$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33c42892-fa25-3849-83ae-267a51f0ded0.roa File: 33c42892-fa25-3849-83ae-267a51f0ded0.roa (raw, json) Hash identifier: b7ky7/shWANuB0olE+e8GbYFcgYA2ipHBEMYqAW5898= Subject key identifier: 35:C4:C1:53:C8:56:E0:C8:A7:83:7C:69:68:2B:17:9F:D3:DD:56:CB Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D667A5AECFC2BBD14BCEC5940 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33c42892-fa25-3849-83ae-267a51f0ded0.roa Signing time: Sun 05 Apr 2026 01:00:24 +0000 ROA not before: Sun 05 Apr 2026 01:00:24 +0000 ROA not after: Sat 04 Jul 2026 01:00:24 +0000 asID: 834 IP address blocks: 68.165.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:66:7a:5a:ec:fc:2b:bd:14:bc:ec:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 5 01:00:24 2026 GMT Not After : Jul 4 01:00:24 2026 GMT Subject: CN=291eaf93-bbc7-43bb-af71-305e1f0809f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:5b:5a:05:cd:56:0c:de:ca:bd:19:51:65:8d: 00:34:be:e9:cd:11:d7:1c:e6:19:bb:91:e2:31:f2: f5:f3:b8:fe:3b:21:d5:e0:40:08:f3:f2:17:10:ec: 7b:52:df:71:e2:3d:3e:56:0a:dd:57:83:71:44:a7: 65:4f:98:fc:37:d5:cf:c5:07:a2:5a:b1:e9:3b:b8: 70:0c:35:a0:1d:48:c7:d0:09:c8:ef:d9:96:7f:7d: aa:5a:d7:1b:4a:e9:5f:3f:fc:cf:b3:b0:90:64:e7: 7c:ed:ad:73:a3:21:70:0c:ba:a7:c3:5c:90:61:bc: 86:50:18:44:58:78:c2:ec:ba:9e:05:5c:00:93:0c: 0a:f3:da:d5:9a:f0:76:84:a8:60:b3:25:a4:99:d4: 0b:8e:d5:89:8d:15:58:7b:e8:db:8d:39:e7:81:76: 97:d1:93:2b:c4:73:fc:1d:ac:87:8b:9b:0e:5a:d2: ef:a9:4b:e3:9b:b1:57:9a:20:c6:f4:59:54:57:74: 12:b8:bf:6c:9e:f5:8f:d0:42:ac:e4:a4:26:3b:25: 53:ff:2b:eb:dd:05:17:08:f8:6c:56:72:5c:57:81: 20:9a:ec:5f:c6:ed:32:d4:62:68:b9:8d:27:d4:40: 10:21:1c:1e:b9:f9:cf:63:36:0b:75:d1:1f:ba:f9: a5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C4:C1:53:C8:56:E0:C8:A7:83:7C:69:68:2B:17:9F:D3:DD:56:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33c42892-fa25-3849-83ae-267a51f0ded0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.165.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:74:72:d4:1e:42:2d:eb:fa:83:8e:78:c4:99:5f:19:1a:94: d4:39:71:74:62:0a:f8:8e:fb:bc:d8:7d:28:fc:f9:fb:21:7d: 3b:51:ff:1b:4b:e6:c6:4b:93:32:71:67:06:a8:9c:a3:d1:9f: a6:e6:d2:7e:52:d0:a7:85:f8:65:3b:3b:e4:c3:74:1e:a9:9e: d8:a5:24:6f:2d:dc:d4:00:c7:73:c5:8c:5d:ab:aa:45:76:44: 40:ff:11:95:49:aa:28:2a:22:c0:94:b4:3f:d8:e0:86:b4:8b: 3a:71:90:c9:cf:c5:71:3f:de:6e:a9:fe:cc:ae:56:7e:1a:de: 99:e0:58:17:e3:f4:ee:1e:ce:05:56:85:4e:3d:ce:0f:2d:e0: 76:f9:6a:be:f7:e0:0c:c3:8c:48:c4:94:db:48:b3:29:82:c1: ba:58:a2:ba:e8:78:53:09:95:be:73:27:63:b1:20:59:ac:c2: 99:c7:0f:50:b2:c4:ef:cc:f9:cc:bb:23:51:a0:ba:b0:82:13: 1a:c1:53:a6:8c:e1:e7:43:21:75:23:5d:bc:49:5b:06:42:f4: 99:af:e8:2b:ef:1f:6b:ca:fd:9e:c3:a6:6e:a1:2a:27:a1:5a: 4c:66:c1:a2:fb:e9:32:dd:c0:c3:62:43:bc:06:86:58:15:f2: 62:43:24:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1melrs/Cu9FLzsWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQwNTAxMDAyNFoXDTI2MDcwNDAxMDAyNFowLzEtMCsGA1UEAxMk MjkxZWFmOTMtYmJjNy00M2JiLWFmNzEtMzA1ZTFmMDgwOWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8FtaBc1WDN7KvRlRZY0ANL7pzRHXHOYZu5Hi MfL187j+OyHV4EAI8/IXEOx7Ut9x4j0+VgrdV4NxRKdlT5j8N9XPxQeiWrHpO7hw DDWgHUjH0AnI79mWf32qWtcbSulfP/zPs7CQZOd87a1zoyFwDLqnw1yQYbyGUBhE WHjC7LqeBVwAkwwK89rVmvB2hKhgsyWkmdQLjtWJjRVYe+jbjTnngXaX0ZMrxHP8 HayHi5sOWtLvqUvjm7FXmiDG9FlUV3QSuL9snvWP0EKs5KQmOyVT/yvr3QUXCPhs VnJcV4Egmuxfxu0y1GJouY0n1EAQIRweufnPYzYLddEfuvml2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXEwVPIVuDIp4N8aWgrF5/T3VbLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzNjNDI4OTItZmEyNS0z ODQ5LTgzYWUtMjY3YTUxZjBkZWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJ0ctQeQi3r+oOOeMSZXxkalNQ5cXRiCviO+7zYfSj8+fshfTtR/xtL 5sZLkzJxZwaonKPRn6bm0n5S0KeF+GU7O+TDdB6pntilJG8t3NQAx3PFjF2rqkV2 RED/EZVJqigqIsCUtD/Y4Ia0izpxkMnPxXE/3m6p/syuVn4a3pngWBfj9O4ezgVW hU49zg8t4Hb5ar734AzDjEjElNtIsymCwbpYorroeFMJlb5zJ2OxIFmswpnHD1Cy xO/M+cy7I1GgurCCExrBU6aM4edDIXUjXbxJWwZC9Jmv6CvvH2vK/Z7Dpm6hKieh WkxmwaL76TLdwMNiQ7wGhlgV8mJDJCw= -----END CERTIFICATE-----Generated at Fri Apr 10 23:18:22 2026 by rpki-client