$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e79888ca-ad16-3fd6-84d1-927646db880d.roa File: e79888ca-ad16-3fd6-84d1-927646db880d.roa (raw, json) Hash identifier: cID1wsao0i8b/5DcFTdi/jM7YceiXCtBa3KKAq0CJg8= Subject key identifier: D1:59:CC:34:74:A5:2D:AC:DD:4B:34:00:4E:75:38:CF:F1:20:CC:57 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F498AF9B477CA9FCD360F2A80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e79888ca-ad16-3fd6-84d1-927646db880d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 9009 IP address blocks: 68.165.132.0/22 maxlen: 24 68.165.180.0/22 maxlen: 24 68.165.200.0/22 maxlen: 24 68.165.220.0/22 maxlen: 24 209.101.168.0/22 maxlen: 24 216.132.64.0/22 maxlen: 24 216.132.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:f9:b4:77:ca:9f:cd:36:0f:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=624fe96c-45d1-4db6-a90e-3ba48a1c5088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:02:5b:0c:8b:83:f2:ee:55:56:77:ed:54:b5: de:1f:42:85:9e:ac:e3:e2:ee:43:1d:73:60:18:03: 14:6e:b7:3f:68:e7:76:1c:99:79:97:c5:22:a4:53: 55:e8:8b:8d:74:52:8d:58:8a:1b:97:6c:68:1c:03: 37:c8:0b:52:a6:63:b0:08:05:d0:69:8e:2b:aa:4e: 4f:c9:3b:95:8b:f2:c3:7c:81:cf:83:4b:81:1b:01: 04:20:cc:69:03:f0:7a:d6:12:a7:74:78:21:63:58: c1:24:6a:62:04:b0:b4:5f:1b:ee:e4:b3:01:5c:1b: 93:8f:59:7b:9a:ed:b5:04:89:83:1d:06:bb:c8:29: 5e:85:8a:77:aa:5d:eb:30:f0:c2:03:d6:4b:36:9c: fe:db:c0:fb:ee:30:d7:72:24:de:98:2f:e7:d6:cb: cb:b4:8c:b4:66:7d:81:19:dd:b9:6b:b4:fc:8f:b6: 79:5f:db:b0:10:b6:07:62:1c:a5:19:e5:fd:48:4a: a1:eb:0c:a5:e3:8b:fe:75:f0:a2:75:b0:9b:db:3a: 6b:68:12:49:0e:4f:e1:c0:56:4d:76:0d:0d:c9:45: 56:21:58:7f:92:81:fb:ab:18:2a:d2:00:e9:f7:21: 30:2b:0f:cd:2b:a3:d8:8b:3e:6d:a9:a6:17:40:1e: 8f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:59:CC:34:74:A5:2D:AC:DD:4B:34:00:4E:75:38:CF:F1:20:CC:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e79888ca-ad16-3fd6-84d1-927646db880d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.165.132.0/22 68.165.180.0/22 68.165.200.0/22 68.165.220.0/22 209.101.168.0/22 216.132.64.0/22 216.132.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a9:54:45:af:2d:ec:f9:04:c8:6d:9b:0f:d6:08:5d:28:b5: 8b:e2:b0:29:9e:05:49:58:0a:95:6b:c4:db:25:a6:7c:5a:f8: e7:bb:36:76:da:5f:ed:fe:0d:b8:cf:b3:bc:a9:8a:c8:65:37: 9c:81:79:5f:f2:fe:ac:79:2b:fa:d5:69:1e:bb:b7:7e:23:1c: 9c:a4:52:a0:d8:68:81:68:ca:d9:fd:84:0b:6a:d6:01:d7:47: 4b:a2:0e:5c:64:f1:77:7d:30:f2:ff:79:bb:c0:4b:ba:cf:df: fa:8a:a7:b4:14:c0:97:d3:f4:22:7b:b6:a2:21:c3:1f:3f:c4: ad:6c:96:cd:3b:26:e9:de:4e:35:0c:fc:ac:28:34:11:01:16: 85:fb:62:e7:0d:70:63:3d:d7:ac:76:52:cd:3b:4a:bb:46:8c: 67:35:fa:12:b1:97:70:0c:56:7f:fd:a0:9b:94:41:71:87:1e: 41:16:cd:64:6f:ec:24:ef:fe:3c:d5:94:9c:ee:aa:a3:c3:02: 3c:7e:13:64:d5:45:41:24:87:ce:48:8a:6b:31:69:4d:c7:ec: 28:39:f5:2c:0c:8d:d6:0c:33:11:c5:d1:eb:db:5b:7d:11:ba: db:d2:6e:97:a0:94:df:6a:9b:ba:6e:9b:6e:a4:9b:12:b8:77: fd:6c:12:3e -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWE9Jivm0d8qfzTYPKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjI0ZmU5NmMtNDVkMS00ZGI2LWE5MGUtM2JhNDhhMWM1MDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwJbDIuD8u5VVnftVLXeH0KFnqzj4u5DHXNg GAMUbrc/aOd2HJl5l8UipFNV6IuNdFKNWIobl2xoHAM3yAtSpmOwCAXQaY4rqk5P yTuVi/LDfIHPg0uBGwEEIMxpA/B61hKndHghY1jBJGpiBLC0Xxvu5LMBXBuTj1l7 mu21BImDHQa7yClehYp3ql3rMPDCA9ZLNpz+28D77jDXciTemC/n1svLtIy0Zn2B Gd25a7T8j7Z5X9uwELYHYhylGeX9SEqh6wyl44v+dfCidbCb2zpraBJJDk/hwFZN dg0NyUVWIVh/koH7qxgq0gDp9yEwKw/NK6PYiz5tqaYXQB6PQQIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFNFZzDR0pS2s3Us0AE51OM/xIMxXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZTc5ODg4Y2EtYWQxNi0z ZmQ2LTg0ZDEtOTI3NjQ2ZGI4ODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCRKWEAwQC RKW0AwQCRKXIAwQCRKXcAwQC0WWoAwQC2IRAAwQC2IRMMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEapVEWv Lez5BMhtmw/WCF0otYvisCmeBUlYCpVrxNslpnxa+Oe7NnbaX+3+DbjPs7ypishl N5yBeV/y/qx5K/rVaR67t34jHJykUqDYaIFoytn9hAtq1gHXR0uiDlxk8Xd9MPL/ ebvAS7rP3/qKp7QUwJfT9CJ7tqIhwx8/xK1sls07JuneTjUM/KwoNBEBFoX7YucN cGM916x2Us07SrtGjGc1+hKxl3AMVn/9oJuUQXGHHkEWzWRv7CTv/jzVlJzuqqPD Ajx+E2TVRUEkh85IimsxaU3H7Cg59SwMjdYMMxHF0evbW30RutvSbpeglN9qm7pu m26kmxK4d/1sEj4= -----END CERTIFICATE-----Generated at Sat Oct 10 14:01:14 2026 by rpki-client