$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ba88207c-db25-3f18-a71a-5d8537bc49b3.roa File: ba88207c-db25-3f18-a71a-5d8537bc49b3.roa (raw, json) Hash identifier: ZvJQWs8dqzt+mK9WdPrnIXxXRFRdSCNNe82fvtbGlzA= Subject key identifier: EE:24:6D:9E:B2:89:80:7F:A2:A1:87:45:B1:AD:A9:4C:47:0F:9D:C6 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F0A651DA5036E79EC88980E00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ba88207c-db25-3f18-a71a-5d8537bc49b3.roa Signing time: Wed 02 Sep 2026 10:57:16 +0000 ROA not before: Wed 02 Sep 2026 10:57:16 +0000 ROA not after: Tue 01 Dec 2026 11:57:16 +0000 asID: 6939 IP address blocks: 64.204.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:65:1d:a5:03:6e:79:ec:88:98:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 2 10:57:16 2026 GMT Not After : Dec 1 11:57:16 2026 GMT Subject: CN=31b78c83-f742-43a9-93d5-510fe31bb3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f6:79:b5:9c:fc:53:2d:fc:18:5d:3f:21:8e: f7:fb:62:05:c5:49:4c:be:ca:a0:31:e5:75:a4:ac: 8a:66:f6:7f:90:d4:86:d1:3f:86:8c:ef:85:92:0c: c0:8b:9e:5f:02:35:aa:e3:c5:e9:30:bb:0a:e1:90: f3:92:cf:1a:9e:4f:b2:06:e8:73:f8:4b:a9:5b:a1: a3:fb:28:fa:f2:08:49:e9:b3:30:d9:63:d7:b3:79: ba:98:f9:75:47:0f:e8:8d:ca:17:b6:9b:68:3e:74: d0:be:39:57:45:64:70:82:68:26:4c:f2:a7:2e:a2: 74:e9:ec:9a:d0:c5:7d:bf:ca:f4:29:b3:a8:b2:9c: 67:8c:dc:78:cb:95:9d:d8:b3:04:ee:96:d5:53:73: 10:c5:3e:6b:41:ac:a3:0d:62:07:f8:7a:b8:c8:bf: 3d:c5:c0:36:50:67:b4:89:55:a2:03:b9:27:74:ef: 84:61:c1:2b:1a:52:a1:d2:fa:fd:84:cb:f5:dd:cd: 70:0b:f3:76:59:75:5f:09:45:da:0d:85:d7:0f:0b: 30:70:42:94:78:ec:03:36:66:a9:87:19:ed:9f:18: 6a:8f:4f:e7:74:ea:53:f2:8b:23:a9:76:ba:eb:63: e6:a9:30:75:e0:50:32:95:78:95:7e:c2:8c:27:c6: 2d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:24:6D:9E:B2:89:80:7F:A2:A1:87:45:B1:AD:A9:4C:47:0F:9D:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ba88207c-db25-3f18-a71a-5d8537bc49b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:2d:7e:61:8d:2b:66:e2:21:56:7c:86:cf:22:c5:39:15:02: e5:7b:99:f8:fb:1c:c7:3d:c1:7b:c9:76:7b:17:e8:4a:86:2d: 1d:64:d3:05:18:ac:18:88:c1:12:61:7b:8a:e0:21:46:80:9e: 61:12:19:9b:91:91:3c:6b:e3:a1:f7:95:d9:d9:be:b8:c4:44: 71:c2:8b:72:df:ed:ae:ec:19:b1:42:eb:ac:3f:4b:01:41:42: 29:9f:f4:61:ae:0a:b8:66:51:88:66:60:f9:f4:8c:16:c5:38: f8:0a:91:8b:ec:c3:c2:15:e2:cd:f3:99:8e:e2:b0:32:b2:d0: ae:0e:d4:d5:43:e4:2e:e8:0a:51:5e:ca:0f:c4:90:b3:6b:ee: 92:b5:23:55:6f:48:1b:b9:55:a2:70:c6:29:1e:da:9e:e5:00: 60:9b:c3:8f:51:b7:f4:34:35:c7:d8:cf:62:72:43:7e:9c:2c: 2a:9e:2e:a4:66:4d:d3:ca:a7:1b:37:43:fd:0c:1e:e7:7c:37: 07:a0:ba:b3:c2:17:e3:30:2f:fd:27:ed:ca:9b:03:9c:3b:65: 8a:1a:23:6a:7d:f2:9d:95:25:d4:90:00:5e:57:8f:b7:34:67: 70:bb:6a:09:c1:56:39:c8:9c:7d:b9:08:2b:41:fa:b9:4c:5b: 16:b5:fc:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8KZR2lA2557IiYDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwMjEwNTcxNloXDTI2MTIwMTExNTcxNlowLzEtMCsGA1UEAxMk MzFiNzhjODMtZjc0Mi00M2E5LTkzZDUtNTEwZmUzMWJiM2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufZ5tZz8Uy38GF0/IY73+2IFxUlMvsqgMeV1 pKyKZvZ/kNSG0T+GjO+FkgzAi55fAjWq48XpMLsK4ZDzks8ank+yBuhz+EupW6Gj +yj68ghJ6bMw2WPXs3m6mPl1Rw/ojcoXtptoPnTQvjlXRWRwgmgmTPKnLqJ06eya 0MV9v8r0KbOospxnjNx4y5Wd2LME7pbVU3MQxT5rQayjDWIH+Hq4yL89xcA2UGe0 iVWiA7kndO+EYcErGlKh0vr9hMv13c1wC/N2WXVfCUXaDYXXDwswcEKUeOwDNmap hxntnxhqj0/ndOpT8osjqXa662PmqTB14FAylXiVfsKMJ8YtIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4kbZ6yiYB/oqGHRbGtqUxHD53GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmE4ODIwN2MtZGIyNS0z ZjE4LWE3MWEtNWQ4NTM3YmM0OWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMwCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIstfmGNK2biIVZ8hs8ixTkVAuV7mfj7HMc9wXvJdnsX6EqGLR1k0wUY rBiIwRJhe4rgIUaAnmESGZuRkTxr46H3ldnZvrjERHHCi3Lf7a7sGbFC66w/SwFB Qimf9GGuCrhmUYhmYPn0jBbFOPgKkYvsw8IV4s3zmY7isDKy0K4O1NVD5C7oClFe yg/EkLNr7pK1I1VvSBu5VaJwxike2p7lAGCbw49Rt/Q0NcfYz2JyQ36cLCqeLqRm TdPKpxs3Q/0MHud8NwegurPCF+MwL/0n7cqbA5w7ZYoaI2p98p2VJdSQAF5Xj7c0 Z3C7agnBVjnInH25CCtB+rlMWxa1/MQ= -----END CERTIFICATE-----Generated at Tue Sep 22 15:14:09 2026 by rpki-client