$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/35c81c50-6436-3fde-a5d0-20b714956811.roa File: 35c81c50-6436-3fde-a5d0-20b714956811.roa (raw, json) Hash identifier: KrUfZ7G2gLeNiGrLy9VaEhB657yl1kwd0d7Hhwt+Qos= Subject key identifier: C1:8F:EC:6C:34:0B:2E:38:B1:2C:B6:61:B6:D7:3C:F2:F4:34:2E:89 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D5CE0D3BFE54A158652CDFD80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/35c81c50-6436-3fde-a5d0-20b714956811.roa Signing time: Wed 01 Apr 2026 14:28:57 +0000 ROA not before: Wed 01 Apr 2026 14:28:57 +0000 ROA not after: Tue 30 Jun 2026 14:28:57 +0000 asID: 402257 IP address blocks: 64.204.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5c:e0:d3:bf:e5:4a:15:86:52:cd:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 1 14:28:57 2026 GMT Not After : Jun 30 14:28:57 2026 GMT Subject: CN=33050ccf-d203-4a04-88a6-8fe5629e49a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f4:c2:bf:0d:41:7c:30:f1:2d:c2:69:37:f4: 09:1f:56:fb:58:21:5d:5c:7b:89:76:18:6a:17:ac: 24:5b:bc:d2:a6:18:2d:9c:14:aa:0d:63:e9:da:a4: cd:b3:42:a9:7a:9b:80:a8:94:79:ed:80:44:a2:45: c5:37:90:8d:6b:6d:64:a5:61:0b:91:d4:38:cf:1a: a4:13:82:f5:34:e4:78:52:f7:e9:2e:ad:7d:ca:6c: 67:c5:4c:c2:03:09:bf:9f:29:2c:74:4b:04:d4:6c: 64:69:60:dd:fc:e7:d4:d6:1f:08:15:db:74:ca:4d: 0b:22:cc:7e:88:0e:6e:62:6c:46:70:8b:db:9f:ef: a7:b5:e2:f3:dd:8a:84:84:d9:28:1c:75:d7:10:a0: 94:02:15:29:62:25:cd:5f:b7:10:96:26:72:d4:7d: bb:63:eb:41:af:68:81:68:b8:67:31:05:04:fa:31: 3c:c1:18:3f:92:df:7c:35:a9:03:22:98:45:04:21: 8e:d0:60:10:c1:e2:85:3e:c2:cd:de:a1:18:07:3d: 14:b7:9f:a7:10:78:b5:ae:84:6d:03:03:29:5a:74: b1:c1:d8:2e:48:6b:bf:b0:c6:de:91:25:5a:97:72: bb:ef:6b:e7:b9:29:38:86:03:94:de:75:0c:fb:be: d5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8F:EC:6C:34:0B:2E:38:B1:2C:B6:61:B6:D7:3C:F2:F4:34:2E:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/35c81c50-6436-3fde-a5d0-20b714956811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:d0:3e:45:10:9d:e3:47:1a:ea:de:42:18:3b:ff:d5:11:2d: 87:34:35:d9:02:b3:25:24:ff:33:db:d6:2d:9c:7f:f2:eb:2b: a3:95:8c:d3:d7:75:ff:1e:54:03:ec:01:45:68:58:5d:bf:7b: a7:57:41:53:ea:5d:04:86:7f:22:d4:ca:4c:1a:e9:8b:5f:25: 3a:15:81:e4:cd:8b:58:22:c6:c3:71:21:32:13:f9:3a:a3:fd: 24:96:0a:c9:b8:a5:68:f6:e9:32:81:c0:04:d7:04:6a:7c:71: 1a:9d:8a:73:62:99:2b:16:b8:e5:50:d6:76:82:3d:99:c8:ef: 5e:0f:28:41:66:da:86:e9:de:88:51:fe:a7:9f:5c:32:67:ab: da:79:ed:e2:02:c2:9a:06:46:3b:46:45:2c:d4:bb:7b:8d:35: 9d:50:98:b4:ae:3b:96:24:0a:9e:75:e7:5b:55:75:72:7e:62: d0:0e:d3:32:90:af:92:20:69:bd:f0:42:23:2f:ed:6c:22:01: 0e:73:29:5a:e6:9e:7d:4a:e8:f4:d9:ce:d9:ef:2f:11:d6:81: 67:93:7f:38:26:47:de:ac:34:ca:4b:ba:8a:c5:59:1f:cd:ab: 12:08:f5:a5:28:2f:cc:4b:72:bb:df:39:d0:68:e5:50:3e:b8: f4:19:ec:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1c4NO/5UoVhlLN/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQwMTE0Mjg1N1oXDTI2MDYzMDE0Mjg1N1owLzEtMCsGA1UEAxMk MzMwNTBjY2YtZDIwMy00YTA0LTg4YTYtOGZlNTYyOWU0OWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvTCvw1BfDDxLcJpN/QJH1b7WCFdXHuJdhhq F6wkW7zSphgtnBSqDWPp2qTNs0KpepuAqJR57YBEokXFN5CNa21kpWELkdQ4zxqk E4L1NOR4UvfpLq19ymxnxUzCAwm/nyksdEsE1GxkaWDd/OfU1h8IFdt0yk0LIsx+ iA5uYmxGcIvbn++nteLz3YqEhNkoHHXXEKCUAhUpYiXNX7cQliZy1H27Y+tBr2iB aLhnMQUE+jE8wRg/kt98NakDIphFBCGO0GAQweKFPsLN3qEYBz0Ut5+nEHi1roRt AwMpWnSxwdguSGu/sMbekSVal3K772vnuSk4hgOU3nUM+77V9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGP7Gw0Cy44sSy2YbbXPPL0NC6JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzVjODFjNTAtNjQzNi0z ZmRlLWE1ZDAtMjBiNzE0OTU2ODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMy9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/QPkUQneNHGureQhg7/9URLYc0NdkCsyUk/zPb1i2cf/LrK6OVjNPX df8eVAPsAUVoWF2/e6dXQVPqXQSGfyLUykwa6YtfJToVgeTNi1gixsNxITIT+Tqj /SSWCsm4pWj26TKBwATXBGp8cRqdinNimSsWuOVQ1naCPZnI714PKEFm2obp3ohR /qefXDJnq9p57eICwpoGRjtGRSzUu3uNNZ1QmLSuO5YkCp5151tVdXJ+YtAO0zKQ r5Igab3wQiMv7WwiAQ5zKVrmnn1K6PTZztnvLxHWgWeTfzgmR96sNMpLuorFWR/N qxII9aUoL8xLcrvfOdBo5VA+uPQZ7Hc= -----END CERTIFICATE-----Generated at Sat Apr 4 17:02:15 2026 by rpki-client