$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/56716a24-f2d8-3f65-a765-cfd60945410a.roa File: 56716a24-f2d8-3f65-a765-cfd60945410a.roa (raw, json) Hash identifier: tW03XhsEL3OZ+dRHNmeO1rvLDu0gJlzQRVEnZDY7aTA= Subject key identifier: D9:B1:96:BE:05:4C:70:60:09:84:B0:37:EE:91:29:86:68:CE:17:20 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F374FDE6FD7F651BA7D42A580 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/56716a24-f2d8-3f65-a765-cfd60945410a.roa Signing time: Fri 18 Sep 2026 13:05:50 +0000 ROA not before: Fri 18 Sep 2026 13:05:50 +0000 ROA not after: Thu 17 Dec 2026 14:05:50 +0000 asID: 834 IP address blocks: 64.204.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4f:de:6f:d7:f6:51:ba:7d:42:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 18 13:05:50 2026 GMT Not After : Dec 17 14:05:50 2026 GMT Subject: CN=81d4c9f0-0dd2-4668-97f0-165073846f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:62:99:b5:b0:7e:9c:e5:4b:82:9b:a8:c0:d9: fb:ed:2e:93:02:83:8e:19:76:64:33:d2:3c:6d:86: 43:46:22:e9:85:58:22:d4:3a:55:e3:45:c2:ac:86: 67:57:95:df:52:39:81:56:25:5b:5f:e3:1d:f6:16: b2:2e:11:d8:98:94:af:e0:38:82:ae:34:ac:99:1f: d4:1d:84:5b:74:1f:79:ae:b5:39:7b:ac:64:d4:77: ce:ba:ef:e1:bd:49:82:e6:c5:bd:d6:30:83:be:c7: 14:42:53:21:06:bd:82:ae:9c:8c:09:d7:95:6e:ac: d4:4e:23:fc:0a:87:56:df:8c:b8:52:ed:8d:32:8d: bf:da:f0:a1:0d:fc:cf:0d:dc:91:e2:ed:41:99:4a: 97:c9:f3:e8:d9:f9:27:54:b4:e9:b2:7d:cf:0e:db: e8:95:60:e6:40:8f:78:94:b4:24:c7:df:e4:c0:9c: 95:e5:99:76:43:2a:37:2d:f7:8a:9a:9a:ed:22:91: c2:a2:9a:b4:24:fe:04:6c:89:35:3a:c3:94:37:d1: 33:77:6c:0f:56:d8:22:e2:85:4f:a1:91:0a:61:2e: 90:5d:51:42:86:fa:9e:bf:47:a0:a5:56:c9:5d:bd: 5e:68:6a:d9:3e:14:67:14:58:8d:ca:a2:72:fa:36: a5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B1:96:BE:05:4C:70:60:09:84:B0:37:EE:91:29:86:68:CE:17:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/56716a24-f2d8-3f65-a765-cfd60945410a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a9:8d:ea:78:bd:c8:95:c9:52:e2:45:a2:9b:af:dc:2e:84: 9d:8a:a1:db:12:e2:ab:0c:80:58:47:21:ff:51:ec:8c:2b:e2: 1d:ff:64:be:48:6f:ce:da:d5:0b:5d:d6:27:1f:fc:a1:6e:a5: 92:19:05:96:6c:94:30:d9:d7:b2:ad:90:80:96:d5:99:c4:47: ec:30:ae:85:1d:1e:da:c5:87:95:d7:ce:ac:56:41:e3:9b:7e: f2:70:c3:c1:ff:75:b2:26:3a:fe:09:be:34:26:e4:5f:e3:17: 43:17:32:a4:f4:05:ce:ce:f7:a6:2d:6e:f7:62:6e:09:77:e9: 07:0a:d4:2e:f7:a0:c1:c3:cb:18:da:5a:0f:fb:1a:44:24:69: 98:38:2a:28:48:66:2b:af:b6:20:4f:7e:53:d0:39:15:31:d1: 3b:fb:20:49:6b:97:eb:f8:36:b3:b8:57:da:09:6f:23:ea:11: ce:1b:25:64:81:b4:95:b1:41:77:6c:c3:b2:4d:19:d8:45:0f: c2:c2:f0:e7:90:bf:56:45:3b:da:6c:07:05:8d:cc:a3:ad:92: 3b:31:16:9a:82:58:31:cf:e5:85:fd:87:68:c6:bc:86:e0:95: 2c:30:df:f5:40:68:13:27:a2:cf:04:00:3c:6b:9e:59:da:73: c8:73:15:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83T95v1/ZRun1CpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkxODEzMDU1MFoXDTI2MTIxNzE0MDU1MFowLzEtMCsGA1UEAxMk ODFkNGM5ZjAtMGRkMi00NjY4LTk3ZjAtMTY1MDczODQ2ZjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWKZtbB+nOVLgpuowNn77S6TAoOOGXZkM9I8 bYZDRiLphVgi1DpV40XCrIZnV5XfUjmBViVbX+Md9hayLhHYmJSv4DiCrjSsmR/U HYRbdB95rrU5e6xk1HfOuu/hvUmC5sW91jCDvscUQlMhBr2CrpyMCdeVbqzUTiP8 CodW34y4Uu2NMo2/2vChDfzPDdyR4u1BmUqXyfPo2fknVLTpsn3PDtvolWDmQI94 lLQkx9/kwJyV5Zl2Qyo3LfeKmprtIpHCopq0JP4EbIk1OsOUN9Ezd2wPVtgi4oVP oZEKYS6QXVFChvqev0egpVbJXb1eaGrZPhRnFFiNyqJy+jal4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmxlr4FTHBgCYSwN+6RKYZozhcgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNTY3MTZhMjQtZjJkOC0z ZjY1LWE3NjUtY2ZkNjA5NDU0MTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMwRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2pjep4vciVyVLiRaKbr9wuhJ2KodsS4qsMgFhHIf9R7Iwr4h3/ZL5I b87a1Qtd1icf/KFupZIZBZZslDDZ17KtkICW1ZnER+wwroUdHtrFh5XXzqxWQeOb fvJww8H/dbImOv4JvjQm5F/jF0MXMqT0Bc7O96Ytbvdibgl36QcK1C73oMHDyxja Wg/7GkQkaZg4KihIZiuvtiBPflPQORUx0Tv7IElrl+v4NrO4V9oJbyPqEc4bJWSB tJWxQXdsw7JNGdhFD8LC8OeQv1ZFO9psBwWNzKOtkjsxFpqCWDHP5YX9h2jGvIbg lSww3/VAaBMnos8EADxrnlnac8hzFcE= -----END CERTIFICATE-----Generated at Tue Sep 29 05:30:41 2026 by rpki-client