$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b5a16fd3-6d64-3f02-97c0-af176b0e49ed.roa File: b5a16fd3-6d64-3f02-97c0-af176b0e49ed.roa (raw, json) Hash identifier: jZzK9w7ls5Pr5A8gg2VTWJADsrXNpMasAk5jt3moysg= Subject key identifier: FB:8F:D1:7D:CF:46:8A:60:BF:99:E6:A2:89:6A:ED:76:57:A0:33:B2 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4989CE12C917BE03A0555D40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b5a16fd3-6d64-3f02-97c0-af176b0e49ed.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 834 IP address blocks: 65.86.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:ce:12:c9:17:be:03:a0:55:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1ce857b5-b782-4b55-9dd8-c37abf54d81c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5a:37:9f:0d:62:79:02:a0:7c:dd:87:7e:ad: 00:3b:c4:88:80:b0:32:6d:0c:65:39:b7:43:f5:59: 0c:7a:20:55:72:d5:fa:d4:fa:3c:db:d6:6b:f6:d9: 40:a3:ae:0c:a3:c0:d4:51:44:4b:4a:15:21:20:7c: 74:d4:fe:40:d6:ec:12:b4:c9:2e:4a:37:4a:dc:84: ab:a4:5a:ee:5f:fd:45:72:76:a1:d1:ad:03:10:53: 95:aa:13:bd:48:e2:a2:3f:d9:4e:aa:b1:76:d8:5c: f7:c5:d7:47:ec:5f:5e:8d:10:26:52:39:25:a7:2e: 16:5b:88:6d:a2:a3:1e:38:51:eb:cf:f7:34:dc:e2: 3d:e5:50:7c:af:d2:d1:30:e3:20:34:1c:61:3b:c4: de:e4:cc:4f:b9:84:3a:55:77:9e:7e:73:6e:e4:5d: 3c:f6:71:c8:39:83:f9:e2:5b:3a:e0:2a:f2:e5:13: 60:4a:cb:b1:4a:22:9a:59:6b:e5:3d:00:d4:4c:cc: 91:47:79:92:a7:33:d6:3f:bf:4c:a0:ca:b0:93:c0: 86:e5:1b:2a:4f:a0:71:a2:f7:85:6d:cc:f8:1d:a4: 00:98:46:8a:29:db:3f:0f:99:97:cf:1b:5c:6e:78: 5b:eb:2a:30:e5:ce:3b:a3:66:e8:ec:8f:e2:ce:55: f9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8F:D1:7D:CF:46:8A:60:BF:99:E6:A2:89:6A:ED:76:57:A0:33:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b5a16fd3-6d64-3f02-97c0-af176b0e49ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:24:e9:57:9c:23:7c:01:c6:ca:1a:d5:39:5f:2a:47:5b:71: bf:3f:10:23:d3:c3:a9:0a:07:4b:d0:ef:cf:76:9a:f8:bf:76: 65:55:7e:94:36:b7:f4:ba:76:a5:01:3b:a4:a0:1f:d7:53:13: ec:c0:18:79:25:96:65:68:ca:8e:09:90:8d:74:1d:59:12:81: fd:5b:ec:70:96:23:62:fe:9d:ca:f1:9e:21:f3:3c:17:67:7d: b5:49:dc:60:b2:53:28:5b:e0:91:7a:b3:80:26:95:ba:14:4d: 42:17:eb:f6:eb:0a:39:98:6a:d3:ff:87:0f:d2:03:b0:47:23: b3:e7:06:27:75:b8:b9:8f:09:b9:49:26:c3:f8:cf:4e:62:08: 21:8e:26:1b:35:bf:eb:71:17:5f:16:73:0b:9a:c8:d7:32:cc: 8e:46:db:35:00:44:f8:77:e4:bf:d8:94:c2:e5:ed:4f:2a:a9: e2:48:62:21:f1:6a:07:3d:f9:52:58:54:1e:97:7f:b7:6e:cf: 94:8e:6b:8b:a7:3e:89:91:07:24:61:14:14:a5:95:a8:67:3d: c5:c1:99:6c:65:fb:c7:d3:50:4d:b3:4f:ca:c1:6d:aa:d0:01: e3:f5:ea:b9:6f:9e:5e:d2:aa:d8:66:08:49:7c:0e:4a:bd:36: 5b:eb:00:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jic4SyRe+A6BVXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWNlODU3YjUtYjc4Mi00YjU1LTlkZDgtYzM3YWJmNTRkODFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1o3nw1ieQKgfN2Hfq0AO8SIgLAybQxlObdD 9VkMeiBVctX61Po829Zr9tlAo64Mo8DUUURLShUhIHx01P5A1uwStMkuSjdK3ISr pFruX/1Fcnah0a0DEFOVqhO9SOKiP9lOqrF22Fz3xddH7F9ejRAmUjklpy4WW4ht oqMeOFHrz/c03OI95VB8r9LRMOMgNBxhO8Te5MxPuYQ6VXeefnNu5F089nHIOYP5 4ls64Cry5RNgSsuxSiKaWWvlPQDUTMyRR3mSpzPWP79MoMqwk8CG5RsqT6BxoveF bcz4HaQAmEaKKds/D5mXzxtcbnhb6yow5c47o2bo7I/izlX5wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuP0X3PRopgv5nmoolq7XZXoDOyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjVhMTZmZDMtNmQ2NC0z ZjAyLTk3YzAtYWYxNzZiMGU0OWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4k6VecI3wBxsoa1TlfKkdbcb8/ECPTw6kKB0vQ7892mvi/dmVVfpQ2 t/S6dqUBO6SgH9dTE+zAGHkllmVoyo4JkI10HVkSgf1b7HCWI2L+ncrxniHzPBdn fbVJ3GCyUyhb4JF6s4AmlboUTUIX6/brCjmYatP/hw/SA7BHI7PnBid1uLmPCblJ JsP4z05iCCGOJhs1v+txF18WcwuayNcyzI5G2zUARPh35L/YlMLl7U8qqeJIYiHx agc9+VJYVB6Xf7duz5SOa4unPomRByRhFBSllahnPcXBmWxl+8fTUE2zT8rBbarQ AeP16rlvnl7SqthmCEl8Dkq9NlvrACs= -----END CERTIFICATE-----Generated at Sat Sep 26 04:56:30 2026 by rpki-client