$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0aa8f31d-b3d7-33fa-9db5-93bab1e27c58.roa File: 0aa8f31d-b3d7-33fa-9db5-93bab1e27c58.roa (raw, json) Hash identifier: s5L64P3I6TYqW3kg93UpyWxEky64fonywL+MLhq0lzw= Subject key identifier: 5C:23:C3:8D:EE:98:4E:E8:C7:2B:B8:FB:38:5A:9A:D5:06:D2:3B:BA Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F134AF471832D01A0EE1D0180 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0aa8f31d-b3d7-33fa-9db5-93bab1e27c58.roa Signing time: Sat 05 Sep 2026 15:26:50 +0000 ROA not before: Sat 05 Sep 2026 15:26:50 +0000 ROA not after: Fri 04 Dec 2026 16:26:50 +0000 asID: 152179 IP address blocks: 64.204.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:4a:f4:71:83:2d:01:a0:ee:1d:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 5 15:26:50 2026 GMT Not After : Dec 4 16:26:50 2026 GMT Subject: CN=3daf2a46-f151-48a4-a4e6-046d12d25d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:41:62:2b:e7:52:69:7a:2d:13:68:fa:a7:ad: 55:c6:72:6d:89:d1:ab:00:d2:b9:d5:5c:82:af:ae: 90:8a:ce:48:f4:46:11:74:62:e8:3a:7f:4e:a1:bc: bf:39:02:c8:4a:8a:55:4b:bc:35:18:f0:91:30:c0: f6:2c:43:f8:4d:19:d7:4d:59:0a:89:6b:88:be:fa: 68:81:69:05:63:1b:df:a7:0d:1d:c2:ec:a4:60:33: 0a:3f:1e:19:23:24:c0:72:4d:3d:06:db:41:30:ca: d6:b5:19:54:22:d6:d9:1e:c8:3f:37:d6:75:cd:1e: 18:f9:eb:ae:a2:3d:c8:48:90:64:4d:64:54:b7:cb: bd:8c:4a:c7:16:76:c8:c9:b5:39:99:cd:6d:c8:62: 34:53:ff:60:35:5a:96:95:90:2b:65:d7:f7:72:dd: 57:b4:47:d7:1f:37:31:bd:22:ba:ed:d1:b0:74:8c: 65:84:5d:79:61:ef:c2:61:60:1c:33:34:f8:43:9f: 18:2b:53:8c:99:b0:5b:89:75:71:6d:4a:11:aa:68: bd:8a:3f:b9:53:b5:04:68:22:7b:eb:7e:75:63:7d: 49:7f:78:36:a5:25:7e:16:f6:2c:f1:70:a7:9a:b3: b7:79:7f:c3:b1:e4:85:2b:a2:c4:60:ea:ba:df:22: 2d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:23:C3:8D:EE:98:4E:E8:C7:2B:B8:FB:38:5A:9A:D5:06:D2:3B:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0aa8f31d-b3d7-33fa-9db5-93bab1e27c58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:9f:12:18:0a:09:22:10:2a:e6:69:b8:57:66:d8:e6:b4:b8: 24:93:22:c7:48:4b:de:1c:95:5b:c2:11:a8:c8:c6:36:87:b0: eb:be:cd:25:2a:5a:68:2f:7a:52:f6:57:fe:7e:1c:ae:a4:f3: 96:18:4d:c9:53:d2:99:99:7f:f4:46:4c:77:ac:b1:83:d4:21: 84:21:85:0b:fb:56:73:54:01:24:18:8a:7a:bf:bf:26:6e:fd: 88:36:ee:1c:c3:95:ca:41:7c:cd:62:9d:52:ee:2e:d6:af:a6: 19:68:0c:95:98:ca:d7:55:34:bc:46:7c:a6:8e:9c:af:5f:d5: a7:53:4d:e5:1a:5c:69:20:e1:07:07:c3:37:52:55:83:8a:44: da:d2:71:47:ca:30:75:7e:5b:40:40:48:ee:9e:e6:a7:79:ca: 11:7e:01:df:8f:9f:96:dc:77:9e:c9:04:f4:8c:a5:cc:17:9b: 44:70:63:cd:f2:76:90:35:51:92:3a:29:4e:cc:9b:5f:6f:46: ca:7a:f9:2f:f7:2c:14:80:cb:28:2c:c5:cc:6c:33:11:ac:5b: 0b:22:5d:79:1a:16:01:2a:75:93:81:57:f4:d5:89:7f:7d:89: e1:11:ee:8c:7d:67:5a:32:09:11:49:f1:13:5d:0a:a9:a4:11: dd:69:0d:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TSvRxgy0BoO4dAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwNTE1MjY1MFoXDTI2MTIwNDE2MjY1MFowLzEtMCsGA1UEAxMk M2RhZjJhNDYtZjE1MS00OGE0LWE0ZTYtMDQ2ZDEyZDI1ZDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkFiK+dSaXotE2j6p61VxnJtidGrANK51VyC r66Qis5I9EYRdGLoOn9Ooby/OQLISopVS7w1GPCRMMD2LEP4TRnXTVkKiWuIvvpo gWkFYxvfpw0dwuykYDMKPx4ZIyTAck09BttBMMrWtRlUItbZHsg/N9Z1zR4Y+euu oj3ISJBkTWRUt8u9jErHFnbIybU5mc1tyGI0U/9gNVqWlZArZdf3ct1XtEfXHzcx vSK67dGwdIxlhF15Ye/CYWAcMzT4Q58YK1OMmbBbiXVxbUoRqmi9ij+5U7UEaCJ7 6351Y31Jf3g2pSV+FvYs8XCnmrO3eX/DseSFK6LEYOq63yItWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwjw43umE7oxyu4+zhamtUG0ju6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGFhOGYzMWQtYjNkNy0z M2ZhLTlkYjUtOTNiYWIxZTI3YzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSfEhgKCSIQKuZpuFdm2Oa0uCSTIsdIS94clVvCEajIxjaHsOu+zSUq WmgvelL2V/5+HK6k85YYTclT0pmZf/RGTHessYPUIYQhhQv7VnNUASQYinq/vyZu /Yg27hzDlcpBfM1inVLuLtavphloDJWYytdVNLxGfKaOnK9f1adTTeUaXGkg4QcH wzdSVYOKRNrScUfKMHV+W0BASO6e5qd5yhF+Ad+Pn5bcd57JBPSMpcwXm0RwY83y dpA1UZI6KU7Mm19vRsp6+S/3LBSAyygsxcxsMxGsWwsiXXkaFgEqdZOBV/TViX99 ieER7ox9Z1oyCRFJ8RNdCqmkEd1pDXk= -----END CERTIFICATE-----Generated at Fri Sep 25 09:43:31 2026 by rpki-client