$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/de838cfe-9610-3ca4-99f2-3f7841b1c2be.roa File: de838cfe-9610-3ca4-99f2-3f7841b1c2be.roa (raw, json) Hash identifier: K2cTnuY71lMyCykkZonthnNozLxaTVrKyitblGqOSXQ= Subject key identifier: 89:EF:BE:CD:B2:E6:54:A2:F0:28:E1:79:98:64:F7:7C:12:79:19:84 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F5BBB1D3C9141A55A65398400 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/de838cfe-9610-3ca4-99f2-3f7841b1c2be.roa Signing time: Thu 01 Oct 2026 14:11:01 +0000 ROA not before: Thu 01 Oct 2026 14:11:01 +0000 ROA not after: Wed 30 Dec 2026 15:11:01 +0000 asID: 6079 IP address blocks: 68.166.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:bb:1d:3c:91:41:a5:5a:65:39:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 1 14:11:01 2026 GMT Not After : Dec 30 15:11:01 2026 GMT Subject: CN=5a87c578-e666-48c6-aa04-c9ce92a87206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:11:20:ac:e6:8a:0a:b9:19:1c:be:08:d1:5a: fb:f2:3c:2d:dc:ca:04:1c:0e:34:90:61:45:46:67: 1d:91:f7:5b:9d:23:f4:aa:eb:ad:65:e0:8f:fe:3c: 22:8e:1c:03:99:e3:fb:2c:98:4c:36:7d:ae:3f:5c: 99:1c:47:63:1b:1f:ce:49:3f:36:41:1f:5e:e9:f4: 81:3d:0c:ca:cf:fe:6a:c4:9b:e5:0b:5a:2c:72:f5: 4c:17:87:16:f2:19:ee:68:61:5d:01:28:e7:14:c0: e0:33:68:7c:cc:df:23:4a:73:e3:14:9c:97:70:7a: cd:9f:35:b1:f9:0e:2d:1a:c4:d3:1b:7b:04:d3:5c: c9:a5:11:d1:11:37:39:a9:a4:fb:ee:30:bd:5d:d6: bd:ae:9b:bf:9d:d4:b9:9a:90:26:86:68:69:06:fe: 7c:36:24:88:47:92:e8:8c:a5:87:ea:b6:66:4b:c8: e7:1e:51:ba:c0:d7:0d:af:dd:00:b2:1e:f6:30:95: 71:8d:36:58:f0:6f:91:05:4d:24:5e:47:47:00:48: 1f:15:8d:ad:49:07:26:7b:5d:59:7a:a9:6a:34:0c: f4:ea:db:fb:9d:f2:2b:4b:76:0e:d0:57:e3:dd:8d: b2:78:af:bc:26:08:be:ab:36:7b:14:4a:1d:ba:84: d3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:EF:BE:CD:B2:E6:54:A2:F0:28:E1:79:98:64:F7:7C:12:79:19:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/de838cfe-9610-3ca4-99f2-3f7841b1c2be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.166.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:84:df:11:f6:42:f3:08:4e:63:1e:71:f5:31:fd:b6:2d:19: bd:12:80:68:6c:da:bf:70:0b:e8:fe:58:12:a0:3d:bc:d1:f3: 6a:4c:8e:5a:68:0d:5f:00:82:af:28:c1:c7:3d:42:17:74:50: 31:7d:22:c7:d8:c9:ee:88:19:43:db:1a:42:68:17:47:76:12: 65:cf:90:23:a8:2e:8d:97:33:95:6d:de:fd:fb:29:0a:4d:66: e1:7e:2f:11:bc:4a:60:1b:cd:6e:e6:fe:a9:aa:de:18:20:70: 30:aa:4c:a3:d5:2a:ef:0e:56:2b:27:11:a7:d3:55:0f:34:ee: d5:9a:f7:c0:53:2e:46:b8:7a:86:d2:13:c1:c3:0d:f1:df:a5: 0f:01:ca:04:02:e3:4e:bc:c5:07:c5:9c:8f:21:a2:42:f4:4e: b9:8f:89:7d:e7:05:31:cc:da:6d:ce:65:8d:80:72:dc:7d:d2: d5:ea:60:aa:9e:c9:a8:7f:81:cf:a2:ac:f6:3c:c1:8d:01:82: 5f:24:c5:1d:f3:be:ba:9a:bd:b4:e1:2f:67:7c:ef:98:6f:39: 35:45:59:2a:80:ab:21:75:03:01:c7:28:e5:af:50:20:7d:3b: 04:ca:59:fb:26:43:88:a8:f5:e3:8b:7c:8c:6a:09:04:41:b7: 10:a4:f9:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bux08kUGlWmU5hAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwMTE0MTEwMVoXDTI2MTIzMDE1MTEwMVowLzEtMCsGA1UEAxMk NWE4N2M1NzgtZTY2Ni00OGM2LWFhMDQtYzljZTkyYTg3MjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+BEgrOaKCrkZHL4I0Vr78jwt3MoEHA40kGFF RmcdkfdbnSP0quutZeCP/jwijhwDmeP7LJhMNn2uP1yZHEdjGx/OST82QR9e6fSB PQzKz/5qxJvlC1oscvVMF4cW8hnuaGFdASjnFMDgM2h8zN8jSnPjFJyXcHrNnzWx +Q4tGsTTG3sE01zJpRHRETc5qaT77jC9Xda9rpu/ndS5mpAmhmhpBv58NiSIR5Lo jKWH6rZmS8jnHlG6wNcNr90Ash72MJVxjTZY8G+RBU0kXkdHAEgfFY2tSQcme11Z eqlqNAz06tv7nfIrS3YO0Ffj3Y2yeK+8Jgi+qzZ7FEoduoTThwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInvvs2y5lSi8CjheZhk93wSeRmEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGU4MzhjZmUtOTYxMC0z Y2E0LTk5ZjItM2Y3ODQxYjFjMmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKbhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiE3xH2QvMITmMecfUx/bYtGb0SgGhs2r9wC+j+WBKgPbzR82pMjlpo DV8Agq8owcc9Qhd0UDF9IsfYye6IGUPbGkJoF0d2EmXPkCOoLo2XM5Vt3v37KQpN ZuF+LxG8SmAbzW7m/qmq3hggcDCqTKPVKu8OVisnEafTVQ807tWa98BTLka4eobS E8HDDfHfpQ8BygQC4068xQfFnI8hokL0TrmPiX3nBTHM2m3OZY2Actx90tXqYKqe yah/gc+irPY8wY0Bgl8kxR3zvrqavbThL2d875hvOTVFWSqAqyF1AwHHKOWvUCB9 OwTKWfsmQ4io9eOLfIxqCQRBtxCk+eE= -----END CERTIFICATE-----Generated at Sat Oct 10 05:55:03 2026 by rpki-client