$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/254218cb-ce1f-38f3-ae09-4e801333a2e2.roa File: 254218cb-ce1f-38f3-ae09-4e801333a2e2.roa (raw, json) Hash identifier: TxtG3nPTXLWlh+z+tQaICFEC9Dj4h/BDYg8uwg2966k= Subject key identifier: 0A:3F:59:BA:D2:AD:57:E3:5D:B1:75:AC:23:A7:98:27:18:9E:8E:43 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F549D5F07D448C17D17154A60 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/254218cb-ce1f-38f3-ae09-4e801333a2e2.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7922 IP address blocks: 68.167.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:5f:07:d4:48:c1:7d:17:15:4a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=d6a30f04-7554-49d6-8753-ddf09e41c7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a0:18:85:da:0a:ae:10:d6:94:10:a8:b8:b3: c1:b1:4e:c5:59:4d:5e:ab:34:a0:c8:15:09:66:6c: 1e:88:65:ec:dc:ca:28:c9:9a:cf:d0:d3:80:5d:17: f8:99:dd:f8:83:7a:92:30:51:3f:be:7b:66:73:5a: c8:fb:a1:e7:2c:02:e0:f7:63:ab:d1:d1:6f:5b:a2: 29:99:90:f5:74:62:84:3c:9b:bd:c8:16:19:07:84: 6f:95:89:b8:7a:42:68:8e:26:5e:2a:b1:7d:00:ff: fc:a9:cd:88:75:79:ba:b7:7e:aa:3b:d3:a8:54:02: 86:61:79:08:c1:b6:83:84:73:e5:29:64:bf:7c:85: d8:f1:18:52:59:c8:59:74:59:01:1a:57:bf:3e:c4: fb:88:ee:8d:30:35:16:6f:dd:1c:77:e8:75:e0:46: b8:02:f6:28:74:0b:6a:95:22:5f:25:aa:e1:af:8e: f3:96:06:e1:ad:42:b6:f0:f8:7b:c6:fc:22:10:7b: ea:83:a9:d7:65:b4:fc:db:a3:04:91:d1:8d:d0:a0: bf:74:c9:41:2e:d0:b8:7e:fc:79:6a:c6:8b:53:e5: 7a:b7:a1:06:1c:ab:22:18:24:3f:7f:df:1c:a7:cb: 20:dd:85:f8:e7:04:94:d5:1d:35:db:fc:c5:4f:9c: 44:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3F:59:BA:D2:AD:57:E3:5D:B1:75:AC:23:A7:98:27:18:9E:8E:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/254218cb-ce1f-38f3-ae09-4e801333a2e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:b0:c3:1e:bb:8c:4f:d9:e1:fe:71:5b:d2:52:50:e5:cb:bf: b5:63:7b:9e:7e:ce:17:11:dd:f4:8b:09:43:5e:b1:e9:15:4f: 66:c2:53:a6:21:2e:70:67:c9:85:24:dd:cd:02:3d:d0:9d:33: 50:2b:3a:17:d9:bd:1b:f9:49:ee:4f:47:ef:13:c5:e6:52:e4: 4b:4c:5e:72:aa:96:12:8d:81:99:3f:f1:cc:bb:f8:ea:81:27: ea:c8:aa:59:5c:f0:c3:31:84:62:d4:bb:98:d6:d6:5e:ec:23: 47:a4:0e:68:a5:d7:23:49:ef:ba:a2:27:23:e2:e4:2e:f6:f9: b6:59:ea:fb:ea:87:4d:cc:04:7e:d2:1d:17:65:8a:d4:91:1a: 2b:22:dc:7f:4a:47:1d:61:d7:e2:b8:1d:2d:b7:c1:65:1b:e5: 0e:e2:51:61:de:78:bf:a9:ee:b0:a6:4f:81:57:68:f4:e3:bf: 74:ec:d6:81:5b:d1:e9:f4:5b:b4:65:12:b1:97:c5:66:fe:81: 20:b8:7b:dd:77:d4:ed:58:92:d0:14:67:23:3e:25:76:cd:d9: e5:a0:25:c1:26:4c:bf:04:d4:ee:94:f4:b6:92:2f:45:67:ad: 8c:5e:64:c4:b8:86:c1:b3:74:96:6a:35:30:90:74:91:76:2c: 46:55:9f:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnV8H1EjBfRcVSmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZDZhMzBmMDQtNzU1NC00OWQ2LTg3NTMtZGRmMDllNDFjN2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KAYhdoKrhDWlBCouLPBsU7FWU1eqzSgyBUJ ZmweiGXs3MooyZrP0NOAXRf4md34g3qSMFE/vntmc1rI+6HnLALg92Or0dFvW6Ip mZD1dGKEPJu9yBYZB4RvlYm4ekJojiZeKrF9AP/8qc2IdXm6t36qO9OoVAKGYXkI wbaDhHPlKWS/fIXY8RhSWchZdFkBGle/PsT7iO6NMDUWb90cd+h14Ea4AvYodAtq lSJfJarhr47zlgbhrUK28Ph7xvwiEHvqg6nXZbT826MEkdGN0KC/dMlBLtC4fvx5 asaLU+V6t6EGHKsiGCQ/f98cp8sg3YX45wSU1R012/zFT5xEoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAo/WbrSrVfjXbF1rCOnmCcYno5DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjU0MjE4Y2ItY2UxZi0z OGYzLWFlMDktNGU4MDEzMzNhMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKcYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSwwx67jE/Z4f5xW9JSUOXLv7Vje55+zhcR3fSLCUNesekVT2bCU6Yh LnBnyYUk3c0CPdCdM1ArOhfZvRv5Se5PR+8TxeZS5EtMXnKqlhKNgZk/8cy7+OqB J+rIqllc8MMxhGLUu5jW1l7sI0ekDmil1yNJ77qiJyPi5C72+bZZ6vvqh03MBH7S HRdlitSRGisi3H9KRx1h1+K4HS23wWUb5Q7iUWHeeL+p7rCmT4FXaPTjv3Ts1oFb 0en0W7RlErGXxWb+gSC4e9131O1YktAUZyM+JXbN2eWgJcEmTL8E1O6U9LaSL0Vn rYxeZMS4hsGzdJZqNTCQdJF2LEZVn/0= -----END CERTIFICATE-----Generated at Sun Oct 4 07:26:43 2026 by rpki-client