$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fdb8dea1-6339-3b80-8880-76404edcb3d7.roa File: fdb8dea1-6339-3b80-8880-76404edcb3d7.roa (raw, json) Hash identifier: rVb2z3/iWmVbmbSAEkyUmz55fhKWmlTQGhSKNx/sLx8= Subject key identifier: 10:49:8A:C5:6A:DD:9D:ED:C3:C1:D4:F5:C4:AB:62:89:90:51:81:FE Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F2957CF1CB5235F7C75B91600 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fdb8dea1-6339-3b80-8880-76404edcb3d7.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 58325 IP address blocks: 64.204.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:cf:1c:b5:23:5f:7c:75:b9:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=66baaf2d-75c2-4ffd-a15a-357fc34d0f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:09:13:7d:3f:f0:76:4e:f1:cf:d4:b9:46:2c: 98:97:a8:53:f6:73:57:fd:33:12:1f:19:d0:e6:89: b6:e7:d0:8a:db:d2:d9:c5:1c:03:0a:0b:f9:d8:82: 5e:52:8d:5b:58:f9:79:c5:f3:f4:62:e7:bb:2f:9a: 81:b7:60:f9:09:e0:f7:68:33:91:27:c1:28:b8:cf: 1a:e0:ac:2a:44:ac:0f:ce:4d:31:79:dc:e4:1c:45: 7e:ac:5f:ff:00:71:8e:a9:b2:5c:d0:0a:81:ae:30: 77:5c:43:aa:99:3f:8c:cb:f9:54:74:60:8a:a5:fa: 70:1b:af:6f:8e:27:0b:98:fc:b4:36:b4:7d:c8:4b: ae:d6:97:44:3d:90:87:35:79:3a:be:9a:c8:8e:f4: c1:ef:c4:21:c0:74:be:19:27:8b:a2:c9:49:88:5f: 5a:e9:b1:f4:72:fc:90:c6:7d:1a:72:e2:2c:de:c6: 01:02:97:13:13:63:93:9d:0c:89:52:d4:2b:bd:10: 5f:f3:e9:eb:8a:9a:17:2d:9e:cf:62:dc:33:bf:80: 14:d7:45:34:b2:9c:03:6b:c0:1f:5d:3d:3f:16:9a: 93:7b:c0:8e:e7:8a:4a:ee:0f:fc:42:2d:8f:15:eb: c5:19:8b:a2:23:db:99:cb:5b:8e:15:b6:f1:5e:e4: 68:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:49:8A:C5:6A:DD:9D:ED:C3:C1:D4:F5:C4:AB:62:89:90:51:81:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fdb8dea1-6339-3b80-8880-76404edcb3d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:ab:9c:75:4d:af:d3:aa:e8:dc:2c:14:9c:b0:35:8f:65:bf: 29:5c:8e:e8:af:72:19:de:7e:89:20:d1:99:ff:a5:a3:73:f3: 0e:21:c9:30:c0:e4:db:39:b4:1c:67:2f:a1:28:78:ef:7a:f0: a4:c7:15:58:33:27:03:fb:49:9e:61:56:e8:68:5d:26:e2:e8: 24:42:7a:a9:94:77:69:b2:2a:13:98:8d:d4:03:a4:d3:f0:4a: 0a:69:a0:e9:09:fc:ad:4e:d3:c5:f5:8a:f1:8e:70:92:cc:27: 2b:89:e4:4c:2c:b6:f2:b0:e6:9e:08:92:b1:5c:11:e5:68:02: d7:c9:36:21:70:1d:00:e8:a4:84:a0:da:55:1e:fe:c9:04:dc: 66:2f:ea:78:01:e5:d6:e2:e2:43:b9:62:21:57:c5:92:ca:6c: f1:11:66:8d:47:af:53:d4:f8:f1:fc:de:8e:13:bc:7d:b0:40: cf:ea:df:7c:29:07:d5:ce:f8:91:59:cd:20:5b:b8:bf:70:a5: 0c:27:d1:d4:4f:a5:08:94:24:45:02:48:af:69:c9:d7:77:5e: 01:36:54:55:5e:b3:23:78:ef:59:ad:33:92:ff:5f:64:e4:73: 29:3e:e4:13:a7:ac:e4:aa:83:f3:bd:73:6e:74:fd:34:43:f9: 84:d3:bf:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV88ctSNffHW5FgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk NjZiYWFmMmQtNzVjMi00ZmZkLWExNWEtMzU3ZmMzNGQwZjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwkTfT/wdk7xz9S5RiyYl6hT9nNX/TMSHxnQ 5om259CK29LZxRwDCgv52IJeUo1bWPl5xfP0Yue7L5qBt2D5CeD3aDORJ8EouM8a 4KwqRKwPzk0xedzkHEV+rF//AHGOqbJc0AqBrjB3XEOqmT+My/lUdGCKpfpwG69v jicLmPy0NrR9yEuu1pdEPZCHNXk6vprIjvTB78QhwHS+GSeLoslJiF9a6bH0cvyQ xn0acuIs3sYBApcTE2OTnQyJUtQrvRBf8+nripoXLZ7PYtwzv4AU10U0spwDa8Af XT0/FpqTe8CO54pK7g/8Qi2PFevFGYuiI9uZy1uOFbbxXuRo+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBJisVq3Z3tw8HU9cSrYomQUYH+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmRiOGRlYTEtNjMzOS0z YjgwLTg4ODAtNzY0MDRlZGNiM2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQMxcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK6rnHVNr9Oq6NwsFJywNY9lvylcjuivchnefokg0Zn/paNz8w4hyTDA 5Ns5tBxnL6EoeO968KTHFVgzJwP7SZ5hVuhoXSbi6CRCeqmUd2myKhOYjdQDpNPw SgppoOkJ/K1O08X1ivGOcJLMJyuJ5EwstvKw5p4IkrFcEeVoAtfJNiFwHQDopISg 2lUe/skE3GYv6ngB5dbi4kO5YiFXxZLKbPERZo1Hr1PU+PH83o4TvH2wQM/q33wp B9XO+JFZzSBbuL9wpQwn0dRPpQiUJEUCSK9pydd3XgE2VFVesyN471mtM5L/X2Tk cyk+5BOnrOSqg/O9c250/TRD+YTTv+Y= -----END CERTIFICATE-----Generated at Sun Sep 27 03:09:53 2026 by rpki-client