$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/359f3ddf-1e9d-3e3a-a2e7-41aaa260c04e.roa File: 359f3ddf-1e9d-3e3a-a2e7-41aaa260c04e.roa (raw, json) Hash identifier: zqQMn7Uu0NNKHsZ+oayWP7O6J4iFKc53bx5e3QkDEdw= Subject key identifier: B9:52:66:8F:3A:89:4F:93:9C:E9:48:D4:FF:27:FE:F5:D8:55:C5:C1 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D622BD576B91BA96BADBEF080 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/359f3ddf-1e9d-3e3a-a2e7-41aaa260c04e.roa Signing time: Fri 03 Apr 2026 11:59:07 +0000 ROA not before: Fri 03 Apr 2026 11:59:07 +0000 ROA not after: Thu 02 Jul 2026 11:59:07 +0000 asID: 402257 IP address blocks: 64.204.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:62:2b:d5:76:b9:1b:a9:6b:ad:be:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 3 11:59:07 2026 GMT Not After : Jul 2 11:59:07 2026 GMT Subject: CN=e1d0e800-07bb-4aa5-84d4-4e0d59417ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a7:3d:df:95:af:b6:7a:16:66:71:cb:bb:1c: a4:17:7e:46:e8:48:4c:93:eb:8c:69:b4:d1:a8:a4: 2f:04:f5:58:e7:45:a3:e2:4e:ea:60:fd:9a:93:24: 02:68:61:c8:71:06:1d:0c:7f:14:ee:1c:93:9d:6d: 68:0d:01:33:1b:36:27:35:7e:d3:1d:b1:d7:cd:5d: 48:a9:ff:09:27:a6:b5:c7:75:e6:3e:7c:f4:eb:7a: 4b:c8:55:58:03:9d:e1:59:1e:00:2c:43:32:4f:e0: b1:f1:af:19:f3:96:55:f9:a5:e4:ed:2f:54:ca:c1: 26:40:91:3f:62:d9:d7:51:ba:47:54:b7:96:56:27: 03:40:20:9a:8e:8b:97:02:ae:59:df:95:56:c9:71: 37:c7:5e:ef:7b:48:c8:b0:4d:0c:2e:25:d3:68:70: 9e:dd:a1:dd:7b:7c:ab:83:38:66:f0:e9:44:05:0b: d6:9a:2a:8d:d6:31:7c:d4:37:a9:b0:b2:1b:a2:f0: 1a:d0:33:e6:97:58:18:00:b1:ee:c6:91:87:15:c7: 71:5d:38:0b:a5:98:6c:35:e1:13:af:dd:70:db:67: b1:8f:db:3c:a0:3d:1f:a5:54:7d:cc:7a:b2:eb:68: f9:da:16:3e:59:66:4f:9a:58:e6:3d:04:2c:81:8a: 1f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:52:66:8F:3A:89:4F:93:9C:E9:48:D4:FF:27:FE:F5:D8:55:C5:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/359f3ddf-1e9d-3e3a-a2e7-41aaa260c04e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:9f:0a:9e:24:dd:2e:3c:ca:0e:fd:bc:12:20:2f:e3:51:a8: 6a:fc:2c:1d:ba:96:b2:c3:aa:69:dd:35:36:41:e8:76:53:e4: 65:6f:d3:fc:bd:73:9d:35:2b:e3:18:43:8f:3c:f5:58:3b:1a: 2d:b9:6d:17:a2:97:c2:19:e3:98:17:05:bf:87:53:1c:5a:f8: cf:4e:c7:59:1d:22:bc:03:b0:de:b1:b1:80:81:04:02:b0:75: 90:25:48:f1:c9:59:f4:15:c1:47:48:58:32:31:ef:c6:8f:82: 0c:a0:96:a6:80:86:c2:90:df:90:8d:b5:18:d3:6c:98:9c:8a: 17:31:fa:9d:e9:e4:2a:10:ca:ea:57:03:84:f5:11:7b:1a:eb: 1f:90:be:71:42:05:fb:17:27:ec:c2:9c:f3:f0:95:8b:3c:01: 39:dc:31:18:5a:ef:aa:87:eb:c3:ee:fb:a4:6c:db:0c:da:60: c0:80:54:4a:ad:4f:d6:0c:bd:e3:61:70:d0:67:ca:93:3c:59: 5a:48:df:18:7f:2d:eb:ab:82:fd:6c:ca:90:c0:32:7b:28:08: c7:3e:d4:ff:6a:cc:da:e6:ed:94:50:29:e2:3d:b7:24:83:0c: f0:73:1c:e0:50:12:68:f1:d4:67:57:fb:4b:a1:88:c2:17:ab: e7:e5:60:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1iK9V2uRupa62+8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQwMzExNTkwN1oXDTI2MDcwMjExNTkwN1owLzEtMCsGA1UEAxMk ZTFkMGU4MDAtMDdiYi00YWE1LTg0ZDQtNGUwZDU5NDE3ZmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqc935WvtnoWZnHLuxykF35G6EhMk+uMabTR qKQvBPVY50Wj4k7qYP2akyQCaGHIcQYdDH8U7hyTnW1oDQEzGzYnNX7THbHXzV1I qf8JJ6a1x3XmPnz063pLyFVYA53hWR4ALEMyT+Cx8a8Z85ZV+aXk7S9UysEmQJE/ YtnXUbpHVLeWVicDQCCajouXAq5Z35VWyXE3x17ve0jIsE0MLiXTaHCe3aHde3yr gzhm8OlEBQvWmiqN1jF81DepsLIbovAa0DPml1gYALHuxpGHFcdxXTgLpZhsNeET r91w22exj9s8oD0fpVR9zHqy62j52hY+WWZPmljmPQQsgYofqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlSZo86iU+TnOlI1P8n/vXYVcXBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzU5ZjNkZGYtMWU5ZC0z ZTNhLWEyZTctNDFhYWEyNjBjMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMzlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOfCp4k3S48yg79vBIgL+NRqGr8LB26lrLDqmndNTZB6HZT5GVv0/y9 c501K+MYQ4889Vg7Gi25bReil8IZ45gXBb+HUxxa+M9Ox1kdIrwDsN6xsYCBBAKw dZAlSPHJWfQVwUdIWDIx78aPggyglqaAhsKQ35CNtRjTbJicihcx+p3p5CoQyupX A4T1EXsa6x+QvnFCBfsXJ+zCnPPwlYs8ATncMRha76qH68Pu+6Rs2wzaYMCAVEqt T9YMveNhcNBnypM8WVpI3xh/Leurgv1sypDAMnsoCMc+1P9qzNrm7ZRQKeI9tySD DPBzHOBQEmjx1GdX+0uhiMIXq+flYNc= -----END CERTIFICATE-----Generated at Sat Apr 4 16:57:05 2026 by rpki-client