$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db87ee69-26f1-35e0-9f3c-ed70be87dece.roa File: db87ee69-26f1-35e0-9f3c-ed70be87dece.roa (raw, json) Hash identifier: 5i/ZWZYxcUQvEsYZwUmx2AwhPw8XPg+RujRXcXe23G4= Subject key identifier: 79:93:84:AC:70:C5:10:9E:F3:CE:E3:C5:94:8E:D5:20:F8:43:BF:B5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F1E2CEB6D0F07BE91D0629980 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db87ee69-26f1-35e0-9f3c-ed70be87dece.roa Signing time: Wed 09 Sep 2026 13:00:11 +0000 ROA not before: Wed 09 Sep 2026 13:00:11 +0000 ROA not after: Tue 08 Dec 2026 14:00:11 +0000 asID: 5650 IP address blocks: 68.167.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:2c:eb:6d:0f:07:be:91:d0:62:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 9 13:00:11 2026 GMT Not After : Dec 8 14:00:11 2026 GMT Subject: CN=5285ea9b-24c5-425f-b7e6-2ce01ff4815e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:52:fb:0b:86:7d:5e:e4:fb:87:bb:5e:f9:da: 64:76:7b:2c:d9:73:14:c4:2f:f0:21:f8:ae:81:21: 52:64:5d:7e:2c:54:00:ef:bc:47:0f:86:83:5c:81: e2:c6:f7:35:89:4d:b7:d9:3c:bd:8c:49:e6:5c:b2: 73:5c:7b:17:2d:55:6e:76:d7:f4:9c:17:bf:d0:85: cf:94:71:a6:ad:66:49:98:75:ae:5d:e5:b0:78:c6: 05:7c:d7:39:44:6a:df:31:50:ae:4d:d8:09:3e:35: 94:32:4e:57:ab:ef:19:ba:bc:3c:db:50:1a:1e:65: 9a:fa:2f:8f:78:4f:71:7c:24:ac:ca:18:3e:b6:a2: 0d:9d:10:a2:e6:fa:42:e7:a2:d2:ff:ca:30:10:cf: 42:5e:80:48:57:ea:bc:ac:3a:9e:71:73:c4:c2:aa: 4e:e4:96:48:dd:ca:b8:ac:63:1d:35:16:3d:75:dc: 66:24:ac:f4:d6:07:1e:17:c3:94:65:a6:75:89:d1: a1:0a:74:2d:bc:77:88:2d:4a:95:84:bd:d0:2b:19: 8a:56:b7:bb:0f:92:d0:d4:d6:84:42:b3:41:18:13: 19:1d:a6:81:45:a6:4e:68:c2:d6:27:ee:59:b0:6d: 5d:5a:88:30:a2:4e:a4:02:8a:6b:bc:da:9b:b8:a9: 0e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:93:84:AC:70:C5:10:9E:F3:CE:E3:C5:94:8E:D5:20:F8:43:BF:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db87ee69-26f1-35e0-9f3c-ed70be87dece.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:1b:73:dc:f6:a2:31:06:f6:9e:32:f4:09:cc:d6:58:1a:f6: 0d:37:96:0e:5a:f0:a7:69:b9:09:c4:39:38:bd:15:f5:21:bf: 14:d3:d4:bb:bb:e4:9c:00:33:16:2a:59:18:d6:8f:f7:23:99: 21:c2:67:a0:29:c8:2c:6f:29:9b:8f:b0:ef:e1:11:55:47:fc: 69:6a:c3:3d:b9:6e:27:a5:bd:32:e8:30:d3:2e:30:3a:b7:20: 2f:0e:71:61:6c:32:0a:7c:e1:6a:d0:29:ae:be:f4:c3:a3:a5: dc:18:2e:99:41:0f:f7:e1:6c:78:51:71:50:1b:d4:55:1e:bd: c1:7a:1a:cd:02:44:69:11:58:5d:e1:7b:d2:d6:c5:2a:24:a7: 06:24:74:d8:59:8f:1d:70:6b:76:59:d2:0a:fd:d2:8a:1a:06: 40:94:c3:3b:8b:47:fe:a7:7e:89:46:8e:94:85:59:b1:cb:9d: 61:5b:3c:27:18:85:03:c0:46:fa:3a:c8:af:35:4c:47:33:db: 40:13:30:e4:e6:df:81:54:c9:3d:d8:7e:a9:ee:ef:33:81:50: 4e:3a:17:53:05:fc:25:e0:78:ef:b7:21:0c:39:aa:cd:e4:9f: 1d:b8:14:52:90:70:d9:de:dc:d6:25:8f:e4:fd:3f:84:99:26: c8:8d:2e:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLOttDwe+kdBimYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk NTI4NWVhOWItMjRjNS00MjVmLWI3ZTYtMmNlMDFmZjQ4MTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFL7C4Z9XuT7h7te+dpkdnss2XMUxC/wIfiu gSFSZF1+LFQA77xHD4aDXIHixvc1iU232Ty9jEnmXLJzXHsXLVVudtf0nBe/0IXP lHGmrWZJmHWuXeWweMYFfNc5RGrfMVCuTdgJPjWUMk5Xq+8Zurw821AaHmWa+i+P eE9xfCSsyhg+tqINnRCi5vpC56LS/8owEM9CXoBIV+q8rDqecXPEwqpO5JZI3cq4 rGMdNRY9ddxmJKz01gceF8OUZaZ1idGhCnQtvHeILUqVhL3QKxmKVre7D5LQ1NaE QrNBGBMZHaaBRaZOaMLWJ+5ZsG1dWogwok6kAoprvNqbuKkOiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmThKxwxRCe887jxZSO1SD4Q7+1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGI4N2VlNjktMjZmMS0z NWUwLTlmM2MtZWQ3MGJlODdkZWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKcQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQbc9z2ojEG9p4y9AnM1lga9g03lg5a8KdpuQnEOTi9FfUhvxTT1Lu7 5JwAMxYqWRjWj/cjmSHCZ6ApyCxvKZuPsO/hEVVH/Glqwz25bielvTLoMNMuMDq3 IC8OcWFsMgp84WrQKa6+9MOjpdwYLplBD/fhbHhRcVAb1FUevcF6Gs0CRGkRWF3h e9LWxSokpwYkdNhZjx1wa3ZZ0gr90ooaBkCUwzuLR/6nfolGjpSFWbHLnWFbPCcY hQPARvo6yK81TEcz20ATMOTm34FUyT3Yfqnu7zOBUE46F1MF/CXgeO+3IQw5qs3k nx24FFKQcNne3NYlj+T9P4SZJsiNLpQ= -----END CERTIFICATE-----Generated at Sun Sep 27 04:53:18 2026 by rpki-client