$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/38a38f24-e672-38fd-8238-d7188fd0516a.roa File: 38a38f24-e672-38fd-8238-d7188fd0516a.roa (raw, json) Hash identifier: qbQaB/iSreCUyFEA1YTktYxnXZJnHd2Qkxsh5VVFpAo= Subject key identifier: AC:49:81:92:CA:0B:0F:04:D9:8B:DC:99:6F:3F:B0:F6:EA:DF:75:9C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F497448B700C69EA1CC549C80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/38a38f24-e672-38fd-8238-d7188fd0516a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 270187 IP address blocks: 66.253.74.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:48:b7:00:c6:9e:a1:cc:54:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=93e9aee1-aeb0-4d77-9e7c-e143da603d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a5:67:f2:62:d5:04:5f:b2:da:de:72:dc:ee: e7:fd:66:27:c9:a2:31:3d:bc:0a:af:03:00:64:2f: 0e:48:4e:26:45:9c:da:bc:ba:59:b9:c4:6d:54:2b: 0c:71:4f:42:7b:72:c2:a4:9c:ea:60:e8:b5:69:f5: cf:2d:38:37:b2:ce:09:fb:1a:68:9b:66:c1:51:3a: f7:c2:10:e5:6d:84:d0:d9:5b:48:0c:94:cc:c4:ce: 3e:9e:91:ed:32:d7:75:8f:77:60:dc:cb:6c:25:3e: 6e:25:8f:c9:6e:68:86:0b:4d:d4:11:bc:d8:52:05: 1c:c7:94:75:59:93:b9:fb:92:7a:f8:a3:a8:ac:ff: e9:14:b5:38:4c:e5:eb:a2:5a:6e:7b:fb:fd:bf:ee: 99:ef:5e:17:29:c2:c8:eb:e6:de:8b:8f:a9:ed:5e: 46:80:27:7d:17:38:98:35:75:35:c0:43:68:04:6f: 12:78:86:5c:11:ff:dc:c0:1b:43:98:5e:22:65:7e: bd:4f:1a:9b:26:e7:31:bb:d9:4a:ab:cb:74:4b:38: 33:b2:ba:3c:c3:64:14:27:53:55:8b:6a:92:eb:03: ef:fd:15:72:cb:00:15:4d:cd:82:13:fb:10:ee:94: 1d:77:2f:65:a2:ad:52:d2:a2:52:a2:8b:e9:8f:2d: 9a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:49:81:92:CA:0B:0F:04:D9:8B:DC:99:6F:3F:B0:F6:EA:DF:75:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/38a38f24-e672-38fd-8238-d7188fd0516a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:d6:7b:ab:d0:a9:0d:96:8a:a5:3e:68:89:c9:28:bf:ee:e8: 3d:13:59:a1:1a:2a:4f:99:0c:51:28:0a:52:06:63:b8:d5:06: 2b:02:e2:a3:4a:4a:0e:3f:fb:cc:4a:f4:91:25:aa:b2:5d:ae: 70:e7:d3:d4:3f:04:25:5a:52:35:89:4c:80:0b:f0:47:30:99: b2:7a:ec:13:da:d2:0c:84:cd:12:1d:44:e2:43:9f:65:59:96: 62:43:1c:e3:dc:03:a7:ea:44:77:12:a5:19:a6:b4:55:47:36: 06:2f:d9:73:11:39:b7:b6:69:29:9a:27:cb:14:a9:7a:ed:b1: 89:07:46:ab:74:74:cd:1c:98:71:d3:20:e2:e6:cc:cd:70:be: 6f:fb:29:a9:5c:05:9e:93:e8:16:12:45:3d:0b:8d:4b:cf:cd: 0b:11:61:1b:c8:28:81:15:e6:43:56:8f:64:58:52:17:b5:8c: 34:75:e1:ff:19:c8:da:65:3d:78:a8:67:1c:09:67:72:d3:b9: ce:b0:c6:3a:9b:7f:7d:e4:0c:10:10:0f:b1:3d:b0:99:f7:4e: 79:90:5e:9b:66:25:1d:98:37:bc:f1:be:02:cb:90:af:6e:23: 33:56:a6:28:38:9d:ef:cb:42:ad:36:b5:b1:da:ad:c8:60:15: b5:56:b4:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdEi3AMaeocxUnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTNlOWFlZTEtYWViMC00ZDc3LTllN2MtZTE0M2RhNjAzZDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6Vn8mLVBF+y2t5y3O7n/WYnyaIxPbwKrwMA ZC8OSE4mRZzavLpZucRtVCsMcU9Ce3LCpJzqYOi1afXPLTg3ss4J+xpom2bBUTr3 whDlbYTQ2VtIDJTMxM4+npHtMtd1j3dg3MtsJT5uJY/JbmiGC03UEbzYUgUcx5R1 WZO5+5J6+KOorP/pFLU4TOXrolpue/v9v+6Z714XKcLI6+bei4+p7V5GgCd9FziY NXU1wENoBG8SeIZcEf/cwBtDmF4iZX69TxqbJucxu9lKq8t0Szgzsro8w2QUJ1NV i2qS6wPv/RVyywAVTc2CE/sQ7pQddy9loq1S0qJSoovpjy2a1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxJgZLKCw8E2YvcmW8/sPbq33WcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzhhMzhmMjQtZTY3Mi0z OGZkLTgyMzgtZDcxODhmZDA1MTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQv1KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzWe6vQqQ2WiqU+aInJKL/u6D0TWaEaKk+ZDFEoClIGY7jVBisC4qNK Sg4/+8xK9JElqrJdrnDn09Q/BCVaUjWJTIAL8EcwmbJ67BPa0gyEzRIdROJDn2VZ lmJDHOPcA6fqRHcSpRmmtFVHNgYv2XMRObe2aSmaJ8sUqXrtsYkHRqt0dM0cmHHT IOLmzM1wvm/7KalcBZ6T6BYSRT0LjUvPzQsRYRvIKIEV5kNWj2RYUhe1jDR14f8Z yNplPXioZxwJZ3LTuc6wxjqbf33kDBAQD7E9sJn3TnmQXptmJR2YN7zxvgLLkK9u IzNWpig4ne/LQq02tbHarchgFbVWtDk= -----END CERTIFICATE-----Generated at Sun Oct 11 18:21:31 2026 by rpki-client