$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/65933ee6-6a98-3f67-b775-939460441221.roa File: 65933ee6-6a98-3f67-b775-939460441221.roa (raw, json) Hash identifier: Zq/nch1IQHRL2xJU8+tIzf8fV7ARxYwkNrYWHPuGjjg= Subject key identifier: D1:18:A7:36:51:DC:D9:B1:C7:11:82:3B:8D:F3:6A:69:6A:FD:05:54 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F498982D4492328F7D5B2A120 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/65933ee6-6a98-3f67-b775-939460441221.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20001 IP address blocks: 64.204.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:82:d4:49:23:28:f7:d5:b2:a1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=56d05b58-72f2-4707-8c60-8e32ac021a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:03:ca:c2:6f:4e:7f:ae:2f:f2:e7:1e:b4:63: 5d:bf:ba:3a:9d:bb:3e:89:0b:a2:83:ab:de:f2:55: e7:52:b0:9f:bb:2d:63:cc:4e:a4:85:3a:c2:d2:79: 0c:98:a4:f0:cb:17:f6:88:35:25:a2:a1:2a:6a:cf: 80:33:f1:11:24:bd:9b:2b:c0:cf:f2:16:07:5f:44: de:0d:cf:ba:eb:65:49:b2:2d:aa:0c:4c:5e:40:fc: b2:29:6d:e0:d3:3c:8b:55:e1:37:6d:23:f2:02:a6: 4d:0c:5c:41:54:28:be:b1:c4:f4:7b:54:7e:b9:ad: ca:f1:72:a5:f3:c4:1c:5d:9f:27:2b:62:81:55:1b: ed:81:a1:2b:4f:e1:35:9e:c5:80:29:bd:29:3b:f2: 08:75:58:dc:60:a7:91:bd:c8:44:82:15:dc:2b:27: 18:95:1f:c7:95:70:5b:b3:a6:3d:0a:8f:34:3b:7f: 66:7c:44:79:55:67:7e:0c:ef:3a:87:f1:d1:a6:50: be:6f:b7:6a:c1:26:57:bf:7f:5c:13:03:a7:52:e4: da:9f:d5:48:05:6e:fb:df:0c:1c:89:4f:5d:be:62: 7f:58:76:4a:a8:20:94:9e:87:57:0c:d5:48:e0:36: f6:33:7d:04:e2:af:fa:7c:08:de:3a:4a:21:6f:2b: 5f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:18:A7:36:51:DC:D9:B1:C7:11:82:3B:8D:F3:6A:69:6A:FD:05:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/65933ee6-6a98-3f67-b775-939460441221.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:aa:a3:d0:6f:77:3f:48:97:eb:54:5c:21:69:12:10:cf:64: 9c:3a:c9:10:c7:d7:51:68:e7:7c:15:f0:6b:10:77:54:e4:fc: 74:18:ce:d8:3a:c8:ad:fa:b2:e7:42:02:45:25:f1:83:d7:92: 0a:76:7c:8e:50:04:a7:77:06:f4:0b:d1:28:d5:ef:15:3d:78: fa:6c:2a:99:70:5f:0f:1d:ef:f0:32:44:a9:f1:52:97:de:7e: 10:1d:76:72:e7:41:d1:28:cd:40:ac:42:d0:d1:e3:fd:dc:a2: 97:3e:fe:5a:58:ba:d3:d1:e6:89:2f:46:a3:b6:e1:1e:a5:e3: 0e:71:8c:70:08:81:77:e3:a9:93:20:4d:cd:ff:7d:54:a8:6a: f3:16:6d:bf:43:d2:f2:cd:9b:c9:e6:a1:ef:93:e1:21:59:7d: dc:f1:2e:14:1c:68:9f:71:07:de:53:19:2c:14:48:8e:33:da: cf:41:72:3e:b8:b0:e5:9b:08:a5:c5:73:c6:54:65:86:9a:1e: 94:37:9d:7c:6f:72:61:5c:42:bc:ba:4d:4e:8e:87:5e:02:ca: 85:b3:e3:cc:64:28:d7:37:7a:54:e9:2d:45:36:1a:39:b9:37: 6a:a7:70:03:b1:6d:48:ec:d5:2b:cf:49:f2:c7:a8:fb:b1:54: b5:cd:d0:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiYLUSSMo99WyoSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTZkMDViNTgtNzJmMi00NzA3LThjNjAtOGUzMmFjMDIxYTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwPKwm9Of64v8ucetGNdv7o6nbs+iQuig6ve 8lXnUrCfuy1jzE6khTrC0nkMmKTwyxf2iDUloqEqas+AM/ERJL2bK8DP8hYHX0Te Dc+662VJsi2qDExeQPyyKW3g0zyLVeE3bSPyAqZNDFxBVCi+scT0e1R+ua3K8XKl 88QcXZ8nK2KBVRvtgaErT+E1nsWAKb0pO/IIdVjcYKeRvchEghXcKycYlR/HlXBb s6Y9Co80O39mfER5VWd+DO86h/HRplC+b7dqwSZXv39cEwOnUuTan9VIBW773wwc iU9dvmJ/WHZKqCCUnodXDNVI4Db2M30E4q/6fAjeOkohbytfMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEYpzZR3NmxxxGCO43zamlq/QVUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjU5MzNlZTYtNmE5OC0z ZjY3LWI3NzUtOTM5NDYwNDQxMjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMxxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaqo9Bvdz9Il+tUXCFpEhDPZJw6yRDH11Fo53wV8GsQd1Tk/HQYztg6 yK36sudCAkUl8YPXkgp2fI5QBKd3BvQL0SjV7xU9ePpsKplwXw8d7/AyRKnxUpfe fhAddnLnQdEozUCsQtDR4/3copc+/lpYutPR5okvRqO24R6l4w5xjHAIgXfjqZMg Tc3/fVSoavMWbb9D0vLNm8nmoe+T4SFZfdzxLhQcaJ9xB95TGSwUSI4z2s9Bcj64 sOWbCKXFc8ZUZYaaHpQ3nXxvcmFcQry6TU6Oh14CyoWz48xkKNc3elTpLUU2Gjm5 N2qncAOxbUjs1SvPSfLHqPuxVLXN0NM= -----END CERTIFICATE-----Generated at Sun Oct 11 09:06:44 2026 by rpki-client