$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c39a9387-a003-3bfe-bbcf-16d2a164c679.roa File: c39a9387-a003-3bfe-bbcf-16d2a164c679.roa (raw, json) Hash identifier: c9gI+UVrsgAdg6J4FQhk3X48DfRoYKgGsAOgtP1+QR8= Subject key identifier: 1C:FF:96:7B:F4:A7:FD:68:1B:F5:AD:BB:A1:D5:D8:0A:4F:54:E3:32 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4987C1173FE8508443091700 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c39a9387-a003-3bfe-bbcf-16d2a164c679.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 64.204.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:c1:17:3f:e8:50:84:43:09:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=49931f92-ddc3-46c2-a796-fdfe9e644e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9c:cc:0f:8b:ff:99:9b:98:b7:26:29:de:4d: 64:5e:75:01:70:94:61:4d:89:c8:d2:9f:bd:3c:05: 8e:aa:b3:d7:ec:ef:4f:a3:f5:b3:a3:cc:87:0e:e9: ed:3d:ce:23:19:56:52:df:e7:97:0f:73:5a:d5:56: c3:d7:fb:1e:67:99:13:4f:9c:5d:cf:cb:dd:bf:a3: 78:a5:f2:dc:0d:00:53:74:08:62:2f:45:61:d8:46: 74:e5:97:68:c2:9d:5e:95:40:0e:2f:86:64:30:eb: 68:ed:5d:fd:5a:6e:ff:6c:9b:54:da:80:b6:8c:22: 1c:06:ae:a5:89:d7:15:77:ab:a4:d4:a2:79:e8:e2: 5f:73:d5:26:85:2c:d6:0b:f4:f9:0f:59:9e:dd:ff: 07:7a:d3:0f:d1:93:6c:bd:0c:77:67:51:f9:9f:a4: 9e:ac:0c:02:f1:3b:35:6b:69:ab:1b:88:b5:bc:2d: 63:b0:86:cf:ff:22:5d:9b:49:0e:62:43:20:c7:93: dd:ce:64:ba:15:69:e1:43:5b:19:a3:01:0f:71:24: e3:26:a1:74:23:01:9a:1c:90:e0:dc:ec:b3:e3:b2: 56:16:1c:e7:98:f3:ff:57:e2:05:bf:c2:06:b0:38: 1c:b2:fa:e4:69:e7:a6:37:22:d7:e3:09:87:02:9d: c7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FF:96:7B:F4:A7:FD:68:1B:F5:AD:BB:A1:D5:D8:0A:4F:54:E3:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c39a9387-a003-3bfe-bbcf-16d2a164c679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:0b:10:9b:af:c8:bf:77:02:b0:b7:3d:e7:da:5c:7a:4e:97: d7:77:b9:27:09:fc:3b:3b:26:ec:56:17:cf:5e:2e:46:18:26: d6:a9:f4:f0:a2:e9:13:ce:4f:d8:82:0e:99:9f:7b:f9:21:1e: 33:d8:d2:ac:e7:8f:2e:04:18:14:75:09:03:66:14:13:00:25: e8:df:2c:b3:df:d6:78:e5:ca:20:e2:7b:d3:4b:26:6c:68:40: de:28:39:d6:53:1c:fe:61:38:69:bc:64:08:60:5f:cf:7b:9a: be:1a:60:7b:66:91:18:1d:ce:c3:70:e6:cf:b9:5c:55:9d:bb: 4a:43:91:de:6c:53:44:63:01:51:17:32:46:4f:61:0a:23:63: 09:65:b4:77:b9:6a:91:7d:06:77:cb:c0:c9:1c:ee:52:14:6f: 21:cd:cb:60:dc:ab:97:46:bc:89:57:df:5f:4c:8f:b0:b8:7f: 6f:07:02:56:bb:d0:bb:7a:0b:07:72:7d:77:ad:52:19:3b:53: 63:28:89:16:52:6a:0d:8a:6e:48:16:89:6b:d9:11:2b:00:b8: e8:38:98:28:5a:24:41:cf:53:ac:11:15:06:06:74:e1:21:f7: 96:81:81:b7:64:38:d5:da:54:f4:be:f6:b6:5e:cd:4f:05:57: 33:b0:16:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh8EXP+hQhEMJFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDk5MzFmOTItZGRjMy00NmMyLWE3OTYtZmRmZTllNjQ0ZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJzMD4v/mZuYtyYp3k1kXnUBcJRhTYnI0p+9 PAWOqrPX7O9Po/Wzo8yHDuntPc4jGVZS3+eXD3Na1VbD1/seZ5kTT5xdz8vdv6N4 pfLcDQBTdAhiL0Vh2EZ05Zdowp1elUAOL4ZkMOto7V39Wm7/bJtU2oC2jCIcBq6l idcVd6uk1KJ56OJfc9UmhSzWC/T5D1me3f8HetMP0ZNsvQx3Z1H5n6SerAwC8Ts1 a2mrG4i1vC1jsIbP/yJdm0kOYkMgx5PdzmS6FWnhQ1sZowEPcSTjJqF0IwGaHJDg 3Oyz47JWFhznmPP/V+IFv8IGsDgcsvrkaeemNyLX4wmHAp3H7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBz/lnv0p/1oG/Wtu6HV2ApPVOMyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzM5YTkzODctYTAwMy0z YmZlLWJiY2YtMTZkMmExNjRjNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0LEJuvyL93ArC3PefaXHpOl9d3uScJ/Ds7JuxWF89eLkYYJtap9PCi 6RPOT9iCDpmfe/khHjPY0qznjy4EGBR1CQNmFBMAJejfLLPf1njlyiDie9NLJmxo QN4oOdZTHP5hOGm8ZAhgX897mr4aYHtmkRgdzsNw5s+5XFWdu0pDkd5sU0RjAVEX MkZPYQojYwlltHe5apF9BnfLwMkc7lIUbyHNy2Dcq5dGvIlX319Mj7C4f28HAla7 0Lt6CwdyfXetUhk7U2MoiRZSag2KbkgWiWvZESsAuOg4mChaJEHPU6wRFQYGdOEh 95aBgbdkONXaVPS+9rZezU8FVzOwFsI= -----END CERTIFICATE-----Generated at Tue Sep 29 13:12:59 2026 by rpki-client