$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a99b2327-11f5-368e-8595-0fe1173fd499.roa File: a99b2327-11f5-368e-8595-0fe1173fd499.roa (raw, json) Hash identifier: 2os3tsML/VW0g6uDGk4PnvUGmTbQ3sqQcvBMZpOAAQo= Subject key identifier: 67:7E:96:F2:7D:4A:A7:84:3A:66:82:9B:4A:BB:26:ED:7A:EE:E8:2A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F3B7D1C1E9E43B3954E2855C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a99b2327-11f5-368e-8595-0fe1173fd499.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 6079 IP address blocks: 64.204.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:1c:1e:9e:43:b3:95:4e:28:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=21729160-c5e0-4716-963c-83edbc02b33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:91:82:d9:61:b7:8f:b8:a2:31:01:86:0b:50: 26:0c:e9:59:d1:3d:d8:bc:86:e7:f0:a7:09:43:aa: 80:7e:ed:fa:ed:0c:1d:e4:dc:74:55:cd:24:6c:c2: ea:57:2d:25:14:47:0b:4c:88:ec:f2:c8:bd:65:2a: e1:48:a8:e2:75:b2:46:b4:7f:49:dc:12:83:ec:93: cc:86:27:a3:11:bd:22:df:01:c5:8a:59:37:2c:23: d1:e7:93:e3:b7:dd:4c:8a:d2:c5:dd:7d:e1:4f:19: 85:f7:e8:0c:c1:81:b2:46:cd:f0:40:4d:7b:36:08: 6f:dd:df:c2:68:5d:99:d0:63:86:8a:14:1d:2d:d5: ab:65:a3:51:28:ec:66:38:a2:64:41:ab:4b:d8:ae: f5:dc:c0:2d:8e:76:f2:79:34:dc:e5:3d:69:76:d4: d0:b2:59:fa:9f:50:ca:4f:cf:0e:a6:3b:59:a3:09: b1:dc:6f:36:fc:28:5d:33:47:58:4b:8d:23:aa:29: 28:89:d3:59:8c:a0:0b:2a:49:ad:26:6c:17:41:b4: 0c:df:e0:d4:aa:33:e3:ac:b0:12:76:09:39:24:99: 97:77:44:60:33:45:03:b9:b0:5b:ce:d4:6d:b9:81: 6e:33:72:74:cf:38:35:59:36:57:6d:4f:6f:70:5e: 29:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7E:96:F2:7D:4A:A7:84:3A:66:82:9B:4A:BB:26:ED:7A:EE:E8:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a99b2327-11f5-368e-8595-0fe1173fd499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:82:cd:63:30:ba:da:91:28:0b:7a:d0:af:ed:02:02:df:03: df:b1:df:2c:7a:9e:6f:5c:ed:eb:e2:a9:5d:9a:59:3d:e6:d1: 70:3a:29:58:43:6c:e1:a0:48:29:60:7b:30:5c:1c:b4:80:25: e9:be:96:95:3b:0d:c0:5d:02:cf:c8:4b:ff:fb:ba:24:c4:01: 1f:04:98:b6:66:a2:eb:35:a8:5c:2a:1e:84:01:2f:8d:48:0f: 1f:bd:99:e7:20:af:07:6f:cd:6e:aa:1e:f7:a2:37:82:1e:6e: ae:de:01:97:09:0d:e4:93:68:8e:6d:b2:83:c7:5f:b4:50:52: 49:99:e7:1d:24:22:b6:80:aa:fb:36:f2:57:d8:46:20:48:53: 6f:19:78:39:a6:c3:8c:f5:c7:38:b5:2d:30:8d:e1:d3:73:6f: 21:29:ad:ee:1f:27:dc:b4:52:ac:4e:7d:85:66:9f:f1:97:0b: cb:f5:da:0f:3d:67:e6:51:0f:5f:2e:3b:db:5a:24:a8:1a:67: a8:0b:f9:59:5c:c9:bc:63:e0:10:52:ef:15:4d:ee:b1:02:6d: e9:52:2c:c7:79:63:8d:36:58:81:59:b6:dc:4c:07:9a:07:32: 3e:9f:ba:e7:ac:5d:4c:aa:06:38:88:d6:be:b3:c9:c9:7b:42: 76:67:5e:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fRwenkOzlU4oVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk MjE3MjkxNjAtYzVlMC00NzE2LTk2M2MtODNlZGJjMDJiMzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25GC2WG3j7iiMQGGC1AmDOlZ0T3YvIbn8KcJ Q6qAfu367Qwd5Nx0Vc0kbMLqVy0lFEcLTIjs8si9ZSrhSKjidbJGtH9J3BKD7JPM hiejEb0i3wHFilk3LCPR55Pjt91MitLF3X3hTxmF9+gMwYGyRs3wQE17Nghv3d/C aF2Z0GOGihQdLdWrZaNRKOxmOKJkQatL2K713MAtjnbyeTTc5T1pdtTQsln6n1DK T88OpjtZowmx3G82/ChdM0dYS40jqikoidNZjKALKkmtJmwXQbQM3+DUqjPjrLAS dgk5JJmXd0RgM0UDubBbztRtuYFuM3J0zzg1WTZXbU9vcF4pIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGd+lvJ9SqeEOmaCm0q7Ju167ugqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTk5YjIzMjctMTFmNS0z NjhlLTg1OTUtMGZlMTE3M2ZkNDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMzeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuCzWMwutqRKAt60K/tAgLfA9+x3yx6nm9c7eviqV2aWT3m0XA6KVhD bOGgSClgezBcHLSAJem+lpU7DcBdAs/IS//7uiTEAR8EmLZmous1qFwqHoQBL41I Dx+9mecgrwdvzW6qHveiN4Iebq7eAZcJDeSTaI5tsoPHX7RQUkmZ5x0kIraAqvs2 8lfYRiBIU28ZeDmmw4z1xzi1LTCN4dNzbyEpre4fJ9y0UqxOfYVmn/GXC8v12g89 Z+ZRD18uO9taJKgaZ6gL+Vlcybxj4BBS7xVN7rECbelSLMd5Y402WIFZttxMB5oH Mj6fuuesXUyqBjiI1r6zycl7QnZnXow= -----END CERTIFICATE-----Generated at Thu Oct 8 10:49:32 2026 by rpki-client