$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/18f801ab-5705-3e5a-a1c0-1a63b64b546b.roa File: 18f801ab-5705-3e5a-a1c0-1a63b64b546b.roa (raw, json) Hash identifier: rb9K+8ILaDc60xW/JI9If+wE5LFI6fJ7D4gzVkn7Y5k= Subject key identifier: 47:75:7F:40:9D:16:BC:6E:B6:96:49:05:4A:2A:22:CF:73:9E:38:04 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F23C25722208C7E678AD20A40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/18f801ab-5705-3e5a-a1c0-1a63b64b546b.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 36139 IP address blocks: 66.253.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:57:22:20:8c:7e:67:8a:d2:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=d477cf0c-718e-47ce-8261-2ca54625b325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:06:91:36:a7:e0:e4:41:b9:eb:b4:b9:b8:4d: f0:62:28:d2:46:14:15:6f:cd:e6:18:6a:74:7c:67: f3:5c:b7:9c:d7:fa:ae:6d:b4:64:c7:f6:de:19:02: 34:eb:d1:1d:7c:72:c2:b2:be:45:ce:00:cd:cc:0d: 6d:1d:dc:09:aa:c0:18:a6:48:a4:c8:04:d4:fb:bd: c3:bd:9f:a0:8d:26:c8:85:cb:be:d0:66:f7:12:f4: 3b:38:a1:18:96:c7:f8:12:05:44:1f:ed:d7:7d:18: f4:8c:58:1b:56:ad:02:fa:5b:72:7e:a9:9a:91:83: 01:64:61:ae:09:11:b8:65:17:71:c5:83:7b:98:88: 1e:db:e1:06:5a:87:22:9e:1a:1d:38:da:3f:66:30: b4:7f:75:8a:a3:85:8f:98:93:3e:4f:65:da:c3:1f: ce:2f:d8:86:d4:66:05:a4:a3:7b:2c:63:57:c5:a2: 9b:3b:c6:42:0a:10:3c:92:d6:7b:4c:90:ca:25:79: 74:1d:e6:ac:f6:28:84:b4:16:be:3a:14:8d:cd:cb: 30:8c:53:2f:5d:53:20:13:cb:aa:8c:b4:9a:bc:9a: 62:2f:8f:ea:fb:3d:c9:44:39:07:62:76:3c:98:b3: de:dc:d9:49:3f:d1:be:af:f9:57:8b:62:e1:ec:fc: 7a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:75:7F:40:9D:16:BC:6E:B6:96:49:05:4A:2A:22:CF:73:9E:38:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/18f801ab-5705-3e5a-a1c0-1a63b64b546b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:d6:8d:d1:34:a9:47:52:47:d6:32:3b:25:83:0a:69:94:65: 72:22:4c:60:61:87:8f:86:95:41:ea:3e:5a:bd:0d:72:8f:62: 51:93:81:82:67:19:d3:59:36:1e:30:42:6c:fe:5f:10:b8:7e: 69:d7:6a:76:fb:fe:95:68:4d:34:8c:70:51:32:28:3b:89:e5: 7a:e3:51:e8:7d:71:57:1a:0a:dc:f2:89:b0:40:77:79:5f:47: 5e:60:9d:39:d9:a4:4a:97:8c:e3:bf:57:06:da:01:5e:77:05: 1f:e5:90:90:57:2e:15:16:52:c8:dd:8e:fb:17:77:74:fe:db: fa:a4:4c:c4:e6:32:e1:2f:75:fb:be:7f:be:06:5a:77:40:23: fd:57:d1:b8:58:3b:8d:ea:e1:90:cb:97:64:9c:f1:c8:11:03: b5:28:0a:b4:5a:03:58:0d:91:4a:70:ff:f3:7b:ff:84:22:e0: d9:ff:88:ff:a5:e6:ce:9e:47:67:19:21:aa:4e:0f:fb:b5:47: 43:05:c3:87:3d:dc:f8:12:3b:ba:b8:50:5c:c7:d1:d6:0e:42: 23:fd:01:8e:b7:a2:3e:6c:35:91:2b:b3:1d:8c:72:43:a3:a9: c7:60:b4:5c:ec:72:5a:a0:c7:1c:7d:be:e3:00:ea:57:f3:0a: e3:f3:53:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwlciIIx+Z4rSCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk ZDQ3N2NmMGMtNzE4ZS00N2NlLTgyNjEtMmNhNTQ2MjViMzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAaRNqfg5EG567S5uE3wYijSRhQVb83mGGp0 fGfzXLec1/qubbRkx/beGQI069EdfHLCsr5FzgDNzA1tHdwJqsAYpkikyATU+73D vZ+gjSbIhcu+0Gb3EvQ7OKEYlsf4EgVEH+3XfRj0jFgbVq0C+ltyfqmakYMBZGGu CRG4ZRdxxYN7mIge2+EGWocinhodONo/ZjC0f3WKo4WPmJM+T2Xawx/OL9iG1GYF pKN7LGNXxaKbO8ZCChA8ktZ7TJDKJXl0Heas9iiEtBa+OhSNzcswjFMvXVMgE8uq jLSavJpiL4/q+z3JRDkHYnY8mLPe3NlJP9G+r/lXi2Lh7Px63QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEd1f0CdFrxutpZJBUoqIs9znjgEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMThmODAxYWItNTcwNS0z ZTVhLWExYzAtMWE2M2I2NGI1NDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv1eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzWjdE0qUdSR9YyOyWDCmmUZXIiTGBhh4+GlUHqPlq9DXKPYlGTgYJn GdNZNh4wQmz+XxC4fmnXanb7/pVoTTSMcFEyKDuJ5XrjUeh9cVcaCtzyibBAd3lf R15gnTnZpEqXjOO/VwbaAV53BR/lkJBXLhUWUsjdjvsXd3T+2/qkTMTmMuEvdfu+ f74GWndAI/1X0bhYO43q4ZDLl2Sc8cgRA7UoCrRaA1gNkUpw//N7/4Qi4Nn/iP+l 5s6eR2cZIapOD/u1R0MFw4c93PgSO7q4UFzH0dYOQiP9AY63oj5sNZErsx2MckOj qcdgtFzsclqgxxx9vuMA6lfzCuPzU4A= -----END CERTIFICATE-----Generated at Sun Oct 4 18:36:19 2026 by rpki-client