$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/eeeb8856-1cc4-3360-b12f-e923b217996b.roa File: eeeb8856-1cc4-3360-b12f-e923b217996b.roa (raw, json) Hash identifier: +tp4QWAEZ/mN8RSWAJQe97tIeXhj0Fk7UyCrRFI2aZQ= Subject key identifier: 86:DA:0E:E1:02:4C:5B:7A:7A:78:21:70:83:16:F4:39:5D:75:F8:5F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F49741D9462521A9793C49E60 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/eeeb8856-1cc4-3360-b12f-e923b217996b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 9009 IP address blocks: 64.205.128.0/22 maxlen: 22 216.132.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:1d:94:62:52:1a:97:93:c4:9e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e7feb57e-0294-484a-92b0-9b3bdab7b312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e2:f4:d3:10:c4:7e:42:92:de:07:31:61:f8: 34:74:fc:3d:00:4a:d6:68:89:ee:b6:ae:ed:85:7b: 8b:16:e1:48:fa:05:2f:ae:91:7c:3f:3f:33:07:23: a8:69:40:e9:30:b8:46:59:50:f6:25:3e:94:fc:78: e6:af:33:7b:f9:0e:7b:4a:51:67:16:e8:77:95:4a: 89:a2:4b:26:57:2d:e9:7e:39:04:9f:2f:d2:65:fb: 38:df:23:bf:61:f0:5c:1d:ef:d1:aa:79:1f:f0:be: 2b:d3:ea:9c:10:2f:cc:ab:84:4a:94:9e:60:e2:16: bc:4e:b1:77:8e:a2:72:0e:d7:38:82:7d:55:4d:e8: 05:9c:34:00:42:97:ff:5d:4f:50:d1:81:74:2c:ca: 7f:09:55:29:5c:fd:5f:08:91:99:f9:14:e0:2c:18: b9:ac:b6:8b:5a:49:9f:69:7a:a6:8c:c0:05:63:6e: 47:81:1f:9f:8f:dd:2a:e2:eb:11:21:78:5a:3f:60: f4:8f:d4:97:26:b8:e6:9a:91:2c:a8:4a:bb:68:67: 6f:7d:41:cf:27:12:7c:17:df:16:2b:84:ed:4c:25: 11:83:3e:bd:a7:de:bd:4f:d2:5c:14:63:c8:0a:a1: 8d:a2:d4:fe:b0:fc:1a:fe:ba:97:48:e5:a9:85:4d: ac:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DA:0E:E1:02:4C:5B:7A:7A:78:21:70:83:16:F4:39:5D:75:F8:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/eeeb8856-1cc4-3360-b12f-e923b217996b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.205.128.0/22 216.132.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:23:37:46:2c:12:06:76:27:f4:35:b4:45:68:43:7a:e4:ca: 88:88:21:dc:27:68:09:06:b2:de:a1:b8:de:df:5a:e9:c5:59: 34:1c:4b:9f:0f:7c:b4:6d:65:1d:d2:fd:0e:ca:b2:4e:97:64: a0:7a:4c:e2:e8:e2:7e:b1:2f:b3:77:d5:e9:24:f1:80:36:6d: 38:03:29:df:c7:9f:b9:26:4c:d4:5e:eb:cb:fe:f1:dc:20:9b: 58:21:f4:d4:39:1a:9c:62:43:4a:9e:49:38:31:61:3f:a0:7c: 39:22:11:65:50:e0:0d:ae:ce:b5:cb:2d:fb:2f:a5:3b:12:43: 63:36:dd:1d:df:69:23:a0:ff:6a:8d:25:57:8d:d4:15:62:ed: 11:ea:ae:3d:ec:a6:e5:9e:4c:04:8c:0b:5d:2c:e1:ef:85:22: ef:e2:09:dd:f7:21:75:d1:47:c1:c3:a2:d2:aa:ee:82:6d:f6: b6:c6:ff:5a:60:4b:01:0c:58:6e:c7:d8:a7:b4:dc:64:ac:12: 11:84:ca:a5:eb:05:37:e3:88:f9:0e:28:2b:53:eb:e0:7a:e4: c3:20:51:08:e1:03:f0:67:17:b6:be:8b:f1:7f:1b:75:cc:ab: 6d:cd:53:f4:b7:96:c6:ae:3f:b7:31:45:ba:96:bb:1b:a8:d5: 14:d8:4e:95 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9JdB2UYlIal5PEnmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTdmZWI1N2UtMDI5NC00ODRhLTkyYjAtOWIzYmRhYjdiMzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluL00xDEfkKS3gcxYfg0dPw9AErWaInutq7t hXuLFuFI+gUvrpF8Pz8zByOoaUDpMLhGWVD2JT6U/HjmrzN7+Q57SlFnFuh3lUqJ oksmVy3pfjkEny/SZfs43yO/YfBcHe/Rqnkf8L4r0+qcEC/Mq4RKlJ5g4ha8TrF3 jqJyDtc4gn1VTegFnDQAQpf/XU9Q0YF0LMp/CVUpXP1fCJGZ+RTgLBi5rLaLWkmf aXqmjMAFY25HgR+fj90q4usRIXhaP2D0j9SXJrjmmpEsqEq7aGdvfUHPJxJ8F98W K4TtTCURgz69p969T9JcFGPICqGNotT+sPwa/rqXSOWphU2syQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIbaDuECTFt6enghcIMW9DlddfhfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZWVlYjg4NTYtMWNjNC0z MzYwLWIxMmYtZTkyM2IyMTc5OTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCQM2AAwQB 2IRaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADEjN0YsEgZ2J/Q1tEVoQ3rkyoiIIdwnaAkGst6huN7fWunF WTQcS58PfLRtZR3S/Q7Ksk6XZKB6TOLo4n6xL7N31ekk8YA2bTgDKd/Hn7kmTNRe 68v+8dwgm1gh9NQ5GpxiQ0qeSTgxYT+gfDkiEWVQ4A2uzrXLLfsvpTsSQ2M23R3f aSOg/2qNJVeN1BVi7RHqrj3spuWeTASMC10s4e+FIu/iCd33IXXRR8HDotKq7oJt 9rbG/1pgSwEMWG7H2Ke03GSsEhGEyqXrBTfjiPkOKCtT6+B65MMgUQjhA/BnF7a+ i/F/G3XMq23NU/S3lsauP7cxRbqWuxuo1RTYTpU= -----END CERTIFICATE-----Generated at Sun Sep 27 02:36:59 2026 by rpki-client