$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0147dacf-27b5-32d2-8ee1-4d395958be2c.roa File: 0147dacf-27b5-32d2-8ee1-4d395958be2c.roa (raw, json) Hash identifier: aliLXkUHcs6EIUofkLqe8Om6rmJ0tk6ITWEZAi2V5V0= Subject key identifier: F7:FE:15:66:BC:7E:12:BE:E3:8B:D0:5C:4B:E7:30:D1:DD:11:82:0B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F093D1406605209B4F0A0F800 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0147dacf-27b5-32d2-8ee1-4d395958be2c.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 66.92.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3d:14:06:60:52:09:b4:f0:a0:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=0f712fc3-7d95-4c8d-b85f-9ba4fee8189a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e5:a3:22:9e:88:f2:14:c7:5e:7a:42:62:40: 90:21:8c:ce:53:4f:76:b9:b6:42:04:63:46:0e:5b: 10:16:80:5e:9f:0e:db:7b:4e:df:94:c5:ff:51:23: 4e:e0:79:8b:79:96:b3:08:25:ce:61:49:29:b4:c3: 70:d3:fb:40:5b:11:2d:be:cc:c0:9f:f2:8b:97:76: d3:e2:0e:77:4b:3e:cc:29:54:a5:08:75:6b:ac:84: d6:20:30:74:21:15:c5:ea:03:2b:eb:1f:bf:d3:b1: b2:1e:7a:db:ba:5f:d0:bd:fb:44:7c:5b:6c:9e:38: 0f:a3:c9:32:8b:b7:72:c7:4b:33:6e:d7:23:41:1c: 46:7e:0c:ba:e9:46:18:a9:cb:6b:94:1c:e6:48:b1: c9:df:2d:a2:a6:7f:e9:29:ef:d8:c9:61:8e:f6:0a: 52:15:7e:6e:3f:66:0b:a2:62:1b:fb:86:2a:0c:4f: 05:f7:20:86:44:26:d7:27:bc:4a:0b:0b:9b:9f:49: 70:de:2e:d7:8e:eb:50:89:fe:f3:0b:67:db:42:0c: 10:b0:ae:d1:c5:03:1f:dc:13:aa:c1:89:19:ca:db: 5d:2c:2c:4f:1a:ac:be:1e:7f:2c:90:87:30:66:93: 79:9d:a6:dc:60:02:fe:da:ac:16:06:d8:50:70:de: a1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FE:15:66:BC:7E:12:BE:E3:8B:D0:5C:4B:E7:30:D1:DD:11:82:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0147dacf-27b5-32d2-8ee1-4d395958be2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ef:da:fa:0f:be:39:a6:e0:0a:ab:ad:b2:cd:2e:23:a4:3d: 44:2f:a3:b5:8f:97:07:89:77:16:de:fe:cd:00:bf:4c:36:71: 97:f9:ff:db:28:51:90:98:62:86:b1:2d:b0:11:90:8c:85:d9: 44:02:0f:42:be:6a:24:73:75:39:a5:68:00:d2:39:ca:f3:04: 25:34:9c:7f:2f:c4:84:3a:fc:7b:f0:3c:4d:00:80:b9:c3:9a: 90:a7:13:92:3c:42:fe:05:02:82:71:18:ac:a0:3a:99:29:87: 1b:c3:4a:61:57:45:b2:03:b1:56:08:68:94:e1:4b:02:ef:cb: aa:17:3c:59:6b:1b:1c:32:f8:22:d1:fe:51:70:9f:c4:b5:af: 05:63:f6:44:7e:91:ca:94:b8:d0:ff:b5:5c:7a:ba:9d:f0:fa: 42:ef:22:f4:56:27:aa:00:4c:5e:30:76:a6:16:03:d0:4f:18: 24:9f:3c:28:09:92:44:17:34:68:c5:dd:27:96:06:a6:2e:8c: 4c:67:f5:f1:fc:a5:47:f6:86:c2:30:ea:a4:29:14:50:c0:b4: e0:e0:73:12:ed:96:cc:ff:58:ad:85:36:1c:bc:c9:60:af:e9: d8:78:2c:19:11:9f:9e:19:36:28:5d:ea:7c:bb:f7:f9:b1:74: 21:69:3f:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPRQGYFIJtPCg+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MGY3MTJmYzMtN2Q5NS00YzhkLWI4NWYtOWJhNGZlZTgxODlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuWjIp6I8hTHXnpCYkCQIYzOU092ubZCBGNG DlsQFoBenw7be07flMX/USNO4HmLeZazCCXOYUkptMNw0/tAWxEtvszAn/KLl3bT 4g53Sz7MKVSlCHVrrITWIDB0IRXF6gMr6x+/07GyHnrbul/QvftEfFtsnjgPo8ky i7dyx0szbtcjQRxGfgy66UYYqctrlBzmSLHJ3y2ipn/pKe/YyWGO9gpSFX5uP2YL omIb+4YqDE8F9yCGRCbXJ7xKCwubn0lw3i7XjutQif7zC2fbQgwQsK7RxQMf3BOq wYkZyttdLCxPGqy+Hn8skIcwZpN5nabcYAL+2qwWBthQcN6hjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPf+FWa8fhK+44vQXEvnMNHdEYILMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDE0N2RhY2YtMjdiNS0z MmQyLThlZTEtNGQzOTU5NThiZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQlx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADv2voPvjmm4AqrrbLNLiOkPUQvo7WPlweJdxbe/s0Av0w2cZf5/9so UZCYYoaxLbARkIyF2UQCD0K+aiRzdTmlaADSOcrzBCU0nH8vxIQ6/HvwPE0AgLnD mpCnE5I8Qv4FAoJxGKygOpkphxvDSmFXRbIDsVYIaJThSwLvy6oXPFlrGxwy+CLR /lFwn8S1rwVj9kR+kcqUuND/tVx6up3w+kLvIvRWJ6oATF4wdqYWA9BPGCSfPCgJ kkQXNGjF3SeWBqYujExn9fH8pUf2hsIw6qQpFFDAtODgcxLtlsz/WK2FNhy8yWCv 6dh4LBkRn54ZNihd6ny79/mxdCFpP6s= -----END CERTIFICATE-----Generated at Sat Sep 26 17:42:40 2026 by rpki-client