$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cd0397c2-a2b0-3b6a-9aeb-1358e8e60b58.roa File: cd0397c2-a2b0-3b6a-9aeb-1358e8e60b58.roa (raw, json) Hash identifier: JY0w/nMolIyt+Gzf5fWyjGIcYVzQeY0k2NWT+HUEQaw= Subject key identifier: C2:EF:E1:02:E2:04:34:AF:CF:0A:3E:50:A8:02:E8:0B:88:91:FE:B8 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F30528EC3E9DF11D232094700 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cd0397c2-a2b0-3b6a-9aeb-1358e8e60b58.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 6079 IP address blocks: 68.167.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:8e:c3:e9:df:11:d2:32:09:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=ff01cbe3-6cdc-42ef-a41b-a5eca209a6ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1d:ff:d6:6c:03:a2:4c:7d:0f:d5:ba:e1:e0: 28:83:8f:c9:f6:0b:7f:e9:31:8f:7a:bc:5e:e0:22: 91:1b:ed:fd:07:bf:c6:11:06:16:57:5e:69:86:ef: b3:af:8a:90:14:d1:16:fd:a3:be:14:29:60:0e:65: 10:99:13:cc:f6:ae:cf:27:02:6f:8e:dc:0a:fe:ce: 21:4b:99:d4:97:60:39:1d:7c:72:dc:15:79:f4:83: 3d:ca:97:0b:07:39:22:14:c2:7f:cd:b6:96:3c:fb: 91:20:cc:4c:cd:0b:6d:95:d7:73:11:e0:08:50:a7: b2:a7:eb:de:f6:21:0f:3a:dc:72:92:1f:a4:f9:6c: 49:5c:72:30:36:6b:02:8c:9e:6a:cb:9a:95:3e:bc: 6d:be:dc:e4:8b:02:15:b8:48:bd:81:a1:aa:b1:40: 2f:ec:ee:6b:57:9f:72:a2:b2:19:ee:a8:37:fe:fa: b9:b1:8c:55:c4:b4:16:0e:c0:15:9f:71:0a:da:c0: 57:68:e6:a8:7a:81:da:be:cd:89:73:0b:c1:52:c9: 88:54:64:ac:be:74:05:ff:48:a7:01:4d:19:be:27: a0:35:a5:ee:49:7f:91:96:3a:9e:dd:38:aa:fd:dd: 60:04:03:00:1b:8d:94:b1:c4:c3:c6:71:2c:1a:0a: 2e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EF:E1:02:E2:04:34:AF:CF:0A:3E:50:A8:02:E8:0B:88:91:FE:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cd0397c2-a2b0-3b6a-9aeb-1358e8e60b58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:1f:9a:27:40:23:34:15:5b:7c:e4:17:af:b2:67:20:cd:10: f0:4c:b0:cf:fb:de:91:91:be:f0:38:c3:a7:d4:42:d0:9d:7e: bb:67:7f:99:42:53:21:35:a0:96:1a:be:ff:47:04:11:c8:e4: 81:fc:02:0e:66:3f:58:1a:ea:84:08:72:08:74:71:87:45:23: e9:a5:4c:c1:ac:c7:35:78:ee:b6:e4:39:0f:8e:2f:92:25:f1: 70:36:f3:f6:62:3b:60:66:25:22:93:a4:6b:80:80:a2:c7:66: 21:30:85:62:4d:c8:c9:ed:04:79:68:57:d4:1b:4b:4c:de:ea: e9:dd:78:7b:a9:5e:06:2a:0d:4e:38:6f:60:b6:4b:68:7b:07: c5:0d:9d:db:6c:a9:04:5d:bf:6d:6d:5a:79:fd:40:c5:19:7c: 96:7f:6f:d8:90:5d:f4:3e:9f:bf:97:26:be:fc:26:40:63:b7: 0b:f2:e3:33:0e:4a:45:27:50:c7:0a:78:f3:ec:cc:40:99:48: d5:cf:ac:3a:cb:91:60:8a:13:a4:33:f2:9e:68:96:60:df:64: 33:aa:a3:58:3b:38:03:7b:85:46:85:88:c7:55:b5:16:f5:48: f0:04:02:53:b1:d0:b2:e8:62:fa:e0:61:3f:ea:a1:be:10:f6: f0:3a:96:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUo7D6d8R0jIJRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk ZmYwMWNiZTMtNmNkYy00MmVmLWE0MWItYTVlY2EyMDlhNmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2R3/1mwDokx9D9W64eAog4/J9gt/6TGPerxe 4CKRG+39B7/GEQYWV15phu+zr4qQFNEW/aO+FClgDmUQmRPM9q7PJwJvjtwK/s4h S5nUl2A5HXxy3BV59IM9ypcLBzkiFMJ/zbaWPPuRIMxMzQttlddzEeAIUKeyp+ve 9iEPOtxykh+k+WxJXHIwNmsCjJ5qy5qVPrxtvtzkiwIVuEi9gaGqsUAv7O5rV59y orIZ7qg3/vq5sYxVxLQWDsAVn3EK2sBXaOaoeoHavs2JcwvBUsmIVGSsvnQF/0in AU0ZviegNaXuSX+Rljqe3Tiq/d1gBAMAG42UscTDxnEsGgoumwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLv4QLiBDSvzwo+UKgC6AuIkf64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2QwMzk3YzItYTJiMC0z YjZhLTlhZWItMTM1OGU4ZTYwYjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUfmidAIzQVW3zkF6+yZyDNEPBMsM/73pGRvvA4w6fUQtCdfrtnf5lC UyE1oJYavv9HBBHI5IH8Ag5mP1ga6oQIcgh0cYdFI+mlTMGsxzV47rbkOQ+OL5Il 8XA28/ZiO2BmJSKTpGuAgKLHZiEwhWJNyMntBHloV9QbS0ze6undeHupXgYqDU44 b2C2S2h7B8UNndtsqQRdv21tWnn9QMUZfJZ/b9iQXfQ+n7+XJr78JkBjtwvy4zMO SkUnUMcKePPszECZSNXPrDrLkWCKE6Qz8p5olmDfZDOqo1g7OAN7hUaFiMdVtRb1 SPAEAlOx0LLoYvrgYT/qob4Q9vA6lns= -----END CERTIFICATE-----Generated at Tue Sep 22 00:21:38 2026 by rpki-client