$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/14d6ff2f-aa92-3603-b0e4-03e1cce1ec20.roa File: 14d6ff2f-aa92-3603-b0e4-03e1cce1ec20.roa (raw, json) Hash identifier: UBFQVEzbC7Lh8CQT+5d8HpBs85iCByRUgw2sJ2aeCeE= Subject key identifier: 31:12:C9:E8:56:05:2D:1B:57:0D:38:DC:98:B7:C5:30:51:8F:A8:18 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4088F7A60FA080194A997A50 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/14d6ff2f-aa92-3603-b0e4-03e1cce1ec20.roa Signing time: Mon 21 Sep 2026 20:23:09 +0000 ROA not before: Mon 21 Sep 2026 20:23:09 +0000 ROA not after: Sun 20 Dec 2026 21:23:09 +0000 asID: 402899 IP address blocks: 68.166.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:88:f7:a6:0f:a0:80:19:4a:99:7a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 21 20:23:09 2026 GMT Not After : Dec 20 21:23:09 2026 GMT Subject: CN=2cc8b1f5-8dc9-4135-80f3-b1e7e95aa785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1e:53:75:c2:76:de:18:13:61:98:99:80:d7: 9d:74:98:46:ff:16:6d:94:27:ef:a6:21:31:a8:d2: ec:02:b7:2d:4c:18:dd:d9:79:84:c3:30:78:68:88: e7:0e:92:bb:48:20:9d:bd:9b:8c:7e:c2:5d:73:30: 6a:b2:49:b6:14:91:ec:d3:46:b6:d9:76:9b:56:7a: d2:43:1c:28:9b:fa:62:d4:df:3d:f0:39:a1:d4:0b: e1:fd:d2:d3:3c:92:a9:69:51:99:b4:10:25:2a:80: 15:03:f9:9d:18:cc:d3:b0:c7:d8:45:3d:47:18:9b: c9:61:cd:17:28:af:95:6a:ff:b1:a5:07:46:e7:59: 82:10:2b:22:e9:c8:8c:6a:42:19:3d:38:20:d2:2b: 88:d0:9a:b8:06:67:db:ba:f4:02:20:df:11:dd:e8: ec:be:18:ae:32:3a:9f:9f:ce:cc:e2:12:ae:29:2f: c9:2e:d6:9b:00:e8:dd:16:a0:fa:9c:e7:b7:d5:28: ee:f9:d2:0f:f1:cc:bd:50:72:b0:dd:15:fb:8d:54: 57:11:f9:ce:18:bf:0a:3a:45:a8:2f:15:fb:7e:2f: 01:e1:cc:5c:6e:db:76:04:2e:08:38:80:e7:68:06: cb:2e:7d:0d:e3:a4:91:2f:c2:61:ba:41:a4:20:2f: fb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:12:C9:E8:56:05:2D:1B:57:0D:38:DC:98:B7:C5:30:51:8F:A8:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/14d6ff2f-aa92-3603-b0e4-03e1cce1ec20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.166.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:52:3b:e5:9d:94:d2:88:34:b2:d0:1b:33:a8:cf:57:37:e8: 52:03:f4:55:32:fd:ca:90:91:73:0c:23:d5:a8:61:82:11:0f: 9c:b7:36:3e:80:57:6c:63:58:f7:cd:11:cf:71:42:04:53:eb: 6d:66:41:b1:dc:00:61:3e:41:df:eb:7e:93:76:cf:69:34:15: 98:26:2c:d0:12:26:05:14:36:88:f1:13:c7:39:87:95:f4:9c: ec:8a:20:de:c5:eb:1a:43:9d:08:98:4b:53:46:29:df:31:aa: 2b:7f:56:72:4f:00:fb:aa:eb:0c:54:a0:72:cd:a9:dd:ca:73: 61:8a:46:42:13:72:e1:c5:11:c2:10:27:d6:2a:d4:1e:1d:f0: 2c:79:c5:ec:4c:e3:b8:4e:ef:2a:e9:df:7f:63:41:b9:4d:d9: d6:85:d8:74:d7:e7:b4:61:4c:6d:9c:57:7c:76:00:17:15:00: df:84:41:b3:50:eb:62:c6:59:68:a1:09:9a:be:63:81:f3:b4: be:52:5e:bc:08:23:9f:b5:dc:03:ff:8d:e4:74:aa:f6:08:ff: aa:be:3a:94:9b:d3:db:39:ad:2e:b6:84:0b:86:3d:14:68:fb: 80:e7:93:88:26:94:69:80:e7:ad:ca:34:ed:4a:13:a2:d0:7a: 4e:4b:f2:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9AiPemD6CAGUqZelAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMTIwMjMwOVoXDTI2MTIyMDIxMjMwOVowLzEtMCsGA1UEAxMk MmNjOGIxZjUtOGRjOS00MTM1LTgwZjMtYjFlN2U5NWFhNzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB5TdcJ23hgTYZiZgNeddJhG/xZtlCfvpiEx qNLsArctTBjd2XmEwzB4aIjnDpK7SCCdvZuMfsJdczBqskm2FJHs00a22XabVnrS Qxwom/pi1N898Dmh1Avh/dLTPJKpaVGZtBAlKoAVA/mdGMzTsMfYRT1HGJvJYc0X KK+Vav+xpQdG51mCECsi6ciMakIZPTgg0iuI0Jq4BmfbuvQCIN8R3ejsvhiuMjqf n87M4hKuKS/JLtabAOjdFqD6nOe31Sju+dIP8cy9UHKw3RX7jVRXEfnOGL8KOkWo LxX7fi8B4cxcbtt2BC4IOIDnaAbLLn0N46SRL8JhukGkIC/7LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDESyehWBS0bVw043Ji3xTBRj6gYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMTRkNmZmMmYtYWE5Mi0z NjAzLWIwZTQtMDNlMWNjZTFlYzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKbVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBSO+WdlNKINLLQGzOoz1c36FID9FUy/cqQkXMMI9WoYYIRD5y3Nj6A V2xjWPfNEc9xQgRT621mQbHcAGE+Qd/rfpN2z2k0FZgmLNASJgUUNojxE8c5h5X0 nOyKIN7F6xpDnQiYS1NGKd8xqit/VnJPAPuq6wxUoHLNqd3Kc2GKRkITcuHFEcIQ J9Yq1B4d8Cx5xexM47hO7yrp339jQblN2daF2HTX57RhTG2cV3x2ABcVAN+EQbNQ 62LGWWihCZq+Y4HztL5SXrwII5+13AP/jeR0qvYI/6q+OpSb09s5rS62hAuGPRRo +4Dnk4gmlGmA563KNO1KE6LQek5L8gM= -----END CERTIFICATE-----Generated at Sat Sep 26 13:23:54 2026 by rpki-client