$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d64e0424-1427-3203-8b9d-0ac7ba6b1b35.roa File: d64e0424-1427-3203-8b9d-0ac7ba6b1b35.roa (raw, json) Hash identifier: hI8QCQtouD6aSOxXjQzfTReR1IpB7EvPBfnyzeAFNlU= Subject key identifier: E8:42:AC:12:39:48:5B:20:06:29:45:75:1D:FF:57:FA:1E:49:5C:FA Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EA788222E205A0C20B5F0D980 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d64e0424-1427-3203-8b9d-0ac7ba6b1b35.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 9304 IP address blocks: 66.253.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:22:2e:20:5a:0c:20:b5:f0:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5f20d1b6-4787-4e2b-a1e0-2f21667dfdfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3b:10:7c:12:d0:9b:7f:39:c3:92:17:3a:2d: bb:b2:f9:22:bf:55:82:76:43:75:4f:5a:9b:e0:b8: 5a:da:0d:d0:10:ae:da:c7:0f:3e:a7:b1:31:12:1a: ba:62:90:5f:1e:d3:8b:20:da:e3:a2:e9:01:84:32: 73:ee:47:20:84:c6:4c:42:00:31:db:d4:1c:c9:16: 73:cf:f7:eb:96:df:01:15:f0:31:f7:49:6a:e9:b3: d4:f5:76:9e:57:6d:1e:15:95:4d:09:53:8e:ce:ad: 47:7b:8d:7a:3f:6e:d8:ee:3d:1a:02:21:e1:f3:38: 81:e2:48:94:2f:4f:c7:96:77:fd:db:35:41:37:1b: 7c:c0:fb:9d:4f:19:85:c2:8f:11:ed:b0:96:46:0c: d4:78:3c:c5:95:64:4f:0d:1f:f1:1d:b7:4c:75:af: f9:a9:ab:5c:24:f6:93:2c:3c:bc:56:74:60:88:d3: 3e:11:27:fa:77:f1:42:67:6a:2a:54:31:fb:21:f6: 2e:f1:40:1e:5a:dc:63:ec:a5:f1:2e:13:ec:cd:be: 65:bf:73:44:77:88:ee:c6:23:36:df:2d:54:4c:19: a6:cd:d3:2c:ee:41:43:a6:ac:d6:ff:ad:e6:5b:7f: d4:47:ae:b8:55:46:b8:ca:f0:50:c8:21:e2:80:61: 5a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:42:AC:12:39:48:5B:20:06:29:45:75:1D:FF:57:FA:1E:49:5C:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d64e0424-1427-3203-8b9d-0ac7ba6b1b35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c6:f9:f9:b4:fc:74:69:7f:25:92:03:e6:e0:68:4f:96:02: 7a:47:f7:99:73:23:8b:32:fc:bf:c9:3e:cd:db:3a:3a:d3:b3: ad:43:66:87:c7:de:08:b9:e2:99:fd:df:07:a7:0b:0b:f2:04: 5f:06:7a:a6:c8:c9:91:a6:d5:85:18:49:54:7e:0d:50:7f:e1: cb:a5:99:50:dd:cf:0e:55:a3:6c:07:9b:7a:0d:ff:96:be:5a: 21:3e:5c:3a:55:8a:39:2d:88:25:81:45:ec:56:0a:78:9c:af: d3:8c:20:78:27:19:ac:14:fc:25:27:47:aa:c1:c4:35:d5:1b: af:9a:9f:7f:c2:1a:78:86:91:36:a6:cb:99:d9:db:fd:c2:64: 99:26:c5:eb:ef:1e:90:e0:bd:9f:30:de:1a:06:b1:1a:9c:25: 55:bf:1d:a9:44:7c:ea:c8:8c:29:a5:f6:82:cf:bd:9f:48:a8: 2a:b6:ff:d9:31:ea:9c:4b:26:5a:af:ec:84:27:6d:7f:19:5e: e7:25:77:03:68:19:83:07:d3:fa:ec:03:37:d8:b7:92:96:c5: 68:1b:cb:a2:d7:94:47:d3:5e:ca:b6:ca:74:ed:32:e2:a9:4e: 7a:2e:17:c8:a8:50:80:5f:cf:96:fe:5f:01:6a:9e:bd:7f:80: c0:10:7d:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niCIuIFoMILXw2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NWYyMGQxYjYtNDc4Ny00ZTJiLWExZTAtMmYyMTY2N2RmZGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzsQfBLQm385w5IXOi27svkiv1WCdkN1T1qb 4Lha2g3QEK7axw8+p7ExEhq6YpBfHtOLINrjoukBhDJz7kcghMZMQgAx29QcyRZz z/frlt8BFfAx90lq6bPU9XaeV20eFZVNCVOOzq1He416P27Y7j0aAiHh8ziB4kiU L0/Hlnf92zVBNxt8wPudTxmFwo8R7bCWRgzUeDzFlWRPDR/xHbdMda/5qatcJPaT LDy8VnRgiNM+ESf6d/FCZ2oqVDH7IfYu8UAeWtxj7KXxLhPszb5lv3NEd4juxiM2 3y1UTBmmzdMs7kFDpqzW/63mW3/UR664VUa4yvBQyCHigGFa3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhCrBI5SFsgBilFdR3/V/oeSVz6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDY0ZTA0MjQtMTQyNy0z MjAzLThiOWQtMGFjN2JhNmIxYjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv0DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfG+fm0/HRpfyWSA+bgaE+WAnpH95lzI4sy/L/JPs3bOjrTs61DZofH 3gi54pn93wenCwvyBF8GeqbIyZGm1YUYSVR+DVB/4culmVDdzw5Vo2wHm3oN/5a+ WiE+XDpVijktiCWBRexWCnicr9OMIHgnGawU/CUnR6rBxDXVG6+an3/CGniGkTam y5nZ2/3CZJkmxevvHpDgvZ8w3hoGsRqcJVW/HalEfOrIjCml9oLPvZ9IqCq2/9kx 6pxLJlqv7IQnbX8ZXucldwNoGYMH0/rsAzfYt5KWxWgby6LXlEfTXsq2ynTtMuKp TnouF8ioUIBfz5b+XwFqnr1/gMAQfbM= -----END CERTIFICATE-----Generated at Wed Jul 29 09:51:54 2026 by rpki-client