$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d4921f5f-b979-3d80-be60-7a72713a2e93.roa File: d4921f5f-b979-3d80-be60-7a72713a2e93.roa (raw, json) Hash identifier: b/CynV18xq50Jqj5OjpO0p97T/myppwO/4c/E+7IfT0= Subject key identifier: C6:21:C3:81:BA:37:EF:2C:ED:13:19:1E:43:4E:43:7B:38:B4:72:00 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F3FF8A69994E67F6A9C24A3C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d4921f5f-b979-3d80-be60-7a72713a2e93.roa Signing time: Mon 21 Sep 2026 15:32:23 +0000 ROA not before: Mon 21 Sep 2026 15:32:23 +0000 ROA not after: Sun 20 Dec 2026 16:32:23 +0000 asID: 219427 IP address blocks: 64.204.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:f8:a6:99:94:e6:7f:6a:9c:24:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 21 15:32:23 2026 GMT Not After : Dec 20 16:32:23 2026 GMT Subject: CN=d7385a33-69b9-40d0-8ac8-c130519df280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:46:66:4c:46:a9:2b:9a:ea:cc:c0:9a:a3:7d: 0c:4d:cc:21:4e:51:c5:83:2f:63:21:13:2f:9b:91: 6b:10:e8:b7:e7:73:67:1c:2a:4a:b4:ad:5f:33:9e: 1f:0e:54:07:db:8f:c3:e0:91:a8:c2:48:b4:dc:bc: 45:d4:d6:bf:2e:1d:03:68:47:62:bf:4d:53:8e:1b: f3:8b:68:62:0c:dd:19:23:05:46:73:c7:92:df:4a: 59:11:56:ed:c6:90:cf:10:c3:5c:4e:1a:fb:59:12: 16:2e:c2:78:3d:b0:1e:30:49:66:25:00:03:29:00: 73:8f:51:0f:8f:9f:a5:db:51:ee:9a:e1:0b:8a:a7: fc:14:85:39:5a:8b:14:eb:b2:05:43:33:cb:06:03: ac:c9:2f:24:f5:92:aa:a9:bc:6b:b6:e4:7d:16:ee: 82:99:45:84:63:1b:53:20:99:30:2c:eb:11:13:ef: 3b:1f:81:79:28:8c:ae:78:b2:60:17:df:c3:e9:ea: c0:67:b6:d3:cc:29:ea:1f:ed:22:b8:dd:82:77:b0: 3a:a4:40:80:8c:bd:89:24:58:a9:2e:e9:70:0f:f4: 48:6f:e2:b7:9b:79:d1:39:fa:69:57:aa:89:6e:f9: af:45:ba:33:3e:60:f2:7f:22:b5:58:6b:dc:19:7f: 39:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:21:C3:81:BA:37:EF:2C:ED:13:19:1E:43:4E:43:7B:38:B4:72:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d4921f5f-b979-3d80-be60-7a72713a2e93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:c9:aa:12:8b:06:b8:dc:3c:28:91:81:e8:78:a2:2f:2e:67: c6:4a:53:a6:d6:06:ae:94:dd:dc:6c:9c:be:04:2d:4f:b2:a3: 7c:8e:7b:dd:ae:ab:ea:e7:92:5d:de:32:f2:98:5e:78:a6:56: 61:00:a1:ce:46:af:9b:76:85:ff:95:5a:a6:ef:5c:3d:5b:5f: 2f:6e:03:9d:69:e8:7d:5f:65:45:b0:01:fb:90:1b:eb:c6:47: bc:7e:5f:c6:b3:aa:08:c4:c2:fa:a2:36:a7:cf:b4:05:91:af: 36:be:56:a5:c4:42:01:09:8f:38:5c:88:88:be:ac:2e:2c:e7: 92:e3:1b:4d:f1:24:aa:66:89:16:f3:6c:5b:dc:89:ab:4f:76: bc:64:f7:49:ce:17:1f:b0:c6:c8:53:dc:00:0c:9a:e4:a3:50: 44:38:28:c6:17:d4:e5:48:2e:db:f0:d4:84:27:1f:9d:0b:2c: a3:ce:de:61:36:e7:81:f5:df:77:84:25:66:77:b2:9d:ad:fd: ef:83:39:47:1f:37:1b:b9:9a:e4:7c:05:14:3b:7a:e4:14:04: 94:7a:1f:9f:af:7f:d6:ea:47:81:5f:85:a7:b6:eb:58:7b:e0: 40:39:08:57:77:1b:fe:54:3b:25:f9:34:04:c9:c2:fa:dc:d9: f4:d2:5f:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/+KaZlOZ/apwko8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMTE1MzIyM1oXDTI2MTIyMDE2MzIyM1owLzEtMCsGA1UEAxMk ZDczODVhMzMtNjliOS00MGQwLThhYzgtYzEzMDUxOWRmMjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokZmTEapK5rqzMCao30MTcwhTlHFgy9jIRMv m5FrEOi353NnHCpKtK1fM54fDlQH24/D4JGowki03LxF1Na/Lh0DaEdiv01Tjhvz i2hiDN0ZIwVGc8eS30pZEVbtxpDPEMNcThr7WRIWLsJ4PbAeMElmJQADKQBzj1EP j5+l21HumuELiqf8FIU5WosU67IFQzPLBgOsyS8k9ZKqqbxrtuR9Fu6CmUWEYxtT IJkwLOsRE+87H4F5KIyueLJgF9/D6erAZ7bTzCnqH+0iuN2Cd7A6pECAjL2JJFip LulwD/RIb+K3m3nROfppV6qJbvmvRbozPmDyfyK1WGvcGX85dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYhw4G6N+8s7RMZHkNOQ3s4tHIAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDQ5MjFmNWYtYjk3OS0z ZDgwLWJlNjAtN2E3MjcxM2EyZTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMyxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/JqhKLBrjcPCiRgeh4oi8uZ8ZKU6bWBq6U3dxsnL4ELU+yo3yOe92u q+rnkl3eMvKYXnimVmEAoc5Gr5t2hf+VWqbvXD1bXy9uA51p6H1fZUWwAfuQG+vG R7x+X8azqgjEwvqiNqfPtAWRrza+VqXEQgEJjzhciIi+rC4s55LjG03xJKpmiRbz bFvciatPdrxk90nOFx+wxshT3AAMmuSjUEQ4KMYX1OVILtvw1IQnH50LLKPO3mE2 54H133eEJWZ3sp2t/e+DOUcfNxu5muR8BRQ7euQUBJR6H5+vf9bqR4Ffhae261h7 4EA5CFd3G/5UOyX5NATJwvrc2fTSX2I= -----END CERTIFICATE-----Generated at Sun Sep 27 03:27:00 2026 by rpki-client