$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dcfbf85d-8c05-3889-9897-bd15fbd602dd.roa File: dcfbf85d-8c05-3889-9897-bd15fbd602dd.roa (raw, json) Hash identifier: VFeUOzj42eLQZUiRAUx+vD8jZU2NF7YcgyIms5ANbhQ= Subject key identifier: A0:1C:53:18:48:E6:18:14:79:07:33:EE:29:B2:19:04:FD:42:39:B6 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F49881928AB7E6D26E3082CF0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dcfbf85d-8c05-3889-9897-bd15fbd602dd.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 5650 IP address blocks: 68.167.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:19:28:ab:7e:6d:26:e3:08:2c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5c4cd88c-cd1b-4c44-986f-ef7f0672cc04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f9:69:97:86:65:98:f7:04:be:d4:b5:99:24: 38:b7:63:e3:aa:a4:10:02:a5:30:a2:a4:18:62:f1: f8:f1:3a:dc:c7:77:d3:26:48:85:23:68:11:ba:41: 65:86:58:9a:a1:aa:91:d3:93:e5:25:be:f8:24:2c: 15:be:a4:22:a2:58:88:dd:cf:b9:78:1f:77:39:0a: 3c:e4:7e:dc:ab:1d:68:c2:be:3b:c4:b5:fe:89:30: 94:f2:f1:4a:2f:b3:3b:ce:af:1a:86:cd:c1:64:5a: 82:60:29:a5:f4:aa:be:01:ed:64:52:16:4a:1e:74: 07:b9:91:07:18:08:47:9a:48:79:cd:8d:33:14:6b: d5:da:d9:9c:5e:22:a9:80:bc:2e:52:87:4a:e4:4c: 27:d3:5d:f1:76:16:60:12:11:ad:6f:8a:65:fb:0b: 37:59:80:c6:17:63:76:84:55:59:33:c7:b1:a5:3f: 69:e7:ac:f3:74:28:75:b5:13:2c:df:f0:03:c1:12: 16:13:14:46:24:2d:0d:c4:94:7b:6c:7f:b9:8f:1f: b2:5d:47:7d:e2:c5:f6:e2:1a:4f:38:80:bc:f1:e1: cb:30:f9:97:9b:4b:23:52:7e:da:75:0a:6b:52:20: ea:e6:c6:86:9a:2f:e9:55:9b:8c:0b:5d:12:0e:58: 59:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1C:53:18:48:E6:18:14:79:07:33:EE:29:B2:19:04:FD:42:39:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dcfbf85d-8c05-3889-9897-bd15fbd602dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:e2:cd:96:02:7f:63:ac:0e:37:ee:ee:a0:47:c1:6c:01:a1: 02:42:c0:77:64:3b:70:65:2f:73:b6:23:65:fc:bb:fa:3e:40: 84:f4:f5:b2:d3:44:df:c9:72:c8:5f:4a:c5:f8:ac:5d:8e:88: 13:b1:1c:0d:45:17:02:b8:4f:a6:1b:00:19:01:07:3c:2b:2c: 13:5a:8e:6c:2c:bf:32:cf:ff:3a:69:d2:2f:70:4a:97:27:c4: 02:c0:68:2a:b5:09:dc:34:b3:d0:27:f4:b1:08:6c:e2:f9:6f: 9e:46:60:4d:55:97:14:09:ec:8b:8a:4e:78:d4:c5:62:81:45: e8:86:ed:45:10:0e:af:92:d0:1d:e7:7c:8f:f1:fd:79:8e:fb: 35:60:59:bb:14:89:7b:0b:eb:4b:ac:a4:67:a4:5c:df:b2:29: 88:0f:92:19:35:08:86:c0:c2:f6:e9:6a:7f:ea:2c:ef:88:f6: 07:1a:70:43:8f:ba:e4:b0:1a:6e:e7:9a:f6:8c:0d:88:cf:54: ce:89:80:7f:ed:bb:20:af:24:ed:e5:02:df:cb:a8:a9:24:4f: d9:e2:ba:aa:65:4d:1c:79:f0:5d:0b:4d:33:4b:0e:a4:23:52: e6:8b:b9:80:b6:c1:c9:4a:f0:e1:01:2d:39:4d:a4:19:a3:e6: 81:2d:0a:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiBkoq35tJuMILPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWM0Y2Q4OGMtY2QxYi00YzQ0LTk4NmYtZWY3ZjA2NzJjYzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vlpl4ZlmPcEvtS1mSQ4t2PjqqQQAqUwoqQY YvH48Trcx3fTJkiFI2gRukFlhliaoaqR05PlJb74JCwVvqQioliI3c+5eB93OQo8 5H7cqx1owr47xLX+iTCU8vFKL7M7zq8ahs3BZFqCYCml9Kq+Ae1kUhZKHnQHuZEH GAhHmkh5zY0zFGvV2tmcXiKpgLwuUodK5Ewn013xdhZgEhGtb4pl+ws3WYDGF2N2 hFVZM8expT9p56zzdCh1tRMs3/ADwRIWExRGJC0NxJR7bH+5jx+yXUd94sX24hpP OIC88eHLMPmXm0sjUn7adQprUiDq5saGmi/pVZuMC10SDlhZEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAcUxhI5hgUeQcz7imyGQT9Qjm2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGNmYmY4NWQtOGMwNS0z ODg5LTk4OTctYmQxNWZiZDYwMmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKcMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfizZYCf2OsDjfu7qBHwWwBoQJCwHdkO3BlL3O2I2X8u/o+QIT09bLT RN/JcshfSsX4rF2OiBOxHA1FFwK4T6YbABkBBzwrLBNajmwsvzLP/zpp0i9wSpcn xALAaCq1Cdw0s9An9LEIbOL5b55GYE1VlxQJ7IuKTnjUxWKBReiG7UUQDq+S0B3n fI/x/XmO+zVgWbsUiXsL60uspGekXN+yKYgPkhk1CIbAwvbpan/qLO+I9gcacEOP uuSwGm7nmvaMDYjPVM6JgH/tuyCvJO3lAt/LqKkkT9niuqplTRx58F0LTTNLDqQj UuaLuYC2wclK8OEBLTlNpBmj5oEtCjA= -----END CERTIFICATE-----Generated at Sun Sep 27 00:01:43 2026 by rpki-client