$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/daea1d32-9330-32a9-8559-afb521212b02.roa File: daea1d32-9330-32a9-8559-afb521212b02.roa (raw, json) Hash identifier: f5PCEaauF3az5IkEJ1WIml++5kZ7uPJG8hmQWO2w/bg= Subject key identifier: F5:52:FB:00:6F:73:16:1D:B9:55:EE:93:02:B5:CF:48:D2:64:F4:2B Certificate issuer: /CN=dafe2535-2dc5-4d47-b03e-d44eea26032f Certificate serial: 010D0C9F4328584E4AEF49F155FD8BC5579B3740 Authority key identifier: 37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/daea1d32-9330-32a9-8559-afb521212b02.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 3257 IP address blocks: 76.10.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:49:f1:55:fd:8b:c5:57:9b:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafe2535-2dc5-4d47-b03e-d44eea26032f Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=f6ec3e68-618d-4904-b101-1b69c6ab87bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c7:44:c1:bd:dd:25:28:64:f6:f8:4c:31:47: 6a:94:9f:91:a8:6e:24:e5:c8:84:8d:70:4a:82:26: 4a:d0:95:f7:f7:41:b8:7f:78:ea:96:18:4e:bf:c0: d5:54:d1:f3:4c:96:1d:fa:d8:b9:20:22:a8:5a:d0: f9:53:67:3c:c4:fb:7f:f1:9b:22:cd:53:bc:d4:2a: 3b:12:f3:95:8d:ec:30:ec:bb:3a:6d:42:a8:56:75: 78:53:c4:a5:9f:08:dd:25:0e:7e:42:be:b9:14:fd: 67:6d:7b:2d:b4:45:06:c5:29:d6:86:a9:bf:ce:41: 79:61:8a:93:d3:10:41:d1:5b:38:45:85:db:8d:b6: ed:99:1e:41:a3:32:d2:b7:24:b5:b6:85:bc:48:c9: 58:25:92:f1:70:7a:fc:3c:8c:b2:6b:3d:bd:f2:ad: 96:7c:a1:6d:db:bc:7b:ad:2f:04:37:01:98:d7:b6: da:9a:71:0c:82:46:ef:98:66:57:38:bc:6f:de:19: e2:e4:96:2c:0d:da:14:a4:c7:ac:e0:39:a9:51:c0: 0d:f7:37:4c:fd:77:b8:a2:f0:36:e3:b4:f7:63:40: 28:f9:0c:b2:68:a1:f0:23:2b:d2:fb:77:9c:64:9e: f9:e8:7b:de:42:ee:20:24:fd:5a:17:bc:79:79:14: 34:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:52:FB:00:6F:73:16:1D:B9:55:EE:93:02:B5:CF:48:D2:64:F4:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/daea1d32-9330-32a9-8559-afb521212b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl X509v3 Authority Key Identifier: keyid:37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer sbgp-ipAddrBlock: critical IPv4: 76.10.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:60:a9:9b:28:5f:14:1b:af:1a:7e:33:db:fd:5d:45:c6:66: 1e:8b:f8:c4:52:bd:2b:d3:77:17:9c:f6:57:18:c7:cc:cb:b4: 9a:19:b4:02:87:b4:11:79:0d:96:12:d9:21:8a:5b:54:59:ef: 4d:cd:97:ce:e4:e5:97:4e:01:9d:2d:2b:ab:1a:b4:14:21:a9: 9e:96:b6:be:d0:ca:5d:c6:60:e2:9a:a4:06:50:d8:aa:ab:5c: e6:6b:66:c8:44:d0:f1:02:0e:eb:74:15:c7:39:4a:cd:b1:a2: 51:88:95:98:b6:55:e5:e2:52:11:c4:26:a8:6d:fe:0a:6b:6e: 1d:c3:73:93:92:5b:2e:14:8a:77:57:81:99:10:98:05:47:92: 45:d4:db:8f:97:7d:73:5d:35:91:93:cd:99:00:61:2c:34:67: 3a:d4:35:43:40:6b:29:c7:c3:77:ae:bb:b6:6d:76:cf:f4:5c: a4:d6:a0:bc:bb:2b:4e:9a:75:d5:ea:27:76:aa:06:fc:58:72: c0:98:58:ee:e1:94:71:56:ec:37:c2:89:73:ff:a2:7d:e8:ef: 4f:5e:d6:ff:7a:76:ae:d4:d8:fa:46:92:18:6d:71:bb:18:0d: e5:1a:f2:34:d7:d7:2f:02:78:bf:ac:81:17:b1:b1:2e:df:08: ec:05:10:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K70nxVf2LxVebN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFmZTI1MzUtMmRjNS00ZDQ3LWIwM2UtZDQ0ZWVhMjYw MzJmMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk ZjZlYzNlNjgtNjE4ZC00OTA0LWIxMDEtMWI2OWM2YWI4N2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMdEwb3dJShk9vhMMUdqlJ+RqG4k5ciEjXBK giZK0JX390G4f3jqlhhOv8DVVNHzTJYd+ti5ICKoWtD5U2c8xPt/8ZsizVO81Co7 EvOVjeww7Ls6bUKoVnV4U8SlnwjdJQ5+Qr65FP1nbXsttEUGxSnWhqm/zkF5YYqT 0xBB0Vs4RYXbjbbtmR5BozLStyS1toW8SMlYJZLxcHr8PIyyaz298q2WfKFt27x7 rS8ENwGY17bamnEMgkbvmGZXOLxv3hni5JYsDdoUpMes4DmpUcAN9zdM/Xe4ovA2 47T3Y0Ao+QyyaKHwIyvS+3ecZJ756HveQu4gJP1aF7x5eRQ01wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVS+wBvcxYduVXukwK1z0jSZPQrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZl MjUzNS0yZGM1LTRkNDctYjAzZS1kNDRlZWEyNjAzMmYvZGFlYTFkMzItOTMzMC0z MmE5LTg1NTktYWZiNTIxMjEyYjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGFmZTI1MzUtMmRjNS00ZDQ3LWIw M2UtZDQ0ZWVhMjYwMzJmL2RhZmUyNTM1LTJkYzUtNGQ0Ny1iMDNlLWQ0NGVlYTI2 MDMyZi5jcmwwHwYDVR0jBBgwFoAUN8t1jDs52bn6L7Uc75kQZ5e56xAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZlMjUzNS0yZGM1LTRkNDctYjAzZS1kNDRl ZWEyNjAzMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETArwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdgqZsoXxQbrxp+M9v9XUXGZh6L+MRSvSvTdxec9lcYx8zLtJoZtAKH tBF5DZYS2SGKW1RZ703Nl87k5ZdOAZ0tK6satBQhqZ6Wtr7Qyl3GYOKapAZQ2Kqr XOZrZshE0PECDut0Fcc5Ss2xolGIlZi2VeXiUhHEJqht/gprbh3Dc5OSWy4UindX gZkQmAVHkkXU24+XfXNdNZGTzZkAYSw0ZzrUNUNAaynHw3euu7Ztds/0XKTWoLy7 K06addXqJ3aqBvxYcsCYWO7hlHFW7DfCiXP/on3o709e1v96dq7U2PpGkhhtcbsY DeUa8jTX1y8CeL+sgRexsS7fCOwFELo= -----END CERTIFICATE-----Generated at Wed Jul 8 19:04:12 2026 by rpki-client