$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f28c57c0-eb22-31a0-b4e8-17e6b8a80660.roa File: f28c57c0-eb22-31a0-b4e8-17e6b8a80660.roa (raw, json) Hash identifier: NXmI4q+fQed7UpTNG6QYdkC0PLC/Rp79retVCeMEVNI= Subject key identifier: 3F:FD:44:C9:2D:97:4D:E9:3C:24:9F:EC:D2:4A:24:51:40:11:75:8C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F498874D5DCE071BAE33995E0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f28c57c0-eb22-31a0-b4e8-17e6b8a80660.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 834 IP address blocks: 64.204.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:74:d5:dc:e0:71:ba:e3:39:95:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8fec98d8-f91a-47d6-b25b-5530643ca909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d3:f6:4e:bc:e5:97:63:57:53:f8:5c:2d:8d: ef:79:66:d7:e1:86:77:dd:51:c2:2e:0f:83:f3:c5: b1:c0:e4:85:bd:3e:cf:9d:03:d7:20:bd:b9:9f:ad: 6e:50:3e:8d:ea:95:63:83:13:4a:23:ef:c0:82:52: 0a:43:70:7e:f2:ab:68:20:cf:ee:7c:ee:6e:94:df: 2c:20:99:5a:b9:2f:d0:40:16:8e:1a:43:e9:c2:52: fe:4a:d3:68:44:c6:c5:42:be:d3:aa:9f:02:58:4f: 3c:1e:0c:c8:69:ea:0e:d2:67:e9:ac:7b:92:01:ff: 1b:f7:e2:5f:ad:b6:35:25:f8:df:a9:d8:7b:c5:34: 0e:1d:34:44:13:c5:02:31:d7:7f:84:12:97:6c:41: 00:25:8e:07:72:0f:7c:f9:14:57:47:eb:11:0e:8d: 2c:0e:c3:41:d6:64:06:3c:7c:dc:05:10:19:69:ef: 58:4c:dc:bd:b1:bc:cb:ed:00:8f:ba:fe:ef:39:b9: ae:ca:9c:4d:90:dc:ee:60:90:24:39:15:ab:0a:af: cd:db:1f:ce:bc:f5:b3:a7:6f:c5:2b:0c:ca:a4:3f: 41:eb:43:94:21:43:7b:8e:33:ba:7e:50:3d:e7:e6: 6f:53:6c:07:be:d9:14:cf:26:4a:58:df:2f:62:ce: 9d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FD:44:C9:2D:97:4D:E9:3C:24:9F:EC:D2:4A:24:51:40:11:75:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f28c57c0-eb22-31a0-b4e8-17e6b8a80660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:a7:e4:1a:f0:6b:1d:36:f3:0d:cc:0b:99:12:67:01:08:f3: 83:dc:a8:70:c1:e2:72:d7:4f:be:df:29:cd:8e:46:f4:82:54: 86:61:4e:0a:fd:72:df:f1:fc:d7:78:1f:0a:d7:fb:db:8f:19: e4:79:3d:b5:bf:36:08:80:f8:a7:fd:05:80:2d:3e:d8:6c:04: 4b:25:a0:0c:8c:02:2d:41:8a:ec:09:7f:a0:e9:13:aa:15:1c: 8f:82:46:22:1c:6e:51:5b:bb:95:6d:9b:09:26:a1:67:cf:ce: 7f:06:f4:f3:9b:c4:18:51:77:d2:e2:5c:8e:f7:cc:0f:8a:fd: cd:ba:a6:6d:06:6e:5d:c8:b8:c0:cf:84:a8:e2:1b:22:de:c8: c8:f9:1c:4c:1a:52:6f:be:17:4e:3d:0a:24:5f:ef:d6:d6:ce: 8b:a1:90:d1:8d:cf:f7:67:92:81:a6:6d:d9:ba:52:5e:b8:fd: e0:1a:38:ed:3b:ac:ec:da:34:cb:f5:c8:db:35:0d:e1:7d:c5: da:48:03:23:3f:65:23:ef:57:68:e2:95:22:22:9c:99:c0:07: 04:a9:58:8e:d0:be:b0:66:d3:28:5b:61:40:4a:1f:90:34:66: 5e:41:a4:eb:0a:91:ea:e7:f5:ab:5a:e5:c0:9e:99:66:2c:6f: 95:da:2a:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiHTV3OBxuuM5leAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGZlYzk4ZDgtZjkxYS00N2Q2LWIyNWItNTUzMDY0M2NhOTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutP2Trzll2NXU/hcLY3veWbX4YZ33VHCLg+D 88WxwOSFvT7PnQPXIL25n61uUD6N6pVjgxNKI+/AglIKQ3B+8qtoIM/ufO5ulN8s IJlauS/QQBaOGkPpwlL+StNoRMbFQr7Tqp8CWE88HgzIaeoO0mfprHuSAf8b9+Jf rbY1Jfjfqdh7xTQOHTREE8UCMdd/hBKXbEEAJY4Hcg98+RRXR+sRDo0sDsNB1mQG PHzcBRAZae9YTNy9sbzL7QCPuv7vObmuypxNkNzuYJAkORWrCq/N2x/OvPWzp2/F KwzKpD9B60OUIUN7jjO6flA95+ZvU2wHvtkUzyZKWN8vYs6dqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/9RMktl03pPCSf7NJKJFFAEXWMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZjI4YzU3YzAtZWIyMi0z MWEwLWI0ZTgtMTdlNmI4YTgwNjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQMw0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSn5Brwax028w3MC5kSZwEI84PcqHDB4nLXT77fKc2ORvSCVIZhTgr9 ct/x/Nd4HwrX+9uPGeR5PbW/NgiA+Kf9BYAtPthsBEsloAyMAi1BiuwJf6DpE6oV HI+CRiIcblFbu5VtmwkmoWfPzn8G9PObxBhRd9LiXI73zA+K/c26pm0Gbl3IuMDP hKjiGyLeyMj5HEwaUm++F049CiRf79bWzouhkNGNz/dnkoGmbdm6Ul64/eAaOO07 rOzaNMv1yNs1DeF9xdpIAyM/ZSPvV2jilSIinJnABwSpWI7QvrBm0yhbYUBKH5A0 Zl5BpOsKkern9ata5cCemWYsb5XaKgQ= -----END CERTIFICATE-----Generated at Sat Oct 3 12:58:27 2026 by rpki-client