$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7a642d70-3ef0-350c-bf2d-efd1393755e8.roa File: 7a642d70-3ef0-350c-bf2d-efd1393755e8.roa (raw, json) Hash identifier: pY/hd/E2SL0xmD9pgh/tTCpDHdfdzSXj7KLeippuCI8= Subject key identifier: 4A:78:50:5E:7D:50:75:26:AF:A8:CD:04:71:F2:7A:51:88:D8:85:48 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F3A17C3A1B4C9074B752BCA40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7a642d70-3ef0-350c-bf2d-efd1393755e8.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 834 IP address blocks: 65.86.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:c3:a1:b4:c9:07:4b:75:2b:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=3ca7dc75-0c22-43f6-91a8-3ba566b9ab17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c7:a3:c3:ea:e3:dd:22:c8:0e:1c:86:0e:2a: c2:3d:c4:f6:26:04:48:fc:ea:31:5d:ab:87:44:7b: f2:a0:12:6d:8a:63:32:da:1b:4e:74:72:58:81:cd: 05:9a:81:32:89:fb:fb:3f:e7:5c:db:ea:28:22:7c: e8:77:d6:8b:3c:95:83:74:92:36:8c:d0:29:b8:e1: f0:28:42:48:eb:1d:b1:b2:4a:5a:12:c8:3d:68:4c: f2:c5:15:20:66:2f:9d:c4:77:d9:8b:09:8d:89:d0: 2d:a6:02:73:72:b3:78:42:f5:a6:0d:68:bc:9f:a0: 0a:ba:32:7f:fd:2e:30:3c:c1:68:a0:89:01:bd:fb: a7:68:d7:65:b2:02:d9:85:12:da:e8:6b:99:01:19: de:d5:57:e3:0d:50:67:78:19:3c:89:29:71:36:53: ed:3e:72:de:7b:c6:f3:b1:64:a9:82:fa:69:78:1a: 97:ce:3a:36:6d:d5:55:23:58:20:b5:21:01:a8:18: df:5c:da:1a:57:0f:4e:9c:c1:24:a7:60:a0:d8:64: 54:d9:57:49:42:9f:a7:1a:15:f1:44:63:dc:8d:d9: d2:a4:12:43:9e:0d:bd:56:e4:b8:dc:76:cc:ed:8d: c7:d5:67:31:69:61:84:47:54:31:5a:58:15:f7:16: d2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:78:50:5E:7D:50:75:26:AF:A8:CD:04:71:F2:7A:51:88:D8:85:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7a642d70-3ef0-350c-bf2d-efd1393755e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:3e:75:d7:12:c3:89:01:8c:19:a4:4e:11:a6:95:94:cc:f2: d0:32:59:22:77:06:16:1c:6e:ec:c0:ce:40:c5:e1:4f:cc:9c: 15:37:bd:03:1b:71:dd:2e:f4:c6:94:94:77:9a:45:be:91:f5: b5:76:8e:b0:1a:fe:e8:be:7b:fb:dc:20:65:18:91:77:77:35: fb:3f:f2:3d:2a:41:eb:f7:d2:ba:80:0c:34:18:f0:bb:2e:d4: d8:ac:8b:23:80:20:a1:84:0e:b4:48:63:c3:c7:59:5f:62:cf: 4f:8a:c1:34:c8:7a:cf:e7:43:7f:b4:8c:58:26:c1:80:cd:0e: 17:08:47:28:89:f8:fb:9b:56:e8:4d:14:9a:e6:51:14:d1:fe: f5:e5:2d:ed:80:6b:19:a3:5c:92:4e:5f:45:69:be:c1:de:e6: c2:bf:0a:a0:35:8b:73:ac:de:1a:46:9b:ed:3e:7c:04:89:08: d5:4b:68:23:4b:3a:20:cc:a1:08:9c:5f:79:41:0b:f6:7e:53: 40:77:c4:14:5c:0b:15:c9:f2:03:7e:c7:69:6e:a7:00:b7:40: 5f:63:e7:e1:ae:4f:b1:6c:d5:d4:f1:10:80:1b:b3:ef:fb:2b: 4d:80:c7:e4:67:d4:83:6e:1f:7d:4e:d1:e3:6c:05:5a:bf:86: 43:dd:41:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8OhtMkHS3UrykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk M2NhN2RjNzUtMGMyMi00M2Y2LTkxYTgtM2JhNTY2YjlhYjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcejw+rj3SLIDhyGDirCPcT2JgRI/OoxXauH RHvyoBJtimMy2htOdHJYgc0FmoEyifv7P+dc2+ooInzod9aLPJWDdJI2jNApuOHw KEJI6x2xskpaEsg9aEzyxRUgZi+dxHfZiwmNidAtpgJzcrN4QvWmDWi8n6AKujJ/ /S4wPMFooIkBvfunaNdlsgLZhRLa6GuZARne1VfjDVBneBk8iSlxNlPtPnLee8bz sWSpgvppeBqXzjo2bdVVI1ggtSEBqBjfXNoaVw9OnMEkp2Cg2GRU2VdJQp+nGhXx RGPcjdnSpBJDng29VuS43HbM7Y3H1WcxaWGER1QxWlgV9xbSHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEp4UF59UHUmr6jNBHHyelGI2IVIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvN2E2NDJkNzAtM2VmMC0z NTBjLWJmMmQtZWZkMTM5Mzc1NWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVbKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABw+ddcSw4kBjBmkThGmlZTM8tAyWSJ3BhYcbuzAzkDF4U/MnBU3vQMb cd0u9MaUlHeaRb6R9bV2jrAa/ui+e/vcIGUYkXd3Nfs/8j0qQev30rqADDQY8Lsu 1NisiyOAIKGEDrRIY8PHWV9iz0+KwTTIes/nQ3+0jFgmwYDNDhcIRyiJ+PubVuhN FJrmURTR/vXlLe2AaxmjXJJOX0VpvsHe5sK/CqA1i3Os3hpGm+0+fASJCNVLaCNL OiDMoQicX3lBC/Z+U0B3xBRcCxXJ8gN+x2lupwC3QF9j5+GuT7Fs1dTxEIAbs+/7 K02Ax+Rn1INuH31O0eNsBVq/hkPdQRM= -----END CERTIFICATE-----Generated at Sat Oct 10 08:06:34 2026 by rpki-client