$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dc169fe9-e10a-31f3-8d7a-c4d9c4a49fa0.roa File: dc169fe9-e10a-31f3-8d7a-c4d9c4a49fa0.roa (raw, json) Hash identifier: MQ3wDMxzxvOnQxXqa3op3Ygo9bGHy1/BonKPE5nZMSs= Subject key identifier: 13:2E:9E:1E:C5:D5:53:BD:23:FD:55:07:48:29:A3:40:CE:FD:23:8A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F5BBA1D4C0E674CD2AC4A5F50 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dc169fe9-e10a-31f3-8d7a-c4d9c4a49fa0.roa Signing time: Thu 01 Oct 2026 14:09:00 +0000 ROA not before: Thu 01 Oct 2026 14:09:00 +0000 ROA not after: Wed 30 Dec 2026 15:09:00 +0000 asID: 6079 IP address blocks: 68.164.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:ba:1d:4c:0e:67:4c:d2:ac:4a:5f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 1 14:09:00 2026 GMT Not After : Dec 30 15:09:00 2026 GMT Subject: CN=bf0ed53e-2ee3-440d-9c40-d74d67be5cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:05:b6:7f:87:c8:5a:5a:d2:e8:8f:3b:cd:ab: a1:70:6a:b7:c8:b1:58:d5:71:47:6e:4d:ef:85:7c: be:10:e5:6a:3c:bc:5c:db:70:b3:d0:92:52:20:ea: 32:7b:81:dd:87:15:6d:94:fd:64:80:b5:db:b6:57: 3c:0d:1f:6c:25:59:ac:94:a4:57:11:48:fe:70:76: 66:f8:31:95:11:a7:a1:cb:cc:24:56:5c:a0:df:88: 4e:ff:a2:71:70:7f:78:96:96:3f:60:7f:4b:62:28: 55:f8:4b:d1:de:7d:ad:d2:4c:6b:a9:6a:29:64:3b: 75:ca:f4:c8:3e:ee:d0:b1:92:de:d8:b7:2f:74:ce: b1:23:40:67:c2:17:58:b4:14:88:ed:2a:35:b2:86: f4:4b:d6:4c:b6:35:39:f5:62:ea:08:66:bf:93:7f: 69:70:94:f4:87:df:52:1f:81:38:5f:1d:7a:c5:42: 93:38:fe:b1:44:e0:b8:43:32:f1:bf:ed:11:d2:a5: e8:25:b1:ba:db:57:da:99:c6:72:5c:e9:7c:f4:cf: 18:05:d5:4f:8b:0c:d8:a5:71:cf:cd:b6:09:df:43: 63:2c:bb:32:14:1d:57:43:17:a0:90:e9:c6:70:be: 88:6d:dd:29:5d:e0:43:ab:57:e1:af:b2:54:a9:0e: e5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2E:9E:1E:C5:D5:53:BD:23:FD:55:07:48:29:A3:40:CE:FD:23:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dc169fe9-e10a-31f3-8d7a-c4d9c4a49fa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:45:e6:ca:f2:cc:14:cb:85:d2:10:a6:bd:42:93:95:4e:01: ef:8f:a5:d1:cc:d5:8f:bf:6c:6b:76:3c:88:e5:1d:d4:8a:dc: 71:3d:6a:45:09:16:95:01:bd:59:46:8a:21:3a:49:ff:f6:ac: 56:06:af:91:f9:96:93:57:27:05:03:64:bb:65:dd:dd:65:87: b2:0c:e3:54:ff:fe:f9:08:74:ef:d8:33:f5:9f:5b:a9:a5:31: e4:6d:f7:11:73:86:3d:b4:e9:b2:49:ed:d3:d1:a7:30:1d:2b: 17:e6:87:f8:8e:32:57:cf:5c:80:fb:67:e9:8e:be:40:6c:73: 61:92:84:bc:57:37:06:20:16:ec:c6:86:3c:07:87:3e:2a:69: f6:b1:71:5b:01:08:02:e5:f1:24:8b:13:da:56:7f:07:32:c7: 44:1e:76:a2:75:1e:17:25:e2:78:2a:8b:35:2f:e6:0c:27:8b: 47:60:93:3a:78:3a:e2:4d:b6:e3:9b:0f:a1:55:fb:c2:8c:fb: 03:6b:4c:da:50:02:d4:be:01:6f:53:38:71:ea:22:02:19:1d: f1:25:3e:40:c3:6e:71:83:2e:42:63:f7:f6:29:06:e2:a9:d9: 5a:97:e8:02:68:aa:9e:27:54:32:26:fd:13:be:fc:11:9e:73: 2c:54:43:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9buh1MDmdM0qxKX1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwMTE0MDkwMFoXDTI2MTIzMDE1MDkwMFowLzEtMCsGA1UEAxMk YmYwZWQ1M2UtMmVlMy00NDBkLTljNDAtZDc0ZDY3YmU1Y2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAW2f4fIWlrS6I87zauhcGq3yLFY1XFHbk3v hXy+EOVqPLxc23Cz0JJSIOoye4HdhxVtlP1kgLXbtlc8DR9sJVmslKRXEUj+cHZm +DGVEaehy8wkVlyg34hO/6JxcH94lpY/YH9LYihV+EvR3n2t0kxrqWopZDt1yvTI Pu7QsZLe2LcvdM6xI0BnwhdYtBSI7So1sob0S9ZMtjU59WLqCGa/k39pcJT0h99S H4E4Xx16xUKTOP6xROC4QzLxv+0R0qXoJbG621famcZyXOl89M8YBdVPiwzYpXHP zbYJ30NjLLsyFB1XQxegkOnGcL6Ibd0pXeBDq1fhr7JUqQ7lMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMunh7F1VO9I/1VB0gpo0DO/SOKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGMxNjlmZTktZTEwYS0z MWYzLThkN2EtYzRkOWM0YTQ5ZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKSHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFF5sryzBTLhdIQpr1Ck5VOAe+PpdHM1Y+/bGt2PIjlHdSK3HE9akUJ FpUBvVlGiiE6Sf/2rFYGr5H5lpNXJwUDZLtl3d1lh7IM41T//vkIdO/YM/WfW6ml MeRt9xFzhj206bJJ7dPRpzAdKxfmh/iOMlfPXID7Z+mOvkBsc2GShLxXNwYgFuzG hjwHhz4qafaxcVsBCALl8SSLE9pWfwcyx0QedqJ1Hhcl4ngqizUv5gwni0dgkzp4 OuJNtuObD6FV+8KM+wNrTNpQAtS+AW9TOHHqIgIZHfElPkDDbnGDLkJj9/YpBuKp 2VqX6AJoqp4nVDIm/RO+/BGecyxUQ40= -----END CERTIFICATE-----Generated at Sat Oct 10 05:46:45 2026 by rpki-client