$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f888de86-3463-3a63-8174-d3a0f5ba50a4.roa File: f888de86-3463-3a63-8174-d3a0f5ba50a4.roa (raw, json) Hash identifier: BwJHuNhFjZ5MUoh07VGcghaqs6HBxMgCZxHYISZBaKE= Subject key identifier: D7:F6:8F:95:BF:38:8B:90:0D:AD:84:1F:B8:EF:73:E5:49:49:C2:92 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F49734786A5E23E3F4558EB80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f888de86-3463-3a63-8174-d3a0f5ba50a4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 5065 IP address blocks: 68.166.191.0/24 maxlen: 24 68.167.66.0/24 maxlen: 24 68.167.147.0/24 maxlen: 24 68.167.181.0/24 maxlen: 24 68.167.199.0/24 maxlen: 24 68.167.250.0/24 maxlen: 24 68.167.252.0/24 maxlen: 24 68.167.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:47:86:a5:e2:3e:3f:45:58:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4e380225-581d-4923-9bf5-4f5e42ce43ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ea:f8:99:3c:7c:d4:8f:8f:b9:40:97:6a:45: 12:83:da:5a:44:90:52:ce:ff:06:66:ec:11:66:c9: 91:58:aa:0d:b7:3f:35:1b:bb:2b:fc:e0:87:88:35: 1c:8c:bf:c5:65:58:f9:6d:fe:b3:e4:59:fd:90:5c: 55:e4:7f:92:0d:2e:cf:a4:e2:61:ec:ab:2c:d1:e7: 27:84:48:f0:70:e3:fc:5a:aa:27:75:e1:e5:1a:dd: 68:53:7d:3f:87:18:cc:fd:61:d3:ad:aa:1b:a8:2f: 0a:64:80:12:61:3d:f6:dc:21:50:6c:52:cd:8f:0e: 1d:67:3e:04:2c:d1:52:a2:f4:08:41:ee:74:b9:de: fd:00:d3:40:10:78:23:96:10:1d:c6:ed:02:6c:65: 46:aa:5f:1f:5d:03:5b:27:29:dd:eb:37:99:5e:dd: f0:8c:bf:e6:0e:fe:44:6c:2b:2d:a1:22:33:87:4b: 62:b4:72:a7:0e:1f:39:94:ee:8a:9b:e6:da:49:54: 70:46:01:0f:15:77:ac:b1:9d:54:2b:4f:2b:0c:37: 26:41:9b:b5:e6:d9:85:dd:45:a1:00:bd:52:b0:30: 07:a9:d4:78:94:f6:e4:69:97:fb:7a:4e:3e:02:1e: 40:15:81:f3:21:c8:5d:d2:60:01:e5:be:49:1f:67: 6b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F6:8F:95:BF:38:8B:90:0D:AD:84:1F:B8:EF:73:E5:49:49:C2:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f888de86-3463-3a63-8174-d3a0f5ba50a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.166.191.0/24 68.167.66.0/24 68.167.147.0/24 68.167.181.0/24 68.167.199.0/24 68.167.250.0/24 68.167.252.0/24 68.167.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:2c:3e:7c:b2:6e:41:eb:1e:98:9b:a3:42:9a:a2:fa:59:cb: 0c:49:45:12:a1:8b:65:5f:c2:0d:55:79:31:66:fe:43:d6:95: 98:de:6f:d0:d1:1d:5d:b8:cc:0e:c6:13:dc:f7:97:5d:cc:e9: 10:5c:87:b5:af:c9:77:50:17:b1:cf:4c:0c:69:1b:df:36:0d: 21:57:8f:3f:a7:70:28:19:f1:bd:8d:e8:68:95:0f:ad:25:83: fe:9c:2b:65:05:e3:83:be:fb:99:d1:33:89:74:91:b4:75:be: 03:c4:c7:1c:2e:ee:07:19:e5:1f:b5:62:10:ad:73:23:c6:10: 9b:ea:f8:1e:10:3f:92:a4:30:36:cb:50:6c:77:6e:ff:1d:68: 19:bb:f7:14:73:fb:7e:84:a7:3f:1a:ad:d3:06:89:24:d5:e1: ca:d2:98:f6:aa:c7:fa:c5:45:d3:f7:9a:00:6d:a0:8c:76:4b: ac:b9:d2:73:70:a4:de:02:89:d4:63:62:f6:f4:8e:be:db:66: b7:30:8a:a3:67:a4:1d:78:2a:e2:1f:0a:bd:28:38:90:8f:e9: 2d:7a:5c:c8:f2:9f:78:d8:b9:d1:76:f7:fe:e0:80:0a:ae:95: 3e:b3:41:af:43:bc:37:0d:ee:9a:db:8c:87:50:2f:49:e5:0e: 1f:cc:aa:d3 -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWE9Jc0eGpeI+P0VY64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGUzODAyMjUtNTgxZC00OTIzLTliZjUtNGY1ZTQyY2U0M2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOr4mTx81I+PuUCXakUSg9paRJBSzv8GZuwR ZsmRWKoNtz81G7sr/OCHiDUcjL/FZVj5bf6z5Fn9kFxV5H+SDS7PpOJh7Kss0ecn hEjwcOP8WqondeHlGt1oU30/hxjM/WHTraobqC8KZIASYT323CFQbFLNjw4dZz4E LNFSovQIQe50ud79ANNAEHgjlhAdxu0CbGVGql8fXQNbJynd6zeZXt3wjL/mDv5E bCstoSIzh0titHKnDh85lO6Km+baSVRwRgEPFXessZ1UK08rDDcmQZu15tmF3UWh AL1SsDAHqdR4lPbkaZf7ek4+Ah5AFYHzIchd0mAB5b5JH2drJwIDAQABo4IDfzCC A3swHQYDVR0OBBYEFNf2j5W/OIuQDa2EH7jvc+VJScKSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZjg4OGRlODYtMzQ2My0z YTYzLTgxNzQtZDNhMGY1YmE1MGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQARKa/AwQA RKdCAwQARKeTAwQARKe1AwQARKfHAwQARKf6AwQARKf8AwQARKf+MFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AC8sPnyybkHrHpibo0KaovpZywxJRRKhi2Vfwg1VeTFm/kPWlZjeb9DRHV24zA7G E9z3l13M6RBch7WvyXdQF7HPTAxpG982DSFXjz+ncCgZ8b2N6GiVD60lg/6cK2UF 44O++5nRM4l0kbR1vgPExxwu7gcZ5R+1YhCtcyPGEJvq+B4QP5KkMDbLUGx3bv8d aBm79xRz+36Epz8ardMGiSTV4crSmPaqx/rFRdP3mgBtoIx2S6y50nNwpN4CidRj Yvb0jr7bZrcwiqNnpB14KuIfCr0oOJCP6S16XMjyn3jYudF29/7ggAqulT6zQa9D vDcN7prbjIdQL0nlDh/MqtM= -----END CERTIFICATE-----Generated at Sat Oct 10 13:54:04 2026 by rpki-client