$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bba9411a-2230-3b21-9d16-d2a0bd16a2a7.roa File: bba9411a-2230-3b21-9d16-d2a0bd16a2a7.roa (raw, json) Hash identifier: kbrE+jZsjjuwTGobB93+nYLxOJC4TjYPC43X2Pjfwj8= Subject key identifier: CF:57:6D:53:EB:A2:49:2F:0E:38:65:57:54:1E:D7:4B:3A:C9:B9:A2 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F49749B936A916B60C211C940 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bba9411a-2230-3b21-9d16-d2a0bd16a2a7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 153383 IP address blocks: 69.33.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:9b:93:6a:91:6b:60:c2:11:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=87629465-d1ba-4266-acb1-07325ed87f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:95:58:2c:ca:b5:04:eb:2b:30:c1:eb:f5:c2: 25:c2:b9:b1:bd:11:c3:c4:80:e4:14:e3:ec:9b:09: ed:cc:da:7b:b2:fe:d6:e8:49:20:0d:c7:78:b4:b6: cb:a3:a2:2e:18:37:8d:06:0c:e4:c0:f4:29:e9:0c: 58:8e:a2:4d:83:38:7f:05:57:25:86:59:12:2e:44: fa:51:c4:2a:e6:a7:26:b8:55:82:64:f4:76:d4:4b: 8b:cc:8e:30:1b:8b:49:f9:57:0f:79:0a:04:26:00: 72:c6:3b:62:8d:37:7a:85:f7:a5:ca:bf:05:d3:e3: 9d:a7:12:58:aa:9a:2e:3d:62:9d:72:64:05:90:7a: 8f:1a:eb:cb:c9:a6:39:7b:f4:84:5e:b6:f2:4b:ab: 1d:79:7e:88:65:4c:69:0e:97:64:d0:48:98:73:4f: 90:a5:8e:04:3d:aa:d0:a8:0a:0e:26:eb:95:99:cf: af:02:97:03:62:6e:cf:95:61:06:cf:92:a3:02:2d: c9:cd:83:33:4c:d1:fe:ac:1e:8a:2d:dd:87:63:51: 72:41:51:7d:95:3a:bd:32:d6:ab:c3:19:13:b0:f5: c3:26:fc:91:18:b9:23:31:ff:91:c1:fd:8c:df:d2: 7b:cf:71:2f:65:ec:12:aa:70:73:2d:9b:d2:2c:5a: ce:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:57:6D:53:EB:A2:49:2F:0E:38:65:57:54:1E:D7:4B:3A:C9:B9:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bba9411a-2230-3b21-9d16-d2a0bd16a2a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 69.33.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:a2:9e:8c:42:de:17:a6:6d:a2:c4:f2:b7:ca:e8:61:ac:d7: 87:16:06:6c:d7:af:c7:ef:95:fd:f5:f7:98:71:da:f0:00:29: c3:a6:62:64:be:d0:c1:93:83:51:ed:c9:14:a5:1b:5f:8c:db: 40:c0:b1:fc:8a:f9:73:e4:3a:36:7b:17:9b:e5:0b:bc:0d:65: 00:34:63:3a:41:ec:97:5a:b4:c1:82:ff:15:e3:09:11:fe:63: 52:7e:58:33:a3:b5:2d:b5:9d:29:da:40:71:f1:93:f7:7b:51: 2b:bf:bf:2e:e1:68:d3:f7:69:ad:ea:23:e6:65:9e:8d:ff:52: 6b:4c:c6:ca:08:c9:25:8f:fd:2a:64:51:a2:49:2f:a3:c5:a8: c5:39:a5:d0:74:4c:93:51:84:fd:bd:90:de:3c:43:15:a6:0a: c7:95:10:c9:2f:38:75:db:ac:bd:da:9e:91:39:54:d2:59:29: a9:2d:4e:f5:a5:d4:95:97:dd:29:e8:6e:9a:c7:9e:94:6b:c9: 46:43:80:70:3c:06:03:34:43:58:09:f0:3a:df:4e:60:c1:f1: c5:7c:fe:65:a7:44:44:9e:d1:27:bb:19:91:15:9a:7c:aa:1a: 70:02:05:63:0c:25:bc:a6:74:57:3a:e5:34:18:82:c2:00:26: 38:27:17:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdJuTapFrYMIRyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODc2Mjk0NjUtZDFiYS00MjY2LWFjYjEtMDczMjVlZDg3ZjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZVYLMq1BOsrMMHr9cIlwrmxvRHDxIDkFOPs mwntzNp7sv7W6EkgDcd4tLbLo6IuGDeNBgzkwPQp6QxYjqJNgzh/BVclhlkSLkT6 UcQq5qcmuFWCZPR21EuLzI4wG4tJ+VcPeQoEJgByxjtijTd6hfelyr8F0+OdpxJY qpouPWKdcmQFkHqPGuvLyaY5e/SEXrbyS6sdeX6IZUxpDpdk0EiYc0+QpY4EParQ qAoOJuuVmc+vApcDYm7PlWEGz5KjAi3JzYMzTNH+rB6KLd2HY1FyQVF9lTq9Mtar wxkTsPXDJvyRGLkjMf+Rwf2M39J7z3EvZewSqnBzLZvSLFrO6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9XbVProkkvDjhlV1Qe10s6ybmiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmJhOTQxMWEtMjIzMC0z YjIxLTlkMTYtZDJhMGJkMTZhMmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRSFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6inoxC3hembaLE8rfK6GGs14cWBmzXr8fvlf3195hx2vAAKcOmYmS+ 0MGTg1HtyRSlG1+M20DAsfyK+XPkOjZ7F5vlC7wNZQA0YzpB7JdatMGC/xXjCRH+ Y1J+WDOjtS21nSnaQHHxk/d7USu/vy7haNP3aa3qI+Zlno3/UmtMxsoIySWP/Spk UaJJL6PFqMU5pdB0TJNRhP29kN48QxWmCseVEMkvOHXbrL3anpE5VNJZKaktTvWl 1JWX3SnobprHnpRryUZDgHA8BgM0Q1gJ8DrfTmDB8cV8/mWnRESe0Se7GZEVmnyq GnACBWMMJbymdFc65TQYgsIAJjgnF6U= -----END CERTIFICATE-----Generated at Mon Sep 28 19:13:53 2026 by rpki-client