$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/024e169c-fd6c-3dc0-9041-4baf6d8ba725.roa File: 024e169c-fd6c-3dc0-9041-4baf6d8ba725.roa (raw, json) Hash identifier: veaXVTGs/AwlLviJFn/G8ICQVZL85+AK2ha1h0UF3KA= Subject key identifier: 48:A7:7F:E6:65:3B:45:6F:B2:2A:22:3B:1F:23:8D:6F:41:7E:C0:BF Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DE27DDAAB8774774EE05D5280 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/024e169c-fd6c-3dc0-9041-4baf6d8ba725.roa Signing time: Tue 19 May 2026 11:07:51 +0000 ROA not before: Tue 19 May 2026 11:07:51 +0000 ROA not after: Mon 17 Aug 2026 11:07:51 +0000 asID: 212238 IP address blocks: 64.51.234.0/23 maxlen: 23 68.165.240.0/22 maxlen: 22 68.167.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:7d:da:ab:87:74:77:4e:e0:5d:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 19 11:07:51 2026 GMT Not After : Aug 17 11:07:51 2026 GMT Subject: CN=4b06a873-f5cf-44ef-ad1b-177a702db243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fa:30:d3:00:39:56:51:1a:07:46:f0:1b:4c: b3:be:ba:15:fc:3b:73:e1:b2:f5:5e:db:ad:1a:f9: 0c:3c:f5:83:19:0c:78:aa:f1:f2:7f:fe:40:2a:90: f2:c8:c8:ae:0f:56:c4:db:89:ca:9a:fb:b2:5b:5b: 54:b6:56:c5:ba:5f:37:42:95:5e:e2:4b:d9:81:7b: 93:71:a8:0f:dd:ea:29:b5:31:d3:a6:29:ad:01:4f: 2f:93:58:f0:62:87:ec:81:7e:8e:77:d6:8c:a9:14: 77:fb:c2:ca:11:42:d7:1f:29:09:e4:03:ea:a4:d3: 1a:59:6a:c9:32:e0:3f:94:19:ff:d2:f8:80:aa:63: dd:e6:19:92:b5:63:06:5c:24:01:f0:fe:fd:0f:97: 1d:6f:57:31:53:9b:78:12:ad:05:67:e1:cf:42:60: 26:12:0d:92:19:52:c2:b2:9f:23:d6:aa:ef:97:2b: 6b:5b:26:9d:0a:20:bd:e5:2f:47:3f:b6:e2:a2:a0: f4:47:e0:73:66:57:bc:94:df:71:d6:9d:35:93:1d: be:61:12:34:4a:4b:fa:03:10:ca:64:ce:6d:a0:39: 17:05:b3:b3:8a:49:94:26:4d:a8:5b:a3:19:c9:e2: 75:05:65:45:b5:4e:45:ba:ca:1c:85:00:a5:6b:67: 03:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A7:7F:E6:65:3B:45:6F:B2:2A:22:3B:1F:23:8D:6F:41:7E:C0:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/024e169c-fd6c-3dc0-9041-4baf6d8ba725.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.51.234.0/23 68.165.240.0/22 68.167.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:5b:a4:6d:33:41:b1:b0:bf:9d:7b:9e:c9:35:4b:6c:d9:b3: 14:12:f0:4f:a9:b2:c9:f9:0e:d3:5c:5e:4a:a9:89:16:8a:05: 08:32:2a:92:61:bf:51:79:6b:63:b6:c6:e6:8a:f2:3c:56:2c: 60:64:76:62:ab:d6:c4:dc:68:47:81:1a:b9:9c:08:15:6d:e8: ca:51:db:fa:89:49:f3:5c:03:a2:b0:bd:31:7e:df:9b:93:f2: c6:80:61:79:e6:8d:59:48:68:4b:89:b5:21:39:e1:8a:e0:1a: 4d:7d:e4:33:63:85:80:6c:17:ad:df:5e:e9:35:78:96:f6:cb: 41:e4:a6:04:a1:32:b0:28:32:d9:eb:f9:09:1d:9d:31:fd:54: f0:24:ca:86:05:82:de:10:b9:86:17:0e:8b:ba:1f:85:77:7f: 70:64:3d:d9:76:83:98:9f:0a:a6:37:1b:b7:09:47:fe:9b:98: d1:3e:d4:77:f0:c3:37:5c:56:e2:ae:43:12:05:51:5f:f6:ad: 06:ac:d1:8f:1c:d2:4e:45:19:15:7d:c4:c8:68:26:88:b1:c2: 9f:b6:18:36:d3:84:e7:4c:1e:40:95:a7:bd:de:b6:c7:b2:41: 73:5c:00:43:45:e5:e7:70:65:2f:4c:0c:4a:c0:a8:a1:f7:8d: bf:60:9d:79 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE3ifdqrh3R3TuBdUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUxOTExMDc1MVoXDTI2MDgxNzExMDc1MVowLzEtMCsGA1UEAxMk NGIwNmE4NzMtZjVjZi00NGVmLWFkMWItMTc3YTcwMmRiMjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvow0wA5VlEaB0bwG0yzvroV/Dtz4bL1Xtut GvkMPPWDGQx4qvHyf/5AKpDyyMiuD1bE24nKmvuyW1tUtlbFul83QpVe4kvZgXuT cagP3eoptTHTpimtAU8vk1jwYofsgX6Od9aMqRR3+8LKEULXHykJ5APqpNMaWWrJ MuA/lBn/0viAqmPd5hmStWMGXCQB8P79D5cdb1cxU5t4Eq0FZ+HPQmAmEg2SGVLC sp8j1qrvlytrWyadCiC95S9HP7bioqD0R+BzZle8lN9x1p01kx2+YRI0Skv6AxDK ZM5toDkXBbOzikmUJk2oW6MZyeJ1BWVFtU5FusochQCla2cD/QIDAQABo4IDYTCC A10wHQYDVR0OBBYEFEinf+ZlO0VvsioiOx8jjW9BfsC/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDI0ZTE2OWMtZmQ2Yy0z ZGMwLTkwNDEtNGJhZjZkOGJhNzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBQDPqAwQC RKXwAwQCRKcsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAC1bpG0zQbGwv517nsk1S2zZsxQS8E+pssn5DtNc XkqpiRaKBQgyKpJhv1F5a2O2xuaK8jxWLGBkdmKr1sTcaEeBGrmcCBVt6MpR2/qJ SfNcA6KwvTF+35uT8saAYXnmjVlIaEuJtSE54YrgGk195DNjhYBsF63fXuk1eJb2 y0HkpgShMrAoMtnr+QkdnTH9VPAkyoYFgt4QuYYXDou6H4V3f3BkPdl2g5ifCqY3 G7cJR/6bmNE+1HfwwzdcVuKuQxIFUV/2rQas0Y8c0k5FGRV9xMhoJoixwp+2GDbT hOdMHkCVp73etseyQXNcAENF5edwZS9MDErAqKH3jb9gnXk= -----END CERTIFICATE-----Generated at Tue May 26 02:29:36 2026 by rpki-client