$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/60f2410c-9655-3d12-b502-fd93a002d5e3.roa File: 60f2410c-9655-3d12-b502-fd93a002d5e3.roa (raw, json) Hash identifier: FMHkziWqCyJ7nGRRb8t/0TLy6r4Ql8o2He4o0Hzh52E= Subject key identifier: 4A:B7:08:2A:BA:5E:CB:6A:E0:49:84:2A:DD:1F:1E:F3:27:3F:6E:4E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F30528E743A22994C0A9A7600 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/60f2410c-9655-3d12-b502-fd93a002d5e3.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 6079 IP address blocks: 68.167.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:8e:74:3a:22:99:4c:0a:9a:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=e0e53393-af26-45b2-bc8f-231cead21cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9f:13:3e:35:c8:26:e2:33:01:20:7b:be:90: 90:1b:a6:ce:85:83:71:ed:fe:ad:de:23:b2:d0:db: 46:6f:9c:9e:65:8d:5f:ce:82:71:1a:02:e9:94:89: dc:83:ec:2e:90:b8:c4:e3:53:2b:49:5c:93:51:9b: 58:8d:98:b4:42:90:75:08:2e:13:1a:08:a4:fe:fc: 23:6b:cf:57:1c:02:e3:e5:ef:dc:bd:db:a7:8e:63: 88:88:60:05:cd:f2:c9:a5:83:46:64:1c:d8:46:94: 6c:4d:d6:62:b6:7c:89:e9:f8:91:15:9a:f8:c5:07: bf:5e:33:33:dd:56:d5:44:3c:17:04:3e:e1:5a:89: b4:85:43:52:df:79:3b:cb:1d:61:b5:6f:34:07:94: c4:c4:8a:cd:71:eb:e3:b1:3d:b0:27:b8:8a:05:98: 5c:d9:a9:6d:a9:32:16:01:bd:cf:9f:6f:90:39:70: 9c:48:22:52:ef:8c:2f:61:5c:f1:8c:b9:60:95:da: 17:e2:8c:d9:c7:b4:8e:c0:28:54:7b:3b:11:36:2b: fb:8c:f0:58:0e:1b:9d:c2:26:43:4b:89:79:82:a1: e2:68:96:a2:e5:95:f5:df:ea:f4:b6:7c:df:f9:7e: 38:0a:ed:98:ae:a8:b7:63:36:3c:d3:67:0b:1e:92: af:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B7:08:2A:BA:5E:CB:6A:E0:49:84:2A:DD:1F:1E:F3:27:3F:6E:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/60f2410c-9655-3d12-b502-fd93a002d5e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:b7:18:e5:a6:5f:7d:1e:44:0b:17:48:83:dd:c8:b5:93:b4: 63:85:44:53:a9:e3:4c:ec:ab:05:86:7e:db:a1:c4:ce:fa:a6: 99:71:36:6b:6b:3e:8e:bd:d4:be:d3:4d:50:5b:59:63:6b:0c: cc:29:f3:5e:87:a6:40:aa:f0:36:24:c8:1e:6f:ad:b3:50:a7: 37:d9:84:6e:ef:bc:f7:63:ef:68:80:0f:03:b9:b1:14:f8:55: 70:b4:0b:b5:05:32:b8:6e:75:7d:22:1b:05:3c:17:88:bf:fc: ef:4e:72:a2:bf:e1:6f:f0:ef:ce:d0:02:9f:0d:9e:61:5b:6a: 0f:57:8e:53:89:4c:22:47:3d:54:67:a7:89:cb:29:96:c8:06: f9:07:19:8a:b1:ba:a7:cb:71:47:b2:19:f8:a7:49:16:e5:c0: 00:a1:6d:ef:67:dc:c7:a3:11:e0:ac:9f:7d:55:b9:6c:89:84: 44:ea:b5:91:a7:c6:54:e1:88:fe:52:84:e3:36:d1:8f:78:67: ef:b3:3c:53:03:5b:3e:6a:6d:39:90:ff:fe:da:dd:f5:98:72: a6:e0:71:1d:24:85:31:98:69:9c:de:d6:dd:51:16:2d:8f:06: 29:b7:61:8b:dd:34:2e:13:e3:2d:a7:19:4f:52:77:4b:26:95: 94:b0:a4:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUo50OiKZTAqadgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk ZTBlNTMzOTMtYWYyNi00NWIyLWJjOGYtMjMxY2VhZDIxY2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp8TPjXIJuIzASB7vpCQG6bOhYNx7f6t3iOy 0NtGb5yeZY1fzoJxGgLplIncg+wukLjE41MrSVyTUZtYjZi0QpB1CC4TGgik/vwj a89XHALj5e/cvdunjmOIiGAFzfLJpYNGZBzYRpRsTdZitnyJ6fiRFZr4xQe/XjMz 3VbVRDwXBD7hWom0hUNS33k7yx1htW80B5TExIrNcevjsT2wJ7iKBZhc2altqTIW Ab3Pn2+QOXCcSCJS74wvYVzxjLlgldoX4ozZx7SOwChUezsRNiv7jPBYDhudwiZD S4l5gqHiaJai5ZX13+r0tnzf+X44Cu2Yrqi3YzY802cLHpKvsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEq3CCq6Xstq4EmEKt0fHvMnP25OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjBmMjQxMGMtOTY1NS0z ZDEyLWI1MDItZmQ5M2EwMDJkNWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKcoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALa3GOWmX30eRAsXSIPdyLWTtGOFRFOp40zsqwWGftuhxM76pplxNmtr Po691L7TTVBbWWNrDMwp816HpkCq8DYkyB5vrbNQpzfZhG7vvPdj72iADwO5sRT4 VXC0C7UFMrhudX0iGwU8F4i//O9OcqK/4W/w787QAp8NnmFbag9XjlOJTCJHPVRn p4nLKZbIBvkHGYqxuqfLcUeyGfinSRblwAChbe9n3MejEeCsn31VuWyJhETqtZGn xlThiP5ShOM20Y94Z++zPFMDWz5qbTmQ//7a3fWYcqbgcR0khTGYaZze1t1RFi2P Bim3YYvdNC4T4y2nGU9Sd0smlZSwpCA= -----END CERTIFICATE-----Generated at Sat Oct 10 13:47:35 2026 by rpki-client