$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ae7fdc93-57a0-3854-b0e9-9cbfbf585955.roa File: ae7fdc93-57a0-3854-b0e9-9cbfbf585955.roa (raw, json) Hash identifier: dkH9QexT913TfYGy0FeSaw3W8oLWLvMa1gKK2rzJNIc= Subject key identifier: C2:6D:8A:9E:E4:CF:2A:BB:D9:FE:12:21:8B:FE:12:5C:3B:38:08:B8 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F3B7D1ACF106DF8A4E3987000 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ae7fdc93-57a0-3854-b0e9-9cbfbf585955.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 6079 IP address blocks: 64.204.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:1a:cf:10:6d:f8:a4:e3:98:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=9bca7887-8661-4929-9bb3-753edbc9f4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:48:a6:02:75:b4:a7:cd:2b:04:8b:c6:9c:d5: 7b:d1:30:29:03:9d:8a:49:bb:33:6e:58:8d:31:c1: ce:57:db:1b:29:09:92:43:95:d9:13:be:22:35:8f: 0d:07:c7:7a:20:2a:88:1a:4c:ab:6c:9c:00:f5:d0: cc:e9:f4:2b:f9:91:5f:ac:d5:ad:e9:c3:90:92:8e: a4:87:ad:ff:25:03:f8:02:24:3b:17:16:3d:7c:e5: 63:74:45:b3:f9:74:3f:8c:07:c3:90:86:78:51:28: a1:66:33:71:d8:c6:49:b1:b4:c9:69:c7:04:31:76: 7f:a9:7d:e7:c6:f8:bd:02:dd:5d:45:f6:16:ee:a7: f7:cf:ca:78:91:23:65:74:bf:48:4f:4d:f4:25:32: da:bb:c0:c9:d1:65:3f:66:e0:39:11:1b:f1:05:a7: 22:41:1d:a9:ec:85:06:1e:b2:da:18:c2:85:65:8c: 59:15:3b:4d:17:4c:9e:ba:d1:72:af:55:eb:33:77: 0d:78:14:1b:d0:4d:94:d9:5e:30:73:e3:f1:94:fa: 62:30:9e:01:0e:d8:bc:c5:93:8a:5b:87:4c:29:74: 53:24:5c:9d:cd:e4:83:bd:75:9b:74:e9:82:25:5a: 35:88:a0:7a:d0:0d:7d:63:a8:75:68:11:02:a2:fc: 1e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:6D:8A:9E:E4:CF:2A:BB:D9:FE:12:21:8B:FE:12:5C:3B:38:08:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ae7fdc93-57a0-3854-b0e9-9cbfbf585955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:b5:63:85:f1:d6:8d:3b:77:75:19:50:61:d1:df:00:26:0e: ac:2f:cc:a5:dc:5d:5e:31:80:37:47:bd:af:d4:b4:6e:16:b6: 4d:10:85:38:33:34:62:fd:2a:e9:36:dc:a6:03:81:03:c3:97: 21:94:1d:e0:f2:86:3b:c9:c7:8e:3e:9d:4f:d5:e2:cb:25:50: 7d:3b:79:48:87:91:95:1e:c5:45:8e:09:14:80:d2:df:e0:08: cb:0a:26:86:3c:bd:d4:9c:a5:ec:1b:b7:a0:9a:62:a4:f6:69: 8e:1b:44:44:21:7a:37:18:8d:e4:8f:6d:e5:44:b6:ac:ee:29: 9e:4c:97:11:c8:3e:22:ba:f1:cf:1c:98:7b:59:7f:43:77:26: ff:7d:2a:52:0f:86:7b:a9:f6:1b:75:0d:2e:30:51:b9:17:b9: c5:b4:ad:9a:fa:d1:dc:ef:e7:c6:4e:71:0e:2a:32:f7:90:b2: cf:24:7c:2d:1f:11:4e:99:e6:7e:89:04:2d:20:45:21:c2:3b: 0c:fd:72:f4:80:2b:d5:ce:6c:88:65:03:49:5c:4f:d9:a8:ac: de:3d:cf:51:e8:e3:78:1f:5a:d2:18:d1:68:08:82:f6:74:3b: b0:9e:da:f7:8e:53:7c:b5:09:7c:08:33:d8:e9:3a:f3:6d:44: ea:04:2a:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fRrPEG34pOOYcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk OWJjYTc4ODctODY2MS00OTI5LTliYjMtNzUzZWRiYzlmNGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUimAnW0p80rBIvGnNV70TApA52KSbszbliN McHOV9sbKQmSQ5XZE74iNY8NB8d6ICqIGkyrbJwA9dDM6fQr+ZFfrNWt6cOQko6k h63/JQP4AiQ7FxY9fOVjdEWz+XQ/jAfDkIZ4USihZjNx2MZJsbTJaccEMXZ/qX3n xvi9At1dRfYW7qf3z8p4kSNldL9IT030JTLau8DJ0WU/ZuA5ERvxBaciQR2p7IUG HrLaGMKFZYxZFTtNF0yeutFyr1XrM3cNeBQb0E2U2V4wc+PxlPpiMJ4BDti8xZOK W4dMKXRTJFydzeSDvXWbdOmCJVo1iKB60A19Y6h1aBECovweDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJtip7kzyq72f4SIYv+Elw7OAi4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWU3ZmRjOTMtNTdhMC0z ODU0LWIwZTktOWNiZmJmNTg1OTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMwpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADm1Y4Xx1o07d3UZUGHR3wAmDqwvzKXcXV4xgDdHva/UtG4Wtk0QhTgz NGL9Kuk23KYDgQPDlyGUHeDyhjvJx44+nU/V4sslUH07eUiHkZUexUWOCRSA0t/g CMsKJoY8vdScpewbt6CaYqT2aY4bREQhejcYjeSPbeVEtqzuKZ5MlxHIPiK68c8c mHtZf0N3Jv99KlIPhnup9ht1DS4wUbkXucW0rZr60dzv58ZOcQ4qMveQss8kfC0f EU6Z5n6JBC0gRSHCOwz9cvSAK9XObIhlA0lcT9morN49z1Ho43gfWtIY0WgIgvZ0 O7Ce2veOU3y1CXwIM9jpOvNtROoEKoI= -----END CERTIFICATE-----Generated at Sun Oct 4 01:24:04 2026 by rpki-client