$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da7b04f0-abc5-3406-a287-46d4693432ed.roa File: da7b04f0-abc5-3406-a287-46d4693432ed.roa (raw, json) Hash identifier: 58XkpZlx3LsxSkSkCMrfEY95iKRX3dMu8S/11x0qg7E= Subject key identifier: 32:2A:D8:70:89:39:46:D4:8E:48:86:3A:CE:9A:AE:DD:E6:9E:56:AB Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F49735D75BBA38CE604475700 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da7b04f0-abc5-3406-a287-46d4693432ed.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 394684 IP address blocks: 173.0.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:5d:75:bb:a3:8c:e6:04:47:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=95ed4889-c8b1-4000-bfaa-8afe8498e6ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:24:e3:41:69:0c:5c:54:ab:28:d3:d3:2a:10: 69:26:cf:8a:0b:cd:50:37:49:0e:f6:0c:b7:34:cb: 43:e8:3a:30:90:13:a8:f2:34:82:37:e9:cb:98:90: 02:d5:57:31:d0:b3:48:4e:69:48:96:0e:61:b0:ac: ae:b8:ce:34:68:a0:19:da:e2:4a:3b:19:bb:9b:58: 3f:a6:d0:0e:7c:b9:26:91:29:85:24:f5:0a:81:4d: 03:97:14:82:be:87:b5:2b:b5:3c:ea:73:e6:94:97: a1:32:b0:d6:33:d0:df:f6:49:e7:9c:94:71:e7:6d: 20:cd:45:56:35:af:68:bc:ed:67:70:98:10:8b:ed: fb:a2:10:7b:d3:fc:26:d4:2a:c2:14:55:cd:0a:6e: f2:8e:e4:96:c3:88:11:e1:ae:93:42:e5:d5:c2:fb: c0:a5:ba:d6:d2:b1:c9:9d:94:1b:75:01:f4:4c:95: c5:6b:33:8c:35:af:33:3e:4f:a7:0c:3b:c9:08:58: 55:fb:99:64:a6:ad:f5:9e:44:ec:30:4b:1e:91:24: f7:d4:e3:b1:63:54:a5:cf:4e:da:e2:b0:6e:77:5d: 16:b6:cf:0b:36:61:27:36:b4:39:1b:4b:ef:de:9d: af:5e:60:b0:37:18:ba:32:16:e9:1d:49:d4:3c:f9: 29:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2A:D8:70:89:39:46:D4:8E:48:86:3A:CE:9A:AE:DD:E6:9E:56:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da7b04f0-abc5-3406-a287-46d4693432ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 173.0.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:9a:e4:f0:a0:33:8c:56:34:41:74:7a:99:fa:7c:2d:c0:b3: 72:c8:6e:70:a8:34:27:6b:c6:9f:55:29:04:03:93:db:47:15: cd:7f:62:22:b1:1c:2f:1e:d6:f8:e9:13:c2:2a:be:38:dd:0d: 44:be:19:6b:0e:e6:59:22:45:0d:61:45:cc:fd:b5:97:cb:d2: 5b:cb:42:b8:d3:5e:77:f1:c6:36:48:47:79:51:a3:46:39:63: 61:bf:2f:d6:00:7a:c5:94:5d:f9:c4:aa:d4:5d:96:3a:75:06: b9:7f:27:2e:99:b4:7d:ab:e3:60:c3:25:16:1e:cb:30:cb:42: ca:4a:aa:67:e4:52:0a:80:13:c0:71:c1:f9:09:03:77:3c:43: 39:b3:16:fc:88:60:58:48:1e:9a:24:9c:f5:93:2d:33:28:95: f8:1f:6e:6c:05:08:f6:c1:b7:71:5e:23:4b:ec:1d:11:62:a2: 47:07:d0:47:d5:dc:52:e1:d2:97:f9:41:19:46:73:f2:c2:ec: aa:63:b5:b6:05:c1:47:a5:a1:ae:01:16:01:ef:ac:0c:7d:9b: 28:ea:b2:8d:75:04:16:fb:de:7b:23:ee:e9:71:32:f5:92:aa: 36:0f:73:6f:8c:c8:6e:fa:17:59:6f:91:f3:27:1e:41:7a:d5: 99:aa:d0:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc111u6OM5gRHVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTVlZDQ4ODktYzhiMS00MDAwLWJmYWEtOGFmZTg0OThlNmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3STjQWkMXFSrKNPTKhBpJs+KC81QN0kO9gy3 NMtD6DowkBOo8jSCN+nLmJAC1Vcx0LNITmlIlg5hsKyuuM40aKAZ2uJKOxm7m1g/ ptAOfLkmkSmFJPUKgU0DlxSCvoe1K7U86nPmlJehMrDWM9Df9knnnJRx520gzUVW Na9ovO1ncJgQi+37ohB70/wm1CrCFFXNCm7yjuSWw4gR4a6TQuXVwvvApbrW0rHJ nZQbdQH0TJXFazOMNa8zPk+nDDvJCFhV+5lkpq31nkTsMEsekST31OOxY1Slz07a 4rBud10Wts8LNmEnNrQ5G0vv3p2vXmCwNxi6MhbpHUnUPPkpNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIq2HCJOUbUjkiGOs6art3mnlarMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGE3YjA0ZjAtYWJjNS0z NDA2LWEyODctNDZkNDY5MzQzMmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrQBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADia5PCgM4xWNEF0epn6fC3As3LIbnCoNCdrxp9VKQQDk9tHFc1/YiKx HC8e1vjpE8IqvjjdDUS+GWsO5lkiRQ1hRcz9tZfL0lvLQrjTXnfxxjZIR3lRo0Y5 Y2G/L9YAesWUXfnEqtRdljp1Brl/Jy6ZtH2r42DDJRYeyzDLQspKqmfkUgqAE8Bx wfkJA3c8QzmzFvyIYFhIHpoknPWTLTMolfgfbmwFCPbBt3FeI0vsHRFiokcH0EfV 3FLh0pf5QRlGc/LC7KpjtbYFwUeloa4BFgHvrAx9myjqso11BBb73nsj7ulxMvWS qjYPc2+MyG76F1lvkfMnHkF61Zmq0OM= -----END CERTIFICATE-----Generated at Thu Oct 8 08:42:35 2026 by rpki-client