$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8828cf12-0d75-396f-8f98-90d9716ea1b2.roa File: 8828cf12-0d75-396f-8f98-90d9716ea1b2.roa (raw, json) Hash identifier: pQOaSG56vNuRZta4/9YxeEhHgtgFLtz5LBg+BZ7+wgg= Subject key identifier: C8:4E:6A:9F:02:87:D0:C4:6F:96:90:3F:FA:C4:41:C6:38:82:CB:F7 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4DA28FDA8544678305019280 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8828cf12-0d75-396f-8f98-90d9716ea1b2.roa Signing time: Sat 26 Sep 2026 13:00:12 +0000 ROA not before: Sat 26 Sep 2026 13:00:12 +0000 ROA not after: Fri 25 Dec 2026 14:00:12 +0000 asID: 39600 IP address blocks: 66.253.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4d:a2:8f:da:85:44:67:83:05:01:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 26 13:00:12 2026 GMT Not After : Dec 25 14:00:12 2026 GMT Subject: CN=6e0f7815-43d1-4ade-a18d-58ae399cf8fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fe:d3:12:34:00:46:43:e7:9e:14:f1:e2:b1: 56:7c:1b:8b:cf:2c:40:84:46:c0:3a:d3:52:2e:42: 06:31:6f:a2:e4:be:3d:26:be:c1:b7:e1:90:76:7b: a1:a2:99:4b:19:9f:93:61:3f:e3:69:ac:40:70:32: ab:1c:96:e6:8f:f2:4f:69:78:45:3e:ce:a2:d5:f8: 86:a6:1c:c1:74:86:00:9c:3d:71:e8:44:c1:e3:34: 13:c1:33:fb:15:c3:87:91:56:20:35:aa:04:14:c4: b3:dc:f8:e6:4d:0d:89:49:c3:fd:60:1d:90:52:2c: 09:8e:e1:a8:5e:3c:78:31:c0:b7:50:52:5e:21:ce: 18:4c:3e:d8:80:22:42:1e:3e:11:a2:72:9b:1f:f0: 72:85:99:44:38:08:50:be:06:11:43:38:8a:13:7c: ff:7a:88:2e:44:ec:39:9c:48:6e:cc:99:0d:66:4a: a6:1f:70:36:a9:b9:db:b3:56:72:83:45:75:76:4d: 48:55:e1:82:91:f1:df:19:6d:07:2f:ce:63:9a:77: 79:6e:32:84:c4:a1:e2:64:b0:c2:37:62:32:6b:64: 34:58:d8:f2:e4:ee:a8:25:1b:da:c6:4e:48:da:e9: 1c:a6:35:ee:36:21:b0:f7:d9:04:4d:1e:f8:76:9d: 63:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4E:6A:9F:02:87:D0:C4:6F:96:90:3F:FA:C4:41:C6:38:82:CB:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8828cf12-0d75-396f-8f98-90d9716ea1b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:13:d8:7a:8f:99:5d:54:e7:65:16:7e:72:87:43:0e:d4:6b: 5f:79:87:ad:a0:4d:9b:df:c9:36:62:a3:b1:a4:e8:48:96:ca: 93:ed:e3:a8:3e:28:03:5b:f6:f7:b1:dd:0c:7e:78:2d:02:51: c9:23:60:98:f2:ae:60:fd:3e:58:8c:06:dd:0f:7b:7d:d3:a2: ee:55:f8:83:9f:e0:9a:e2:a6:b8:94:2d:10:54:26:03:d6:4a: 0b:33:e8:85:f3:61:1e:53:a0:00:52:84:30:9b:3d:c0:a3:c6: 0e:77:ae:73:b6:bd:db:30:fe:72:4c:d0:f2:4e:00:4f:ff:a7: 06:a4:55:9b:03:d5:43:24:cd:41:f2:b6:05:94:63:15:e6:3c: f2:f7:8c:08:84:82:2e:de:0a:cd:a3:7f:93:74:1f:61:fa:5a: bc:af:01:b1:79:85:0c:cc:b8:c9:28:81:28:03:10:51:ea:e9: 01:fb:78:c0:5a:5e:e8:26:f3:73:db:b5:3b:d8:0e:47:1d:b1: 1a:34:ac:1a:34:27:e3:56:ec:86:22:18:36:c5:74:0d:db:06: ad:9a:9c:4b:0e:16:ea:c0:c3:62:52:af:97:02:76:58:61:ac: c5:7b:b6:76:b8:4e:26:12:92:8c:1f:f7:25:5e:82:28:7b:4a: 18:c2:47:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Noo/ahURngwUBkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNjEzMDAxMloXDTI2MTIyNTE0MDAxMlowLzEtMCsGA1UEAxMk NmUwZjc4MTUtNDNkMS00YWRlLWExOGQtNThhZTM5OWNmOGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP7TEjQARkPnnhTx4rFWfBuLzyxAhEbAOtNS LkIGMW+i5L49Jr7Bt+GQdnuhoplLGZ+TYT/jaaxAcDKrHJbmj/JPaXhFPs6i1fiG phzBdIYAnD1x6ETB4zQTwTP7FcOHkVYgNaoEFMSz3PjmTQ2JScP9YB2QUiwJjuGo Xjx4McC3UFJeIc4YTD7YgCJCHj4RonKbH/ByhZlEOAhQvgYRQziKE3z/eoguROw5 nEhuzJkNZkqmH3A2qbnbs1Zyg0V1dk1IVeGCkfHfGW0HL85jmnd5bjKExKHiZLDC N2Iya2Q0WNjy5O6oJRvaxk5I2ukcpjXuNiGw99kETR74dp1jfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhOap8Ch9DEb5aQP/rEQcY4gsv3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODgyOGNmMTItMGQ3NS0z OTZmLThmOTgtOTBkOTcxNmVhMWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv0qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIT2HqPmV1U52UWfnKHQw7Ua195h62gTZvfyTZio7Gk6EiWypPt46g+ KANb9vex3Qx+eC0CUckjYJjyrmD9PliMBt0Pe33Tou5V+IOf4JripriULRBUJgPW Sgsz6IXzYR5ToABShDCbPcCjxg53rnO2vdsw/nJM0PJOAE//pwakVZsD1UMkzUHy tgWUYxXmPPL3jAiEgi7eCs2jf5N0H2H6WryvAbF5hQzMuMkogSgDEFHq6QH7eMBa Xugm83PbtTvYDkcdsRo0rBo0J+NW7IYiGDbFdA3bBq2anEsOFurAw2JSr5cCdlhh rMV7tna4TiYSkowf9yVegih7ShjCR+I= -----END CERTIFICATE-----Generated at Mon Sep 28 06:07:04 2026 by rpki-client