$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/baa3c365-b7ea-3d13-84eb-d948fd6568f4.roa File: baa3c365-b7ea-3d13-84eb-d948fd6568f4.roa (raw, json) Hash identifier: OpK0LIVW8fccwIvQUsAyRsAUcHhcoqAP6oQ7pOjO/0Q= Subject key identifier: 89:2D:26:40:38:2C:73:F3:78:1A:75:38:46:5B:76:8F:0E:6D:93:85 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F30528C114371428FE3ABF980 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/baa3c365-b7ea-3d13-84eb-d948fd6568f4.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 6079 IP address blocks: 68.167.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:8c:11:43:71:42:8f:e3:ab:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=b90f27b7-f669-4a04-8192-df66afe560a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:28:7e:12:2b:41:47:28:1f:2f:35:52:58:33: a1:4a:1d:ef:94:a9:53:04:62:14:23:09:17:2e:01: 90:cf:06:5b:7b:8e:37:58:a9:00:fc:62:58:9d:6e: 2d:61:8f:d7:0d:52:84:b9:0a:f4:a7:a8:03:d3:be: 5f:78:71:c6:69:f2:a7:b3:0d:06:31:c0:30:40:bb: 26:05:b7:0c:4b:66:49:fc:77:d7:21:dd:0c:70:5a: d2:f0:ca:3c:76:ac:9a:79:5c:59:70:78:6e:ae:ca: e3:06:9c:34:53:a2:0c:0e:e7:f2:b9:df:2e:c9:1c: a7:d8:c2:70:68:54:6f:aa:f4:22:7e:9f:c3:aa:97: 72:15:3f:9c:16:1f:02:2f:a6:89:e0:9c:44:35:19: 79:82:b7:c0:7b:22:03:70:9b:1f:60:57:6f:97:03: ec:c5:6e:20:e6:4c:f4:fb:27:c2:07:81:e4:0d:d1: b1:78:5a:ed:48:b3:0c:d9:d4:45:ca:f3:67:78:47: d2:96:61:b6:a9:8b:1c:6b:f5:6c:7c:a7:7c:61:86: 0f:84:26:3f:b8:65:ce:8d:d0:55:d6:51:21:0e:8b: d9:2c:7b:04:2d:89:a5:14:a7:73:30:1e:73:47:88: 77:c3:3a:82:5d:8b:e5:07:0f:8c:8c:89:80:93:62: f9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2D:26:40:38:2C:73:F3:78:1A:75:38:46:5B:76:8F:0E:6D:93:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/baa3c365-b7ea-3d13-84eb-d948fd6568f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:db:82:e6:05:ad:b0:76:cb:8e:90:5f:f6:a0:53:fc:46:6f: 97:36:61:05:e7:85:30:81:8f:33:05:3f:66:d9:ef:59:c9:09: b9:d0:12:33:11:00:7d:9c:aa:dc:87:f7:ae:85:1d:6a:e0:c1: 3f:52:d9:89:0e:c9:04:a7:8c:67:b6:1e:0c:70:18:a7:f4:6e: e2:9f:56:c4:2d:27:9b:82:dc:a5:99:d8:91:30:9f:cf:73:40: a4:12:15:b7:7c:1c:07:3f:f7:ed:50:ce:8b:ca:41:bb:20:b2: 3a:fe:8e:20:e8:4e:c3:68:20:e3:23:2e:8c:c6:7a:13:34:9d: 83:10:53:50:c3:3e:c4:e8:5a:b8:23:63:20:95:fb:4f:20:f7: 03:3e:77:77:b8:41:99:49:ab:44:31:7e:1c:e4:d7:86:76:ae: b2:db:c6:68:6f:01:43:b1:b0:b8:d5:35:6a:d0:44:25:aa:88: a3:97:41:f6:71:1c:9c:e5:28:05:e9:f8:ae:d3:df:90:51:94: 0f:e2:5d:3b:5c:24:a8:ed:d9:4c:f8:12:54:f3:d0:7f:14:9d: 21:fa:01:26:19:33:81:d0:2e:96:56:76:58:5b:d2:a8:c8:ed: 8d:6a:6a:52:54:26:18:f6:1c:91:05:7c:6f:db:2b:b2:ff:93: c0:0e:62:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUowRQ3FCj+Or+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk YjkwZjI3YjctZjY2OS00YTA0LTgxOTItZGY2NmFmZTU2MGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgih+EitBRygfLzVSWDOhSh3vlKlTBGIUIwkX LgGQzwZbe443WKkA/GJYnW4tYY/XDVKEuQr0p6gD075feHHGafKnsw0GMcAwQLsm BbcMS2ZJ/HfXId0McFrS8Mo8dqyaeVxZcHhursrjBpw0U6IMDufyud8uyRyn2MJw aFRvqvQifp/DqpdyFT+cFh8CL6aJ4JxENRl5grfAeyIDcJsfYFdvlwPsxW4g5kz0 +yfCB4HkDdGxeFrtSLMM2dRFyvNneEfSlmG2qYsca/VsfKd8YYYPhCY/uGXOjdBV 1lEhDovZLHsELYmlFKdzMB5zR4h3wzqCXYvlBw+MjImAk2L5pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIktJkA4LHPzeBp1OEZbdo8ObZOFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmFhM2MzNjUtYjdlYS0z ZDEzLTg0ZWItZDk0OGZkNjU2OGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKc8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETbguYFrbB2y46QX/agU/xGb5c2YQXnhTCBjzMFP2bZ71nJCbnQEjMR AH2cqtyH966FHWrgwT9S2YkOyQSnjGe2HgxwGKf0buKfVsQtJ5uC3KWZ2JEwn89z QKQSFbd8HAc/9+1QzovKQbsgsjr+jiDoTsNoIOMjLozGehM0nYMQU1DDPsToWrgj YyCV+08g9wM+d3e4QZlJq0Qxfhzk14Z2rrLbxmhvAUOxsLjVNWrQRCWqiKOXQfZx HJzlKAXp+K7T35BRlA/iXTtcJKjt2Uz4ElTz0H8UnSH6ASYZM4HQLpZWdlhb0qjI 7Y1qalJUJhj2HJEFfG/bK7L/k8AOYiI= -----END CERTIFICATE-----Generated at Mon Sep 21 18:38:33 2026 by rpki-client