:80:0e:af: 72:55:46:6a:00:0b:fa:b5:3b:25:e5:5e:a1:78:35: 3c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8E:0A:CF:70:13:F6:4D:FD:2B:37:FF:AC:F0:F3:45:9C:19:FD:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a39552b2-65b8-312c-b308-4e58ed0e5e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.7.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:77:76:5f:34:78:39:83:59:30:f5:bf:28:28:1c:90:28:58: 33:24:8a:18:d6:f7:a7:0e:23:4f:e8:13:bd:63:4f:c2:b8:83: 4d:9e:24:e7:81:54:36:11:c8:2a:c2:76:68:a3:db:ff:c5:4c: 58:00:4f:48:3b:4f:d7:27:27:34:a9:80:18:4d:53:0d:b9:81: 89:93:75:1b:ac:4f:8d:2e:22:f8:10:70:36:2b:52:d4:b5:91: 8c:99:47:bd:cf:38:84:c4:43:4f:9a:0d:4d:86:c8:e0:25:9b: e2:71:40:ff:74:c4:a2:18:f0:81:3b:dc:b7:d2:64:7e:d4:a4: c4:97:94:33:d4:b3:1e:c2:9d:e3:c1:65:76:69:30:87:86:7e: ae:92:a6:6a:1e:f0:e4:ea:52:f9:70:46:26:4d:1b:4d:ec:24: 11:27:5b:e0:44:a3:e3:db:72:3c:ad:60:2b:11:bc:44:fd:c2: 60:6a:ac:1e:a0:4e:80:45:c8:82:10:32:cf:cb:1a:7e:98:ee: f8:5e:06:76:97:f8:a7:ac:44:25:27:2e:cb:9c:c3:a6:36:5c: 1a:1a:12:f6:fd:bd:eb:41:0b:d5:4e:8b:51:26:31:99:0f:81: 86:71:52:00:46:45:3f:42:81:56:c7:62:34:a2:b3:ce:93:12: 82:5f:91:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7XfTz1LgaBxdrGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk YTA0MWY4NGUtNWM0MS00NzQ4LWEyMmItNzA2MGRiY2MwMjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+2X1YvP2hiMzG5QYQJORsZeSPa9V5AC1Foh KqtClEF+KhLtHU4rngvSS/WzUibxOLLMWy0b8m6xQ14z/ALnIhkiCAuR3KdWXq0J uOhmAQB1V2VhOf8UggMAik+AJIbKeCJhcuim3igAbhXhVra5lsXIh6l0JveMhk2o 9ChNmTYalbiJDasx7YlqIsqCKMAKIKkIZlmlxtiX13y3Z/MhVFTkEb04Kti+rrlI Bs5uSplmHnzbYoozAR5GFwBwBfYQ2PEK9BqlZpAjvR4ACjdJ4UigirJbcHxgd/9X CO6LYSSRpxw9LAXHV6RmeTSADq9yVUZqAAv6tTsl5V6heDU8xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICOCs9wE/ZN/Ss3/6zw80WcGf1DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTM5NTUyYjItNjViOC0z MTJjLWIzMDgtNGU1OGVkMGU1ZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQAcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHN3dl80eDmDWTD1vygoHJAoWDMkihjW96cOI0/oE71jT8K4g02eJOeB VDYRyCrCdmij2//FTFgAT0g7T9cnJzSpgBhNUw25gYmTdRusT40uIvgQcDYrUtS1 kYyZR73POITEQ0+aDU2GyOAlm+JxQP90xKIY8IE73LfSZH7UpMSXlDPUsx7CnePB ZXZpMIeGfq6Spmoe8OTqUvlwRiZNG03sJBEnW+BEo+PbcjytYCsRvET9wmBqrB6g ToBFyIIQMs/LGn6Y7vheBnaX+KesRCUnLsucw6Y2XBoaEvb9vetBC9VOi1EmMZkP gYZxUgBGRT9CgVbHYjSis86TEoJfkRs= -----END CERTIFICATE-----Generated at Sat Oct 10 09:58:44 2026 by rpki-client