$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5c25ac5d-aac8-3c26-9ca7-ebf83b4f7678.roa File: 5c25ac5d-aac8-3c26-9ca7-ebf83b4f7678.roa (raw, json) Hash identifier: dunKDV3YI03wi1Bm1KOYrt/n+P6vCAqULIznNz1OJ8M= Subject key identifier: 80:CF:BF:A4:F2:44:52:00:1F:32:01:67:E1:36:F3:14:46:7C:F3:46 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F49870AD2FD553A0D22DB1800 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5c25ac5d-aac8-3c26-9ca7-ebf83b4f7678.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 5650 IP address blocks: 64.205.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:0a:d2:fd:55:3a:0d:22:db:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=44239036-418a-49de-9171-a169736a3245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:94:5a:31:bd:02:37:f4:91:99:ad:e4:51:a9: 21:5e:0e:35:31:a8:7e:2c:09:b2:71:23:6e:24:2d: 9c:7b:2a:07:65:45:19:5d:55:bf:a2:94:49:5b:10: d8:09:b5:49:cb:32:e4:b1:6f:95:07:55:08:d9:97: c0:dc:fb:53:11:95:1b:19:fe:ba:47:7e:0f:83:bc: 36:07:93:c3:e7:b8:bc:08:ef:61:5f:7d:93:6a:ff: 70:54:7d:a0:c1:f5:81:04:c3:c9:95:02:aa:9c:04: 4d:b2:b0:cb:df:eb:b6:32:aa:62:5b:82:92:41:7d: 24:4e:3d:4d:7f:f1:55:e9:c4:c2:7f:57:5e:19:9b: dc:73:f2:65:40:79:77:6d:16:b5:aa:6a:39:2f:dc: 1d:a4:21:b9:8a:9b:b8:06:76:5c:70:38:67:0f:b7: 98:8c:2e:0d:60:5f:9d:a5:37:d0:32:04:37:9a:81: f3:68:bb:8b:f8:d5:18:28:9f:21:e1:a9:62:a5:07: ca:5e:46:0f:90:74:8d:8b:14:48:3a:8e:4d:bb:b4: f7:03:6e:ae:c4:bc:41:04:6e:c1:d8:89:13:cd:14: 74:6b:17:46:f3:21:f0:f3:9e:ce:ac:9c:32:d1:9e: ac:f3:95:e6:33:ad:1d:ac:a9:dc:38:ee:e5:71:3b: 84:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CF:BF:A4:F2:44:52:00:1F:32:01:67:E1:36:F3:14:46:7C:F3:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5c25ac5d-aac8-3c26-9ca7-ebf83b4f7678.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.205.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:20:5c:d7:a3:e1:61:03:60:67:cd:44:c8:37:8a:a8:b1:6c: 60:17:c3:73:2a:17:d9:c2:9c:2d:34:7e:84:eb:83:d7:f0:a7: 4f:10:c9:74:6b:a1:13:51:8d:0b:56:a2:bf:9a:b7:21:e9:67: 43:31:14:1a:5f:71:da:ba:70:2f:64:f5:92:40:f4:76:e3:c8: 90:93:7d:38:c2:a7:3a:9f:84:b5:e4:64:76:92:23:0b:f1:60: c2:f4:14:87:88:15:c3:41:c3:02:f9:16:22:04:ee:17:a8:62: c9:1b:71:82:98:d7:36:fc:00:67:a2:c1:11:b7:b1:64:21:a0: 25:ed:7f:3a:d5:23:42:8a:ae:4f:42:ee:51:7c:94:f3:4f:84: f1:4e:da:be:2e:f6:a8:3d:70:ae:6d:3a:4c:31:04:62:0c:30: 27:88:61:96:2c:9b:00:b3:0f:98:21:81:09:01:53:7e:fd:f0: 90:3b:54:af:7e:d3:4a:e2:10:a1:5b:05:33:c2:9b:34:a8:9c: ec:08:89:d7:5d:1d:9a:46:7c:11:d8:4a:ba:e2:39:a3:d7:b1: 17:c5:08:5c:c1:87:4f:5f:6c:79:37:37:89:e2:03:44:33:7c: 09:c1:e0:2b:2b:78:26:11:eb:6f:21:09:e1:f5:3d:1e:41:16: 45:27:7d:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhwrS/VU6DSLbGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDQyMzkwMzYtNDE4YS00OWRlLTkxNzEtYTE2OTczNmEzMjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5RaMb0CN/SRma3kUakhXg41Mah+LAmycSNu JC2ceyoHZUUZXVW/opRJWxDYCbVJyzLksW+VB1UI2ZfA3PtTEZUbGf66R34Pg7w2 B5PD57i8CO9hX32Tav9wVH2gwfWBBMPJlQKqnARNsrDL3+u2MqpiW4KSQX0kTj1N f/FV6cTCf1deGZvcc/JlQHl3bRa1qmo5L9wdpCG5ipu4BnZccDhnD7eYjC4NYF+d pTfQMgQ3moHzaLuL+NUYKJ8h4alipQfKXkYPkHSNixRIOo5Nu7T3A26uxLxBBG7B 2IkTzRR0axdG8yHw857OrJwy0Z6s85XmM60drKncOO7lcTuEwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDPv6TyRFIAHzIBZ+E28xRGfPNGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNWMyNWFjNWQtYWFjOC0z YzI2LTljYTctZWJmODNiNGY3Njc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQM0RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAgXNej4WEDYGfNRMg3iqixbGAXw3MqF9nCnC00foTrg9fwp08QyXRr oRNRjQtWor+atyHpZ0MxFBpfcdq6cC9k9ZJA9HbjyJCTfTjCpzqfhLXkZHaSIwvx YML0FIeIFcNBwwL5FiIE7heoYskbcYKY1zb8AGeiwRG3sWQhoCXtfzrVI0KKrk9C 7lF8lPNPhPFO2r4u9qg9cK5tOkwxBGIMMCeIYZYsmwCzD5ghgQkBU3798JA7VK9+ 00riEKFbBTPCmzSonOwIidddHZpGfBHYSrriOaPXsRfFCFzBh09fbHk3N4niA0Qz fAnB4CsreCYR628hCeH1PR5BFkUnfdY= -----END CERTIFICATE-----Generated at Sun Oct 4 10:13:36 2026 by rpki-client