$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d2defa22-3133-32b0-8747-f32a35c9e79e.roa File: d2defa22-3133-32b0-8747-f32a35c9e79e.roa (raw, json) Hash identifier: k77JrZCwwOdp9gYocwsOVKBp0oQI3ZyNUF5OWW73vvM= Subject key identifier: 65:43:C7:60:7B:79:CF:65:51:05:E9:87:EB:5B:EC:AB:69:48:EE:A9 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F5BBA39760BB00CCCE7508080 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d2defa22-3133-32b0-8747-f32a35c9e79e.roa Signing time: Thu 01 Oct 2026 14:09:14 +0000 ROA not before: Thu 01 Oct 2026 14:09:14 +0000 ROA not after: Wed 30 Dec 2026 15:09:14 +0000 asID: 6079 IP address blocks: 68.164.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:ba:39:76:0b:b0:0c:cc:e7:50:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 1 14:09:14 2026 GMT Not After : Dec 30 15:09:14 2026 GMT Subject: CN=9b7718da-698c-4127-b1a9-1a9d2c355aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:44:5b:5d:0f:e7:41:21:53:b4:80:97:cc:48: 14:af:4e:91:a0:f8:b1:34:5e:26:1c:8f:8e:e3:10: 0b:7e:d0:3d:8f:27:3f:a3:56:e9:84:51:65:e9:6c: 8f:51:6d:97:25:9c:2b:86:d6:92:78:a7:c0:8f:31: aa:00:74:ab:c6:ce:df:fd:5b:75:2f:ef:5f:e7:81: 60:a9:c6:5b:24:dd:a3:a3:f1:97:f2:dc:39:f0:25: c7:63:42:bd:13:0e:ee:f5:af:3f:39:40:25:ea:75: ec:ee:35:0e:6b:83:be:13:57:78:4d:dd:54:19:cc: ef:36:b8:bb:7b:75:69:19:e9:f1:5c:8e:97:80:c3: 9d:25:06:80:3a:ad:32:c1:af:31:af:e1:1f:24:bf: 19:64:ab:2d:ac:3b:18:d6:9c:b6:a3:f9:b8:18:08: a1:51:f1:25:4a:7e:b0:16:59:5b:f2:2c:2d:a6:86: 9f:13:57:8e:b3:0f:2e:46:ba:c1:e8:bc:f2:d3:20: 1c:8e:84:40:b6:25:5f:c1:16:60:54:a2:a4:19:7b: af:fb:0d:39:eb:b8:d0:29:b3:24:75:59:74:53:3c: 71:33:54:5b:2a:4f:74:ba:d0:2e:37:af:45:45:dd: d4:27:d4:e8:9e:eb:2b:03:c2:aa:27:7d:00:70:56: 6d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:43:C7:60:7B:79:CF:65:51:05:E9:87:EB:5B:EC:AB:69:48:EE:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d2defa22-3133-32b0-8747-f32a35c9e79e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:01:6f:62:21:fb:7f:60:9b:09:91:e4:e8:56:4e:e5:7d:ac: 17:42:ac:b4:7f:a9:30:d4:d7:0d:bb:fd:10:b9:d8:10:61:26: 4c:a2:c1:9c:f3:aa:e2:5e:85:ea:db:dc:43:64:90:e4:9d:12: 70:22:ac:72:a4:2c:2d:22:fd:76:58:ec:1b:45:44:7f:7b:08: 73:e5:ae:86:0d:3d:57:86:93:ff:9e:d8:0f:d3:16:11:37:43: d5:51:96:c5:6b:4c:53:86:8d:12:fb:1e:a7:82:aa:17:ad:1d: c2:46:b9:e2:26:07:16:54:8d:3e:c5:9b:d9:1f:90:58:60:76: d0:2d:34:76:ee:90:6c:ad:62:93:10:5b:b6:9e:68:94:a0:cd: 00:29:87:08:c7:6e:6f:85:42:33:cd:51:88:a1:af:b6:cd:5a: 2a:16:ef:00:26:2a:9f:27:52:74:79:f6:81:cf:64:45:a0:55: 59:2f:c8:16:d1:6b:1c:4c:51:2d:75:c6:c0:b9:ac:a9:ae:13: 5f:22:4e:2a:3f:d2:ca:7b:57:29:ed:a0:ba:66:3b:ef:c2:1d: f6:9c:b4:07:f7:33:b6:2d:77:e4:14:1c:07:01:d7:c7:4e:c7: 73:71:b5:fc:7d:aa:48:b7:a8:93:4e:e9:0a:9d:78:65:40:0f: 9b:38:c8:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bujl2C7AMzOdQgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwMTE0MDkxNFoXDTI2MTIzMDE1MDkxNFowLzEtMCsGA1UEAxMk OWI3NzE4ZGEtNjk4Yy00MTI3LWIxYTktMWE5ZDJjMzU1YWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0RbXQ/nQSFTtICXzEgUr06RoPixNF4mHI+O 4xALftA9jyc/o1bphFFl6WyPUW2XJZwrhtaSeKfAjzGqAHSrxs7f/Vt1L+9f54Fg qcZbJN2jo/GX8tw58CXHY0K9Ew7u9a8/OUAl6nXs7jUOa4O+E1d4Td1UGczvNri7 e3VpGenxXI6XgMOdJQaAOq0ywa8xr+EfJL8ZZKstrDsY1py2o/m4GAihUfElSn6w Fllb8iwtpoafE1eOsw8uRrrB6Lzy0yAcjoRAtiVfwRZgVKKkGXuv+w0567jQKbMk dVl0UzxxM1RbKk90utAuN69FRd3UJ9TonusrA8KqJ30AcFZtSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVDx2B7ec9lUQXph+tb7KtpSO6pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDJkZWZhMjItMzEzMy0z MmIwLTg3NDctZjMyYTM1YzllNzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKSLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgBb2Ih+39gmwmR5OhWTuV9rBdCrLR/qTDU1w27/RC52BBhJkyiwZzz quJeherb3ENkkOSdEnAirHKkLC0i/XZY7BtFRH97CHPlroYNPVeGk/+e2A/TFhE3 Q9VRlsVrTFOGjRL7HqeCqhetHcJGueImBxZUjT7Fm9kfkFhgdtAtNHbukGytYpMQ W7aeaJSgzQAphwjHbm+FQjPNUYihr7bNWioW7wAmKp8nUnR59oHPZEWgVVkvyBbR axxMUS11xsC5rKmuE18iTio/0sp7VyntoLpmO+/CHfactAf3M7Ytd+QUHAcB18dO x3Nxtfx9qki3qJNO6QqdeGVAD5s4yFs= -----END CERTIFICATE-----Generated at Sat Oct 10 18:02:00 2026 by rpki-client