$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5b9ffde2-0112-33f1-bc6c-1b5c027d8d47.roa File: 5b9ffde2-0112-33f1-bc6c-1b5c027d8d47.roa (raw, json) Hash identifier: 7OvaEnov56EWfW8BkNLRT+e79lPBi+Ildzi3mdxllGs= Subject key identifier: 35:08:69:0E:2C:33:8A:E1:F7:B1:41:C5:DD:78:11:00:61:68:3F:89 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4112874528BC64083FF9C800 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5b9ffde2-0112-33f1-bc6c-1b5c027d8d47.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 834 IP address blocks: 64.204.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:87:45:28:bc:64:08:3f:f9:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=b9287d94-67bf-4df0-9a1b-61e842fa4b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6c:29:5c:ba:ee:b2:0b:1c:f1:43:54:26:7b: c5:9c:ce:75:86:ad:c4:bf:02:5b:48:04:81:4a:de: f9:4e:ee:3d:a0:db:bc:3a:d8:1d:bf:e5:f2:e9:f0: 9f:93:c8:09:7e:d4:d6:6e:3f:6f:56:f2:db:06:05: 03:fa:a8:19:69:ce:14:83:78:74:e6:b5:f2:29:c5: 9c:3d:49:cb:22:e2:32:a5:53:2a:1e:2a:73:81:cc: 8b:4d:ea:21:bf:75:97:5f:ef:a3:88:34:80:d9:b9: d1:2c:8d:ac:50:00:b4:a1:2e:3b:17:25:d6:0b:6c: 9c:a4:9b:5f:6c:b4:e0:4e:97:72:92:1e:4e:03:3d: ae:e1:56:86:a5:fd:6e:79:1b:0d:44:ca:42:c8:c0: f3:96:e5:85:13:5d:a2:64:49:3f:98:df:a0:02:4f: a1:17:f7:89:ba:75:3f:0e:f7:d9:ba:f9:e5:2e:47: 0a:9d:4d:53:a6:27:c4:1c:8d:7d:d0:a9:ac:b5:b0: 16:a1:0b:bc:d0:15:1a:c3:e5:78:56:c8:23:4c:0e: cd:bc:97:c6:2f:61:6d:5b:88:1b:d9:75:c7:08:81: 9e:d6:8c:cc:52:64:a9:9b:b1:74:12:89:a7:d8:b1: 96:09:0b:d9:6a:5a:83:86:66:67:a7:b1:09:6b:0c: 91:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:08:69:0E:2C:33:8A:E1:F7:B1:41:C5:DD:78:11:00:61:68:3F:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5b9ffde2-0112-33f1-bc6c-1b5c027d8d47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:1c:e9:fb:f2:10:72:24:27:b2:34:f8:6e:9a:36:40:17:70: 79:6f:bb:b5:2d:40:04:2f:a3:ce:fb:d4:5d:b0:17:3d:87:f4: a2:18:89:7b:da:6c:5c:23:ea:5c:f1:2c:6a:93:32:d6:3e:86: 9a:4e:1a:ff:14:5a:93:41:97:0c:c2:57:66:8a:2f:5c:5c:43: 87:0c:cd:58:8f:e5:46:2e:46:53:ef:98:5b:77:a7:b6:55:e4: 6a:80:5b:3f:6c:17:cc:3c:8a:2e:05:b9:42:57:38:4b:8b:ee: 36:d5:d8:d5:1a:06:01:5c:fd:9f:dc:3e:f5:83:b3:f6:61:0e: c5:bb:79:62:07:fb:c9:62:49:f9:ad:6e:3e:bb:04:86:96:c3: 3e:da:8c:c0:55:de:f5:22:e3:03:17:88:7e:aa:84:22:18:9d: db:06:c3:00:ac:6a:2c:2b:ef:1e:ee:ce:59:1b:af:19:2a:d6: a9:13:8e:47:1d:e7:a5:ad:d3:45:6c:5f:e0:1a:cd:68:56:9d: f6:56:f1:4b:fc:bb:41:b8:b5:70:7c:64:a1:09:0b:39:52:81: 2d:a6:67:49:4c:70:1a:9e:76:82:e3:38:de:b0:fa:fb:1f:2a: 7e:34:09:7a:cf:31:46:ce:ed:4f:93:33:41:8d:d0:f8:16:cf: 43:ae:42:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEodFKLxkCD/5yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk YjkyODdkOTQtNjdiZi00ZGYwLTlhMWItNjFlODQyZmE0YjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWwpXLrusgsc8UNUJnvFnM51hq3EvwJbSASB St75Tu49oNu8Otgdv+Xy6fCfk8gJftTWbj9vVvLbBgUD+qgZac4Ug3h05rXyKcWc PUnLIuIypVMqHipzgcyLTeohv3WXX++jiDSA2bnRLI2sUAC0oS47FyXWC2ycpJtf bLTgTpdykh5OAz2u4VaGpf1ueRsNRMpCyMDzluWFE12iZEk/mN+gAk+hF/eJunU/ DvfZuvnlLkcKnU1TpifEHI190KmstbAWoQu80BUaw+V4VsgjTA7NvJfGL2FtW4gb 2XXHCIGe1ozMUmSpm7F0Eomn2LGWCQvZalqDhmZnp7EJawyRyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUIaQ4sM4rh97FBxd14EQBhaD+JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNWI5ZmZkZTItMDExMi0z M2YxLWJjNmMtMWI1YzAyN2Q4ZDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMzmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwc6fvyEHIkJ7I0+G6aNkAXcHlvu7UtQAQvo8771F2wFz2H9KIYiXva bFwj6lzxLGqTMtY+hppOGv8UWpNBlwzCV2aKL1xcQ4cMzViP5UYuRlPvmFt3p7ZV 5GqAWz9sF8w8ii4FuUJXOEuL7jbV2NUaBgFc/Z/cPvWDs/ZhDsW7eWIH+8liSfmt bj67BIaWwz7ajMBV3vUi4wMXiH6qhCIYndsGwwCsaiwr7x7uzlkbrxkq1qkTjkcd 56Wt00VsX+AazWhWnfZW8Uv8u0G4tXB8ZKEJCzlSgS2mZ0lMcBqedoLjON6w+vsf Kn40CXrPMUbO7U+TM0GN0PgWz0OuQik= -----END CERTIFICATE-----Generated at Sat Sep 26 11:05:38 2026 by rpki-client