$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d8584dc6-74c9-364d-ad85-6417005e637d.roa File: d8584dc6-74c9-364d-ad85-6417005e637d.roa (raw, json) Hash identifier: cw6GFOGC5xuHN2kY3W+tzx5lMsukc5d6DmhkvqQ5SH4= Subject key identifier: 12:CF:0C:24:79:C6:F7:59:1F:C6:31:65:1C:84:17:C9:48:53:32:BB Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F3B7D1D0FD72AA1EDD478D174 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d8584dc6-74c9-364d-ad85-6417005e637d.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 6079 IP address blocks: 66.253.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:1d:0f:d7:2a:a1:ed:d4:78:d1:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=c4ce7652-afb9-4328-9acf-0f3a6608d19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d0:cc:cb:9a:dc:ed:fa:c5:73:98:59:13:8e: 8d:58:e0:82:0d:9b:08:2d:b9:e8:e4:99:c9:0b:72: 47:5f:c2:b2:6c:13:23:b9:30:4b:ec:8a:de:1f:9c: 73:61:81:5b:1e:ab:14:09:2c:11:fb:9b:b3:51:79: 04:df:37:64:75:33:93:66:3a:71:67:50:38:0a:00: 51:1b:b6:c7:9a:bb:32:78:2f:9b:01:40:7f:76:ea: f2:19:36:f7:a3:4c:19:74:87:6d:c9:24:2c:28:0b: 1a:bc:4f:72:8b:72:31:51:e8:0c:35:4d:81:0f:a6: 7c:67:73:a2:cc:0e:35:9f:9b:8d:4a:9e:cc:98:60: a7:ed:ce:38:8f:d5:45:22:a6:21:0a:84:e5:16:6a: f8:0d:cb:52:36:05:be:96:04:f5:d6:1a:26:e4:04: 3f:93:bf:42:7c:13:24:af:90:b4:09:ab:22:b4:10: 1f:64:3a:2b:f7:04:1c:44:f4:44:02:d3:79:64:1e: b6:32:90:20:64:dc:13:28:e3:65:c3:5d:ab:41:65: 1d:b2:6e:00:a9:15:f6:be:dd:34:5c:80:17:e6:45: b6:d7:8a:c7:92:59:96:1f:49:a3:98:a2:61:9c:1f: 7f:ba:c6:e4:d6:34:e4:f6:cd:3b:8c:b0:c4:60:58: 62:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:CF:0C:24:79:C6:F7:59:1F:C6:31:65:1C:84:17:C9:48:53:32:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d8584dc6-74c9-364d-ad85-6417005e637d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:02:7e:79:4a:6c:29:f8:52:62:c8:9a:e5:6f:89:4b:45:53: a3:f4:6c:61:e5:8a:f3:9c:55:c8:8e:4e:15:a0:4c:ed:5d:b0: ce:8e:d8:51:21:bd:ea:72:d4:89:9e:d8:e4:f6:bb:86:9c:dd: a8:6c:fe:90:e6:a4:a3:07:b7:54:49:47:d9:3e:c9:20:59:ea: 86:f2:38:23:0c:07:25:d5:98:5b:b6:6e:76:32:19:f6:54:ef: b4:85:92:81:3d:8e:16:c3:1b:2e:e7:e9:b9:6c:6c:cf:c8:44: b0:ee:38:d2:d1:f9:e1:78:21:ff:7c:3c:e2:8a:86:2b:d1:56: 0f:98:20:01:da:05:6d:a7:3e:eb:ef:20:75:db:3f:1e:4c:cf: 17:13:9a:b7:05:31:ab:1d:9e:47:04:f6:c8:3d:b9:0f:3b:5e: d3:62:af:a8:3a:71:e5:e7:3a:e2:92:3d:06:6b:5a:be:35:3a: 06:00:d5:fd:2b:d4:8a:da:7c:88:fb:9d:6f:33:52:15:e9:e1: fd:76:a3:6d:eb:f6:5a:9e:55:cb:c1:0d:7e:75:10:2d:d8:a9: 7a:5c:50:86:40:82:c5:2d:f7:16:e3:2a:6d:65:31:12:4e:db: 84:f0:6d:52:4d:72:22:a9:bb:6e:e6:0a:17:42:38:af:b8:ce: 53:bd:c7:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fR0P1yqh7dR40XQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk YzRjZTc2NTItYWZiOS00MzI4LTlhY2YtMGYzYTY2MDhkMTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtDMy5rc7frFc5hZE46NWOCCDZsILbno5JnJ C3JHX8KybBMjuTBL7IreH5xzYYFbHqsUCSwR+5uzUXkE3zdkdTOTZjpxZ1A4CgBR G7bHmrsyeC+bAUB/duryGTb3o0wZdIdtySQsKAsavE9yi3IxUegMNU2BD6Z8Z3Oi zA41n5uNSp7MmGCn7c44j9VFIqYhCoTlFmr4DctSNgW+lgT11hom5AQ/k79CfBMk r5C0CasitBAfZDor9wQcRPREAtN5ZB62MpAgZNwTKONlw12rQWUdsm4AqRX2vt00 XIAX5kW214rHklmWH0mjmKJhnB9/usbk1jTk9s07jLDEYFhifwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLPDCR5xvdZH8YxZRyEF8lIUzK7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDg1ODRkYzYtNzRjOS0z NjRkLWFkODUtNjQxNzAwNWU2MzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwCfnlKbCn4UmLImuVviUtFU6P0bGHlivOcVciOThWgTO1dsM6O2FEh vepy1Ime2OT2u4ac3ahs/pDmpKMHt1RJR9k+ySBZ6obyOCMMByXVmFu2bnYyGfZU 77SFkoE9jhbDGy7n6blsbM/IRLDuONLR+eF4If98POKKhivRVg+YIAHaBW2nPuvv IHXbPx5MzxcTmrcFMasdnkcE9sg9uQ87XtNir6g6ceXnOuKSPQZrWr41OgYA1f0r 1IrafIj7nW8zUhXp4f12o23r9lqeVcvBDX51EC3YqXpcUIZAgsUt9xbjKm1lMRJO 24TwbVJNciKpu27mChdCOK+4zlO9x9Y= -----END CERTIFICATE-----Generated at Mon Sep 28 22:33:00 2026 by rpki-client