$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b41b31f7-ad6b-3465-8392-3b7e13791bba.roa File: b41b31f7-ad6b-3465-8392-3b7e13791bba.roa (raw, json) Hash identifier: DeO7h2a/sBhJZIncsVmHAwpbQ5Eiwg+ARtksy/lqNBs= Subject key identifier: 67:42:5D:6B:45:76:51:E3:9C:A4:E7:8C:4A:5F:6E:A1:8C:3F:81:F5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F11A16278FE02C03FF1A47458 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b41b31f7-ad6b-3465-8392-3b7e13791bba.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 5650 IP address blocks: 66.92.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:62:78:fe:02:c0:3f:f1:a4:74:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=2b23061e-bb4e-4053-bb53-d5bc52c45a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b9:c7:f7:37:40:b2:e4:fd:01:34:e5:bc:44: ec:1a:57:30:ac:a4:4f:ea:05:4d:45:49:7c:b1:71: 67:d7:4d:ef:b9:37:21:c6:b8:24:96:c4:b3:62:df: 4c:50:bf:31:b0:07:89:b6:84:54:3e:e2:65:cf:7c: 07:bb:e0:8e:9e:d9:03:ba:fe:99:cf:e7:b6:5d:60: e4:24:0d:50:f1:c9:d8:a1:c8:e0:86:10:a9:04:fd: 70:c0:d2:dd:f3:bc:e6:7e:35:8e:c9:b4:8a:a8:30: 4e:8e:8f:b1:68:23:9a:4a:c6:48:63:17:61:97:fd: 30:3d:a3:84:3e:a1:ae:4d:f0:4c:40:76:a2:ef:60: fc:76:f2:81:43:75:cd:ca:04:47:ed:d7:6f:b5:d8: 64:f2:c3:16:18:27:39:4c:5e:ea:79:c9:74:bb:b5: 16:f9:7f:0b:68:22:6b:6f:80:64:22:20:b4:99:fa: bc:d0:bd:6b:3a:21:4c:ed:41:8e:2e:dd:b4:be:47: 7b:f0:53:32:7f:2e:62:2d:8e:41:90:8c:f7:ca:29: 68:0e:12:38:73:c8:f4:d2:47:cc:e8:7e:0f:73:c1: d4:da:95:21:9f:c5:a9:1b:4b:1e:5b:f7:b0:72:d0: bf:83:df:8c:96:b7:5a:3d:ab:af:d2:9f:9a:72:54: 63:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:42:5D:6B:45:76:51:E3:9C:A4:E7:8C:4A:5F:6E:A1:8C:3F:81:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b41b31f7-ad6b-3465-8392-3b7e13791bba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:78:a3:1e:b6:42:70:65:48:6c:70:47:3d:1e:0f:c3:f8:7c: 43:d3:15:ee:aa:85:b5:e5:37:c7:b2:79:ed:80:ea:29:c2:b7: d1:e8:08:a2:ca:d0:b5:14:24:ec:e2:8d:9d:77:85:83:51:32: 3a:bc:b9:8b:98:53:e8:8f:50:6a:7f:61:d8:68:1a:6c:f4:67: cf:f0:95:2a:cf:d2:ce:de:67:1f:56:f9:2d:58:35:73:c2:41: 89:6b:be:9e:ff:d4:3a:eb:7a:42:12:b9:61:25:72:3e:41:c5: ff:74:8e:e6:fc:4c:65:49:c8:69:d2:76:20:33:d7:ab:e5:15: af:3a:37:78:ec:3b:53:74:79:88:b0:a2:44:86:f3:f2:4f:5d: 34:68:18:86:86:b0:da:b9:d4:83:04:f1:6f:bb:f2:99:be:b1: 83:2c:2a:5d:49:31:15:72:32:b2:f8:4f:84:da:a1:03:ba:f6: 82:8c:01:dc:66:cf:1b:41:1d:2f:db:0f:19:a4:a4:5f:fc:0b: d5:fc:28:31:aa:a4:7f:83:ff:37:18:95:b2:5a:84:d2:64:67: e1:69:f0:94:c6:73:cb:cd:84:77:57:8d:73:95:24:88:77:52: b4:0f:8d:33:e4:4a:69:0c:11:7b:ec:47:c2:24:fd:03:05:ad: 31:b1:b7:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoWJ4/gLAP/GkdFgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MmIyMzA2MWUtYmI0ZS00MDUzLWJiNTMtZDViYzUyYzQ1YTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7nH9zdAsuT9ATTlvETsGlcwrKRP6gVNRUl8 sXFn103vuTchxrgklsSzYt9MUL8xsAeJtoRUPuJlz3wHu+COntkDuv6Zz+e2XWDk JA1Q8cnYocjghhCpBP1wwNLd87zmfjWOybSKqDBOjo+xaCOaSsZIYxdhl/0wPaOE PqGuTfBMQHai72D8dvKBQ3XNygRH7ddvtdhk8sMWGCc5TF7qecl0u7UW+X8LaCJr b4BkIiC0mfq80L1rOiFM7UGOLt20vkd78FMyfy5iLY5BkIz3yiloDhI4c8j00kfM 6H4Pc8HU2pUhn8WpG0seW/ewctC/g9+MlrdaPauv0p+aclRj6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdCXWtFdlHjnKTnjEpfbqGMP4H1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjQxYjMxZjctYWQ2Yi0z NDY1LTgzOTItM2I3ZTEzNzkxYmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQlxsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABV4ox62QnBlSGxwRz0eD8P4fEPTFe6qhbXlN8eyee2A6inCt9HoCKLK 0LUUJOzijZ13hYNRMjq8uYuYU+iPUGp/YdhoGmz0Z8/wlSrP0s7eZx9W+S1YNXPC QYlrvp7/1DrrekISuWElcj5Bxf90jub8TGVJyGnSdiAz16vlFa86N3jsO1N0eYiw okSG8/JPXTRoGIaGsNq51IME8W+78pm+sYMsKl1JMRVyMrL4T4TaoQO69oKMAdxm zxtBHS/bDxmkpF/8C9X8KDGqpH+D/zcYlbJahNJkZ+Fp8JTGc8vNhHdXjXOVJIh3 UrQPjTPkSmkMEXvsR8Ik/QMFrTGxt1A= -----END CERTIFICATE-----Generated at Sun Sep 20 16:03:47 2026 by rpki-client