$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bf1ac90c-57ba-3e15-935a-e48c51bb75df.roa File: bf1ac90c-57ba-3e15-935a-e48c51bb75df.roa (raw, json) Hash identifier: 6gycZSsSFwvAlETbEm/eiJ8ccJ02h3Rzet1ZxrLAW+8= Subject key identifier: 62:ED:05:22:FA:38:3D:59:21:F0:2E:3E:8B:90:02:5F:AB:7F:FA:B8 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F3B7D1C0381C32EB0D1084CB0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bf1ac90c-57ba-3e15-935a-e48c51bb75df.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 6079 IP address blocks: 64.204.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:1c:03:81:c3:2e:b0:d1:08:4c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=9b42bd70-05f3-41cb-a8fe-9e2ac0fff156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:69:3e:5e:8e:ed:cc:b9:e0:0e:be:ff:8f:c5: d1:88:4a:97:17:a4:5f:c0:12:18:de:ae:f6:95:bf: fb:c2:39:12:12:78:d4:a9:9f:af:c3:e4:37:86:dd: 64:cc:74:d9:2b:e2:1d:de:e2:80:f2:fc:9f:3c:53: 3d:2c:56:02:f8:a9:af:6e:54:78:e5:f3:d4:64:ef: d0:5c:43:83:1b:c0:08:83:10:bf:27:67:4a:2d:0c: 81:3d:75:ea:4c:b7:01:ca:ab:1a:2c:27:7d:2f:aa: dc:30:d3:23:34:fa:94:1a:87:24:94:fe:3d:52:14: 2d:7d:fb:3a:c4:25:d9:e2:ff:d7:a4:60:4b:c2:e6: 15:32:ff:88:f0:44:28:5a:2a:a2:87:4f:68:1a:10: 79:f7:1c:a1:ec:3f:82:1b:19:e2:8a:d6:2d:10:80: 68:21:3b:45:9b:75:88:31:45:eb:f6:94:a9:15:41: 8e:eb:8d:fe:df:78:33:ec:96:32:3c:f9:1a:71:e7: 0f:28:38:59:8a:7d:77:79:00:c4:f0:8a:2e:eb:0e: ed:49:d1:1f:b7:18:71:f3:fe:02:cd:a8:08:38:91: d6:a9:20:09:aa:88:30:ee:93:0a:69:45:0d:16:6e: ea:de:b0:26:0f:34:74:e2:32:bd:66:e4:54:74:fb: aa:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:ED:05:22:FA:38:3D:59:21:F0:2E:3E:8B:90:02:5F:AB:7F:FA:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bf1ac90c-57ba-3e15-935a-e48c51bb75df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:76:a7:ed:60:ae:6b:3b:e4:79:e5:57:3d:da:17:83:ea:cf: bb:72:c3:b3:6f:67:09:5f:24:d4:c7:43:75:6a:cb:3a:a2:42: 62:b6:bd:53:5a:24:4f:85:a3:fd:4e:1d:60:6b:f4:90:d8:3e: 34:08:74:96:f8:92:9c:b6:62:f3:96:39:cc:f3:48:82:07:30: cd:bd:90:16:35:7f:8d:f6:53:59:d9:95:b3:8d:9a:eb:66:b0: 60:f2:b9:37:5e:4a:94:01:43:9f:a3:62:14:a0:bd:81:74:fb: f8:4d:57:d4:c5:91:fd:0a:d1:4c:53:16:db:bf:6f:91:f5:cc: 04:7f:3c:a9:a3:5f:f5:79:81:1d:a2:7c:f7:ae:89:6b:69:96: c8:b7:18:f2:48:a0:a7:1d:96:be:e6:11:cf:6d:4e:3e:9f:43: 2e:b6:e6:a8:1f:4b:5d:26:4b:7c:15:88:4d:62:fb:05:cf:70: 48:10:80:9f:3b:4c:af:ee:16:de:04:9a:3b:67:bf:b9:37:3d: 7b:5a:4b:af:ed:ad:6a:bd:5b:6d:ef:c4:58:10:3f:fe:d0:dd: bf:b7:98:df:c8:8e:a9:62:3d:0f:91:82:10:e4:e7:b3:7b:5d: 28:1a:5d:dd:5b:15:c3:58:80:db:4b:cd:b2:22:55:68:9c:d2: 39:b9:4d:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fRwDgcMusNEITLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk OWI0MmJkNzAtMDVmMy00MWNiLWE4ZmUtOWUyYWMwZmZmMTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Wk+Xo7tzLngDr7/j8XRiEqXF6RfwBIY3q72 lb/7wjkSEnjUqZ+vw+Q3ht1kzHTZK+Id3uKA8vyfPFM9LFYC+KmvblR45fPUZO/Q XEODG8AIgxC/J2dKLQyBPXXqTLcByqsaLCd9L6rcMNMjNPqUGocklP49UhQtffs6 xCXZ4v/XpGBLwuYVMv+I8EQoWiqih09oGhB59xyh7D+CGxniitYtEIBoITtFm3WI MUXr9pSpFUGO643+33gz7JYyPPkacecPKDhZin13eQDE8Iou6w7tSdEftxhx8/4C zagIOJHWqSAJqogw7pMKaUUNFm7q3rAmDzR04jK9ZuRUdPuqnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLtBSL6OD1ZIfAuPouQAl+rf/q4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmYxYWM5MGMtNTdiYS0z ZTE1LTkzNWEtZTQ4YzUxYmI3NWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMzOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHp2p+1grms75HnlVz3aF4Pqz7tyw7NvZwlfJNTHQ3VqyzqiQmK2vVNa JE+Fo/1OHWBr9JDYPjQIdJb4kpy2YvOWOczzSIIHMM29kBY1f432U1nZlbONmutm sGDyuTdeSpQBQ5+jYhSgvYF0+/hNV9TFkf0K0UxTFtu/b5H1zAR/PKmjX/V5gR2i fPeuiWtplsi3GPJIoKcdlr7mEc9tTj6fQy625qgfS10mS3wViE1i+wXPcEgQgJ87 TK/uFt4Emjtnv7k3PXtaS6/trWq9W23vxFgQP/7Q3b+3mN/IjqliPQ+RghDk57N7 XSgaXd1bFcNYgNtLzbIiVWic0jm5TQg= -----END CERTIFICATE-----Generated at Sun Sep 27 23:07:45 2026 by rpki-client