$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0c1cdd8f-5573-3c97-8c3b-5c34d4abce51.roa File: 0c1cdd8f-5573-3c97-8c3b-5c34d4abce51.roa (raw, json) Hash identifier: wZKjgtHCkkTETHWZDPaZ9C6pSMes0zoXIh3M0yTb4E8= Subject key identifier: A9:07:2A:C9:EF:FC:28:D1:83:77:0D:24:C6:07:65:EE:CC:B8:8A:17 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D667A5AD40DAE76BB1529F4A0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0c1cdd8f-5573-3c97-8c3b-5c34d4abce51.roa Signing time: Sun 05 Apr 2026 01:00:24 +0000 ROA not before: Sun 05 Apr 2026 01:00:24 +0000 ROA not after: Sat 04 Jul 2026 01:00:24 +0000 asID: 834 IP address blocks: 65.86.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:66:7a:5a:d4:0d:ae:76:bb:15:29:f4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 5 01:00:24 2026 GMT Not After : Jul 4 01:00:24 2026 GMT Subject: CN=53cab393-351c-4569-bf22-d7e27356d64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:43:8b:c2:38:df:7d:4d:de:ed:ef:ff:0f:e5: de:c5:8e:10:dd:56:ce:ee:2b:37:26:73:fa:cb:16: 5f:73:6d:b2:73:a2:1d:61:77:76:9c:8f:ee:cc:ac: e8:72:b1:12:9b:97:ba:13:ed:e1:9d:9c:1a:8d:6a: 66:dd:41:88:35:db:d4:80:4c:08:16:23:7b:cf:7d: a9:ae:32:00:51:4f:34:d2:d2:34:15:15:f8:60:c9: ab:7f:73:09:ef:53:29:74:65:d8:57:ca:73:b3:13: 82:60:a0:05:8d:d5:2b:e8:14:ab:35:64:d5:f8:07: ed:ac:bf:57:47:3f:02:16:1d:90:df:cf:7e:56:c5: c1:31:7a:bc:af:97:f9:52:a8:a0:44:f7:b8:7e:37: 6a:38:72:13:81:b2:78:8c:f2:da:32:6b:85:e0:35: 20:8a:a9:d1:39:7d:9b:d8:2a:6e:5d:aa:c5:3c:8b: 5e:60:64:83:72:c0:ad:61:fa:45:bd:62:6c:51:99: 9b:8c:1c:b7:ad:78:0a:95:0c:02:5e:d5:ce:e2:8b: e5:36:b7:f6:2a:55:47:51:61:cc:9f:5d:ea:e0:9d: eb:cc:f0:1c:c7:40:97:86:d4:32:2a:f4:95:c9:90: 38:a4:27:f3:38:27:e5:8d:eb:68:70:b5:40:14:90: 40:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:07:2A:C9:EF:FC:28:D1:83:77:0D:24:C6:07:65:EE:CC:B8:8A:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0c1cdd8f-5573-3c97-8c3b-5c34d4abce51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:a0:e6:df:a1:b4:e7:a5:2a:be:fe:e5:d8:85:89:fe:92:67: 21:f8:d4:fd:9a:b2:0e:f6:94:4c:40:0a:97:04:85:f7:80:1d: 67:a9:70:57:c1:0a:a4:4c:98:6d:72:46:d8:07:af:02:70:80: f9:b9:00:47:b3:63:48:11:76:8a:16:0a:e7:83:31:fb:e3:db: 59:a6:35:06:b4:ce:3f:62:72:76:30:75:a0:18:c5:b5:61:e0: 74:1d:32:8b:2c:0c:4f:e2:98:58:db:d4:e6:33:b0:24:38:28: 96:6e:75:3a:b1:66:42:a5:7a:0c:ab:d9:53:d5:e7:9c:f5:23: d7:57:da:f3:35:41:86:b4:19:1a:e8:30:5c:93:f2:3d:7e:8d: 8e:9c:19:5e:2c:a7:62:e4:a0:1b:da:36:ce:f1:b0:9b:2c:65: b4:7d:24:9a:ea:a9:f9:52:53:64:9e:de:1c:72:37:2a:95:7a: dd:a5:01:f3:6f:57:c7:60:9b:d4:03:ad:e7:f6:df:af:4c:7a: 8f:5c:da:7e:49:5e:28:fe:c6:d6:a9:10:de:63:3a:c4:ec:4f: ac:da:96:76:bc:09:d2:c9:39:1e:98:c0:f5:03:43:8f:5f:9f: 09:e2:f2:07:88:63:19:10:f8:25:3b:6a:6d:9c:78:c5:74:08: b3:5d:74:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1melrUDa52uxUp9KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQwNTAxMDAyNFoXDTI2MDcwNDAxMDAyNFowLzEtMCsGA1UEAxMk NTNjYWIzOTMtMzUxYy00NTY5LWJmMjItZDdlMjczNTZkNjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokOLwjjffU3e7e//D+XexY4Q3VbO7is3JnP6 yxZfc22yc6IdYXd2nI/uzKzocrESm5e6E+3hnZwajWpm3UGINdvUgEwIFiN7z32p rjIAUU800tI0FRX4YMmrf3MJ71MpdGXYV8pzsxOCYKAFjdUr6BSrNWTV+AftrL9X Rz8CFh2Q389+VsXBMXq8r5f5UqigRPe4fjdqOHITgbJ4jPLaMmuF4DUgiqnROX2b 2CpuXarFPIteYGSDcsCtYfpFvWJsUZmbjBy3rXgKlQwCXtXO4ovlNrf2KlVHUWHM n13q4J3rzPAcx0CXhtQyKvSVyZA4pCfzOCfljetocLVAFJBAHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkHKsnv/CjRg3cNJMYHZe7MuIoXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGMxY2RkOGYtNTU3My0z Yzk3LThjM2ItNWMzNGQ0YWJjZTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVZjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGg5t+htOelKr7+5diFif6SZyH41P2asg72lExACpcEhfeAHWepcFfB CqRMmG1yRtgHrwJwgPm5AEezY0gRdooWCueDMfvj21mmNQa0zj9icnYwdaAYxbVh 4HQdMossDE/imFjb1OYzsCQ4KJZudTqxZkKlegyr2VPV55z1I9dX2vM1QYa0GRro MFyT8j1+jY6cGV4sp2LkoBvaNs7xsJssZbR9JJrqqflSU2Se3hxyNyqVet2lAfNv V8dgm9QDref2369Meo9c2n5JXij+xtapEN5jOsTsT6zalna8CdLJOR6YwPUDQ49f nwni8geIYxkQ+CU7am2ceMV0CLNddA4= -----END CERTIFICATE-----Generated at Fri Apr 10 23:18:12 2026 by rpki-client