$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/86966c7e-0723-3ddb-9037-7b83aac26ce5.roa File: 86966c7e-0723-3ddb-9037-7b83aac26ce5.roa (raw, json) Hash identifier: XIZg1Gfif8Jff/2zm5H0ugT36eL2yOnsVAWPUUnEaBo= Subject key identifier: BF:AE:1E:DF:82:27:83:78:1F:36:B2:CD:78:06:78:38:F9:A7:17:9B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F57681ED715020C95EAFA7380 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/86966c7e-0723-3ddb-9037-7b83aac26ce5.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 6079 IP address blocks: 68.164.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:1e:d7:15:02:0c:95:ea:fa:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=9e81c521-283d-4c13-803d-17107cba87b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:99:7d:83:f9:82:6d:91:bb:98:26:b6:3f:f1: 96:12:49:f6:73:d5:f8:4f:03:a0:25:b5:c2:15:03: bd:b0:71:85:55:8c:3e:82:73:4b:37:f5:8d:9c:ef: a8:fb:21:83:65:ef:43:03:88:d3:81:5b:0f:f8:46: 48:3c:01:7c:21:c2:4c:e4:93:1c:96:b2:ea:e4:ef: 7b:70:98:7a:c3:df:a7:e5:ba:2d:90:cc:84:b9:e3: b8:e2:9f:6c:15:01:9f:4a:47:f6:89:63:e7:68:41: 25:11:39:3b:6e:89:2a:81:1d:29:bc:f4:74:ec:00: d7:00:13:b9:b1:d0:bf:f9:32:13:ad:41:3a:e8:0f: f7:4c:80:24:54:88:1e:c6:9d:14:fe:00:03:1a:ef: 18:3f:23:60:8d:3f:32:3d:0c:0b:51:34:7e:a6:68: 6c:a7:19:75:7d:cd:c8:98:8f:e3:5f:39:68:f6:f8: 96:7d:45:4c:bc:6d:c6:66:dc:58:72:c9:ff:59:2f: cd:11:30:2b:cd:e4:69:9a:d2:ef:f4:88:6b:21:c5: f3:e6:c8:03:2b:ad:ef:00:34:10:fb:36:03:dd:20: 24:69:ac:73:62:43:1b:78:79:1a:fc:1e:a4:a4:29: 00:70:2e:31:c5:41:00:91:31:cb:57:a8:83:5b:93: d5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AE:1E:DF:82:27:83:78:1F:36:B2:CD:78:06:78:38:F9:A7:17:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/86966c7e-0723-3ddb-9037-7b83aac26ce5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:0c:f9:87:bc:b4:b9:cd:b3:24:64:47:b6:93:e8:45:56:dd: 98:5a:d8:84:45:c0:b1:a7:a1:90:a9:16:ba:68:8c:2c:45:ec: 8e:4d:f5:b2:6e:ce:23:0e:11:d1:6d:2d:44:36:dd:88:24:fe: 00:6f:0f:72:80:c2:2b:bd:cb:f3:61:10:8a:31:5f:61:ab:10: 17:61:89:88:4b:6a:d0:5b:3c:06:9e:3c:d2:c8:dd:2d:23:7a: 31:71:5c:5d:49:67:3c:c4:f7:59:ff:f5:2e:c7:86:de:07:fc: 0b:37:89:72:4d:48:01:6b:46:a9:ef:43:b4:07:f4:48:4d:16: 95:70:fe:85:ce:0e:11:a6:88:59:83:58:cd:3e:c1:33:2f:0e: 09:dd:81:f2:36:39:78:85:b1:38:ea:bd:cf:b9:71:1b:e0:28: 7e:81:a9:eb:1b:d0:65:6e:75:b3:82:6c:fe:0d:bc:14:1d:41: 57:1d:1c:e9:6c:c1:99:34:82:16:e1:35:ec:9b:a3:15:d1:6b: 24:33:88:dc:62:21:5b:3c:80:32:f5:ad:ba:c3:d5:24:cd:6d: 59:d2:c8:8a:c4:60:19:5b:c0:f2:23:c2:f5:bc:da:51:a8:02: ac:de:dd:e9:33:3d:ef:de:79:62:41:3c:51:43:43:26:66:a5: c4:8f:3c:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XaB7XFQIMler6c4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk OWU4MWM1MjEtMjgzZC00YzEzLTgwM2QtMTcxMDdjYmE4N2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5l9g/mCbZG7mCa2P/GWEkn2c9X4TwOgJbXC FQO9sHGFVYw+gnNLN/WNnO+o+yGDZe9DA4jTgVsP+EZIPAF8IcJM5JMclrLq5O97 cJh6w9+n5botkMyEueO44p9sFQGfSkf2iWPnaEElETk7bokqgR0pvPR07ADXABO5 sdC/+TITrUE66A/3TIAkVIgexp0U/gADGu8YPyNgjT8yPQwLUTR+pmhspxl1fc3I mI/jXzlo9viWfUVMvG3GZtxYcsn/WS/NETArzeRpmtLv9IhrIcXz5sgDK63vADQQ +zYD3SAkaaxzYkMbeHka/B6kpCkAcC4xxUEAkTHLV6iDW5PVhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+uHt+CJ4N4HzayzXgGeDj5pxebMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODY5NjZjN2UtMDcyMy0z ZGRiLTkwMzctN2I4M2FhYzI2Y2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKRwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcM+Ye8tLnNsyRkR7aT6EVW3Zha2IRFwLGnoZCpFrpojCxF7I5N9bJu ziMOEdFtLUQ23Ygk/gBvD3KAwiu9y/NhEIoxX2GrEBdhiYhLatBbPAaePNLI3S0j ejFxXF1JZzzE91n/9S7Hht4H/As3iXJNSAFrRqnvQ7QH9EhNFpVw/oXODhGmiFmD WM0+wTMvDgndgfI2OXiFsTjqvc+5cRvgKH6Bqesb0GVudbOCbP4NvBQdQVcdHOls wZk0ghbhNeyboxXRayQziNxiIVs8gDL1rbrD1STNbVnSyIrEYBlbwPIjwvW82lGo Aqze3ekzPe/eeWJBPFFDQyZmpcSPPKw= -----END CERTIFICATE-----Generated at Mon Oct 12 14:17:40 2026 by rpki-client