$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/041fad63-307b-3a43-886f-754dbffe700b.roa File: 041fad63-307b-3a43-886f-754dbffe700b.roa (raw, json) Hash identifier: 5zyEjffHVa+4PqWfJrN78o1zY21BASlE3RPr8YH9XFc= Subject key identifier: 8F:C7:03:8A:CB:20:35:DC:92:F6:B8:3C:FE:AB:CE:6F:5D:9B:9E:8B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F15CD07647034ECAC61F0C380 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/041fad63-307b-3a43-886f-754dbffe700b.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 147034 IP address blocks: 64.205.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cd:07:64:70:34:ec:ac:61:f0:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=092f0741-ecf0-4af7-ab83-e357c30999c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dc:4a:88:32:21:16:6a:b9:32:32:53:0f:34: 23:e6:20:88:86:39:ab:f9:67:e8:c9:35:08:e7:29: 96:44:ca:37:00:9b:5c:10:73:d0:07:2b:42:46:3e: a5:4d:4b:7c:4b:c5:20:88:61:16:34:07:2f:7c:30: 1d:c2:f9:8c:11:53:b7:2b:ad:18:39:63:f3:98:21: 17:b6:6d:e4:d7:02:af:5c:87:cb:6e:a8:f7:f4:b5: 77:e2:b4:95:44:30:ac:33:34:6b:13:a8:ec:e0:b3: 79:0a:d3:15:f3:0b:01:3d:05:d7:f3:cc:38:52:4b: 5b:96:15:bd:f4:44:a0:77:60:b5:c3:06:4f:01:98: 87:bc:74:69:7a:db:04:6b:a5:c7:38:f4:81:a2:ce: c2:1e:a0:86:4f:54:b0:30:26:ad:f5:33:58:d8:ee: 14:04:93:3e:e9:bb:d3:04:62:32:e7:f7:85:4c:81: 05:a3:b4:1c:02:46:56:c0:df:97:c1:51:a4:01:4b: d7:0e:bd:f1:ab:84:88:d8:3c:3f:3d:2e:55:45:17: fd:8b:17:5c:58:da:90:e3:40:d5:c3:f2:77:f3:71: 5f:d8:27:9c:e3:b8:a3:49:a2:64:d4:bd:6d:0c:8b: bc:43:1f:cf:ad:27:9c:ae:14:e0:bf:2f:9e:fc:b8: da:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C7:03:8A:CB:20:35:DC:92:F6:B8:3C:FE:AB:CE:6F:5D:9B:9E:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/041fad63-307b-3a43-886f-754dbffe700b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.205.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:64:27:c7:14:5f:fe:7c:81:72:ef:2e:46:1b:de:0e:6b:7a: 01:19:a0:3a:41:cd:e5:79:c8:e1:65:80:f7:7b:9e:71:ba:2d: 25:4a:9f:6d:f3:6e:e3:02:c0:f1:5b:38:e1:f7:c7:6a:76:af: ba:f4:5b:2a:eb:a0:b9:ec:0e:d5:ca:4e:b6:6f:24:96:1a:7b: a2:6d:a9:ee:60:9d:de:5b:0e:95:29:db:ad:69:e4:13:b3:4c: 1d:9f:91:f1:cb:70:4b:7e:a4:a9:07:f8:2f:ad:41:db:89:a0: 97:45:cb:7b:42:c7:8f:0f:2e:68:81:fd:8c:31:3d:83:b2:0b: d4:3c:05:75:4f:de:b9:e7:49:88:31:0f:1a:11:34:fb:91:64: 64:32:fb:b9:7b:c7:c1:da:f0:d7:e5:7d:1c:e5:0d:57:3e:59: c9:9c:8b:7a:d9:89:c7:30:1f:f1:2f:ef:c3:a8:04:af:9f:4a: 9c:22:7f:00:53:65:3b:89:63:87:ee:3b:77:43:83:9f:f1:dc: 9b:e6:d1:1a:20:06:38:f3:10:cc:f0:ac:90:b6:1b:6a:72:70: b8:d3:92:c4:36:38:4e:ff:e2:f8:12:f6:75:37:ee:e6:2d:f4: b1:a9:87:87:5b:49:1d:b1:cf:90:0f:3a:ec:19:5d:27:02:7d: 80:98:66:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzQdkcDTsrGHww4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk MDkyZjA3NDEtZWNmMC00YWY3LWFiODMtZTM1N2MzMDk5OWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNxKiDIhFmq5MjJTDzQj5iCIhjmr+WfoyTUI 5ymWRMo3AJtcEHPQBytCRj6lTUt8S8UgiGEWNAcvfDAdwvmMEVO3K60YOWPzmCEX tm3k1wKvXIfLbqj39LV34rSVRDCsMzRrE6js4LN5CtMV8wsBPQXX88w4UktblhW9 9ESgd2C1wwZPAZiHvHRpetsEa6XHOPSBos7CHqCGT1SwMCat9TNY2O4UBJM+6bvT BGIy5/eFTIEFo7QcAkZWwN+XwVGkAUvXDr3xq4SI2Dw/PS5VRRf9ixdcWNqQ40DV w/J383Ff2Cec47ijSaJk1L1tDIu8Qx/PrSecrhTgvy+e/LjakQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/HA4rLIDXckva4PP6rzm9dm56LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDQxZmFkNjMtMzA3Yi0z YTQzLTg4NmYtNzU0ZGJmZmU3MDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQM2sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMJkJ8cUX/58gXLvLkYb3g5regEZoDpBzeV5yOFlgPd7nnG6LSVKn23z buMCwPFbOOH3x2p2r7r0WyrroLnsDtXKTrZvJJYae6Jtqe5gnd5bDpUp261p5BOz TB2fkfHLcEt+pKkH+C+tQduJoJdFy3tCx48PLmiB/YwxPYOyC9Q8BXVP3rnnSYgx DxoRNPuRZGQy+7l7x8Ha8NflfRzlDVc+Wcmci3rZiccwH/Ev78OoBK+fSpwifwBT ZTuJY4fuO3dDg5/x3Jvm0RogBjjzEMzwrJC2G2pycLjTksQ2OE7/4vgS9nU37uYt 9LGph4dbSR2xz5APOuwZXScCfYCYZg0= -----END CERTIFICATE-----Generated at Sun Oct 11 18:38:33 2026 by rpki-client