$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cca87df2-6af9-3cdc-8b05-93ee2eab30aa.roa File: cca87df2-6af9-3cdc-8b05-93ee2eab30aa.roa (raw, json) Hash identifier: zVgwshdzoN3MZ/n2J2Xa6gQu0UPrQ6XLvgHWeP5c8o4= Subject key identifier: CD:DF:BE:3F:16:D2:5A:2A:80:99:09:41:EC:57:96:FC:D6:40:F5:42 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F23C24AFC9DE79EDBB7177B10 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cca87df2-6af9-3cdc-8b05-93ee2eab30aa.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 5650 IP address blocks: 68.167.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:4a:fc:9d:e7:9e:db:b7:17:7b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=fe92e23f-60bc-45b4-b680-4a3e09e49d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d2:8a:ee:b3:7b:31:7d:ab:b0:66:7f:14:0a: 18:76:88:08:02:e2:ed:25:1f:4c:ce:2f:6f:de:f9: f0:ac:70:52:5c:a7:9f:27:91:3d:44:5d:c6:06:62: 6a:0a:0b:54:a8:95:51:61:0f:85:02:78:a0:07:24: de:e4:14:69:dc:13:5e:b4:28:c5:cf:01:5e:28:3c: b2:90:9a:71:8d:b8:e7:66:f9:60:58:02:20:b8:50: ce:9d:dd:2c:39:b0:4a:81:6e:63:89:34:ff:6d:c1: f7:e6:3e:f9:ef:c9:80:a9:12:8b:5f:be:38:de:83: 21:80:aa:67:4d:c2:99:e0:0f:0d:67:03:e4:d0:59: 4d:41:04:f2:af:58:59:45:ac:69:b7:53:dc:66:14: 5e:e7:77:b5:0c:73:bc:75:b3:b8:23:45:02:7b:c0: 86:c0:40:bc:43:38:f7:ac:f6:59:bd:6e:35:09:52: da:0a:59:ce:fa:87:23:76:fe:c1:77:49:df:a4:a4: 2f:98:26:32:0c:c7:9c:ce:3b:64:49:60:67:35:c6: 14:a2:88:83:ff:62:46:49:3b:39:cd:9f:2d:73:4d: 65:64:ea:59:b1:6b:ee:99:d7:bb:0c:f2:fb:b3:0b: a9:f3:d2:5b:51:ac:e0:90:de:a8:2f:a9:6a:bf:1d: 00:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DF:BE:3F:16:D2:5A:2A:80:99:09:41:EC:57:96:FC:D6:40:F5:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cca87df2-6af9-3cdc-8b05-93ee2eab30aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:bf:84:30:ac:b7:9a:c4:32:cc:f8:d3:a2:55:f5:bd:ae:65: bd:88:4e:9b:6b:a6:e1:1d:b9:f5:13:a1:1b:f8:b2:c5:78:a9: bc:6c:cd:be:98:c1:df:7a:38:a9:8a:53:99:29:7b:2b:36:b6: 61:88:c0:e3:9f:e8:5e:b6:50:39:5c:14:08:6e:5d:a7:3c:72: 5c:bc:7a:df:93:13:fa:7a:9c:e9:cc:65:2a:f7:85:d4:d4:39: 0b:c9:17:e2:95:fa:d8:21:93:3d:f4:7c:d1:4c:94:7f:fb:4b: a5:7b:b4:39:ec:db:4b:0d:dd:51:82:4b:73:fb:2e:fa:b5:a6: 88:fc:f2:c2:d2:a2:13:a5:b3:cb:bc:9a:97:08:55:55:e2:ea: 1d:df:11:eb:b5:34:e6:10:19:b9:28:93:91:f1:e8:8b:f5:73: 59:85:3e:c6:4b:32:27:f8:db:13:8a:c2:a5:5a:ef:9f:d3:8b: 05:6a:6e:72:08:e6:7a:dd:2d:70:e5:d7:a5:f2:56:73:5b:a6: e4:ff:67:1f:61:f8:82:be:9d:05:f7:b6:7b:d3:04:ae:c0:b7: 7f:fc:47:71:1f:85:67:23:47:f5:73:12:71:75:fd:7e:08:d6: bc:40:a7:b0:43:08:da:a0:eb:cb:08:73:9a:c5:d2:d3:f0:1c: 04:35:70:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwkr8neee27cXexAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk ZmU5MmUyM2YtNjBiYy00NWI0LWI2ODAtNGEzZTA5ZTQ5ZDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydKK7rN7MX2rsGZ/FAoYdogIAuLtJR9Mzi9v 3vnwrHBSXKefJ5E9RF3GBmJqCgtUqJVRYQ+FAnigByTe5BRp3BNetCjFzwFeKDyy kJpxjbjnZvlgWAIguFDOnd0sObBKgW5jiTT/bcH35j7578mAqRKLX7443oMhgKpn TcKZ4A8NZwPk0FlNQQTyr1hZRaxpt1PcZhRe53e1DHO8dbO4I0UCe8CGwEC8Qzj3 rPZZvW41CVLaClnO+ocjdv7Bd0nfpKQvmCYyDMeczjtkSWBnNcYUooiD/2JGSTs5 zZ8tc01lZOpZsWvumde7DPL7swup89JbUazgkN6oL6lqvx0AzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3fvj8W0loqgJkJQexXlvzWQPVCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2NhODdkZjItNmFmOS0z Y2RjLThiMDUtOTNlZTJlYWIzMGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACK/hDCst5rEMsz406JV9b2uZb2ITptrpuEdufUToRv4ssV4qbxszb6Y wd96OKmKU5kpeys2tmGIwOOf6F62UDlcFAhuXac8cly8et+TE/p6nOnMZSr3hdTU OQvJF+KV+tghkz30fNFMlH/7S6V7tDns20sN3VGCS3P7Lvq1poj88sLSohOls8u8 mpcIVVXi6h3fEeu1NOYQGbkok5Hx6Iv1c1mFPsZLMif42xOKwqVa75/TiwVqbnII 5nrdLXDl16XyVnNbpuT/Zx9h+IK+nQX3tnvTBK7At3/8R3EfhWcjR/VzEnF1/X4I 1rxAp7BDCNqg68sIc5rF0tPwHAQ1cM0= -----END CERTIFICATE-----Generated at Tue Sep 22 07:24:06 2026 by rpki-client