$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fa49f084-9814-337d-bf13-07952075532b.roa File: fa49f084-9814-337d-bf13-07952075532b.roa (raw, json) Hash identifier: cbesIEWIiGZ3t6Y+SMqZ1uZZqB41L7WXTDpdwEOszW0= Subject key identifier: 97:49:4D:2E:56:9F:0C:7F:1F:C1:9C:68:89:D8:1F:CF:39:38:43:52 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F576812ACAFC666645CED2DB0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fa49f084-9814-337d-bf13-07952075532b.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 6079 IP address blocks: 68.164.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:12:ac:af:c6:66:64:5c:ed:2d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=ac560287-4c00-4c32-a156-baa4c8e07bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2a:a3:2a:db:59:ff:7b:3e:a9:f7:58:00:ae: a7:bb:ff:18:25:55:f1:20:37:4d:32:1c:56:73:a8: 34:d6:ea:db:68:43:a6:8c:1d:9f:47:7d:08:5f:f3: 57:69:bf:0b:ef:7c:ce:85:7e:5b:7e:97:a1:44:92: d5:88:0a:f7:07:b0:d3:5c:54:3a:54:34:b0:10:56: 78:7a:4b:b3:c4:ce:c8:9b:d7:17:4f:f6:7d:b1:fe: e5:bf:38:2c:ad:89:c6:5c:b1:f9:cf:12:7b:eb:b5: 02:f2:62:34:a2:5f:61:83:e4:14:59:b6:b7:01:97: 55:98:ea:e4:db:70:0d:f0:2c:cc:a3:f9:17:bc:37: 78:f7:d1:4a:73:42:09:f0:db:89:72:dd:9e:2a:6f: 0d:f1:e2:3a:f8:14:79:7e:01:28:a3:07:07:da:ec: 3f:9d:02:67:da:fe:c6:60:50:a6:85:b4:d1:9e:4f: c4:4b:3f:2d:53:92:20:6e:e1:37:71:65:6e:20:dd: 8d:5b:e7:d3:5a:b3:77:08:7a:a4:eb:0e:87:14:6a: b7:91:f7:b1:18:d0:04:90:38:93:c4:bd:76:41:6d: 1c:ca:5c:c6:83:fa:c5:a5:64:d9:cd:66:1a:35:1d: eb:11:38:e4:05:a6:b5:cf:c9:f6:c3:df:b9:46:90: 41:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:49:4D:2E:56:9F:0C:7F:1F:C1:9C:68:89:D8:1F:CF:39:38:43:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fa49f084-9814-337d-bf13-07952075532b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:40:aa:7b:9f:78:b9:a7:6c:f0:aa:00:a5:b3:7f:4b:ae:73: d9:9c:83:8b:90:00:79:70:d1:3a:73:df:28:37:f8:d8:8e:0d: ea:4f:45:48:6f:21:b1:ff:05:bc:bd:53:fb:60:b2:ea:5c:05: 4f:93:cb:ac:9c:4a:2f:17:bf:99:f9:63:6f:92:a1:5b:b0:65: ea:49:e9:87:92:9e:07:7e:8d:38:0b:42:3a:0d:65:9f:db:8d: 63:86:26:65:81:76:37:02:f6:0f:77:89:e6:89:89:10:2a:77: 91:c6:dc:b3:5f:e4:50:67:7c:94:69:cf:04:d8:c3:c1:f1:d9: ea:c8:95:29:34:94:5c:33:43:c9:87:b7:33:86:91:30:d3:55: f7:79:01:81:45:62:cc:91:24:a6:26:fa:0a:2e:41:b9:96:f0: ef:47:0c:2d:ee:74:41:42:33:6a:c0:b8:dc:44:de:02:b3:cd: cd:51:84:94:8c:55:cf:4e:3e:d2:1b:17:df:cf:37:90:d9:89: 18:25:50:3f:59:4b:c9:74:8c:da:fe:7b:04:01:db:52:f3:b7: 2b:e7:c1:b6:ad:30:40:c8:ce:ec:41:33:b1:69:14:3c:61:10: 74:20:44:72:11:47:ab:8d:ab:f2:fa:75:22:c5:8d:2b:64:24: 10:18:48:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XaBKsr8ZmZFztLbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk YWM1NjAyODctNGMwMC00YzMyLWExNTYtYmFhNGM4ZTA3YmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCqjKttZ/3s+qfdYAK6nu/8YJVXxIDdNMhxW c6g01urbaEOmjB2fR30IX/NXab8L73zOhX5bfpehRJLViAr3B7DTXFQ6VDSwEFZ4 ekuzxM7Im9cXT/Z9sf7lvzgsrYnGXLH5zxJ767UC8mI0ol9hg+QUWba3AZdVmOrk 23AN8CzMo/kXvDd499FKc0IJ8NuJct2eKm8N8eI6+BR5fgEoowcH2uw/nQJn2v7G YFCmhbTRnk/ESz8tU5IgbuE3cWVuIN2NW+fTWrN3CHqk6w6HFGq3kfexGNAEkDiT xL12QW0cylzGg/rFpWTZzWYaNR3rETjkBaa1z8n2w9+5RpBBdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdJTS5Wnwx/H8GcaInYH885OENSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmE0OWYwODQtOTgxNC0z MzdkLWJmMTMtMDc5NTIwNzU1MzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALVAqnufeLmnbPCqAKWzf0uuc9mcg4uQAHlw0Tpz3yg3+NiODepPRUhv IbH/Bby9U/tgsupcBU+Ty6ycSi8Xv5n5Y2+SoVuwZepJ6YeSngd+jTgLQjoNZZ/b jWOGJmWBdjcC9g93ieaJiRAqd5HG3LNf5FBnfJRpzwTYw8Hx2erIlSk0lFwzQ8mH tzOGkTDTVfd5AYFFYsyRJKYm+gouQbmW8O9HDC3udEFCM2rAuNxE3gKzzc1RhJSM Vc9OPtIbF9/PN5DZiRglUD9ZS8l0jNr+ewQB21LztyvnwbatMEDIzuxBM7FpFDxh EHQgRHIRR6uNq/L6dSLFjStkJBAYSJE= -----END CERTIFICATE-----Generated at Sat Oct 10 14:20:17 2026 by rpki-client