$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aff91e4b-d022-32c6-ba4d-df487eef8a86.roa File: aff91e4b-d022-32c6-ba4d-df487eef8a86.roa (raw, json) Hash identifier: cpMdZAlZWw5aD9p1hXdZWgU3CG8R1QFFlI+Pu6QjeFo= Subject key identifier: B6:8C:34:70:52:D8:61:BB:FA:9E:7E:4C:82:09:8A:4D:56:B3:BD:91 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F0D6CE4905B774140959FD180 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aff91e4b-d022-32c6-ba4d-df487eef8a86.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 834 IP address blocks: 64.204.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:e4:90:5b:77:41:40:95:9f:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=91faf067-4dad-4bc6-8628-fa1a0b692b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:82:70:11:d0:d5:6b:60:92:af:2a:2b:8d:25: bf:88:c2:24:6c:06:0c:e4:07:26:58:b9:a8:a7:6e: e0:c4:a4:60:96:aa:2f:dc:9e:64:ec:5c:ac:66:e9: 99:1d:5e:6b:8c:34:b0:36:73:d7:cc:ff:b5:88:ff: 23:2d:d0:7a:ab:88:ba:14:f2:35:95:8d:ff:2c:2c: 36:95:b6:ba:f6:3a:d2:c0:13:3f:3b:ae:ea:10:8d: 81:c6:da:a1:37:e2:4b:2c:46:6e:3b:ee:a1:1c:5e: c2:e2:52:a0:93:28:50:78:37:e9:ab:bf:25:d3:2d: f2:3d:f3:41:d8:6a:70:fa:11:f1:64:7f:3e:f5:e1: 17:9e:15:5d:dc:76:c8:1b:0f:26:29:1a:0d:dd:77: 9c:b8:14:b5:e0:83:04:60:61:1b:e4:3d:d8:12:12: b2:d3:b8:de:a8:8e:d8:58:23:49:20:b5:ce:27:12: 54:1b:b3:d2:27:a8:5f:bd:de:a7:bb:34:9a:21:a6: bc:4c:6c:83:65:b4:dc:9e:1e:86:59:7a:c1:42:01: da:f6:01:6e:58:21:84:ff:74:5f:6e:73:eb:0e:76: da:39:bb:85:21:10:d4:c1:c0:c4:cd:25:df:cb:b9: a4:49:91:ab:f2:62:b7:b2:22:16:d7:de:a2:4e:63: ff:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:8C:34:70:52:D8:61:BB:FA:9E:7E:4C:82:09:8A:4D:56:B3:BD:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aff91e4b-d022-32c6-ba4d-df487eef8a86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a3:01:8a:10:c5:3d:38:c2:42:46:0b:a8:4f:bf:4b:86:2a: 18:b3:f5:7d:b6:b5:2e:0d:6c:2a:4d:aa:84:7a:1f:c5:67:4c: 78:43:33:e0:99:f0:d2:a5:da:3a:09:59:71:82:b3:00:f4:b1: 79:01:d7:d4:be:b9:b0:41:af:b3:e1:b7:7f:ae:2e:c4:9f:2a: 67:a6:fb:31:b2:08:e7:cb:ee:e7:40:1d:8a:ef:d4:d5:d6:76: f2:d1:c3:04:65:2c:ef:c1:f7:7e:29:09:9a:e9:26:54:35:44: 27:cb:d7:7f:ad:00:76:3b:fc:b3:b5:4a:31:73:b8:74:42:0b: aa:81:dc:79:38:33:83:19:f4:9e:f0:fd:f1:3e:6d:9e:73:b4: d5:6d:aa:35:d7:9a:d0:0f:1b:71:e1:0e:4b:d5:70:3f:4e:e1: 93:16:8d:a1:b4:1d:1f:8b:bf:04:af:7a:3c:02:09:aa:f9:01: bf:d1:e6:e3:0b:23:cd:73:28:9d:7a:50:bd:84:7f:ca:9a:37: 2c:52:6c:c9:8a:89:79:b6:9b:f1:5d:ed:8a:48:6b:a0:fb:16: a5:df:65:2c:fb:87:dc:2a:b5:3d:d0:3a:64:a8:d0:87:78:b2: ec:25:5f:53:86:18:0b:2c:6f:a9:03:07:fb:ca:6e:0e:43:3f: fb:35:47:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbOSQW3dBQJWf0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk OTFmYWYwNjctNGRhZC00YmM2LTg2MjgtZmExYTBiNjkyYjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIJwEdDVa2CSryorjSW/iMIkbAYM5AcmWLmo p27gxKRglqov3J5k7FysZumZHV5rjDSwNnPXzP+1iP8jLdB6q4i6FPI1lY3/LCw2 lba69jrSwBM/O67qEI2BxtqhN+JLLEZuO+6hHF7C4lKgkyhQeDfpq78l0y3yPfNB 2Gpw+hHxZH8+9eEXnhVd3HbIGw8mKRoN3XecuBS14IMEYGEb5D3YEhKy07jeqI7Y WCNJILXOJxJUG7PSJ6hfvd6nuzSaIaa8TGyDZbTcnh6GWXrBQgHa9gFuWCGE/3Rf bnPrDnbaObuFIRDUwcDEzSXfy7mkSZGr8mK3siIW196iTmP/ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLaMNHBS2GG7+p5+TIIJik1Ws72RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWZmOTFlNGItZDAyMi0z MmM2LWJhNGQtZGY0ODdlZWY4YTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQMyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABijAYoQxT04wkJGC6hPv0uGKhiz9X22tS4NbCpNqoR6H8VnTHhDM+CZ 8NKl2joJWXGCswD0sXkB19S+ubBBr7Pht3+uLsSfKmem+zGyCOfL7udAHYrv1NXW dvLRwwRlLO/B934pCZrpJlQ1RCfL13+tAHY7/LO1SjFzuHRCC6qB3Hk4M4MZ9J7w /fE+bZ5ztNVtqjXXmtAPG3HhDkvVcD9O4ZMWjaG0HR+LvwSvejwCCar5Ab/R5uML I81zKJ16UL2Ef8qaNyxSbMmKiXm2m/Fd7YpIa6D7FqXfZSz7h9wqtT3QOmSo0Id4 suwlX1OGGAssb6kDB/vKbg5DP/s1R18= -----END CERTIFICATE-----Generated at Thu Sep 24 21:11:46 2026 by rpki-client