$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cdb75fd0-a932-3b4a-8978-e219b0a97eed.roa File: cdb75fd0-a932-3b4a-8978-e219b0a97eed.roa (raw, json) Hash identifier: jCbwodqwQRZA0wQvV60oFG9q5ajAAh4Ra5u0O2+bZ5g= Subject key identifier: 9F:91:09:CF:FB:BE:36:AA:83:D9:E6:FC:59:1D:BC:80:CF:D8:C8:AF Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F3A17C4434B1934F47A06A180 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cdb75fd0-a932-3b4a-8978-e219b0a97eed.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 834 IP address blocks: 65.86.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:c4:43:4b:19:34:f4:7a:06:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=bae9ca61-1511-4f12-a826-98f6cf09c256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9a:93:f4:9a:60:25:f6:5e:21:d9:76:1c:7b: 57:46:6c:1e:18:10:ea:41:23:56:0a:14:16:2a:fe: 7e:d3:32:6b:0b:41:f8:3c:b4:36:69:ac:e7:6d:78: 96:72:05:be:09:55:ae:54:84:a8:56:85:5a:07:01: 7c:2f:f5:dd:7d:e7:f1:8a:36:59:da:12:9c:fd:28: e3:b3:fe:52:92:40:22:7c:08:e9:8d:32:24:b6:7f: 45:48:9f:b8:02:70:51:10:51:66:bb:97:4d:ae:9f: 69:21:7b:a7:fe:c0:df:32:a9:74:5d:9e:0e:19:50: 6b:84:dd:b5:2b:4f:60:a8:21:8d:5d:b6:2c:53:eb: 96:6f:17:d6:83:ff:7e:6f:fe:d0:4b:ec:bc:17:16: c7:ac:41:7e:11:f9:39:93:36:76:ea:16:a4:60:34: b1:c7:c4:59:65:59:e5:ba:1e:37:58:35:d8:b1:c7: ee:35:2f:59:fe:79:2b:3a:59:25:2a:66:15:1e:3f: b2:a1:fa:ed:04:78:97:83:0b:18:fd:69:e7:41:e6: db:dd:d6:b5:d2:12:3b:f6:8b:c2:b2:1f:0f:75:b0: 77:d4:a0:87:0c:60:65:dd:ff:19:3b:85:41:72:c6: 4f:c9:58:86:1c:15:b7:22:bf:e9:81:ab:c7:b5:31: 1f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:91:09:CF:FB:BE:36:AA:83:D9:E6:FC:59:1D:BC:80:CF:D8:C8:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cdb75fd0-a932-3b4a-8978-e219b0a97eed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:b8:e1:80:03:8a:25:3e:17:15:7c:7d:00:9a:02:d1:4e:1e: 26:9d:92:f4:f8:ac:2c:b5:8e:7d:b9:de:f1:42:12:05:89:23: 1f:c2:7c:f8:e0:95:d7:bb:f9:e7:a8:72:90:32:84:5e:a6:7d: 16:8c:0a:ce:13:49:0b:82:21:9d:b3:54:df:cc:e6:5c:73:d9: 49:05:b4:da:77:ad:85:14:b1:f9:50:fe:1a:9f:1f:62:ed:17: ef:01:ee:09:8f:04:f8:a4:d5:1a:46:f5:dc:5f:ef:5c:5a:4a: c5:bd:ac:69:86:d5:e0:28:8c:11:5b:39:51:10:5d:73:fe:5a: cc:08:d2:82:46:4f:ab:8d:dc:f7:46:dd:d6:a9:36:94:dd:80: 8f:11:e5:60:56:1b:e3:c1:54:55:bf:b5:d6:06:01:f6:62:ef: 48:5f:0d:1a:59:67:84:70:2b:f7:af:64:03:01:fc:b0:4c:9b: c0:d2:69:9d:21:2f:80:cb:71:cb:9b:25:a7:81:43:f7:14:6e: e5:cf:24:85:94:ca:fa:71:5f:cc:53:87:51:74:2f:6b:8e:07: a8:81:7b:18:b0:7a:40:56:de:1a:74:f7:02:20:23:ab:20:b5: 8e:13:8f:8e:eb:86:a6:34:be:46:ae:8f:b4:21:81:1a:3a:b9: 46:4a:ff:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8RDSxk09HoGoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk YmFlOWNhNjEtMTUxMS00ZjEyLWE4MjYtOThmNmNmMDljMjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5qT9JpgJfZeIdl2HHtXRmweGBDqQSNWChQW Kv5+0zJrC0H4PLQ2aaznbXiWcgW+CVWuVISoVoVaBwF8L/XdfefxijZZ2hKc/Sjj s/5SkkAifAjpjTIktn9FSJ+4AnBREFFmu5dNrp9pIXun/sDfMql0XZ4OGVBrhN21 K09gqCGNXbYsU+uWbxfWg/9+b/7QS+y8FxbHrEF+Efk5kzZ26hakYDSxx8RZZVnl uh43WDXYscfuNS9Z/nkrOlklKmYVHj+yofrtBHiXgwsY/WnnQebb3da10hI79ovC sh8PdbB31KCHDGBl3f8ZO4VBcsZPyViGHBW3Ir/pgavHtTEfsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+RCc/7vjaqg9nm/FkdvIDP2MivMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2RiNzVmZDAtYTkzMi0z YjRhLTg5NzgtZTIxOWIwYTk3ZWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVbMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJe44YADiiU+FxV8fQCaAtFOHiadkvT4rCy1jn253vFCEgWJIx/CfPjg lde7+eeocpAyhF6mfRaMCs4TSQuCIZ2zVN/M5lxz2UkFtNp3rYUUsflQ/hqfH2Lt F+8B7gmPBPik1RpG9dxf71xaSsW9rGmG1eAojBFbOVEQXXP+WswI0oJGT6uN3PdG 3dapNpTdgI8R5WBWG+PBVFW/tdYGAfZi70hfDRpZZ4RwK/evZAMB/LBMm8DSaZ0h L4DLccubJaeBQ/cUbuXPJIWUyvpxX8xTh1F0L2uOB6iBexiwekBW3hp09wIgI6sg tY4Tj47rhqY0vkauj7QhgRo6uUZK/+o= -----END CERTIFICATE-----Generated at Wed Sep 30 12:23:33 2026 by rpki-client