$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ddac8040-0755-3a68-96e5-fdd3e8469a34.roa File: ddac8040-0755-3a68-96e5-fdd3e8469a34.roa (raw, json) Hash identifier: Wv76unx1aKd59fm7Vp6qsJuzU6OYNbBGIvmnbM6RmWI= Subject key identifier: C0:DA:86:86:A1:3F:55:B6:7C:BC:BE:74:F4:4D:8B:EB:DB:2E:8C:DC Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4975E03EDFFA2D8CE9FBD920 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ddac8040-0755-3a68-96e5-fdd3e8469a34.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 68.182.190.0/24 maxlen: 24 68.182.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:e0:3e:df:fa:2d:8c:e9:fb:d9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4efcc97f-6c7a-4f3a-9f8a-e2ae573dc5c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8d:03:26:0e:e4:4c:cb:70:7e:54:39:f5:1d: a8:21:d1:46:b8:c4:7e:d1:3a:d2:3b:43:1b:9f:66: a9:49:e0:7d:b1:5c:c3:48:7e:3d:b9:9c:81:3e:73: 21:41:02:7a:8e:e8:61:dc:d3:20:ab:60:17:27:e4: 3e:98:c3:91:21:7e:63:d5:3b:8f:19:8b:6e:1a:0d: f7:36:dc:5b:8f:bb:d6:dc:d1:1a:f7:3b:ab:eb:97: 89:db:c5:c1:c9:01:33:20:c2:72:cb:df:7e:c9:37: b9:d1:33:89:21:1d:c1:43:8b:2c:b6:f4:1f:b9:22: 3f:49:0c:e7:b0:04:1b:a4:fb:08:cd:9a:ac:0f:4f: 67:8d:13:95:b3:90:28:5e:2b:73:46:fd:d9:85:19: 38:a0:30:3e:07:f3:99:1f:51:9a:50:1b:ab:ba:3d: bd:a7:49:70:02:28:72:09:d2:db:aa:67:35:c6:29: f2:bf:6e:17:3b:6c:b4:34:45:40:a4:b3:84:e4:37: 0e:a2:62:ef:18:e1:ef:53:ca:f3:d5:34:d9:77:29: b0:46:df:36:76:60:46:3d:da:0c:0c:c0:4c:b7:29: 65:83:11:c2:77:82:74:49:63:f4:0f:d8:30:4d:a0: 2f:6d:79:d3:3a:a1:4b:ca:99:39:f2:d8:7a:6d:27: 58:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DA:86:86:A1:3F:55:B6:7C:BC:BE:74:F4:4D:8B:EB:DB:2E:8C:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ddac8040-0755-3a68-96e5-fdd3e8469a34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:17:45:04:da:f1:d6:4f:11:d3:e2:df:b2:94:3a:76:7e:54: b8:36:21:a5:28:6a:f2:43:0b:7b:86:66:53:70:da:b3:46:38: 36:5e:ae:06:54:f5:17:2e:33:74:93:4c:4a:c3:4f:9b:6b:95: 3d:34:08:2e:be:ca:8d:45:4a:92:c7:47:a9:7d:e5:1d:63:25: 85:ef:36:3d:d1:75:42:7e:a8:77:5b:d6:aa:78:27:dc:47:46: cb:8a:75:20:b5:8f:43:26:7c:7b:fd:29:66:ea:07:ff:22:ad: 4c:c4:72:00:1d:a8:b7:8d:10:e1:ee:80:aa:8e:37:26:f7:22: 9a:fe:2e:49:bc:0a:1f:ca:78:a7:9b:a9:9a:ac:e9:87:3d:56: c5:99:a5:be:47:ad:30:51:2d:59:bc:4a:cb:20:c4:ef:12:b1: 47:cc:e2:57:de:5a:7b:62:d9:09:7e:dc:31:39:62:6b:fa:01: be:8b:f7:44:c2:f1:93:b3:6a:42:b7:1b:95:f8:00:85:a4:0e: b6:3d:b0:d8:4c:eb:0f:53:3f:a1:e3:17:8a:92:d1:ce:e0:9d: d3:bd:b4:65:58:69:3e:99:a9:9b:cc:1e:df:a2:ff:e2:f9:d6: d4:c9:ca:59:52:29:47:8d:62:a9:1a:26:32:29:26:59:c2:a1: 86:25:a2:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdeA+3/otjOn72SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGVmY2M5N2YtNmM3YS00ZjNhLTlmOGEtZTJhZTU3M2RjNWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo0DJg7kTMtwflQ59R2oIdFGuMR+0TrSO0Mb n2apSeB9sVzDSH49uZyBPnMhQQJ6juhh3NMgq2AXJ+Q+mMORIX5j1TuPGYtuGg33 Ntxbj7vW3NEa9zur65eJ28XByQEzIMJyy99+yTe50TOJIR3BQ4sstvQfuSI/SQzn sAQbpPsIzZqsD09njROVs5AoXitzRv3ZhRk4oDA+B/OZH1GaUBuruj29p0lwAihy CdLbqmc1xinyv24XO2y0NEVApLOE5DcOomLvGOHvU8rz1TTZdymwRt82dmBGPdoM DMBMtyllgxHCd4J0SWP0D9gwTaAvbXnTOqFLypk58th6bSdY1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDahoahP1W2fLy+dPRNi+vbLozcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZGRhYzgwNDAtMDc1NS0z YTY4LTk2ZTUtZmRkM2U4NDY5YTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRLa+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0XRQTa8dZPEdPi37KUOnZ+VLg2IaUoavJDC3uGZlNw2rNGODZergZU 9RcuM3STTErDT5trlT00CC6+yo1FSpLHR6l95R1jJYXvNj3RdUJ+qHdb1qp4J9xH RsuKdSC1j0MmfHv9KWbqB/8irUzEcgAdqLeNEOHugKqONyb3Ipr+Lkm8Ch/KeKeb qZqs6Yc9VsWZpb5HrTBRLVm8SssgxO8SsUfM4lfeWnti2Ql+3DE5Ymv6Ab6L90TC 8ZOzakK3G5X4AIWkDrY9sNhM6w9TP6HjF4qS0c7gndO9tGVYaT6ZqZvMHt+i/+L5 1tTJyllSKUeNYqkaJjIpJlnCoYYlonE= -----END CERTIFICATE-----Generated at Sat Oct 10 16:00:42 2026 by rpki-client