$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/00e35e59-b040-3ee8-be55-2e8acc474494.roa File: 00e35e59-b040-3ee8-be55-2e8acc474494.roa (raw, json) Hash identifier: K1vbyjMRTCCBFDKfEZdAhf5Ebc7UNSAudpUIYY3zpmE= Subject key identifier: 9A:5B:A6:51:1D:25:A0:7B:0E:09:5D:C8:6B:25:B2:FA:87:4A:DD:E4 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F34827C3FD4BD792FE3023540 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/00e35e59-b040-3ee8-be55-2e8acc474494.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 212669 IP address blocks: 68.166.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:7c:3f:d4:bd:79:2f:e3:02:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=4a2c67a9-d57a-4ab8-b9ea-c5846a1c25ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e9:49:01:7a:4a:3c:c9:cd:ee:24:de:03:2d: 84:8f:5f:fd:02:ef:15:71:bd:f5:40:61:87:ea:58: c8:a5:5d:3f:3c:41:49:95:a0:a5:6f:5f:3e:75:a3: 77:5a:25:9e:19:24:33:d7:0a:bf:34:7d:dd:16:bd: 41:5d:d8:ee:eb:76:8e:a7:1d:27:5b:06:21:bc:17: 60:9a:00:9a:75:44:01:d9:eb:a0:79:12:59:f2:61: ce:9d:c9:fd:ac:95:96:7e:d5:f7:87:e2:43:fd:c8: dc:67:f7:dd:71:67:5e:7c:3c:48:78:7b:14:14:24: bb:2a:25:d0:6a:f1:b2:35:4a:3d:14:62:b3:1a:0c: ef:ba:b8:5e:2f:2e:bf:d6:f8:85:18:9b:e4:07:9c: 23:6b:59:10:0e:bb:92:22:56:b2:e9:4d:33:c0:6a: b5:d2:67:36:db:1a:67:53:50:3b:10:c7:59:6c:91: e8:be:04:d1:b5:6c:5f:f8:a9:86:2b:72:31:27:54: 61:5e:d9:5b:8c:56:7b:57:93:96:fd:78:ee:93:5b: 21:7c:e5:83:b1:e9:fc:07:72:ec:ff:d8:fa:da:df: 1e:7d:c2:a5:44:f6:73:3e:93:d3:5c:10:de:d7:cf: af:0e:ed:3d:03:d3:00:06:21:6f:8b:77:d5:a7:39: 71:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5B:A6:51:1D:25:A0:7B:0E:09:5D:C8:6B:25:B2:FA:87:4A:DD:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/00e35e59-b040-3ee8-be55-2e8acc474494.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.166.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:e4:d5:78:a4:c3:7c:04:25:06:11:47:0c:b8:9b:56:a7:ae: 92:60:95:a9:56:ca:ec:e8:d6:31:af:74:11:af:c6:84:10:b1: af:08:8d:0e:6d:62:6b:0f:67:c5:10:33:a8:85:f3:af:09:a5: df:e4:11:ed:55:8b:ed:db:1d:de:ff:e0:a4:b3:90:27:29:b1: 13:59:70:a6:40:b8:5e:be:db:56:88:f2:75:ca:00:8e:be:38: 6d:39:81:fc:70:5d:00:0f:d7:70:30:f6:ef:26:2c:6e:01:12: 73:35:83:8b:c7:9b:28:3d:a5:f6:e7:2f:99:40:bc:57:96:69: ce:d9:40:15:a6:82:5e:e4:38:50:05:fd:94:7f:94:f0:12:0c: 07:e2:57:ab:6a:2f:83:4f:6d:2f:e5:a0:cb:b8:61:1d:03:71: 12:b6:ae:86:9d:59:80:50:8b:88:1d:5f:ea:bf:0e:88:bb:83: eb:4e:4a:71:00:19:3f:fb:eb:df:88:c6:98:8b:8c:fe:2b:2a: aa:7e:a4:b0:6e:7b:58:87:6e:f6:0f:a3:cf:7a:fb:9a:56:5f: b0:9c:57:df:90:f3:2b:6b:f2:b1:34:56:00:63:8f:27:7c:d4: 1b:8d:98:77:a5:cc:12:a7:6b:33:32:e5:e8:da:87:67:27:3d: 31:d7:1e:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80gnw/1L15L+MCNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk NGEyYzY3YTktZDU3YS00YWI4LWI5ZWEtYzU4NDZhMWMyNWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOlJAXpKPMnN7iTeAy2Ej1/9Au8Vcb31QGGH 6ljIpV0/PEFJlaClb18+daN3WiWeGSQz1wq/NH3dFr1BXdju63aOpx0nWwYhvBdg mgCadUQB2eugeRJZ8mHOncn9rJWWftX3h+JD/cjcZ/fdcWdefDxIeHsUFCS7KiXQ avGyNUo9FGKzGgzvurheLy6/1viFGJvkB5wja1kQDruSIlay6U0zwGq10mc22xpn U1A7EMdZbJHovgTRtWxf+KmGK3IxJ1RhXtlbjFZ7V5OW/Xjuk1shfOWDsen8B3Ls /9j62t8efcKlRPZzPpPTXBDe18+vDu09A9MABiFvi3fVpzlxNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpbplEdJaB7DgldyGslsvqHSt3kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDBlMzVlNTktYjA0MC0z ZWU4LWJlNTUtMmU4YWNjNDc0NDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKbpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLk1Xikw3wEJQYRRwy4m1anrpJglalWyuzo1jGvdBGvxoQQsa8IjQ5t YmsPZ8UQM6iF868Jpd/kEe1Vi+3bHd7/4KSzkCcpsRNZcKZAuF6+21aI8nXKAI6+ OG05gfxwXQAP13Aw9u8mLG4BEnM1g4vHmyg9pfbnL5lAvFeWac7ZQBWmgl7kOFAF /ZR/lPASDAfiV6tqL4NPbS/loMu4YR0DcRK2roadWYBQi4gdX+q/Doi7g+tOSnEA GT/769+IxpiLjP4rKqp+pLBue1iHbvYPo896+5pWX7CcV9+Q8ytr8rE0VgBjjyd8 1BuNmHelzBKnazMy5ejah2cnPTHXHso= -----END CERTIFICATE-----Generated at Mon Sep 28 06:16:17 2026 by rpki-client