$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d5836f57-f3a5-35ae-a770-a38744e980ff.roa File: d5836f57-f3a5-35ae-a770-a38744e980ff.roa (raw, json) Hash identifier: QiwehHiEq4xO4uK5SdLY2UvCaUiwZRMz8raTrqUKUWo= Subject key identifier: 44:90:B8:3A:E3:DC:E2:52:EF:82:E8:F3:11:64:09:78:93:D1:71:23 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F0DCE9E909A26153210AFC4B0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d5836f57-f3a5-35ae-a770-a38744e980ff.roa Signing time: Thu 03 Sep 2026 16:17:16 +0000 ROA not before: Thu 03 Sep 2026 16:17:16 +0000 ROA not after: Wed 02 Dec 2026 17:17:16 +0000 asID: 16509 IP address blocks: 64.204.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:ce:9e:90:9a:26:15:32:10:af:c4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 3 16:17:16 2026 GMT Not After : Dec 2 17:17:16 2026 GMT Subject: CN=ff27e40d-ac48-4fe7-ae5e-a6a9cec4089f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ba:0f:b6:cf:47:a7:7f:f5:3c:79:a9:b4:4f: 74:3a:12:98:7f:b3:97:56:d4:fc:5d:a4:ef:0a:84: 2a:ff:f0:d8:cf:2e:0a:4d:85:f0:a6:95:e2:60:8a: 3b:58:e0:2a:d5:75:f1:63:17:26:cd:dd:40:80:f9: 88:c6:e6:e3:df:70:37:33:a5:52:5f:17:e9:1b:23: 9e:a9:6a:bd:44:34:04:1d:ba:a9:9b:c6:05:72:e1: e2:6d:8a:7d:a3:f3:56:96:22:c1:dc:c4:52:20:8c: 92:f7:13:66:c8:9b:bc:92:85:9f:5b:84:5b:be:55: 39:df:b9:2c:d6:88:ff:d6:4c:00:2a:5a:3a:ee:28: 21:2b:07:8d:4b:19:f3:de:e7:e1:2d:5f:3c:6c:bb: 2a:7d:a9:3c:82:2b:43:57:9d:a0:2c:2a:10:83:c7: 2a:b1:68:06:65:e3:d0:28:c4:65:e8:6c:e7:fa:6d: b2:45:90:be:0f:2f:01:b3:02:71:a0:43:7d:24:4d: 60:a2:3c:c7:c1:e3:fe:1f:c9:e8:5a:37:9f:f8:47: 64:3e:05:cd:11:b2:8d:ed:17:e5:cb:e8:20:16:c6: 27:f4:ad:17:c7:59:a9:6e:e7:75:5c:14:ad:fb:4a: a7:f0:fd:35:e1:37:d5:86:73:9c:01:9b:c9:15:01: 06:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:90:B8:3A:E3:DC:E2:52:EF:82:E8:F3:11:64:09:78:93:D1:71:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d5836f57-f3a5-35ae-a770-a38744e980ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:e3:e1:71:25:f8:bb:82:d4:8d:5d:8a:7c:f6:0d:cf:69:87: 88:60:d9:32:43:ca:ec:9c:9e:bb:b8:27:c7:13:4e:ea:87:82: 49:0e:21:3e:f6:f2:98:ee:a2:14:ce:dd:b7:f5:a5:aa:76:8f: 7b:94:6e:91:e6:1e:e3:d9:99:a9:ed:ec:97:6f:45:2e:a1:4c: 5e:4b:cf:d0:9b:93:5e:37:3a:fd:6b:09:6e:c0:d1:cb:1a:78: 65:7b:86:e9:a5:83:4a:b6:1f:71:96:52:23:30:16:50:54:e0: 48:f1:36:e6:8a:68:e3:ce:9b:be:19:c9:73:a8:28:2b:25:1d: ca:fa:57:b4:62:11:e9:aa:12:92:4d:80:9d:2f:5e:db:2a:2d: 61:84:5f:be:7e:63:48:b0:5a:3e:5b:5c:ad:c6:a4:89:42:3c: 1e:d8:2d:f7:b8:95:f7:c7:7a:16:7f:88:29:e5:05:30:a7:a2: d0:6a:33:e1:86:c2:cc:d5:21:30:f6:16:08:f0:4d:29:1c:81: 38:14:3e:f8:05:ab:87:d0:4e:33:60:ac:b6:33:de:3e:a7:6e: 7b:de:62:47:fb:fb:2d:d9:cd:d4:b5:e2:7c:a2:27:7a:e3:be: 39:81:e5:de:74:e5:63:e0:27:b4:96:f8:a8:28:1c:7f:a7:2c: 2d:75:09:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Nzp6QmiYVMhCvxLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwMzE2MTcxNloXDTI2MTIwMjE3MTcxNlowLzEtMCsGA1UEAxMk ZmYyN2U0MGQtYWM0OC00ZmU3LWFlNWUtYTZhOWNlYzQwODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LoPts9Hp3/1PHmptE90OhKYf7OXVtT8XaTv CoQq//DYzy4KTYXwppXiYIo7WOAq1XXxYxcmzd1AgPmIxubj33A3M6VSXxfpGyOe qWq9RDQEHbqpm8YFcuHibYp9o/NWliLB3MRSIIyS9xNmyJu8koWfW4RbvlU537ks 1oj/1kwAKlo67ighKweNSxnz3ufhLV88bLsqfak8gitDV52gLCoQg8cqsWgGZePQ KMRl6Gzn+m2yRZC+Dy8BswJxoEN9JE1gojzHweP+H8noWjef+EdkPgXNEbKN7Rfl y+ggFsYn9K0Xx1mpbud1XBSt+0qn8P014TfVhnOcAZvJFQEGvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESQuDrj3OJS74Lo8xFkCXiT0XEjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDU4MzZmNTctZjNhNS0z NWFlLWE3NzAtYTM4NzQ0ZTk4MGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMzlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMHj4XEl+LuC1I1dinz2Dc9ph4hg2TJDyuycnru4J8cTTuqHgkkOIT72 8pjuohTO3bf1pap2j3uUbpHmHuPZmant7JdvRS6hTF5Lz9Cbk143Ov1rCW7A0csa eGV7humlg0q2H3GWUiMwFlBU4EjxNuaKaOPOm74ZyXOoKCslHcr6V7RiEemqEpJN gJ0vXtsqLWGEX75+Y0iwWj5bXK3GpIlCPB7YLfe4lffHehZ/iCnlBTCnotBqM+GG wszVITD2FgjwTSkcgTgUPvgFq4fQTjNgrLYz3j6nbnveYkf7+y3ZzdS14nyiJ3rj vjmB5d505WPgJ7SW+KgoHH+nLC11CfM= -----END CERTIFICATE-----Generated at Mon Sep 28 22:29:44 2026 by rpki-client