$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/29537e38-a054-3f61-8687-e2f4fd0c6f1d.roa File: 29537e38-a054-3f61-8687-e2f4fd0c6f1d.roa (raw, json) Hash identifier: cqaKbuAyOc672xWMlkhRdzJT2YJn+Lt0rRbo3RPJ6Vc= Subject key identifier: A4:AB:37:4E:51:A7:64:16:9A:47:74:AB:12:88:80:13:1E:B8:E7:89 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F49872F0BA2CB89D5F8B59880 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/29537e38-a054-3f61-8687-e2f4fd0c6f1d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 5650 IP address blocks: 64.205.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:2f:0b:a2:cb:89:d5:f8:b5:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bd0e4044-6793-468a-9319-3be752c5af5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:60:b6:c2:db:ba:69:dc:77:40:ef:fe:93:4f: 18:d5:8f:0d:cd:26:da:99:42:43:fe:b8:45:39:04: a1:6a:f5:6a:6b:d1:d9:7a:cb:55:08:0c:0f:7c:23: dd:ea:2a:50:15:eb:7a:19:71:21:2f:a0:3b:1a:2d: f3:a8:14:d4:c8:1a:25:91:4f:58:cd:fd:70:de:b2: a6:71:42:41:9f:47:05:67:02:a8:eb:f0:22:af:c5: 05:86:ce:b8:4b:d6:39:10:ea:b9:96:8a:36:a1:6e: a9:ef:3b:a2:78:a5:dd:55:ed:75:88:1e:c2:03:65: 0f:e4:25:d3:f8:55:fe:2d:18:ee:bd:8f:b8:d4:af: 01:d1:d7:34:1d:ff:be:9d:87:17:66:1a:26:41:11: f9:a1:25:87:58:46:ad:42:fc:6d:08:35:da:7e:ba: b4:4a:f0:1f:f2:c5:38:56:d2:4d:bf:64:da:35:76: e3:ca:68:52:fd:77:79:6a:a3:70:61:86:62:36:e0: fb:46:37:33:79:d5:db:96:21:4f:68:c1:32:32:65: ce:16:75:62:9a:7a:c1:d4:8a:fd:8e:52:6b:d1:3c: 7a:ae:26:db:58:4e:42:bb:21:bb:6b:6a:d5:e9:6a: ff:d2:be:30:db:03:47:84:11:d0:6a:75:c1:7a:f4: f8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:AB:37:4E:51:A7:64:16:9A:47:74:AB:12:88:80:13:1E:B8:E7:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/29537e38-a054-3f61-8687-e2f4fd0c6f1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.205.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:6e:8b:c6:cf:89:6e:69:53:08:fc:08:b5:28:fe:d5:55:0f: 83:13:ab:de:a4:cf:88:b8:d5:0d:13:c0:af:db:32:6a:66:53: 70:08:4a:ad:ac:67:e4:92:26:69:e5:f7:ec:4c:df:fc:fb:9c: 08:09:dc:e2:b1:7c:ee:02:35:e4:cb:32:b4:9c:85:07:65:49: d0:5d:71:26:aa:1d:52:5a:a3:52:5d:6a:29:e7:93:c2:0b:c8: e9:29:5b:c8:30:6a:09:8e:de:e7:9d:94:78:f7:df:c3:72:f1: 84:ba:18:30:59:02:25:27:57:ca:19:87:90:f9:df:90:86:79: b4:79:26:07:9b:a7:ad:e3:fe:8b:3c:2f:23:d5:06:41:ed:a2: 46:5e:da:2d:84:74:c3:2d:8b:9f:22:d9:5b:49:ef:5d:a7:cf: 32:fe:66:ee:db:86:46:69:58:91:68:97:29:0b:e3:37:a5:8a: d2:d4:b1:d1:f3:df:a9:2d:91:d0:09:29:e5:78:e7:9d:98:d0: 68:a2:27:ae:a7:ce:b5:f0:be:6f:44:1c:3a:c6:5f:a1:64:f7: a9:57:e9:51:a1:bd:df:f5:a6:ea:48:2e:57:bf:33:3d:09:48: a9:ef:e9:f2:04:f4:42:ac:c2:8b:eb:28:1e:53:d1:f7:67:a7: 35:5e:14:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhy8LosuJ1fi1mIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmQwZTQwNDQtNjc5My00NjhhLTkzMTktM2JlNzUyYzVhZjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmC2wtu6adx3QO/+k08Y1Y8NzSbamUJD/rhF OQShavVqa9HZestVCAwPfCPd6ipQFet6GXEhL6A7Gi3zqBTUyBolkU9Yzf1w3rKm cUJBn0cFZwKo6/Air8UFhs64S9Y5EOq5loo2oW6p7zuieKXdVe11iB7CA2UP5CXT +FX+LRjuvY+41K8B0dc0Hf++nYcXZhomQRH5oSWHWEatQvxtCDXafrq0SvAf8sU4 VtJNv2TaNXbjymhS/Xd5aqNwYYZiNuD7RjczedXbliFPaMEyMmXOFnVimnrB1Ir9 jlJr0Tx6ribbWE5CuyG7a2rV6Wr/0r4w2wNHhBHQanXBevT4OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSrN05Rp2QWmkd0qxKIgBMeuOeJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjk1MzdlMzgtYTA1NC0z ZjYxLTg2ODctZTJmNGZkMGM2ZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQM0WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNui8bPiW5pUwj8CLUo/tVVD4MTq96kz4i41Q0TwK/bMmpmU3AISq2s Z+SSJmnl9+xM3/z7nAgJ3OKxfO4CNeTLMrSchQdlSdBdcSaqHVJao1Jdainnk8IL yOkpW8gwagmO3uedlHj338Ny8YS6GDBZAiUnV8oZh5D535CGebR5Jgebp63j/os8 LyPVBkHtokZe2i2EdMMti58i2VtJ712nzzL+Zu7bhkZpWJFolykL4zelitLUsdHz 36ktkdAJKeV4552Y0GiiJ66nzrXwvm9EHDrGX6Fk96lX6VGhvd/1pupILle/Mz0J SKnv6fIE9EKswovrKB5T0fdnpzVeFFw= -----END CERTIFICATE-----Generated at Mon Sep 28 22:51:45 2026 by rpki-client