$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/daea1d32-9330-32a9-8559-afb521212b02.roa File: daea1d32-9330-32a9-8559-afb521212b02.roa (raw, json) Hash identifier: VYFaJgQtfDS+VIkHCOuGIiKISbnRGvONuxDT1Ej9+T0= Subject key identifier: 0D:86:BC:80:FF:CF:BA:1F:CE:86:9F:F8:AD:33:C6:60:E6:76:D5:55 Certificate issuer: /CN=dafe2535-2dc5-4d47-b03e-d44eea26032f Certificate serial: 010D0C9F4328584D6AAA855C3A5E516381682080 Authority key identifier: 37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/daea1d32-9330-32a9-8559-afb521212b02.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 3257 IP address blocks: 76.10.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:85:5c:3a:5e:51:63:81:68:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafe2535-2dc5-4d47-b03e-d44eea26032f Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=f1d333bd-b82e-42da-90e0-fd2703cf6088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f1:4b:1d:c8:b1:1f:02:bb:c1:57:bb:90:b1: d8:b2:cc:40:7a:0a:7e:95:37:5b:d6:31:23:79:d1: cc:9d:85:30:d4:b6:6d:8c:cc:cf:e9:3f:35:f6:8f: 52:ae:6b:a1:fe:07:e0:d6:93:ef:c2:49:18:10:3c: c7:c0:e7:06:58:1f:43:a4:6f:b5:2d:b7:cb:a5:ec: 6b:29:be:fc:52:0a:3b:d6:7d:83:b0:44:66:22:41: 47:5a:d5:3b:9c:49:d8:aa:01:c8:4b:54:c3:8a:04: 18:f7:43:c8:e1:90:95:22:9c:3a:2a:72:d6:10:9a: 08:91:83:da:8f:57:6c:c4:5b:c1:8b:ea:e0:b7:ee: 36:b0:62:72:c9:58:00:bb:bf:b2:72:37:e3:46:56: 8d:26:df:95:cd:c0:ab:22:1f:28:6b:ea:f3:57:4d: c1:49:dc:b2:f6:98:58:13:79:1b:da:59:2f:d6:62: ef:66:d5:56:46:2c:fd:8a:1a:fc:d8:e4:42:ad:4b: bf:9a:fe:b6:42:02:06:9d:80:c2:ca:4e:4b:70:ed: 9e:0a:e1:a0:06:40:3a:49:e6:9c:c9:c3:81:e8:dd: 95:44:6c:fc:ca:54:a4:7d:91:84:4a:86:29:77:cb: b0:56:6e:5f:ae:f1:80:49:f3:36:d5:74:24:d9:63: 66:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:86:BC:80:FF:CF:BA:1F:CE:86:9F:F8:AD:33:C6:60:E6:76:D5:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/daea1d32-9330-32a9-8559-afb521212b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl X509v3 Authority Key Identifier: keyid:37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer sbgp-ipAddrBlock: critical IPv4: 76.10.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:39:8d:38:c4:18:94:ce:c9:67:ec:9f:2a:e4:5c:f4:e0:7d: c0:c4:23:45:45:5e:72:c0:28:23:1a:7c:9c:bd:cc:50:35:2e: da:8f:2e:95:08:6d:7f:fe:96:03:cd:02:3c:4c:ab:8f:b1:2a: 8e:fa:1a:f4:f8:5e:bf:15:9f:46:54:5b:ac:63:37:65:75:05: 7c:e4:e8:d6:52:3c:04:28:43:c5:e7:3b:72:60:41:9e:ea:4d: c0:01:05:9c:4f:c5:5e:88:43:0b:0b:29:63:c6:28:c1:f8:3d: 3c:11:59:85:8c:39:86:13:39:e2:c8:68:fd:35:64:12:36:86: fb:b5:84:f7:7e:da:2b:ee:18:23:a0:2e:96:a5:c7:4a:c3:18: e5:83:05:69:f6:19:61:dd:47:42:86:bd:a1:68:35:e7:45:c7: 14:9f:70:31:c4:92:7f:89:6d:7f:f5:51:89:60:fb:f9:4f:ac: de:4e:21:7a:88:bf:a4:b7:99:db:e7:52:fb:01:4c:67:b5:cb: 86:87:48:4d:98:cb:65:b3:fa:8f:28:10:fb:aa:9d:08:e0:b1: ac:96:cc:5b:c9:0a:db:8f:b7:98:e2:90:f2:44:51:e1:c8:1f: 23:74:8a:49:49:79:92:86:3d:3f:59:5e:ab:19:79:f4:8b:4e: 03:ba:9f:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqoVcOl5RY4FoIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFmZTI1MzUtMmRjNS00ZDQ3LWIwM2UtZDQ0ZWVhMjYw MzJmMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk ZjFkMzMzYmQtYjgyZS00MmRhLTkwZTAtZmQyNzAzY2Y2MDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfFLHcixHwK7wVe7kLHYssxAegp+lTdb1jEj edHMnYUw1LZtjMzP6T819o9Srmuh/gfg1pPvwkkYEDzHwOcGWB9DpG+1LbfLpexr Kb78Ugo71n2DsERmIkFHWtU7nEnYqgHIS1TDigQY90PI4ZCVIpw6KnLWEJoIkYPa j1dsxFvBi+rgt+42sGJyyVgAu7+ycjfjRlaNJt+VzcCrIh8oa+rzV03BSdyy9phY E3kb2lkv1mLvZtVWRiz9ihr82ORCrUu/mv62QgIGnYDCyk5LcO2eCuGgBkA6Seac ycOB6N2VRGz8ylSkfZGESoYpd8uwVm5frvGASfM21XQk2WNm/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2GvID/z7ofzoaf+K0zxmDmdtVVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZl MjUzNS0yZGM1LTRkNDctYjAzZS1kNDRlZWEyNjAzMmYvZGFlYTFkMzItOTMzMC0z MmE5LTg1NTktYWZiNTIxMjEyYjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGFmZTI1MzUtMmRjNS00ZDQ3LWIw M2UtZDQ0ZWVhMjYwMzJmL2RhZmUyNTM1LTJkYzUtNGQ0Ny1iMDNlLWQ0NGVlYTI2 MDMyZi5jcmwwHwYDVR0jBBgwFoAUN8t1jDs52bn6L7Uc75kQZ5e56xAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZlMjUzNS0yZGM1LTRkNDctYjAzZS1kNDRl ZWEyNjAzMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETArwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABA5jTjEGJTOyWfsnyrkXPTgfcDEI0VFXnLAKCMafJy9zFA1LtqPLpUI bX/+lgPNAjxMq4+xKo76GvT4Xr8Vn0ZUW6xjN2V1BXzk6NZSPAQoQ8XnO3JgQZ7q TcABBZxPxV6IQwsLKWPGKMH4PTwRWYWMOYYTOeLIaP01ZBI2hvu1hPd+2ivuGCOg Lpalx0rDGOWDBWn2GWHdR0KGvaFoNedFxxSfcDHEkn+JbX/1UYlg+/lPrN5OIXqI v6S3mdvnUvsBTGe1y4aHSE2Yy2Wz+o8oEPuqnQjgsayWzFvJCtuPt5jikPJEUeHI HyN0iklJeZKGPT9ZXqsZefSLTgO6n50= -----END CERTIFICATE-----Generated at Wed Apr 8 22:53:40 2026 by rpki-client