$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2684411d-3562-35f6-94da-d84a09fd9fe8.roa File: 2684411d-3562-35f6-94da-d84a09fd9fe8.roa (raw, json) Hash identifier: 0dFVYbEhg6/JsuhvJtyoxZ4flPWCKkDzc51bMB+RGW8= Subject key identifier: 16:68:D2:FD:39:05:2F:58:8D:B0:1D:F1:4E:1E:B0:1B:0B:16:01:36 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4974332D4A0B79B31BE4B180 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2684411d-3562-35f6-94da-d84a09fd9fe8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 834 IP address blocks: 69.33.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:33:2d:4a:0b:79:b3:1b:e4:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=531e4868-2597-4254-8ac1-48e63c6bc357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3d:d3:0b:8d:ad:fb:be:59:e1:5d:65:15:61: 04:e2:d1:b8:5f:90:ed:e9:ee:d0:26:09:99:26:73: 70:3a:f6:45:13:63:3f:c1:8c:3c:1e:00:bf:90:03: 87:b3:05:1c:df:b6:04:93:78:85:cd:2f:c3:d8:bf: 3e:15:86:fe:03:66:8c:24:fc:2d:27:0a:e0:0c:8e: cd:ad:96:c6:de:04:b6:94:0a:bc:38:fe:94:8e:56: 97:39:73:e6:ba:2e:5c:f4:b8:63:02:97:49:6e:3e: 81:b2:14:fa:66:13:db:b0:2b:a9:78:1d:82:60:be: 5c:1b:9e:33:a4:3d:da:56:09:0f:15:8b:94:c9:a4: 76:61:49:77:21:8f:10:f4:2c:16:3f:2e:08:7f:ba: f7:0d:0d:e2:a7:f7:5a:d4:66:68:a9:4a:75:91:ac: cd:6e:b0:88:b6:13:fd:d1:0f:26:08:27:4d:b7:b1: 68:ab:a3:c6:92:4c:73:b7:d6:69:31:99:f8:0b:a4: b9:80:0d:7a:13:79:e3:e7:60:76:f1:8e:0a:73:74: 6a:30:2a:13:19:89:a7:ee:7a:cf:0e:b0:6b:3b:51: f5:5a:c8:69:f0:b9:b8:9c:d3:3b:9a:90:c3:a8:3f: d8:6c:69:9d:9b:be:24:ff:0a:11:25:3d:cf:ca:59: 17:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:68:D2:FD:39:05:2F:58:8D:B0:1D:F1:4E:1E:B0:1B:0B:16:01:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2684411d-3562-35f6-94da-d84a09fd9fe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 69.33.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:ed:a9:27:c0:f4:c7:fe:7a:05:b1:cc:58:bf:38:4e:44:ba: 6a:a4:13:e5:29:ec:b2:fd:63:6d:e5:96:5f:74:4f:56:19:20: ac:c1:55:16:1e:5b:21:d2:1a:1f:25:ee:07:31:99:30:53:76: bc:a0:af:38:c0:7d:dc:83:4b:d6:f5:43:18:cc:3c:b5:74:35: 37:d2:c2:be:ff:94:e7:2c:ca:c7:79:26:10:7a:50:4e:23:40: 05:98:21:fe:83:eb:b4:4a:be:b0:49:8b:69:c0:ef:80:7f:d7: d2:d1:16:43:ea:c4:88:33:b7:49:d5:79:c1:8f:ae:88:68:d8: 96:10:85:bd:df:6c:1a:7e:49:d8:cb:f6:f4:45:bb:8e:7c:0c: 51:22:8c:53:63:2e:f1:54:5c:15:64:d6:08:f4:f1:0e:10:59: 6e:91:93:49:c6:30:57:1a:56:95:6f:b3:ff:0a:f8:ee:9d:e7: 68:96:c3:c6:a1:2f:11:1c:0b:f2:b7:c0:92:ed:c6:c6:fa:51: 16:74:ed:65:2d:02:1d:87:8a:fe:53:d3:49:e4:20:0e:ba:8f: b9:73:0e:c9:56:37:2f:37:28:81:94:2f:bb:4f:2d:a3:57:6c: f7:ff:29:9f:2f:15:ca:a4:dc:96:a4:96:9d:ed:c9:2a:6f:64: e6:a3:83:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdDMtSgt5sxvksYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTMxZTQ4NjgtMjU5Ny00MjU0LThhYzEtNDhlNjNjNmJjMzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD3TC42t+75Z4V1lFWEE4tG4X5Dt6e7QJgmZ JnNwOvZFE2M/wYw8HgC/kAOHswUc37YEk3iFzS/D2L8+FYb+A2aMJPwtJwrgDI7N rZbG3gS2lAq8OP6UjlaXOXPmui5c9LhjApdJbj6BshT6ZhPbsCupeB2CYL5cG54z pD3aVgkPFYuUyaR2YUl3IY8Q9CwWPy4If7r3DQ3ip/da1GZoqUp1kazNbrCIthP9 0Q8mCCdNt7Foq6PGkkxzt9ZpMZn4C6S5gA16E3nj52B28Y4Kc3RqMCoTGYmn7nrP DrBrO1H1Wshp8Lm4nNM7mpDDqD/YbGmdm74k/woRJT3PylkXEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZo0v05BS9YjbAd8U4esBsLFgE2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjY4NDQxMWQtMzU2Mi0z NWY2LTk0ZGEtZDg0YTA5ZmQ5ZmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALftqSfA9Mf+egWxzFi/OE5EumqkE+Up7LL9Y23lll90T1YZIKzBVRYe WyHSGh8l7gcxmTBTdrygrzjAfdyDS9b1QxjMPLV0NTfSwr7/lOcsysd5JhB6UE4j QAWYIf6D67RKvrBJi2nA74B/19LRFkPqxIgzt0nVecGProho2JYQhb3fbBp+SdjL 9vRFu458DFEijFNjLvFUXBVk1gj08Q4QWW6Rk0nGMFcaVpVvs/8K+O6d52iWw8ah LxEcC/K3wJLtxsb6URZ07WUtAh2Hiv5T00nkIA66j7lzDslWNy83KIGUL7tPLaNX bPf/KZ8vFcqk3Jaklp3tySpvZOajgwU= -----END CERTIFICATE-----Generated at Thu Oct 8 13:40:34 2026 by rpki-client