$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2649752d-77f9-38ab-9583-2e99b5b7e077.roa File: 2649752d-77f9-38ab-9583-2e99b5b7e077.roa (raw, json) Hash identifier: tUyddVoGfLgDEDL1/lmueozM65t/vWk4o1o2XDrPTe4= Subject key identifier: 86:30:9A:74:AD:5F:85:D4:BE:1A:8F:74:35:B4:97:02:03:73:2D:66 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F2D87DC421FFAEDF4803A0C80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2649752d-77f9-38ab-9583-2e99b5b7e077.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 834 IP address blocks: 216.132.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:dc:42:1f:fa:ed:f4:80:3a:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=732f0e9b-e0e0-4193-b420-d160d45dd48c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5a:24:34:9e:dd:9c:56:54:b8:c7:61:d6:36: 07:93:41:da:41:f1:fe:66:6b:a4:67:45:1c:03:fe: 49:10:d5:ee:5b:6b:d6:f8:95:bc:8f:f2:6d:f6:52: 0d:12:79:a5:49:bf:69:c9:04:a1:ff:51:ce:95:4b: e2:72:9f:40:3b:8e:96:06:ff:4f:44:76:ea:28:4b: 9b:1f:46:f2:db:7d:fd:06:b7:fa:f1:93:ba:1a:b1: 56:94:d9:40:bc:16:61:92:5e:a3:a9:3d:9c:b5:54: fc:4f:88:0c:50:f5:15:cb:f9:d0:f0:59:d8:71:29: b2:3d:4a:62:9e:54:f9:78:6c:08:fc:3e:ff:ae:22: 53:5f:b3:56:1b:ba:42:38:d5:42:25:7b:ec:2a:5f: 90:e4:2c:a0:1c:fd:1c:01:e1:38:e3:9b:53:0e:1c: 63:7e:ec:d0:61:2c:98:b9:57:ef:28:02:ad:47:55: 26:7f:da:50:43:85:85:25:65:3d:46:9a:6a:60:02: 29:79:0e:2e:b8:90:6f:c1:bf:88:66:c5:b6:ba:94: cd:70:31:66:c4:d9:19:6a:91:58:d9:2f:cb:44:4e: d3:9a:2c:64:9e:61:50:44:99:48:ab:e0:14:9b:8d: 96:08:a3:b6:a2:ef:9b:3a:05:cb:50:4f:52:13:f6: 2e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:30:9A:74:AD:5F:85:D4:BE:1A:8F:74:35:B4:97:02:03:73:2D:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2649752d-77f9-38ab-9583-2e99b5b7e077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:6b:79:77:4d:02:e7:48:63:53:73:d0:b7:bf:4e:98:f5:d7: ed:48:73:c3:20:1e:b2:34:22:d3:73:fa:09:0b:f3:e3:23:a2: 89:f9:49:18:03:40:08:ec:4e:fe:45:76:21:91:51:19:76:d6: ae:19:44:f0:74:0d:23:d7:24:2d:0b:e8:71:83:6d:11:1d:d2: 13:c5:88:cd:60:79:e2:8c:73:48:f8:d3:11:41:03:fb:c8:85: 51:02:12:76:b4:57:63:8f:4c:6c:54:22:fe:ee:cc:4e:74:8b: f9:12:78:9b:2c:1c:4c:5d:1e:df:74:1d:71:bd:54:29:84:34: 0a:0b:44:7f:58:02:d8:21:b7:68:0d:57:e7:73:2c:32:d2:6b: 34:cb:67:cf:7e:23:21:b7:85:39:25:55:04:ad:b9:b1:8a:62: 02:ae:f2:ef:a1:9a:ee:9b:7c:82:e7:11:67:c5:de:e8:f7:4d: 64:54:75:55:0a:8d:cf:3f:25:5b:de:ad:10:f1:2c:cb:de:1a: 1d:0d:e6:af:56:7f:dc:ef:21:6b:34:ac:7b:48:be:f4:f6:71: a8:eb:62:2d:a7:e3:71:be:32:62:80:8e:5a:cc:5d:ed:77:53: c9:b2:da:68:50:82:2c:64:c4:b0:23:37:f0:9c:8b:5d:5f:36: fc:f7:60:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8th9xCH/rt9IA6DIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk NzMyZjBlOWItZTBlMC00MTkzLWI0MjAtZDE2MGQ0NWRkNDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlokNJ7dnFZUuMdh1jYHk0HaQfH+ZmukZ0Uc A/5JENXuW2vW+JW8j/Jt9lINEnmlSb9pyQSh/1HOlUvicp9AO46WBv9PRHbqKEub H0by2339Brf68ZO6GrFWlNlAvBZhkl6jqT2ctVT8T4gMUPUVy/nQ8FnYcSmyPUpi nlT5eGwI/D7/riJTX7NWG7pCONVCJXvsKl+Q5CygHP0cAeE445tTDhxjfuzQYSyY uVfvKAKtR1Umf9pQQ4WFJWU9RppqYAIpeQ4uuJBvwb+IZsW2upTNcDFmxNkZapFY 2S/LRE7TmixknmFQRJlIq+AUm42WCKO2ou+bOgXLUE9SE/YulQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYwmnStX4XUvhqPdDW0lwIDcy1mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjY0OTc1MmQtNzdmOS0z OGFiLTk1ODMtMmU5OWI1YjdlMDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2IREMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVreXdNAudIY1Nz0Le/Tpj11+1Ic8MgHrI0ItNz+gkL8+Mjoon5SRgD QAjsTv5FdiGRURl21q4ZRPB0DSPXJC0L6HGDbREd0hPFiM1geeKMc0j40xFBA/vI hVECEna0V2OPTGxUIv7uzE50i/kSeJssHExdHt90HXG9VCmENAoLRH9YAtght2gN V+dzLDLSazTLZ89+IyG3hTklVQStubGKYgKu8u+hmu6bfILnEWfF3uj3TWRUdVUK jc8/JVverRDxLMveGh0N5q9Wf9zvIWs0rHtIvvT2cajrYi2n43G+MmKAjlrMXe13 U8my2mhQgixkxLAjN/Cci11fNvz3YDc= -----END CERTIFICATE-----Generated at Sat Sep 26 23:32:18 2026 by rpki-client