$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dbf0c17e-bc3c-3601-8913-43df20796b92.roa File: dbf0c17e-bc3c-3601-8913-43df20796b92.roa (raw, json) Hash identifier: ckUJShoEm0nauFWFre4vIa/w+lqDGE7PZ3UNwVwQVXo= Subject key identifier: C5:CD:61:33:C8:54:C6:94:64:67:E7:DC:E4:31:C9:60:48:5C:A6:7E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F63F80C95489295E02B4FA2C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dbf0c17e-bc3c-3601-8913-43df20796b92.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 834 IP address blocks: 66.253.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:0c:95:48:92:95:e0:2b:4f:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=84b5d2af-f748-49ff-b783-3da4a9035c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:41:fa:8c:92:61:f0:a8:e8:08:29:48:53:d6: 81:db:d9:70:52:c7:8b:49:21:58:4b:8b:2c:3f:79: a5:17:8c:08:7a:5d:05:eb:a2:35:5b:df:0a:ca:1b: 9e:0d:f1:f2:a3:8d:7f:7e:7b:0b:cc:68:e9:4d:c3: d8:ce:24:d9:59:29:4c:1b:86:24:5c:6c:c5:63:29: f0:fd:63:b6:ef:01:28:1e:8b:90:81:24:f2:c9:17: d2:82:08:5c:30:20:97:d4:99:bf:36:f0:a4:22:e5: 17:87:82:35:0d:aa:66:87:d0:2d:01:58:e9:c2:2e: 5d:ef:66:fd:59:2a:65:67:48:73:f1:82:b7:df:3b: 36:de:14:06:6b:04:46:3d:d2:2e:8e:63:69:26:93: 8c:8e:11:e9:49:1c:2e:4c:25:25:e8:69:8e:e6:4b: fb:aa:0d:03:c0:c6:0b:91:dd:91:26:82:4b:96:02: 73:5f:b7:53:a2:a6:36:7e:83:c1:b3:6a:91:b7:e1: 90:5b:74:b5:45:3a:46:99:63:3c:88:2a:50:a6:1c: f4:01:82:8c:0a:95:9e:d1:6d:75:89:2e:7c:6f:e7: 24:ce:ee:b0:46:03:59:73:7b:08:66:f5:79:bb:79: e3:d7:35:bd:c8:74:84:ca:49:3c:56:bc:e5:64:1c: 76:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CD:61:33:C8:54:C6:94:64:67:E7:DC:E4:31:C9:60:48:5C:A6:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dbf0c17e-bc3c-3601-8913-43df20796b92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:56:2b:68:a0:73:6a:a0:0d:c7:11:1a:aa:6d:b8:8f:60:b0: e8:d9:df:41:84:58:6e:bd:fe:f8:61:8e:e2:2d:67:3e:c9:2a: b5:50:84:c4:72:24:13:9b:5d:7f:6b:17:72:5e:a9:0c:81:28: 90:07:7e:21:f3:44:14:35:e0:3f:e0:ea:1a:ef:9a:9d:5d:e6: e0:25:25:65:fe:48:1f:8f:5a:8e:a9:72:95:1f:0d:da:ee:11: 11:c5:58:89:e1:81:26:20:ea:13:6d:31:f9:ee:90:b2:15:cc: 13:30:1b:65:45:6c:1f:73:a7:60:03:aa:1b:d6:96:84:c4:1c: 5f:3d:5d:47:59:5d:66:5b:28:c5:27:2a:1b:8a:66:1e:85:f8: cb:2a:7c:55:94:ef:90:2e:51:94:4f:a0:ea:11:6a:ad:2f:d8: 69:34:69:37:4c:95:34:29:c5:6b:be:8a:66:43:0b:b0:a1:96: dc:dd:55:79:ab:a6:b3:62:5a:7d:7f:f5:39:d1:11:be:1b:0c: f7:9e:3b:31:f7:9c:fc:54:b6:6c:93:7c:f9:64:d6:78:cd:af: bf:93:33:57:8f:fd:b0:24:52:75:7c:bc:c8:27:0e:f1:d9:cc: cb:59:7b:37:f7:27:04:96:34:fa:ff:94:8b:84:1b:da:7f:f1: 17:23:23:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+AyVSJKV4CtPosAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk ODRiNWQyYWYtZjc0OC00OWZmLWI3ODMtM2RhNGE5MDM1YzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0H6jJJh8KjoCClIU9aB29lwUseLSSFYS4ss P3mlF4wIel0F66I1W98KyhueDfHyo41/fnsLzGjpTcPYziTZWSlMG4YkXGzFYynw /WO27wEoHouQgSTyyRfSgghcMCCX1Jm/NvCkIuUXh4I1Dapmh9AtAVjpwi5d72b9 WSplZ0hz8YK33zs23hQGawRGPdIujmNpJpOMjhHpSRwuTCUl6GmO5kv7qg0DwMYL kd2RJoJLlgJzX7dToqY2foPBs2qRt+GQW3S1RTpGmWM8iCpQphz0AYKMCpWe0W11 iS58b+ckzu6wRgNZc3sIZvV5u3nj1zW9yHSEykk8VrzlZBx2TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXNYTPIVMaUZGfn3OQxyWBIXKZ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGJmMGMxN2UtYmMzYy0z NjAxLTg5MTMtNDNkZjIwNzk2YjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQv1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1WK2igc2qgDccRGqptuI9gsOjZ30GEWG69/vhhjuItZz7JKrVQhMRy JBObXX9rF3JeqQyBKJAHfiHzRBQ14D/g6hrvmp1d5uAlJWX+SB+PWo6pcpUfDdru ERHFWInhgSYg6hNtMfnukLIVzBMwG2VFbB9zp2ADqhvWloTEHF89XUdZXWZbKMUn KhuKZh6F+MsqfFWU75AuUZRPoOoRaq0v2Gk0aTdMlTQpxWu+imZDC7ChltzdVXmr prNiWn1/9TnREb4bDPeeOzH3nPxUtmyTfPlk1njNr7+TM1eP/bAkUnV8vMgnDvHZ zMtZezf3JwSWNPr/lIuEG9p/8RcjI34= -----END CERTIFICATE-----Generated at Sun Oct 4 23:13:19 2026 by rpki-client