$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c6da0f4d-4aa2-367a-88e1-dd62a2f7fdb6.roa File: c6da0f4d-4aa2-367a-88e1-dd62a2f7fdb6.roa (raw, json) Hash identifier: cjIDVcrLVY3r/6aXdjDs+0cWLPNx5UBS4luIucXIXXY= Subject key identifier: 6F:4A:EE:64:62:82:99:F5:D4:37:B3:59:6A:0D:35:47:81:86:7E:CC Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F093CE0844E32BC5D972CDD00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c6da0f4d-4aa2-367a-88e1-dd62a2f7fdb6.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 25369 IP address blocks: 65.86.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:e0:84:4e:32:bc:5d:97:2c:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=0bcba0ef-351a-439a-ba87-e5011395f468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e7:e5:11:6a:01:e3:61:54:0d:a0:6e:23:8a: 20:a0:90:9e:49:39:41:67:c9:bb:7c:31:cd:f0:5a: 45:de:d6:e5:93:1d:b6:8a:1a:15:0f:d6:3f:a8:76: d2:ed:57:19:54:0f:2b:e3:bb:63:d5:17:44:71:07: 72:56:ac:42:a2:07:24:2b:e1:e7:c0:d4:57:62:a6: 9e:6d:86:29:f8:c8:88:d9:dc:86:7d:44:cd:ef:5a: 4e:7b:f3:6b:71:24:20:03:c9:22:d1:91:75:3e:dd: c0:41:b9:f3:aa:6a:03:29:ad:34:c8:ef:2a:b9:1c: 17:57:3a:ae:b6:41:c6:bc:e3:45:da:98:fb:48:8e: 61:af:a0:c8:c9:e0:5e:54:7d:f5:f2:b1:5f:64:64: 1c:10:dd:f7:12:58:3a:7b:cc:19:41:72:bf:4e:13: 4c:2f:e9:af:47:99:5a:5c:cb:65:a9:22:dd:62:9f: 44:27:fb:10:6c:bc:b3:3f:e7:3f:4c:43:49:91:5b: 29:16:b4:d8:5d:81:9e:df:4c:ee:bc:e4:d0:a4:16: e7:16:b5:83:ac:cf:29:61:61:1b:30:9a:b4:dd:a4: 1a:4f:d3:d4:85:f8:81:aa:fa:36:19:94:65:54:fd: 79:61:8e:bf:94:3f:c9:85:5e:86:07:c7:07:32:42: 6d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:4A:EE:64:62:82:99:F5:D4:37:B3:59:6A:0D:35:47:81:86:7E:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c6da0f4d-4aa2-367a-88e1-dd62a2f7fdb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:a2:c1:30:d0:1b:78:ca:2f:77:a9:a1:8c:b5:30:66:de:be: 59:19:6e:55:ae:c3:45:58:f2:09:3d:87:ea:40:48:d3:3d:6d: 55:0e:2a:29:7a:4e:eb:2c:a0:09:1c:2d:fb:a9:d1:ba:5f:d1: df:97:7c:15:24:c6:b5:7b:5a:f0:91:d2:6f:e7:03:89:7c:c5: 6d:dd:3c:92:9f:67:6e:f3:e2:fa:24:14:db:4e:9a:18:59:be: af:22:4a:a8:e0:a7:26:56:e3:40:47:f2:76:f7:6d:8d:49:21: 70:50:85:ae:f4:9f:36:ac:6a:45:4b:80:2d:f0:f2:c8:ed:2e: 15:32:9a:0b:cf:5c:68:2b:51:46:3c:18:37:23:7c:05:da:8b: 75:e0:ce:28:c3:12:a5:77:bc:6d:9f:60:3f:d3:6e:36:40:72: 75:d7:9c:10:b5:ec:25:ea:55:8d:e9:d1:0b:7c:a7:0c:7f:11: 9e:6d:7f:28:a8:d1:95:fa:4f:bc:6d:94:4c:74:e4:92:dd:3f: 5c:35:ce:09:fe:98:61:83:81:84:e3:35:29:9d:41:70:28:f6: 5d:10:71:54:fb:83:bb:02:7a:b7:5c:c6:c2:06:86:8f:6e:21: 01:d6:9c:81:94:22:26:8c:9f:fd:3f:46:7d:3f:4b:25:92:49: 94:64:9d:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPOCETjK8XZcs3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MGJjYmEwZWYtMzUxYS00MzlhLWJhODctZTUwMTEzOTVmNDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOflEWoB42FUDaBuI4ogoJCeSTlBZ8m7fDHN 8FpF3tblkx22ihoVD9Y/qHbS7VcZVA8r47tj1RdEcQdyVqxCogckK+HnwNRXYqae bYYp+MiI2dyGfUTN71pOe/NrcSQgA8ki0ZF1Pt3AQbnzqmoDKa00yO8quRwXVzqu tkHGvONF2pj7SI5hr6DIyeBeVH318rFfZGQcEN33Elg6e8wZQXK/ThNML+mvR5la XMtlqSLdYp9EJ/sQbLyzP+c/TENJkVspFrTYXYGe30zuvOTQpBbnFrWDrM8pYWEb MJq03aQaT9PUhfiBqvo2GZRlVP15YY6/lD/JhV6GB8cHMkJt4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9K7mRigpn11DezWWoNNUeBhn7MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzZkYTBmNGQtNGFhMi0z NjdhLTg4ZTEtZGQ2MmEyZjdmZGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQVa4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGiwTDQG3jKL3epoYy1MGbevlkZblWuw0VY8gk9h+pASNM9bVUOKil6 TussoAkcLfup0bpf0d+XfBUkxrV7WvCR0m/nA4l8xW3dPJKfZ27z4vokFNtOmhhZ vq8iSqjgpyZW40BH8nb3bY1JIXBQha70nzasakVLgC3w8sjtLhUymgvPXGgrUUY8 GDcjfAXai3XgzijDEqV3vG2fYD/TbjZAcnXXnBC17CXqVY3p0Qt8pwx/EZ5tfyio 0ZX6T7xtlEx05JLdP1w1zgn+mGGDgYTjNSmdQXAo9l0QcVT7g7sCerdcxsIGho9u IQHWnIGUIiaMn/0/Rn0/SyWSSZRknaY= -----END CERTIFICATE-----Generated at Sun Sep 20 18:43:49 2026 by rpki-client