$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/63eec71c-abab-3695-9ad7-6955db812ac4.roa File: 63eec71c-abab-3695-9ad7-6955db812ac4.roa (raw, json) Hash identifier: 23Rtg1bRLouGCUDG/bsj3T4XulsH/6n3v8NJ/At4HOk= Subject key identifier: 58:9B:0A:77:49:88:32:13:53:30:4B:55:E5:11:05:88:59:B0:82:73 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F506D647CBD3FE0CDAE68382B Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/63eec71c-abab-3695-9ad7-6955db812ac4.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 8881 IP address blocks: 64.204.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:64:7c:bd:3f:e0:cd:ae:68:38:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=def8fae1-ae2d-4d79-ae01-3c7e3c9e5486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f5:75:46:12:5c:44:e7:e6:14:40:c1:6e:a8: 46:2c:2f:19:33:1f:42:f3:a4:32:64:ac:31:28:f9: 79:5a:1d:6d:0b:d6:c0:04:c4:a0:cd:63:b8:61:72: 2f:84:8c:c3:ef:98:8e:44:20:44:4b:cd:1c:17:66: 82:0f:95:79:dc:db:fa:4c:c4:ed:a8:e8:20:66:19: 3d:08:3f:5d:1b:3f:39:11:f3:4f:26:7f:98:7e:7f: f1:b9:15:19:bf:61:36:f3:7a:bf:0a:47:b4:c3:be: b2:c9:2c:ed:e6:6d:74:21:b8:46:9c:66:a0:ee:7c: be:9f:f6:e9:ea:82:1c:c0:12:b3:83:98:43:e6:9e: 84:ad:02:bb:36:81:2e:32:77:b9:99:42:b4:39:ae: 70:40:db:41:41:0e:11:37:2e:5b:9b:28:46:1c:6c: e9:f4:e1:85:52:eb:7d:14:af:51:66:9a:f5:d9:b9: f3:ef:e5:01:88:ba:98:e3:52:9a:58:41:8c:10:81: c5:b0:af:33:fd:a7:e5:dd:aa:4c:bd:54:fe:85:75: 0e:e0:25:6f:64:d1:e1:ac:99:a2:a2:28:ee:4d:41: 54:54:8d:1b:c0:69:04:ba:55:43:07:95:da:55:84: 01:bc:be:7d:59:6e:8c:f0:77:6c:ce:dd:9c:78:7c: b8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9B:0A:77:49:88:32:13:53:30:4B:55:E5:11:05:88:59:B0:82:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/63eec71c-abab-3695-9ad7-6955db812ac4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:6a:30:91:7f:9d:73:78:12:f2:ab:be:e9:a6:7e:1d:16:c6: 0a:67:79:31:6e:ca:8e:e6:a0:58:d9:1f:7f:96:76:36:89:fd: ed:a3:97:af:a0:7d:1a:8d:7e:b4:27:6e:0a:ca:60:74:c3:20: 6e:2e:00:87:d0:16:74:a3:45:04:30:ae:d4:8d:ce:d0:e4:46: f3:fb:8d:08:9b:36:05:81:75:8d:7b:26:ae:39:f8:5e:4f:7d: d2:aa:11:37:ec:bd:13:68:18:1d:ae:c7:91:3b:ac:cd:3e:dc: 8e:b6:09:9e:be:68:f2:39:77:89:75:33:66:c6:81:13:26:2a: b4:71:4b:0d:fb:0d:fa:70:25:a1:fb:d9:63:7f:90:ff:b4:f8: b2:00:af:c5:70:90:ef:87:cc:c6:1b:69:8b:09:44:7d:8e:52: c1:57:72:51:95:ca:05:99:56:a4:e3:9b:37:18:35:73:d2:b9: 98:0c:f7:45:56:fc:cc:bf:88:3b:e2:4d:b9:ae:3e:73:38:b5: 30:7d:50:93:10:82:cc:87:a0:40:55:60:bf:ee:85:ef:65:d3: 5e:15:12:65:7b:b2:6f:be:4c:ae:e7:ed:d8:fa:45:cb:42:a0: 3a:23:7e:c1:a3:16:25:0f:18:3a:49:06:69:c5:b9:56:19:02: de:fe:b2:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWR8vT/gza5oOCswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZGVmOGZhZTEtYWUyZC00ZDc5LWFlMDEtM2M3ZTNjOWU1NDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPV1RhJcROfmFEDBbqhGLC8ZMx9C86QyZKwx KPl5Wh1tC9bABMSgzWO4YXIvhIzD75iORCBES80cF2aCD5V53Nv6TMTtqOggZhk9 CD9dGz85EfNPJn+Yfn/xuRUZv2E283q/Cke0w76yySzt5m10IbhGnGag7ny+n/bp 6oIcwBKzg5hD5p6ErQK7NoEuMne5mUK0Oa5wQNtBQQ4RNy5bmyhGHGzp9OGFUut9 FK9RZpr12bnz7+UBiLqY41KaWEGMEIHFsK8z/afl3apMvVT+hXUO4CVvZNHhrJmi oijuTUFUVI0bwGkEulVDB5XaVYQBvL59WW6M8Hdszt2ceHy42QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFibCndJiDITUzBLVeURBYhZsIJzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjNlZWM3MWMtYWJhYi0z Njk1LTlhZDctNjk1NWRiODEyYWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQMycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMJqMJF/nXN4EvKrvummfh0WxgpneTFuyo7moFjZH3+WdjaJ/e2jl6+g fRqNfrQnbgrKYHTDIG4uAIfQFnSjRQQwrtSNztDkRvP7jQibNgWBdY17Jq45+F5P fdKqETfsvRNoGB2ux5E7rM0+3I62CZ6+aPI5d4l1M2bGgRMmKrRxSw37DfpwJaH7 2WN/kP+0+LIAr8VwkO+HzMYbaYsJRH2OUsFXclGVygWZVqTjmzcYNXPSuZgM90VW /My/iDviTbmuPnM4tTB9UJMQgsyHoEBVYL/uhe9l014VEmV7sm++TK7n7dj6RctC oDojfsGjFiUPGDpJBmnFuVYZAt7+stQ= -----END CERTIFICATE-----Generated at Sat Oct 3 11:15:33 2026 by rpki-client