$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/baf23adf-bc85-3518-8190-b271f675c27b.roa File: baf23adf-bc85-3518-8190-b271f675c27b.roa (raw, json) Hash identifier: lvq//eSjih3PZI970Z31xoaQ3mPH5C8G6A942h59QNU= Subject key identifier: 23:FA:BF:00:5B:3D:38:31:5C:FB:69:AE:95:76:16:74:81:57:47:FD Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F5BBA2B67016CC644B217C380 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/baf23adf-bc85-3518-8190-b271f675c27b.roa Signing time: Thu 01 Oct 2026 14:09:07 +0000 ROA not before: Thu 01 Oct 2026 14:09:07 +0000 ROA not after: Wed 30 Dec 2026 15:09:07 +0000 asID: 6079 IP address blocks: 68.164.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:ba:2b:67:01:6c:c6:44:b2:17:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 1 14:09:07 2026 GMT Not After : Dec 30 15:09:07 2026 GMT Subject: CN=cc542b0d-92cf-4349-b75e-aabe8d9ebdf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c6:70:c5:82:06:14:00:0c:02:65:0d:a4:65: 6a:c7:7b:b9:b1:e6:85:ba:c3:3e:eb:f3:a7:e5:4f: bf:8d:ec:f4:34:b6:89:30:8a:e6:97:f2:fd:cf:54: a8:09:5c:f7:aa:8f:68:84:a1:fb:91:28:68:dc:a0: da:e6:e6:79:76:30:73:d4:2b:a6:72:45:f2:71:ce: f3:dd:36:3f:9a:06:60:aa:88:a8:3c:20:e8:4b:e0: ef:37:87:d8:c1:6c:6f:3b:6a:c9:90:42:f3:1e:9b: b6:a2:ab:44:3e:1e:d5:b6:ef:ff:4e:25:fe:e5:e9: b3:16:d0:6c:99:02:c7:25:7a:b7:c1:1f:a4:3b:0d: 1e:12:9e:13:14:35:c9:2d:f0:4a:d5:ac:58:9b:93: b6:c7:ce:24:4c:a8:25:d3:5f:0f:74:5f:0b:b9:61: e9:de:8b:b8:5e:a3:a8:73:fd:b8:01:37:20:f8:d6: aa:0d:bc:a1:41:d9:31:99:91:67:12:64:28:97:43: 74:81:d6:de:04:33:22:2a:a4:20:e4:d8:7c:90:03: 0e:b1:2f:95:4b:e0:54:1c:66:f4:e0:d8:dd:ad:2c: c5:94:9a:47:31:b4:55:0c:6d:d5:3a:78:8f:0f:6b: af:ab:aa:b7:f7:f3:60:d5:85:57:93:ef:fd:c2:f9: e2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FA:BF:00:5B:3D:38:31:5C:FB:69:AE:95:76:16:74:81:57:47:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/baf23adf-bc85-3518-8190-b271f675c27b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:6f:37:89:73:7d:b3:a3:23:35:d2:1f:5b:1d:17:b0:46:4c: 9d:42:b0:bc:42:41:21:2e:0d:72:83:f3:58:16:6a:b8:04:16: 46:6d:22:7d:8e:c4:4f:81:d6:e8:29:a4:7a:23:66:7d:50:9d: 47:fb:42:d3:ba:b9:04:1d:80:35:99:68:82:f0:69:15:b1:92: b9:8c:2e:bc:40:4a:4d:66:c5:a9:f0:68:a7:15:cc:94:8a:35: 4f:90:49:58:d8:61:a9:d9:17:cd:a7:74:35:bd:ca:05:c4:d1: 19:b4:63:60:87:75:56:9f:78:35:54:42:9e:80:42:ad:2e:a1: 9a:88:c0:13:4f:f1:b1:25:80:76:c8:dd:69:00:bf:0c:61:2e: 1e:cc:55:98:a6:1a:a8:e6:d7:d3:d5:51:7c:c4:95:e7:09:6a: 94:93:ec:6f:6b:74:7c:24:3c:8a:1f:a0:d3:b9:df:9a:1d:d0: 20:c8:79:3e:ac:a3:3f:9f:d0:24:25:d6:8d:a4:84:dc:df:51: 61:61:92:35:51:23:e1:e4:98:eb:47:f5:9c:8d:eb:1b:18:78: 3f:0e:ef:55:ef:a0:ee:cb:b4:42:3c:c8:77:3d:bb:62:d7:ad: 6e:c9:d5:98:44:2d:3b:04:b4:3d:0e:70:db:41:df:f3:70:ba: d6:88:81:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9buitnAWzGRLIXw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwMTE0MDkwN1oXDTI2MTIzMDE1MDkwN1owLzEtMCsGA1UEAxMk Y2M1NDJiMGQtOTJjZi00MzQ5LWI3NWUtYWFiZThkOWViZGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcZwxYIGFAAMAmUNpGVqx3u5seaFusM+6/On 5U+/jez0NLaJMIrml/L9z1SoCVz3qo9ohKH7kSho3KDa5uZ5djBz1CumckXycc7z 3TY/mgZgqoioPCDoS+DvN4fYwWxvO2rJkELzHpu2oqtEPh7Vtu//TiX+5emzFtBs mQLHJXq3wR+kOw0eEp4TFDXJLfBK1axYm5O2x84kTKgl018PdF8LuWHp3ou4XqOo c/24ATcg+NaqDbyhQdkxmZFnEmQol0N0gdbeBDMiKqQg5Nh8kAMOsS+VS+BUHGb0 4NjdrSzFlJpHMbRVDG3VOniPD2uvq6q39/Ng1YVXk+/9wvniqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCP6vwBbPTgxXPtprpV2FnSBV0f9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmFmMjNhZGYtYmM4NS0z NTE4LTgxOTAtYjI3MWY2NzVjMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKSJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdvN4lzfbOjIzXSH1sdF7BGTJ1CsLxCQSEuDXKD81gWargEFkZtIn2O xE+B1ugppHojZn1QnUf7QtO6uQQdgDWZaILwaRWxkrmMLrxASk1mxanwaKcVzJSK NU+QSVjYYanZF82ndDW9ygXE0Rm0Y2CHdVafeDVUQp6AQq0uoZqIwBNP8bElgHbI 3WkAvwxhLh7MVZimGqjm19PVUXzElecJapST7G9rdHwkPIofoNO535od0CDIeT6s oz+f0CQl1o2khNzfUWFhkjVRI+HkmOtH9ZyN6xsYeD8O71XvoO7LtEI8yHc9u2LX rW7J1ZhELTsEtD0OcNtB3/NwutaIgVI= -----END CERTIFICATE-----Generated at Sat Oct 10 12:00:22 2026 by rpki-client