$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2929bdb6-d173-38f1-bde8-053d2cc17d5e.roa File: 2929bdb6-d173-38f1-bde8-053d2cc17d5e.roa (raw, json) Hash identifier: vf8sgX0TsY/6rydNe7uc232ITFE+pl0ZdyVlumVIdC4= Subject key identifier: 02:C2:DF:CF:0A:2B:67:F4:6E:76:4E:88:44:68:57:57:74:BD:5E:CA Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F3B7D198688DB5650801C2560 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2929bdb6-d173-38f1-bde8-053d2cc17d5e.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 49791 IP address blocks: 64.204.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:19:86:88:db:56:50:80:1c:25:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=3dcb39b2-4724-40fa-86de-907a4dbdd2e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f1:7c:21:db:50:eb:61:62:11:85:12:85:69: 5e:5e:c4:09:d2:f2:96:b0:f1:c6:04:df:87:81:8e: 43:c0:d1:26:de:a2:46:52:09:f1:26:02:d9:91:03: df:ab:39:74:59:7a:0c:d5:f2:8f:80:20:fc:cc:3c: 25:a0:e1:19:24:96:2f:5c:fa:83:74:41:68:1d:d3: 5b:97:d3:79:5d:97:c0:4c:dc:87:c1:5f:c0:a4:e1: 33:ee:c0:3d:ef:d8:cb:4d:c2:f5:95:a2:b1:8d:ad: 5a:8c:95:56:16:e2:d8:88:c9:c3:b2:71:b0:c3:47: 71:63:9d:96:f9:df:bf:05:ab:af:a6:c2:23:f8:1a: d3:94:a4:1f:ac:2e:ad:d1:7c:e3:71:93:6c:00:78: 35:25:ad:34:48:a8:5b:8b:32:e9:18:c0:61:2f:1a: 61:92:bc:63:be:57:6b:3d:18:c1:f1:93:6b:09:c9: ce:75:e5:b3:38:33:74:f7:d4:83:ec:a0:b4:7b:dd: cf:78:97:54:41:b9:c4:38:e8:69:e1:f2:f3:1b:0d: 35:d7:be:d3:e6:7e:a2:0d:ed:1e:0d:c5:ad:98:d8: 02:85:ed:d7:fb:4d:90:cb:f1:f0:6c:7e:21:c4:79: 29:fb:cd:49:7b:55:a7:6e:d2:18:8e:f2:ee:78:a6: e3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C2:DF:CF:0A:2B:67:F4:6E:76:4E:88:44:68:57:57:74:BD:5E:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2929bdb6-d173-38f1-bde8-053d2cc17d5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:ea:ff:c2:e9:f7:f2:d3:7d:a6:bd:eb:01:6d:7f:50:45:16: 45:9e:76:37:f1:e1:25:11:c9:d8:12:c8:7c:cb:17:55:15:ae: 8a:51:f4:78:97:68:39:0d:cf:b7:60:6d:33:e5:a7:22:6e:5a: 73:83:42:20:4f:fc:2c:95:9d:96:6c:81:09:fd:fd:56:81:70: c2:95:04:01:03:73:76:17:88:54:0f:06:76:c7:3d:8a:55:3e: 9c:2b:34:8c:87:21:2a:5c:35:0a:91:79:8b:23:f7:76:21:c7: 68:7b:96:ab:5d:9e:11:75:cf:48:2d:b3:8b:56:92:03:e9:9d: 66:12:ec:9d:2c:e5:7d:1c:6d:b2:3c:d5:16:30:b8:2d:e6:11: cd:f9:c4:39:e2:a1:66:09:d6:46:fa:60:22:0a:98:ab:f8:d3: fa:55:5c:f2:7d:72:e2:6b:4d:54:23:24:21:8c:99:dd:24:57: 68:c2:99:09:7c:19:d3:0c:2e:8a:8e:43:6b:f7:4c:86:38:d0: 53:57:ca:d2:fc:ae:5f:79:52:db:b2:a0:a6:81:46:53:9c:fd: 87:81:b6:dd:29:3e:96:e6:0d:c2:70:5a:99:80:43:37:9b:77: 98:ac:aa:f0:bb:23:d8:a3:7f:94:36:69:1d:08:62:4e:d0:ba: 85:13:7b:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fRmGiNtWUIAcJWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk M2RjYjM5YjItNDcyNC00MGZhLTg2ZGUtOTA3YTRkYmRkMmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPF8IdtQ62FiEYUShWleXsQJ0vKWsPHGBN+H gY5DwNEm3qJGUgnxJgLZkQPfqzl0WXoM1fKPgCD8zDwloOEZJJYvXPqDdEFoHdNb l9N5XZfATNyHwV/ApOEz7sA979jLTcL1laKxja1ajJVWFuLYiMnDsnGww0dxY52W +d+/BauvpsIj+BrTlKQfrC6t0XzjcZNsAHg1Ja00SKhbizLpGMBhLxphkrxjvldr PRjB8ZNrCcnOdeWzODN099SD7KC0e93PeJdUQbnEOOhp4fLzGw01177T5n6iDe0e DcWtmNgChe3X+02Qy/HwbH4hxHkp+81Je1WnbtIYjvLueKbjBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALC388KK2f0bnZOiERoV1d0vV7KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjkyOWJkYjYtZDE3My0z OGYxLWJkZTgtMDUzZDJjYzE3ZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMw0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALvq/8Lp9/LTfaa96wFtf1BFFkWedjfx4SURydgSyHzLF1UVropR9HiX aDkNz7dgbTPlpyJuWnODQiBP/CyVnZZsgQn9/VaBcMKVBAEDc3YXiFQPBnbHPYpV PpwrNIyHISpcNQqReYsj93Yhx2h7lqtdnhF1z0gts4tWkgPpnWYS7J0s5X0cbbI8 1RYwuC3mEc35xDnioWYJ1kb6YCIKmKv40/pVXPJ9cuJrTVQjJCGMmd0kV2jCmQl8 GdMMLoqOQ2v3TIY40FNXytL8rl95UtuyoKaBRlOc/YeBtt0pPpbmDcJwWpmAQzeb d5isqvC7I9ijf5Q2aR0IYk7QuoUTe5o= -----END CERTIFICATE-----Generated at Thu Oct 1 13:35:28 2026 by rpki-client