$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f372eb06-4299-3742-ad5e-c4330f9a30da.roa File: f372eb06-4299-3742-ad5e-c4330f9a30da.roa (raw, json) Hash identifier: 66UDrQOwGUdi8Udf7xnq6srMUTcMcWO6rl4CLZCuUj8= Subject key identifier: A3:B1:BF:08:C2:E0:08:00:A5:0B:7B:D7:7B:6B:55:10:28:FA:B2:04 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F27F259C159C362FEDD11C280 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f372eb06-4299-3742-ad5e-c4330f9a30da.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 834 IP address blocks: 64.204.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:59:c1:59:c3:62:fe:dd:11:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=4b5e071a-d263-4fc8-9031-e14350d97d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:04:67:b9:cb:df:34:85:c5:68:97:33:82:e9: cd:7e:81:5b:b3:5e:66:00:2f:d6:55:01:2f:8e:f5: 36:ad:9e:67:d2:4c:43:24:0d:a5:bd:77:c2:ba:7d: 10:6d:46:6b:95:ce:dc:39:1e:0a:c8:b9:9f:8b:85: a3:88:64:47:03:1f:a0:ac:37:6d:c4:a0:21:f0:11: 11:42:11:04:2c:8b:91:c0:22:89:c4:ac:ad:9d:22: 9a:12:6f:36:65:58:d1:6a:ac:6b:63:ca:16:72:ec: 20:6f:16:07:4c:07:dd:f7:24:97:bd:0a:66:0a:8b: ba:fe:fa:f5:0f:a6:7a:9f:3e:c2:22:73:ec:d4:9a: 65:56:f2:97:33:39:cd:13:74:e2:d1:eb:2e:ef:bb: cd:e5:53:c2:a6:38:38:78:c8:83:65:f9:15:68:a6: 58:f7:94:f7:aa:f1:4f:1a:77:8c:fc:c3:1f:24:23: bf:01:cc:48:59:ed:29:fb:6d:78:81:4f:45:46:18: 76:3d:7f:cd:aa:0f:23:c8:46:cc:0a:a3:a6:99:81: b4:19:ac:4c:9b:cc:20:f9:91:fb:d4:2c:82:1c:cd: 4b:9b:30:e0:ed:4d:b6:9b:27:eb:7e:9d:33:77:9e: 5d:7d:15:bc:8f:8f:ac:84:f2:76:02:c0:96:14:84: b6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B1:BF:08:C2:E0:08:00:A5:0B:7B:D7:7B:6B:55:10:28:FA:B2:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f372eb06-4299-3742-ad5e-c4330f9a30da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:ac:7d:50:3a:5c:1a:06:a2:4c:ca:6a:cd:bc:b9:57:23:3f: 48:74:f8:05:1f:dc:a3:c7:fc:e6:75:3e:60:69:eb:9d:33:75: a3:3a:7c:0b:72:fd:f7:fe:ff:55:ab:66:f1:a1:1d:cb:5e:94: 46:de:2d:0b:af:c6:40:4f:c2:85:88:6b:6c:78:a1:32:97:78: 5b:2a:9e:4d:bf:0e:d8:14:d8:d3:2a:26:c9:17:f2:4b:d6:b6: 99:88:c9:61:8c:3c:7c:ac:3d:33:8b:6c:02:43:5b:e1:80:5b: 4b:78:bf:bf:54:18:a0:80:3e:53:6e:5c:c6:62:3c:e5:ed:6f: db:cf:cd:21:b6:58:bb:7b:42:2c:c6:47:a5:b6:f9:3b:b9:6c: 3d:8d:ea:eb:a9:7b:d8:0b:56:a7:0a:83:4b:96:51:d6:9e:09: d6:c8:f7:6a:2e:b8:c1:bf:0c:3b:df:f3:23:d8:6c:ad:4c:7e: 08:08:03:8f:4c:27:41:bd:47:a6:06:72:d6:e9:e4:be:ac:8c: 18:2a:6f:5c:54:7a:23:48:4b:5d:cd:b9:02:dc:59:47:97:f3: f9:3f:af:e7:c5:53:73:67:e3:14:bf:e3:76:54:74:82:eb:a3: c4:f5:9a:78:c1:4e:82:2c:29:5b:59:7b:ed:83:b9:77:a7:cc: 95:24:b3:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8n8lnBWcNi/t0RwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk NGI1ZTA3MWEtZDI2My00ZmM4LTkwMzEtZTE0MzUwZDk3ZDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgARnucvfNIXFaJczgunNfoFbs15mAC/WVQEv jvU2rZ5n0kxDJA2lvXfCun0QbUZrlc7cOR4KyLmfi4WjiGRHAx+grDdtxKAh8BER QhEELIuRwCKJxKytnSKaEm82ZVjRaqxrY8oWcuwgbxYHTAfd9ySXvQpmCou6/vr1 D6Z6nz7CInPs1JplVvKXMznNE3Ti0esu77vN5VPCpjg4eMiDZfkVaKZY95T3qvFP GneM/MMfJCO/AcxIWe0p+214gU9FRhh2PX/Nqg8jyEbMCqOmmYG0GaxMm8wg+ZH7 1CyCHM1LmzDg7U22myfrfp0zd55dfRW8j4+shPJ2AsCWFIS2JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOxvwjC4AgApQt713trVRAo+rIEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZjM3MmViMDYtNDI5OS0z NzQyLWFkNWUtYzQzMzBmOWEzMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQMxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABysfVA6XBoGokzKas28uVcjP0h0+AUf3KPH/OZ1PmBp650zdaM6fAty /ff+/1WrZvGhHctelEbeLQuvxkBPwoWIa2x4oTKXeFsqnk2/DtgU2NMqJskX8kvW tpmIyWGMPHysPTOLbAJDW+GAW0t4v79UGKCAPlNuXMZiPOXtb9vPzSG2WLt7QizG R6W2+Tu5bD2N6uupe9gLVqcKg0uWUdaeCdbI92ouuMG/DDvf8yPYbK1MfggIA49M J0G9R6YGctbp5L6sjBgqb1xUeiNIS13NuQLcWUeX8/k/r+fFU3Nn4xS/43ZUdILr o8T1mnjBToIsKVtZe+2DuXenzJUksyQ= -----END CERTIFICATE-----Generated at Sat Oct 3 09:00:07 2026 by rpki-client