$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b8b5588c-5b97-31d9-832f-2b4df75e0637.roa File: b8b5588c-5b97-31d9-832f-2b4df75e0637.roa (raw, json) Hash identifier: /mWDmAoJKQ1YhmXNIiZaZ/gW+D3tGw+esGgE4oSEydA= Subject key identifier: 04:96:FA:25:01:70:C5:46:54:F3:D3:FF:9E:AF:D1:90:2D:CB:68:81 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F5BB982140E501BDCFCF974C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b8b5588c-5b97-31d9-832f-2b4df75e0637.roa Signing time: Thu 01 Oct 2026 14:07:47 +0000 ROA not before: Thu 01 Oct 2026 14:07:47 +0000 ROA not after: Wed 30 Dec 2026 15:07:47 +0000 asID: 6079 IP address blocks: 64.205.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:b9:82:14:0e:50:1b:dc:fc:f9:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 1 14:07:47 2026 GMT Not After : Dec 30 15:07:47 2026 GMT Subject: CN=d15de08b-9a08-4ffc-ad48-da70f050680d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0b:aa:2b:a9:bd:61:f0:d9:73:e1:8a:67:62: b1:1b:e7:65:82:cb:da:d0:31:75:e1:c4:d3:1f:a1: 22:08:71:30:1f:e9:fa:94:62:d6:a9:e9:7c:96:d5: 01:ac:30:4f:37:e0:fd:30:77:c9:f2:5f:57:2e:dd: b0:d7:c9:86:a7:61:93:7d:e6:60:5e:e2:69:c0:f9: ed:34:f3:ec:71:f5:6e:be:24:10:20:0d:2d:7b:cc: 13:81:20:d0:0e:58:39:59:07:30:7d:96:fa:86:3e: 70:14:15:7e:48:ca:89:58:59:68:90:40:9b:72:25: 17:20:0f:d0:9f:f0:d6:45:2c:19:84:04:b4:a9:12: ef:6b:90:88:32:73:e5:6b:3b:59:c7:1a:ba:04:50: 82:22:58:56:fb:8e:c0:db:58:9e:68:f0:86:e4:3f: c1:4d:88:cd:3b:2b:1a:fe:1b:a1:30:98:fd:b1:4a: 56:a6:c6:73:b5:72:c0:ee:bf:1c:84:b4:47:0f:66: 5a:24:5a:50:a5:5d:2e:61:38:0d:5d:61:67:21:05: c2:ab:9b:6a:3b:52:b8:d3:67:05:2a:ad:c8:56:a9: f1:6f:0b:cc:fc:9b:70:90:1e:57:21:27:9e:c0:2d: d9:e5:05:7d:36:66:ce:58:d3:16:ed:42:2b:58:ab: d2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:96:FA:25:01:70:C5:46:54:F3:D3:FF:9E:AF:D1:90:2D:CB:68:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b8b5588c-5b97-31d9-832f-2b4df75e0637.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.205.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:2f:01:af:e3:13:6d:6e:17:87:c4:3c:42:ec:78:51:fb:78: 6a:f0:f0:e6:7f:5b:6d:07:0a:d8:22:15:1a:aa:16:57:6c:7a: 26:50:8f:cc:7e:c1:f0:3a:a6:12:9f:4d:aa:31:78:84:99:9e: ae:f5:a2:e2:75:44:93:14:50:0c:29:f3:2c:b3:a2:36:c3:f8: 28:9b:f2:6c:dc:bd:2c:9c:d5:81:4b:2a:86:3a:54:96:5b:05: e7:4b:c5:cf:70:2c:27:a6:20:33:94:47:28:2b:7e:5c:30:83: 1f:42:22:51:ce:51:89:e1:55:d1:11:c9:77:70:54:d2:0a:4a: 30:ae:ee:ed:b9:59:fb:33:25:c8:85:ee:0a:56:c3:56:97:82: 05:06:a2:1f:a2:8c:43:fb:11:27:4a:94:5c:84:9f:47:e3:53: 7b:da:c8:d0:de:75:2d:bc:f1:97:bd:9d:b5:68:12:bb:2f:fc: af:5d:4e:38:b0:42:d1:ec:cf:51:59:09:e2:6a:44:3b:98:4a: f6:58:c1:e9:28:92:a2:88:34:22:3c:e8:44:69:03:74:ac:76: 77:50:36:fb:ae:b2:94:0b:34:f4:45:c6:fe:28:57:b3:2f:f3: 5d:6b:a5:81:e2:7d:70:bb:ea:6b:f2:2e:85:fb:79:32:7d:74: a9:b1:0b:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9buYIUDlAb3Pz5dMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwMTE0MDc0N1oXDTI2MTIzMDE1MDc0N1owLzEtMCsGA1UEAxMk ZDE1ZGUwOGItOWEwOC00ZmZjLWFkNDgtZGE3MGYwNTA2ODBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wuqK6m9YfDZc+GKZ2KxG+dlgsva0DF14cTT H6EiCHEwH+n6lGLWqel8ltUBrDBPN+D9MHfJ8l9XLt2w18mGp2GTfeZgXuJpwPnt NPPscfVuviQQIA0te8wTgSDQDlg5WQcwfZb6hj5wFBV+SMqJWFlokECbciUXIA/Q n/DWRSwZhAS0qRLva5CIMnPlaztZxxq6BFCCIlhW+47A21ieaPCG5D/BTYjNOysa /huhMJj9sUpWpsZztXLA7r8chLRHD2ZaJFpQpV0uYTgNXWFnIQXCq5tqO1K402cF Kq3IVqnxbwvM/JtwkB5XISeewC3Z5QV9NmbOWNMW7UIrWKvSSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASW+iUBcMVGVPPT/56v0ZAty2iBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjhiNTU4OGMtNWI5Ny0z MWQ5LTgzMmYtMmI0ZGY3NWUwNjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQM15MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUvAa/jE21uF4fEPELseFH7eGrw8OZ/W20HCtgiFRqqFldseiZQj8x+ wfA6phKfTaoxeISZnq71ouJ1RJMUUAwp8yyzojbD+Cib8mzcvSyc1YFLKoY6VJZb BedLxc9wLCemIDOURygrflwwgx9CIlHOUYnhVdERyXdwVNIKSjCu7u25WfszJciF 7gpWw1aXggUGoh+ijEP7ESdKlFyEn0fjU3vayNDedS288Ze9nbVoErsv/K9dTjiw QtHsz1FZCeJqRDuYSvZYwekokqKINCI86ERpA3SsdndQNvuuspQLNPRFxv4oV7Mv 811rpYHifXC76mvyLoX7eTJ9dKmxC+M= -----END CERTIFICATE-----Generated at Sun Oct 11 08:22:39 2026 by rpki-client