$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/215c3c4f-618d-3cc7-b609-741a88f4f847.roa File: 215c3c4f-618d-3cc7-b609-741a88f4f847.roa (raw, json) Hash identifier: ByJJ2IgquvQAkS3YPCNNaDu0Lf2q7JhJMrFBArGHKdc= Subject key identifier: 02:78:1E:99:01:69:12:EB:7B:89:EA:0D:92:19:D6:FB:B1:39:F5:7E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F46A7F7CEC0AD3DC7750F8040 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/215c3c4f-618d-3cc7-b609-741a88f4f847.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 834 IP address blocks: 64.205.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:f7:ce:c0:ad:3d:c7:75:0f:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=1a76cd47-cee3-4bae-b4b1-6e81dab46e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:51:98:e2:ba:b8:41:bf:e8:2f:42:28:ef:1d: 12:44:ba:f9:92:46:bd:02:20:21:2d:5e:41:89:9e: e9:49:82:85:58:cb:e9:c4:60:20:de:7b:09:fd:43: 2b:10:9c:9c:2c:be:b1:6d:97:dc:ea:7b:ab:ce:42: e7:e4:8a:1f:63:b9:05:30:94:2d:e5:86:9e:cb:eb: f4:d9:2c:6f:1e:5c:1e:81:14:cb:08:6b:03:10:2f: 52:1e:a3:24:2c:f2:c6:a9:89:8c:67:8c:cb:96:d3: 77:a9:51:fc:e8:37:38:8c:43:d6:ff:58:ea:14:36: fa:35:28:52:aa:44:98:15:5d:53:06:88:9d:76:5d: 35:18:87:8b:6c:a2:60:a2:30:d6:7c:c3:2a:28:91: e4:6b:86:da:c1:db:9c:40:cb:df:b1:22:4f:ea:df: b9:ba:4c:a2:e2:c7:a1:e6:0e:56:7e:80:74:16:c1: c5:39:f1:a4:d5:6e:c4:7c:a0:d5:15:59:3b:12:c2: 12:39:e1:d0:40:68:57:9d:12:42:33:c9:7e:b8:9a: 51:d9:8c:6b:db:00:d6:ae:f9:4a:f5:12:99:11:65: c0:0d:fd:a5:92:2a:c9:a1:6d:4a:59:aa:45:17:49: ed:21:ee:24:17:b4:55:24:1f:32:b7:48:eb:84:c8: 1d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:78:1E:99:01:69:12:EB:7B:89:EA:0D:92:19:D6:FB:B1:39:F5:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/215c3c4f-618d-3cc7-b609-741a88f4f847.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.205.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:22:32:96:d8:e4:6e:9f:47:ab:4e:33:4c:54:82:55:85:08: 87:54:15:c6:a6:16:5c:80:99:fa:28:fb:86:fe:13:2d:13:6c: 53:05:62:d8:22:5d:b6:7d:c3:b1:21:dd:c6:95:9d:81:e2:c9: b3:90:13:45:08:52:b2:a9:3c:80:fc:89:9b:d5:be:a2:37:1b: ca:eb:7e:04:b7:bf:5f:df:f6:2b:18:88:11:e2:d0:69:44:05: 8e:7c:d1:25:a2:ea:0b:41:01:5e:d1:5a:26:2c:f1:3c:15:af: 37:6a:bf:4d:6f:89:64:17:ad:b6:9d:6b:b6:ae:26:c5:c3:9a: da:de:99:15:6a:c6:78:c7:3c:81:ab:b4:08:a2:82:40:e3:90: 48:a4:b4:64:a8:55:9b:70:be:a9:f1:5d:c2:35:27:77:bd:ea: 0a:4e:54:be:cf:a2:e1:c2:b7:38:f4:81:69:2f:75:03:13:e8: ea:07:42:be:46:de:1c:75:b5:d7:3b:f6:29:1e:2b:a0:e0:ee: 6b:75:3c:f8:ee:29:88:15:b4:25:e2:b3:33:8a:cf:a0:ce:c6: 34:05:f9:3b:ca:cd:a9:80:0b:db:4a:28:f5:e4:f3:c1:dd:1c: b3:18:f7:d5:64:33:15:a9:b4:87:d0:cd:1f:ed:18:7d:68:8b: a7:b6:f0:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp/fOwK09x3UPgEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk MWE3NmNkNDctY2VlMy00YmFlLWI0YjEtNmU4MWRhYjQ2ZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplGY4rq4Qb/oL0Io7x0SRLr5kka9AiAhLV5B iZ7pSYKFWMvpxGAg3nsJ/UMrEJycLL6xbZfc6nurzkLn5IofY7kFMJQt5Yaey+v0 2SxvHlwegRTLCGsDEC9SHqMkLPLGqYmMZ4zLltN3qVH86Dc4jEPW/1jqFDb6NShS qkSYFV1TBoiddl01GIeLbKJgojDWfMMqKJHka4bawducQMvfsSJP6t+5ukyi4seh 5g5WfoB0FsHFOfGk1W7EfKDVFVk7EsISOeHQQGhXnRJCM8l+uJpR2Yxr2wDWrvlK 9RKZEWXADf2lkirJoW1KWapFF0ntIe4kF7RVJB8yt0jrhMgdLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJ4HpkBaRLre4nqDZIZ1vuxOfV+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjE1YzNjNGYtNjE4ZC0z Y2M3LWI2MDktNzQxYTg4ZjRmODQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQM2MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEiMpbY5G6fR6tOM0xUglWFCIdUFcamFlyAmfoo+4b+Ey0TbFMFYtgi XbZ9w7Eh3caVnYHiybOQE0UIUrKpPID8iZvVvqI3G8rrfgS3v1/f9isYiBHi0GlE BY580SWi6gtBAV7RWiYs8TwVrzdqv01viWQXrbada7auJsXDmtremRVqxnjHPIGr tAiigkDjkEiktGSoVZtwvqnxXcI1J3e96gpOVL7PouHCtzj0gWkvdQMT6OoHQr5G 3hx1tdc79ikeK6Dg7mt1PPjuKYgVtCXiszOKz6DOxjQF+TvKzamAC9tKKPXk88Hd HLMY99VkMxWptIfQzR/tGH1oi6e28Mk= -----END CERTIFICATE-----Generated at Sat Sep 26 15:29:00 2026 by rpki-client