$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/470c86b9-2317-3ed5-89eb-6fcc5d4fc867.roa File: 470c86b9-2317-3ed5-89eb-6fcc5d4fc867.roa (raw, json) Hash identifier: Wdley3M3IQYxzg4RBqidBW+L7+SmfJ8y1gf12Bb+dG8= Subject key identifier: AC:AE:B7:55:C2:31:82:44:7E:83:61:24:C6:5B:D0:E5:3E:0B:B2:E7 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F71EDBAFA67780F6C55EFB880 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/470c86b9-2317-3ed5-89eb-6fcc5d4fc867.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 22773 IP address blocks: 65.86.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:ba:fa:67:78:0f:6c:55:ef:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=d7b857ce-306c-4e72-8d4a-1a921ed4aea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e7:9d:c1:7d:fb:9c:0b:41:ae:60:d0:ab:1e: 75:38:78:51:ac:c4:70:71:03:8c:86:29:79:19:37: 4d:15:a0:ea:7c:ac:d4:dc:2c:40:c9:7f:6e:f5:5f: 8d:13:64:11:b6:a0:45:dc:2f:1c:12:33:4f:7e:27: 1d:95:2b:7a:8f:9f:ac:6f:9c:83:a8:81:09:62:64: b2:be:e1:41:33:c7:3b:35:0f:f5:81:1e:6d:df:61: 1b:6f:8a:5d:0a:22:c6:ce:3c:86:eb:d1:c5:8e:b2: 12:dd:77:82:fe:24:cf:e9:33:ba:98:37:62:ad:d1: 96:14:b7:5e:10:2a:e9:81:b9:25:d6:71:2a:67:db: e6:cb:fd:7d:e1:f7:13:17:a0:7a:59:a3:df:ab:56: a9:31:01:ff:0e:ac:6e:f6:29:19:33:7a:f6:60:ad: f6:41:6c:5f:46:4d:3d:f5:19:21:4f:9d:09:90:b3: ab:65:e9:d2:92:68:c3:b7:01:11:c5:38:79:26:ec: a1:91:f5:e8:3d:b3:72:47:53:f7:aa:d3:cc:37:88: 38:25:d7:0d:46:cd:54:d1:ca:4b:06:10:5c:b9:4e: 5b:20:95:29:cd:e2:7c:bd:0b:32:c8:bc:55:11:83: 7d:a4:62:53:2a:e4:df:73:47:f7:83:29:9d:6e:19: 1d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AE:B7:55:C2:31:82:44:7E:83:61:24:C6:5B:D0:E5:3E:0B:B2:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/470c86b9-2317-3ed5-89eb-6fcc5d4fc867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:fe:6c:35:e6:00:c4:93:50:81:b5:45:a6:15:41:d9:e9:5d: ee:ad:7d:75:1a:43:60:20:7d:67:ed:0f:e1:8b:65:be:8d:08: 97:5f:a6:27:5b:b5:21:6a:8d:7e:60:0c:f8:8c:11:5e:32:d6: 89:12:56:1c:af:f5:5d:38:68:70:68:fd:d8:a0:db:39:90:18: 05:54:2f:97:1d:02:81:6f:9f:4d:4c:2c:2d:15:79:18:91:55: 8e:57:9d:3d:1e:c0:f1:90:7f:e5:22:77:53:f6:28:4c:d5:83: 93:bd:73:31:95:f6:0f:52:cd:33:2e:4c:02:a5:e4:a2:fa:7d: c6:86:c5:21:fe:1a:e0:d0:90:ab:68:c8:1c:97:00:36:2a:be: 1b:55:a7:c8:ee:37:78:79:8a:06:90:55:92:64:7f:47:17:5b: b7:4b:be:de:bb:23:35:17:f0:7a:76:43:ec:2a:04:b0:94:11: f7:8f:1a:f5:bd:b8:df:1e:70:3c:fd:b5:e2:a2:89:a1:a0:c4: 6c:65:83:65:88:fc:37:dd:ea:97:51:0b:e0:af:75:0c:49:c5: 07:ee:3a:b4:34:16:89:56:59:04:9b:00:cc:e5:16:4b:03:e0: d0:fc:a2:d9:f2:bc:6b:77:18:1d:07:35:bd:7a:95:f0:b4:a7: 39:2d:fc:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7br6Z3gPbFXvuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk ZDdiODU3Y2UtMzA2Yy00ZTcyLThkNGEtMWE5MjFlZDRhZWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+edwX37nAtBrmDQqx51OHhRrMRwcQOMhil5 GTdNFaDqfKzU3CxAyX9u9V+NE2QRtqBF3C8cEjNPficdlSt6j5+sb5yDqIEJYmSy vuFBM8c7NQ/1gR5t32Ebb4pdCiLGzjyG69HFjrIS3XeC/iTP6TO6mDdirdGWFLde ECrpgbkl1nEqZ9vmy/194fcTF6B6WaPfq1apMQH/Dqxu9ikZM3r2YK32QWxfRk09 9RkhT50JkLOrZenSkmjDtwERxTh5JuyhkfXoPbNyR1P3qtPMN4g4JdcNRs1U0cpL BhBcuU5bIJUpzeJ8vQsyyLxVEYN9pGJTKuTfc0f3gymdbhkdZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyut1XCMYJEfoNhJMZb0OU+C7LnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDcwYzg2YjktMjMxNy0z ZWQ1LTg5ZWItNmZjYzVkNGZjODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQVaWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/+bDXmAMSTUIG1RaYVQdnpXe6tfXUaQ2AgfWftD+GLZb6NCJdfpidb tSFqjX5gDPiMEV4y1okSVhyv9V04aHBo/dig2zmQGAVUL5cdAoFvn01MLC0VeRiR VY5XnT0ewPGQf+Uid1P2KEzVg5O9czGV9g9SzTMuTAKl5KL6fcaGxSH+GuDQkKto yByXADYqvhtVp8juN3h5igaQVZJkf0cXW7dLvt67IzUX8Hp2Q+wqBLCUEfePGvW9 uN8ecDz9teKiiaGgxGxlg2WI/Dfd6pdRC+CvdQxJxQfuOrQ0FolWWQSbAMzlFksD 4ND8otnyvGt3GB0HNb16lfC0pzkt/CE= -----END CERTIFICATE-----Generated at Fri Oct 9 21:04:55 2026 by rpki-client