$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d11de694-d002-33ce-8496-be9638fb53a2.roa File: d11de694-d002-33ce-8496-be9638fb53a2.roa (raw, json) Hash identifier: iCADuS+YgJoFO3qeCiE23elJ8kaf6cfJgBWCK4jJHp8= Subject key identifier: 07:67:3D:D3:F9:A4:82:C0:9B:10:E3:D8:57:F8:E9:AD:D5:58:CF:BE Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F49884691814E480463024900 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d11de694-d002-33ce-8496-be9638fb53a2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6079 IP address blocks: 64.204.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:46:91:81:4e:48:04:63:02:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d08017f4-664f-4927-8dd0-818dd989c8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:78:ff:2f:75:18:b2:31:b2:d9:db:66:00:ab: 22:2e:ef:c5:f2:1c:62:30:a5:c8:db:5c:8f:01:59: 87:ea:e6:1c:c9:d7:68:5e:be:fd:58:b6:d9:a0:0d: cc:60:58:c3:5e:96:ed:6b:57:f9:49:43:6a:7d:80: d6:ba:84:4e:6c:d0:81:75:b8:68:88:43:85:b9:d2: 2f:27:36:d4:c6:70:3a:e7:24:d3:f8:e1:19:a9:4f: 77:41:fb:bb:88:8e:10:62:bf:92:d6:d5:0e:06:c1: 15:1f:08:fe:96:58:31:0c:a8:cd:16:d2:aa:85:3b: bb:e8:4f:f7:36:65:56:98:23:c9:06:ef:f1:da:3b: 54:f6:d3:2f:f2:2b:af:86:93:fa:c2:fa:d1:5a:78: bd:ba:c9:f5:80:69:22:c6:25:35:cc:7d:d5:36:cf: 79:c3:c6:20:e6:4d:2c:a6:a1:93:cb:89:f9:e0:b0: 4c:03:38:83:27:13:92:8c:ff:aa:b3:47:93:48:bf: e7:f5:b7:0d:22:7d:6e:45:a9:cd:48:4f:53:a7:f1: f0:df:85:f3:d6:72:8a:60:3b:70:c3:21:a2:53:5b: 45:c1:1a:ac:80:c3:9a:17:42:a5:12:ff:c7:d4:a0: 06:5c:38:54:66:4a:da:4d:38:fd:ee:e3:e2:30:a6: 50:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:67:3D:D3:F9:A4:82:C0:9B:10:E3:D8:57:F8:E9:AD:D5:58:CF:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d11de694-d002-33ce-8496-be9638fb53a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d5:77:af:a5:39:4e:d5:98:f7:bd:61:26:fc:82:c8:92:6d: fc:f5:46:3f:3e:cb:56:a5:94:9f:37:c8:64:c0:65:77:7c:d1: 1a:63:e8:c7:4a:99:55:32:28:04:3e:19:9d:a7:9c:99:5a:20: b0:b5:f2:d1:df:bb:a8:db:98:af:a5:c5:b6:b1:6b:41:30:46: 0d:79:78:12:9f:fd:37:ca:02:69:bf:bc:dc:34:2c:1d:93:13: 7f:7c:58:0b:aa:50:5c:3e:48:50:35:86:bb:c9:3b:06:67:45: 60:7d:f1:8f:76:9d:3a:f4:35:c1:7f:38:fa:af:0c:27:1d:09: 39:65:bf:74:4c:a7:ac:cb:d2:0e:f1:78:cb:85:bb:8a:b9:ae: 11:52:0c:32:ff:29:5b:f2:5d:7a:c9:66:82:ac:df:58:77:ce: 65:17:7c:d5:de:09:10:30:2d:4b:c0:cf:f4:8d:ed:d0:08:e9: 2c:1a:6c:7f:16:07:0a:1b:72:cd:33:2c:98:7d:49:9f:bc:0f: fc:36:9d:5f:b0:fd:97:c2:5b:d1:1c:f3:2b:4b:92:a8:22:d7: cd:1d:2a:93:88:bb:93:ac:e1:b9:4e:2b:35:6d:42:07:5d:5a: 52:6b:cf:7c:ef:dd:27:ba:2b:f7:c1:7f:80:bc:66:6d:52:18: 75:46:55:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiEaRgU5IBGMCSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDA4MDE3ZjQtNjY0Zi00OTI3LThkZDAtODE4ZGQ5ODljOGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnj/L3UYsjGy2dtmAKsiLu/F8hxiMKXI21yP AVmH6uYcyddoXr79WLbZoA3MYFjDXpbta1f5SUNqfYDWuoRObNCBdbhoiEOFudIv JzbUxnA65yTT+OEZqU93Qfu7iI4QYr+S1tUOBsEVHwj+llgxDKjNFtKqhTu76E/3 NmVWmCPJBu/x2jtU9tMv8iuvhpP6wvrRWni9usn1gGkixiU1zH3VNs95w8Yg5k0s pqGTy4n54LBMAziDJxOSjP+qs0eTSL/n9bcNIn1uRanNSE9Tp/Hw34Xz1nKKYDtw wyGiU1tFwRqsgMOaF0KlEv/H1KAGXDhUZkraTTj97uPiMKZQ1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdnPdP5pILAmxDj2Ff46a3VWM++MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDExZGU2OTQtZDAwMi0z M2NlLTg0OTYtYmU5NjM4ZmI1M2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMxxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7Vd6+lOU7VmPe9YSb8gsiSbfz1Rj8+y1allJ83yGTAZXd80Rpj6MdK mVUyKAQ+GZ2nnJlaILC18tHfu6jbmK+lxbaxa0EwRg15eBKf/TfKAmm/vNw0LB2T E398WAuqUFw+SFA1hrvJOwZnRWB98Y92nTr0NcF/OPqvDCcdCTllv3RMp6zL0g7x eMuFu4q5rhFSDDL/KVvyXXrJZoKs31h3zmUXfNXeCRAwLUvAz/SN7dAI6SwabH8W Bwobcs0zLJh9SZ+8D/w2nV+w/ZfCW9Ec8ytLkqgi180dKpOIu5Os4blOKzVtQgdd WlJrz3zv3Se6K/fBf4C8Zm1SGHVGVZI= -----END CERTIFICATE-----Generated at Sun Sep 27 03:03:49 2026 by rpki-client