$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3f59bca9-bb5c-3821-b0e9-db7f351006f2.roa File: 3f59bca9-bb5c-3821-b0e9-db7f351006f2.roa (raw, json) Hash identifier: DMT7Wt0NZXhcMxemfR8AIzhGERa8wR0hWAcndiT/p+o= Subject key identifier: B7:F1:D4:42:5E:FB:9C:ED:FE:D1:13:DA:EE:FB:B8:DE:CA:69:8C:AE Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F498C22EEDA12D92EF1A62F40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3f59bca9-bb5c-3821-b0e9-db7f351006f2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 5650 IP address blocks: 68.167.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:22:ee:da:12:d9:2e:f1:a6:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1892fe43-888f-40f7-a9dd-e8feeb5b96f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:10:74:77:f4:9b:22:25:3f:15:ea:87:68:db: 8f:35:d2:15:0c:1e:8b:d6:7d:2d:15:3a:ee:bc:a2: 4f:b3:dc:43:8c:9a:a0:5e:b2:e7:13:30:7e:48:53: 9d:e8:28:54:99:01:83:f0:1f:05:b0:70:f5:dd:4a: a0:f8:f2:e5:a7:db:dc:6d:fe:82:ac:0c:dd:89:12: 1f:84:fc:22:03:58:37:b3:c2:78:1a:41:fb:cc:d6: b4:4c:eb:a8:63:a8:5d:f8:31:f2:5f:66:82:f5:a7: 16:c6:0f:2d:88:93:bf:52:74:86:a0:bd:f4:01:4e: 67:ab:17:97:09:bd:8d:0f:1b:76:af:70:ff:63:83: 3c:f6:f4:fb:ac:26:a3:cf:52:e6:19:8c:ee:8b:ac: 90:5d:9d:f1:af:b4:96:49:51:91:5e:7c:ec:e9:72: 63:85:cf:db:14:e6:f2:42:30:52:06:8e:1a:49:c0: b5:80:c3:be:08:c2:8b:2b:2f:55:79:13:e0:ff:6b: 28:98:c5:4f:28:63:d1:27:dd:8f:fc:ca:ff:2e:76: e9:9e:a9:bb:14:17:59:0c:1c:97:20:25:c3:14:9a: 28:24:e0:29:0b:52:ad:54:9a:d0:07:15:90:46:e6: 04:89:1d:99:b1:56:0c:b1:24:55:f8:c4:b3:46:7d: fc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F1:D4:42:5E:FB:9C:ED:FE:D1:13:DA:EE:FB:B8:DE:CA:69:8C:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3f59bca9-bb5c-3821-b0e9-db7f351006f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:1d:af:2d:5b:79:40:e7:e0:33:a0:56:5d:91:ee:db:c4:70: 49:9f:c8:e5:47:44:dc:b0:01:10:bf:ad:fc:35:68:84:b7:2c: 11:47:10:54:3c:9f:6a:27:56:20:b0:3e:a7:4d:a9:ea:21:a6: 83:d4:ba:df:28:e9:bc:96:e0:7d:05:ed:ae:36:e7:8a:66:f0: 64:f0:c1:19:28:a4:4c:63:81:9a:fb:88:88:d3:b0:22:73:bd: c8:89:84:6b:3d:fc:8f:c3:03:92:0c:55:38:42:44:5d:dc:a0: 43:22:0c:d6:88:da:24:d0:19:82:fb:a0:1f:87:09:8e:42:f6: cc:47:36:e2:96:3c:12:b5:24:d7:ef:0d:cd:9f:47:6b:56:1e: 4a:1e:24:c6:60:37:af:60:83:14:24:76:9d:6f:94:a3:ea:94: 86:eb:5a:a0:5b:33:0f:96:87:93:5c:c7:b2:8f:4a:8e:6b:a9: 90:76:37:2f:50:79:d7:35:47:b4:c6:29:9b:e1:97:f5:2c:33: dc:93:bb:b7:8d:c1:9f:73:f1:9a:8b:f7:9f:08:9d:f7:51:91: 92:c8:1d:75:fe:b9:59:30:98:e9:f7:41:91:3d:2f:af:a3:8e: f2:5c:1d:65:fe:22:bd:85:90:09:e9:e6:d0:17:6e:6b:95:8c: fe:95:47:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JjCLu2hLZLvGmL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTg5MmZlNDMtODg4Zi00MGY3LWE5ZGQtZThmZWViNWI5NmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxB0d/SbIiU/FeqHaNuPNdIVDB6L1n0tFTru vKJPs9xDjJqgXrLnEzB+SFOd6ChUmQGD8B8FsHD13Uqg+PLlp9vcbf6CrAzdiRIf hPwiA1g3s8J4GkH7zNa0TOuoY6hd+DHyX2aC9acWxg8tiJO/UnSGoL30AU5nqxeX Cb2NDxt2r3D/Y4M89vT7rCajz1LmGYzui6yQXZ3xr7SWSVGRXnzs6XJjhc/bFOby QjBSBo4aScC1gMO+CMKLKy9VeRPg/2somMVPKGPRJ92P/Mr/Lnbpnqm7FBdZDByX ICXDFJooJOApC1KtVJrQBxWQRuYEiR2ZsVYMsSRV+MSzRn38iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfx1EJe+5zt/tET2u77uN7KaYyuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2Y1OWJjYTktYmI1Yy0z ODIxLWIwZTktZGI3ZjM1MTAwNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKcoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8dry1beUDn4DOgVl2R7tvEcEmfyOVHRNywARC/rfw1aIS3LBFHEFQ8 n2onViCwPqdNqeohpoPUut8o6byW4H0F7a4254pm8GTwwRkopExjgZr7iIjTsCJz vciJhGs9/I/DA5IMVThCRF3coEMiDNaI2iTQGYL7oB+HCY5C9sxHNuKWPBK1JNfv Dc2fR2tWHkoeJMZgN69ggxQkdp1vlKPqlIbrWqBbMw+Wh5Ncx7KPSo5rqZB2Ny9Q edc1R7TGKZvhl/UsM9yTu7eNwZ9z8ZqL958InfdRkZLIHXX+uVkwmOn3QZE9L6+j jvJcHWX+Ir2FkAnp5tAXbmuVjP6VRxs= -----END CERTIFICATE-----Generated at Sat Sep 26 04:06:03 2026 by rpki-client