$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a64897d5-e354-3cb8-893f-b84ce998c320.roa File: a64897d5-e354-3cb8-893f-b84ce998c320.roa (raw, json) Hash identifier: 0mFZ4/mD5GgfJFJo+xrU3+xrRzWbhZl8WG6T9VuV/Sc= Subject key identifier: 80:95:19:AA:50:BC:64:AF:8E:C2:6E:D0:CA:41:51:E8:84:D2:8F:3E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F566130DE0A54474CBAF14F80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a64897d5-e354-3cb8-893f-b84ce998c320.roa Signing time: Tue 29 Sep 2026 16:10:48 +0000 ROA not before: Tue 29 Sep 2026 16:10:48 +0000 ROA not after: Mon 28 Dec 2026 17:10:48 +0000 asID: 219075 IP address blocks: 68.164.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:56:61:30:de:0a:54:47:4c:ba:f1:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 29 16:10:48 2026 GMT Not After : Dec 28 17:10:48 2026 GMT Subject: CN=d93097f5-3969-4caf-b9d1-c9257871c9de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7b:6b:dd:16:ee:95:75:fe:43:98:c4:20:6a: 9a:9d:96:34:92:91:b1:d1:99:20:05:ac:c4:2a:38: 09:8e:07:d5:fd:93:aa:7e:58:43:ab:ad:41:a8:e2: 47:46:7e:3b:a1:fe:ab:2a:ad:ba:04:9f:17:5e:f8: b9:10:06:02:ee:8c:d3:2d:cb:c4:c6:18:69:22:5c: e8:c7:77:47:85:78:88:7f:b0:f6:06:89:75:a7:b2: cc:5b:dd:55:58:1a:7f:b9:26:ba:d4:f1:f2:91:12: 68:b5:03:b3:74:df:75:1a:da:53:0d:f1:14:bc:fb: f4:a6:8c:75:f5:1e:e5:f1:44:31:f3:a5:b3:09:14: cb:07:29:44:31:03:9f:d6:90:6f:ed:17:8f:b8:57: ee:99:ae:8e:f7:62:1a:e2:49:b9:4f:a0:51:97:2b: 80:c5:56:07:49:5e:f2:1e:af:99:15:50:6f:50:f4: 5c:7f:64:bc:41:23:1f:1f:61:72:73:e7:5a:71:d8: 6e:7b:a7:34:82:0f:66:21:fa:aa:71:1b:44:c9:3e: 61:a2:d3:e2:07:eb:f9:85:9a:b1:50:24:66:cd:ed: 1a:69:c2:cd:ab:38:91:c6:78:7e:08:80:29:14:92: b9:97:d7:6f:6b:13:aa:20:6c:bc:9e:f6:a1:55:fb: 85:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:95:19:AA:50:BC:64:AF:8E:C2:6E:D0:CA:41:51:E8:84:D2:8F:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a64897d5-e354-3cb8-893f-b84ce998c320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:5d:a3:bb:9b:3f:c6:11:76:8d:8e:81:79:2e:76:56:d0:4b: e0:c4:7b:0b:4d:2d:0a:31:0a:18:4a:a3:29:fa:cc:07:55:f9: a3:31:34:d6:e3:83:d5:4f:ee:29:b8:82:f9:02:62:12:06:3a: 51:73:e9:80:2e:d5:c8:19:76:70:78:19:af:bf:3a:54:a8:31: cb:a3:f4:07:be:5a:d4:45:56:61:fb:46:70:4b:ba:af:bb:60: 94:f4:cc:2a:ec:f6:d2:ea:08:89:f8:fa:52:9f:ff:4d:41:d2: 16:eb:89:9c:ea:cd:c9:52:76:4d:63:d0:a0:e4:f1:b3:35:8e: c6:07:eb:e3:df:6e:ea:5c:cc:73:3e:8f:64:33:69:bd:91:87: 3f:03:44:80:01:f1:6d:db:ea:b3:3b:d3:31:a0:bb:82:51:d7: 24:b9:db:dd:c9:93:ed:b6:e8:ae:27:24:02:dd:af:41:09:b1: 4d:aa:3e:3f:e5:23:3d:b3:50:22:e5:6d:65:e1:5b:42:1a:8b: 61:d8:e0:fa:b2:1f:4f:f3:76:a5:50:42:d2:1a:6b:c6:bc:26: 2a:f0:ef:fe:7e:ac:13:0f:31:32:57:46:d2:4d:be:0d:48:90: 6d:76:37:97:1b:00:80:e8:78:da:4f:5f:25:d2:fa:42:1a:bf: 7e:d5:a4:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9WYTDeClRHTLrxT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyOTE2MTA0OFoXDTI2MTIyODE3MTA0OFowLzEtMCsGA1UEAxMk ZDkzMDk3ZjUtMzk2OS00Y2FmLWI5ZDEtYzkyNTc4NzFjOWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ntr3RbulXX+Q5jEIGqanZY0kpGx0ZkgBazE KjgJjgfV/ZOqflhDq61BqOJHRn47of6rKq26BJ8XXvi5EAYC7ozTLcvExhhpIlzo x3dHhXiIf7D2Bol1p7LMW91VWBp/uSa61PHykRJotQOzdN91GtpTDfEUvPv0pox1 9R7l8UQx86WzCRTLBylEMQOf1pBv7RePuFfuma6O92Ia4km5T6BRlyuAxVYHSV7y Hq+ZFVBvUPRcf2S8QSMfH2Fyc+dacdhue6c0gg9mIfqqcRtEyT5hotPiB+v5hZqx UCRmze0aacLNqziRxnh+CIApFJK5l9dvaxOqIGy8nvahVfuF7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICVGapQvGSvjsJu0MpBUeiE0o8+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTY0ODk3ZDUtZTM1NC0z Y2I4LTg5M2YtYjg0Y2U5OThjMzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKSGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxdo7ubP8YRdo2OgXkudlbQS+DEewtNLQoxChhKoyn6zAdV+aMxNNbj g9VP7im4gvkCYhIGOlFz6YAu1cgZdnB4Ga+/OlSoMcuj9Ae+WtRFVmH7RnBLuq+7 YJT0zCrs9tLqCIn4+lKf/01B0hbriZzqzclSdk1j0KDk8bM1jsYH6+PfbupczHM+ j2Qzab2Rhz8DRIAB8W3b6rM70zGgu4JR1yS5293Jk+226K4nJALdr0EJsU2qPj/l Iz2zUCLlbWXhW0Iai2HY4PqyH0/zdqVQQtIaa8a8Jirw7/5+rBMPMTJXRtJNvg1I kG12N5cbAIDoeNpPXyXS+kIav37VpJY= -----END CERTIFICATE-----Generated at Sat Oct 10 10:43:10 2026 by rpki-client