$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7bf635c4-d7fd-3d57-80c1-bc23ad79e084.roa File: 7bf635c4-d7fd-3d57-80c1-bc23ad79e084.roa (raw, json) Hash identifier: b9Lj2S4o0cpPdfhmQZSSeWZ9NY2Z6ORowmwqC0wvDco= Subject key identifier: D5:2D:B3:25:D3:F4:D6:98:53:47:DC:D0:E8:9D:85:41:66:F4:F9:18 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F173237DA8BEB519B53010100 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7bf635c4-d7fd-3d57-80c1-bc23ad79e084.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 397423 IP address blocks: 64.204.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:37:da:8b:eb:51:9b:53:01:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=3cc4e387-1df6-496f-b42d-b61d8e1c2295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:08:e1:71:62:1d:a2:93:87:16:54:6a:e6:dc: da:98:7b:94:07:ea:4b:fb:bf:8e:ad:9f:ce:98:05: f0:1a:68:49:23:1c:45:30:5e:af:3e:29:ce:d3:c5: e6:a9:4c:b9:14:8f:36:8e:83:9b:e3:61:a3:b8:cf: b9:6f:6c:e1:e1:64:80:78:9a:61:42:68:2e:ac:89: 51:fa:fe:4c:a2:c6:bf:4a:11:fd:85:e3:45:b0:f7: 5b:5f:56:c0:32:be:26:a6:d7:dc:f3:74:dd:cb:dd: 2b:07:88:61:ce:de:7e:47:7b:49:bd:16:33:06:a6: 92:17:30:ff:ef:a6:ce:f8:50:98:68:35:33:c2:2f: e4:f0:74:20:e7:72:c0:11:48:ab:c3:1a:17:70:94: e8:e2:db:54:49:d0:e7:fc:e7:35:0c:ff:8a:52:e2: 8e:e6:66:9d:f1:a9:05:fa:5c:e2:9e:6c:d3:e9:a5: b2:94:b9:58:77:4d:55:89:13:db:1a:dc:db:63:17: 1b:86:26:74:83:cf:0e:f3:93:f9:6d:cf:af:cf:f6: 89:ad:95:a4:ab:f9:b7:97:06:81:8f:fb:78:78:47: 60:ac:0e:2d:05:42:16:20:0b:91:47:30:f6:bf:2a: ab:48:a4:74:7c:21:f1:82:8c:cf:2f:33:8a:0d:a4: 18:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2D:B3:25:D3:F4:D6:98:53:47:DC:D0:E8:9D:85:41:66:F4:F9:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7bf635c4-d7fd-3d57-80c1-bc23ad79e084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:27:44:42:a9:d1:6a:16:f4:4b:45:bc:65:b3:bc:31:45:1a: aa:af:ca:18:e5:7f:81:28:1d:43:16:28:99:66:c5:a8:43:d1: 37:f0:70:56:63:ff:86:13:d4:49:bf:8d:27:15:02:2a:c4:95: 8c:5a:0a:5a:70:b4:d7:68:59:1c:64:2d:6f:b8:2a:62:38:09: 09:2b:d5:04:9b:13:28:7a:79:cb:7a:a7:bd:7b:24:65:0d:d9: 72:b5:6f:de:89:f0:d0:c4:ac:d7:2e:6b:5a:9b:0b:43:1e:53: 94:ca:03:8a:4d:61:e1:87:1d:da:f4:6b:72:60:11:b8:e5:58: 8a:55:49:73:2a:d4:2a:a6:96:db:cd:7e:53:d6:a1:bb:bc:58: 86:2b:bc:70:2b:ef:6b:ad:36:51:e9:de:85:9f:0b:88:78:60: f9:b1:d6:94:d0:de:c7:39:c3:18:d9:ed:d2:e0:1a:ac:67:c0: da:85:49:cd:15:c4:0f:30:f8:25:d7:09:9b:7b:b2:ca:46:f0: 1e:6d:e3:73:3e:d9:29:47:17:59:f6:71:3e:aa:00:4b:dd:37: 50:46:d0:d6:de:46:71:05:80:88:4f:3c:dc:a6:d8:0d:b6:b7: da:ab:05:be:df:15:7a:1e:a4:7e:85:d7:51:35:2a:14:9a:5a: e2:27:a9:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMjfai+tRm1MBAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk M2NjNGUzODctMWRmNi00OTZmLWI0MmQtYjYxZDhlMWMyMjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQjhcWIdopOHFlRq5tzamHuUB+pL+7+OrZ/O mAXwGmhJIxxFMF6vPinO08XmqUy5FI82joOb42GjuM+5b2zh4WSAeJphQmgurIlR +v5Mosa/ShH9heNFsPdbX1bAMr4mptfc83Tdy90rB4hhzt5+R3tJvRYzBqaSFzD/ 76bO+FCYaDUzwi/k8HQg53LAEUirwxoXcJTo4ttUSdDn/Oc1DP+KUuKO5mad8akF +lzinmzT6aWylLlYd01ViRPbGtzbYxcbhiZ0g88O85P5bc+vz/aJrZWkq/m3lwaB j/t4eEdgrA4tBUIWIAuRRzD2vyqrSKR0fCHxgozPLzOKDaQY2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUtsyXT9NaYU0fc0OidhUFm9PkYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvN2JmNjM1YzQtZDdmZC0z ZDU3LTgwYzEtYmMyM2FkNzllMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHonREKp0WoW9EtFvGWzvDFFGqqvyhjlf4EoHUMWKJlmxahD0TfwcFZj /4YT1Em/jScVAirElYxaClpwtNdoWRxkLW+4KmI4CQkr1QSbEyh6ect6p717JGUN 2XK1b96J8NDErNcua1qbC0MeU5TKA4pNYeGHHdr0a3JgEbjlWIpVSXMq1CqmltvN flPWobu8WIYrvHAr72utNlHp3oWfC4h4YPmx1pTQ3sc5wxjZ7dLgGqxnwNqFSc0V xA8w+CXXCZt7sspG8B5t43M+2SlHF1n2cT6qAEvdN1BG0NbeRnEFgIhPPNym2A22 t9qrBb7fFXoepH6F11E1KhSaWuInqTU= -----END CERTIFICATE-----Generated at Tue Sep 29 01:59:10 2026 by rpki-client