$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0f640c53-a936-3813-849c-0d22215afe4b.roa File: 0f640c53-a936-3813-849c-0d22215afe4b.roa (raw, json) Hash identifier: yhkTJ8INzlvk2182daxpKJHqFwNbijeHX6tyYQsTJl0= Subject key identifier: A8:B7:BD:00:D4:57:2E:9A:BB:D1:E5:05:BD:88:68:40:34:FB:8A:B5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D59EE7F745EB3581ED7128400 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0f640c53-a936-3813-849c-0d22215afe4b.roa Signing time: Tue 31 Mar 2026 13:09:04 +0000 ROA not before: Tue 31 Mar 2026 13:09:04 +0000 ROA not after: Mon 29 Jun 2026 13:09:04 +0000 asID: 2914 IP address blocks: 74.2.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ee:7f:74:5e:b3:58:1e:d7:12:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 31 13:09:04 2026 GMT Not After : Jun 29 13:09:04 2026 GMT Subject: CN=0d6494df-8a5a-450e-a86b-6d70bcd1d25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4b:fb:d8:e8:89:ca:d1:ad:27:49:a1:49:6b: 1e:2d:35:09:62:14:1c:35:5b:f8:67:27:81:46:f1: 92:0b:cc:0b:d6:1f:30:f1:11:a1:3f:c1:fb:ca:93: 44:82:43:91:9c:04:fd:a1:2f:7f:1f:48:32:91:20: 82:64:6b:f3:82:8c:9a:42:7f:a0:d5:61:88:62:ea: 91:fc:9c:09:70:12:90:ca:c7:4f:15:13:94:d2:48: 60:c7:d3:69:16:6f:d2:30:e1:b9:6a:77:ab:21:f4: e3:16:7d:6f:25:98:83:d9:3f:b5:10:5c:ea:4c:24: 42:1c:74:03:db:9e:38:93:96:6e:53:54:e4:53:7b: ee:ec:e1:e7:8c:82:f2:4b:7e:dd:2c:95:c0:08:5e: 0b:25:ae:5f:4c:f8:bd:d4:e1:05:9c:b7:f4:db:99: 04:da:68:c6:56:0e:45:83:39:ee:22:cc:64:77:66: 84:fd:9c:3a:c8:b0:2a:66:db:9b:29:0a:54:cb:b9: 55:f2:1d:fc:3a:34:ed:3f:d4:ed:fd:7f:e3:c0:2f: 98:99:fd:5e:79:64:30:0b:bd:69:01:ae:86:76:cc: b3:f5:c2:b8:b5:b4:42:00:ce:f5:34:a8:f2:6f:7b: 54:3f:80:83:7e:86:a9:21:e0:91:e0:ee:e1:6a:9c: 06:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B7:BD:00:D4:57:2E:9A:BB:D1:E5:05:BD:88:68:40:34:FB:8A:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0f640c53-a936-3813-849c-0d22215afe4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.2.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:e2:8a:72:e7:96:b5:2e:18:a7:64:34:23:0e:e3:e1:76:77: 9e:d6:0f:1f:47:a6:96:c4:6f:d8:bc:78:14:97:13:6e:ee:e4: 89:b0:81:ec:d9:3a:c4:68:87:c9:2a:ff:a7:6c:8e:f5:a4:2c: d2:5c:f5:ab:c1:2a:fc:89:94:6b:35:e2:5d:ae:13:e5:5b:64: e5:a3:28:d8:b0:51:5e:21:86:78:e2:29:56:fd:7b:50:c9:15: 2c:24:ec:26:ee:73:0b:e8:f6:2e:61:81:d8:1b:d5:51:d5:a9: f2:17:e5:31:b1:6d:77:81:a3:9a:76:9b:ad:7e:35:a3:8d:28: 0f:89:21:3d:34:1c:90:05:68:40:1c:42:9d:bb:c8:0c:ca:3e: 86:a3:98:e0:de:19:d3:cc:0c:fe:ba:50:e6:fc:9e:3b:0c:23: 37:e3:ec:cf:3d:6f:dc:b7:e8:da:1c:3d:4e:da:37:1a:a3:59: 9c:8b:d1:29:ec:88:72:d1:90:26:f5:fb:41:1d:73:24:aa:ad: c8:85:bd:40:b5:da:ec:10:f9:5a:20:3d:60:d2:60:2c:6a:36: b1:c4:0e:8f:93:0c:a3:af:8b:b8:b3:64:d0:9d:22:95:72:65: 57:96:f8:7f:1b:e6:4a:1b:03:6e:91:cb:37:c7:7c:b6:c4:96: 2c:2f:55:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z7n90XrNYHtcShAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMzMTEzMDkwNFoXDTI2MDYyOTEzMDkwNFowLzEtMCsGA1UEAxMk MGQ2NDk0ZGYtOGE1YS00NTBlLWE4NmItNmQ3MGJjZDFkMjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUv72OiJytGtJ0mhSWseLTUJYhQcNVv4ZyeB RvGSC8wL1h8w8RGhP8H7ypNEgkORnAT9oS9/H0gykSCCZGvzgoyaQn+g1WGIYuqR /JwJcBKQysdPFROU0khgx9NpFm/SMOG5anerIfTjFn1vJZiD2T+1EFzqTCRCHHQD 2544k5ZuU1TkU3vu7OHnjILyS37dLJXACF4LJa5fTPi91OEFnLf025kE2mjGVg5F gznuIsxkd2aE/Zw6yLAqZtubKQpUy7lV8h38OjTtP9Tt/X/jwC+Ymf1eeWQwC71p Aa6Gdsyz9cK4tbRCAM71NKjyb3tUP4CDfoapIeCR4O7hapwGGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKi3vQDUVy6au9HlBb2IaEA0+4q1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGY2NDBjNTMtYTkzNi0z ODEzLTg0OWMtMGQyMjIxNWFmZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSgLcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPiinLnlrUuGKdkNCMO4+F2d57WDx9HppbEb9i8eBSXE27u5ImwgezZ OsRoh8kq/6dsjvWkLNJc9avBKvyJlGs14l2uE+VbZOWjKNiwUV4hhnjiKVb9e1DJ FSwk7Cbucwvo9i5hgdgb1VHVqfIX5TGxbXeBo5p2m61+NaONKA+JIT00HJAFaEAc Qp27yAzKPoajmODeGdPMDP66UOb8njsMIzfj7M89b9y36NocPU7aNxqjWZyL0Sns iHLRkCb1+0EdcySqrciFvUC12uwQ+VogPWDSYCxqNrHEDo+TDKOvi7izZNCdIpVy ZVeW+H8b5kobA26RyzfHfLbEliwvVf8= -----END CERTIFICATE-----Generated at Wed Apr 8 14:50:09 2026 by rpki-client