$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ea4c87c7-59ac-39d2-b591-a63fb83c3a9f.roa File: ea4c87c7-59ac-39d2-b591-a63fb83c3a9f.roa (raw, json) Hash identifier: YtIK6H6A4JvEHmEmah/1lj6DdWaSc4B3XlG1skN0Vco= Subject key identifier: B1:18:44:8D:EC:B3:1C:7E:6F:6C:10:C3:4F:36:C9:9B:C2:52:6D:E0 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F3A17CA1C066A6BA2F31C3F00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ea4c87c7-59ac-39d2-b591-a63fb83c3a9f.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 36916 IP address blocks: 66.227.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:ca:1c:06:6a:6b:a2:f3:1c:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=aa3875a7-1f10-4d26-91b3-a8b6d6d15b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:31:e5:4b:fb:03:17:88:5d:17:32:3e:dc:89: 10:b7:29:e6:b7:8f:51:29:62:b9:42:31:1f:5e:72: a4:cf:6a:ec:da:98:79:f1:c0:60:e4:1c:b8:07:21: 43:37:9b:0c:cd:da:24:4e:b9:4e:5f:b0:71:e4:88: 58:5a:46:d7:39:ad:0e:28:0c:df:04:0d:f1:84:4a: 86:86:64:b1:4e:c4:43:a6:47:e5:8e:a3:f3:ab:6d: bf:6b:7e:cb:3e:09:f8:ae:92:e9:40:5b:28:d2:88: 03:58:2c:ef:29:f0:94:7e:1f:f4:68:14:2c:06:e7: 22:27:62:f1:e7:96:e7:a0:96:93:5a:5b:c8:50:ec: 9d:97:d4:2d:c9:fb:84:28:d0:79:4c:b0:1d:2a:72: 3e:63:7d:4d:19:8d:a6:86:06:0f:50:ba:0d:e1:3a: b7:da:8a:01:5b:1a:78:ba:e6:02:0d:d7:54:ee:ee: 1c:1f:8c:23:74:e6:56:68:ca:f7:89:f4:ea:31:29: 72:f1:45:53:39:8d:89:89:a5:7e:db:5e:75:74:62: c1:41:ad:f7:72:04:bd:2d:45:1f:72:67:cf:0f:aa: dc:18:8a:2f:8a:88:e1:19:3a:90:81:68:9d:58:aa: 43:43:4b:3c:f9:3b:21:c7:3c:e3:11:d9:91:80:f7: b8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:18:44:8D:EC:B3:1C:7E:6F:6C:10:C3:4F:36:C9:9B:C2:52:6D:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ea4c87c7-59ac-39d2-b591-a63fb83c3a9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.227.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:cb:b4:af:a6:37:e9:71:9d:01:5e:d0:89:93:a2:05:61:dd: 56:4f:1c:97:4e:bd:d6:0d:ec:84:0e:30:03:0a:a2:cf:be:ad: d5:03:de:89:af:e3:3a:37:20:08:9f:81:2f:cc:91:5f:e0:f7: 38:91:28:8b:42:bd:ee:55:dd:bc:bb:d0:b4:0b:7b:b8:c7:23: 9a:00:80:a3:f3:75:4e:1f:00:e6:16:24:54:d9:21:dd:bd:c0: 99:f2:2d:0d:57:3f:de:9f:e6:41:2b:6d:a4:8d:21:78:4d:ab: a4:65:61:1c:cc:92:63:f4:dc:e3:0c:b5:22:a7:0e:25:f1:ab: a3:fb:d0:c0:95:46:0f:ac:8e:a2:31:1c:2f:50:47:d3:71:f7: dd:aa:fc:81:1c:42:1f:16:b4:c7:05:23:a6:5f:53:f8:85:22: 4e:ec:1f:f5:6a:da:4a:49:4b:00:0f:1a:2b:fd:db:17:58:0f: 7f:30:5d:f3:d3:6d:b6:73:f5:0e:da:1d:79:c4:fb:a0:e6:b1: 5d:8e:48:01:8f:26:d1:0a:04:d9:7c:26:a4:ee:ae:b5:01:38: e7:cd:a7:f8:38:28:9d:00:58:00:33:c4:11:a7:40:6f:e8:86: cd:56:c2:60:ea:93:48:2d:fb:6c:88:17:1f:21:dc:0f:f6:f2: fd:0c:57:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8ocBmprovMcPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk YWEzODc1YTctMWYxMC00ZDI2LTkxYjMtYThiNmQ2ZDE1YjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDHlS/sDF4hdFzI+3IkQtynmt49RKWK5QjEf XnKkz2rs2ph58cBg5By4ByFDN5sMzdokTrlOX7Bx5IhYWkbXOa0OKAzfBA3xhEqG hmSxTsRDpkfljqPzq22/a37LPgn4rpLpQFso0ogDWCzvKfCUfh/0aBQsBuciJ2Lx 55bnoJaTWlvIUOydl9QtyfuEKNB5TLAdKnI+Y31NGY2mhgYPULoN4Tq32ooBWxp4 uuYCDddU7u4cH4wjdOZWaMr3ifTqMSly8UVTOY2JiaV+2151dGLBQa33cgS9LUUf cmfPD6rcGIoviojhGTqQgWidWKpDQ0s8+TshxzzjEdmRgPe4swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEYRI3ssxx+b2wQw082yZvCUm3gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZWE0Yzg3YzctNTlhYy0z OWQyLWI1OTEtYTYzZmI4M2MzYTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQuMMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzLtK+mN+lxnQFe0ImTogVh3VZPHJdOvdYN7IQOMAMKos++rdUD3omv 4zo3IAifgS/MkV/g9ziRKItCve5V3by70LQLe7jHI5oAgKPzdU4fAOYWJFTZId29 wJnyLQ1XP96f5kErbaSNIXhNq6RlYRzMkmP03OMMtSKnDiXxq6P70MCVRg+sjqIx HC9QR9Nx992q/IEcQh8WtMcFI6ZfU/iFIk7sH/Vq2kpJSwAPGiv92xdYD38wXfPT bbZz9Q7aHXnE+6DmsV2OSAGPJtEKBNl8JqTurrUBOOfNp/g4KJ0AWAAzxBGnQG/o hs1WwmDqk0gt+2yIFx8h3A/28v0MV1k= -----END CERTIFICATE-----Generated at Mon Sep 28 12:26:52 2026 by rpki-client