$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1a8984fe-b0b4-36b8-8d81-aa44ad4bfb6f.roa File: 1a8984fe-b0b4-36b8-8d81-aa44ad4bfb6f.roa (raw, json) Hash identifier: HaYce4X+X50IpGjj9gXkdWDlIvHfR0S/lLJqu+2a/HA= Subject key identifier: 87:11:D9:73:CE:EA:2A:42:EC:9F:81:DE:1C:17:C2:F0:24:F0:BB:EA Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D7007A1850FC632E84B9F442C Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1a8984fe-b0b4-36b8-8d81-aa44ad4bfb6f.roa Signing time: Wed 08 Apr 2026 11:07:29 +0000 ROA not before: Wed 08 Apr 2026 11:07:29 +0000 ROA not after: Tue 07 Jul 2026 11:07:29 +0000 asID: 40352 IP address blocks: 64.204.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:07:a1:85:0f:c6:32:e8:4b:9f:44:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 8 11:07:29 2026 GMT Not After : Jul 7 11:07:29 2026 GMT Subject: CN=c64487f6-bb9b-4da9-b26f-d3fb3446eed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2c:76:6e:e8:0a:76:36:08:ec:87:fc:94:df: ea:b3:15:0a:58:9d:e4:63:95:a2:2d:7e:71:65:0b: 43:e4:ec:ae:a7:a3:cd:e0:d1:a3:90:72:4f:2f:56: 18:f8:96:a3:2c:1a:e2:0a:77:ea:a9:b9:a7:5c:0f: 78:3c:a8:88:c4:fc:04:89:b5:5a:ee:18:c6:2b:ae: fb:b2:b3:9f:bf:83:b9:4d:a1:d8:65:39:29:12:7f: 23:99:18:84:a4:d2:99:64:e9:f8:ad:ed:a2:a1:0f: 88:83:d0:64:47:5e:0f:cc:f4:a0:ee:6c:9c:89:0a: dd:53:68:14:71:69:17:02:b4:b5:61:6b:ab:ba:75: e5:e2:87:0e:ee:7a:de:fa:2f:9b:04:88:67:e5:7c: 8c:2a:97:63:61:c1:3a:6e:35:96:7e:8b:68:10:cd: 6a:b0:52:50:20:7e:b0:46:db:31:77:4e:3a:d6:56: a1:7c:af:90:1e:54:31:fa:90:d0:ba:d1:7f:33:66: d0:c2:43:89:db:39:75:4a:6f:7d:e4:51:cc:8f:b0: 6c:4c:20:ba:65:f2:b0:dd:e5:ea:72:8f:d2:d3:aa: 55:bc:54:76:71:8e:3b:0c:fe:36:32:81:e4:de:70: de:6a:4a:5a:af:79:4d:62:a6:c3:af:43:c8:4f:ed: 4a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:11:D9:73:CE:EA:2A:42:EC:9F:81:DE:1C:17:C2:F0:24:F0:BB:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1a8984fe-b0b4-36b8-8d81-aa44ad4bfb6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:80:bb:a3:ce:4e:2c:c8:70:32:c4:24:bc:89:e9:ac:97:a4: 4a:7c:12:b4:2f:0d:76:62:69:cc:36:48:bb:d8:c1:96:d1:c8: 5a:42:1a:66:fa:ad:3e:54:a1:77:db:bc:8e:bb:4a:ef:d3:b1: f3:43:a8:f5:00:2c:f3:36:4b:3d:b4:12:e8:74:15:39:19:0d: 11:b7:6e:64:b0:66:d0:d9:06:41:bb:42:fd:b2:7f:60:5d:41: b5:9d:a4:14:b7:f0:dd:1f:a0:ea:f8:4e:9d:74:44:03:02:b5: c0:8a:f2:e1:56:6d:26:7d:47:45:3f:a1:34:d7:c4:03:fa:6b: 6a:18:e8:c2:4a:10:9c:28:ec:d6:c8:a1:e7:ec:c0:25:a3:4f: 75:7b:0d:75:da:69:53:65:db:e5:74:5f:64:29:09:25:c2:90: 99:5b:4f:2d:b5:e7:f2:73:f3:dc:63:23:10:19:d6:b1:e4:86: a6:17:f1:da:15:b9:70:b9:22:a7:a6:44:e3:58:50:8e:fb:b8: 77:d2:ab:e7:de:98:8b:89:49:58:26:37:e7:54:37:1e:d6:50: 5b:45:8b:6e:bb:ea:d1:04:58:e1:da:9c:1d:0d:a0:4f:f8:4e: 55:0e:26:61:77:1e:72:20:ff:44:67:73:fc:ec:fd:4d:93:14: f4:73:f0:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wB6GFD8Yy6EufRCwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQwODExMDcyOVoXDTI2MDcwNzExMDcyOVowLzEtMCsGA1UEAxMk YzY0NDg3ZjYtYmI5Yi00ZGE5LWIyNmYtZDNmYjM0NDZlZWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCx2bugKdjYI7If8lN/qsxUKWJ3kY5WiLX5x ZQtD5Oyup6PN4NGjkHJPL1YY+JajLBriCnfqqbmnXA94PKiIxPwEibVa7hjGK677 srOfv4O5TaHYZTkpEn8jmRiEpNKZZOn4re2ioQ+Ig9BkR14PzPSg7myciQrdU2gU cWkXArS1YWurunXl4ocO7nre+i+bBIhn5XyMKpdjYcE6bjWWfotoEM1qsFJQIH6w Rtsxd0461lahfK+QHlQx+pDQutF/M2bQwkOJ2zl1Sm995FHMj7BsTCC6ZfKw3eXq co/S06pVvFR2cY47DP42MoHk3nDeakpar3lNYqbDr0PIT+1KLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcR2XPO6ipC7J+B3hwXwvAk8LvqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMWE4OTg0ZmUtYjBiNC0z NmI4LThkODEtYWE0NGFkNGJmYjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuAu6POTizIcDLEJLyJ6ayXpEp8ErQvDXZiacw2SLvYwZbRyFpCGmb6 rT5UoXfbvI67Su/TsfNDqPUALPM2Sz20Euh0FTkZDRG3bmSwZtDZBkG7Qv2yf2Bd QbWdpBS38N0foOr4Tp10RAMCtcCK8uFWbSZ9R0U/oTTXxAP6a2oY6MJKEJwo7NbI oefswCWjT3V7DXXaaVNl2+V0X2QpCSXCkJlbTy215/Jz89xjIxAZ1rHkhqYX8doV uXC5IqemRONYUI77uHfSq+femIuJSVgmN+dUNx7WUFtFi2676tEEWOHanB0NoE/4 TlUOJmF3HnIg/0Rnc/zs/U2TFPRz8K0= -----END CERTIFICATE-----Generated at Fri Apr 10 23:12:57 2026 by rpki-client