$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3f59bca9-bb5c-3821-b0e9-db7f351006f2.roa File: 3f59bca9-bb5c-3821-b0e9-db7f351006f2.roa (raw, json) Hash identifier: xPP8U1j4aOh85xExWz3KUZ0VakeA+EiAewSny5nX5qs= Subject key identifier: CA:C7:7D:63:A6:81:53:3A:B2:F0:10:70:02:49:00:28:6F:33:07:63 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DE150A847BDA219ED0AC53068 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3f59bca9-bb5c-3821-b0e9-db7f351006f2.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 5650 IP address blocks: 68.167.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:a8:47:bd:a2:19:ed:0a:c5:30:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=5185b9f2-fa23-406c-a30a-f1cc6918ce37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:71:b2:c3:42:d4:c0:e3:2e:c6:70:4e:af:29: 62:ee:06:c7:7f:f0:84:fd:97:cc:4e:17:27:5a:18: e1:91:a0:8e:5a:7c:aa:48:12:09:c6:ad:d7:b5:29: d9:27:dd:db:6e:0f:98:6b:6d:75:26:1f:cc:a2:e2: ad:a1:12:e6:cf:0f:c2:3d:5c:dd:2f:fa:5a:63:62: 8b:d5:01:e9:b9:7b:c5:5b:70:81:64:25:a9:bf:e5: 6a:42:01:3b:9c:4e:29:31:d8:56:10:77:bf:af:ca: e5:d0:e1:29:2d:58:e7:ae:e6:e9:db:96:1a:e2:97: 84:5c:ba:a9:9f:cd:ba:e9:0e:f3:a3:d1:e1:a9:84: 3b:c8:93:48:db:36:a3:dd:bf:62:7b:2d:b3:d7:a5: 48:ec:47:d2:e0:1f:c1:32:4d:18:97:69:7f:b9:d8: f9:0d:42:7e:b3:a8:62:ce:fe:cc:78:7a:28:f0:71: 78:f8:2e:d6:d2:11:89:10:6d:d6:50:c0:13:42:c8: c9:e0:3d:3e:63:32:49:1c:84:f5:13:b3:95:a2:b3: b6:c6:2d:28:81:49:41:99:b3:c4:0f:1f:6f:d9:38: e2:1d:ed:04:3d:d6:43:5c:2d:44:17:a8:30:2b:8c: 8f:33:72:8b:68:c2:a6:5b:22:f6:b8:3d:46:48:a5: 72:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C7:7D:63:A6:81:53:3A:B2:F0:10:70:02:49:00:28:6F:33:07:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3f59bca9-bb5c-3821-b0e9-db7f351006f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:2d:6a:59:3a:b1:4c:92:5f:c0:ac:b2:15:98:9c:ed:a9:e6: 16:89:f9:ab:2e:06:c5:bc:3b:c2:aa:d1:46:6e:da:9b:30:22: c8:83:89:28:cc:be:4f:14:4d:9f:86:47:17:de:3c:d6:32:6a: a5:db:64:1a:65:9c:8b:51:b6:59:c6:be:15:36:a1:35:3d:99: 81:c7:14:f1:29:3c:66:3c:ed:d5:a9:82:8c:e8:4a:50:e5:c5: 00:3f:45:16:5a:c0:98:fd:05:54:fd:35:c9:17:92:ef:98:99: 14:21:b5:75:ac:fa:bf:79:55:5c:ca:ec:3f:ed:d5:61:be:1c: d5:5b:30:88:bd:05:e7:f9:71:85:65:af:f4:6d:20:a3:1a:c6: be:56:a6:02:bc:7f:95:95:b6:b7:70:31:32:c8:a8:75:f9:70: 27:ca:5b:06:7d:77:16:7b:de:71:42:63:8a:d8:d1:0a:81:71: 7d:2b:78:50:90:5d:13:73:4c:4c:d1:fa:73:51:1b:7f:37:75: f4:a5:de:4b:a8:7a:75:b1:02:f9:37:3b:9e:61:e2:63:64:93: 04:b6:16:92:9c:79:2f:34:ac:97:12:00:3b:e9:87:77:11:a7: ab:ac:d9:01:fe:cb:60:06:b6:96:da:a0:59:01:e7:9a:8e:7b: 3c:bd:4b:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUKhHvaIZ7QrFMGgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk NTE4NWI5ZjItZmEyMy00MDZjLWEzMGEtZjFjYzY5MThjZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXGyw0LUwOMuxnBOryli7gbHf/CE/ZfMThcn WhjhkaCOWnyqSBIJxq3XtSnZJ93bbg+Ya211Jh/MouKtoRLmzw/CPVzdL/paY2KL 1QHpuXvFW3CBZCWpv+VqQgE7nE4pMdhWEHe/r8rl0OEpLVjnrubp25Ya4peEXLqp n8266Q7zo9HhqYQ7yJNI2zaj3b9iey2z16VI7EfS4B/BMk0Yl2l/udj5DUJ+s6hi zv7MeHoo8HF4+C7W0hGJEG3WUMATQsjJ4D0+YzJJHIT1E7OVorO2xi0ogUlBmbPE Dx9v2TjiHe0EPdZDXC1EF6gwK4yPM3KLaMKmWyL2uD1GSKVy3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrHfWOmgVM6svAQcAJJAChvMwdjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2Y1OWJjYTktYmI1Yy0z ODIxLWIwZTktZGI3ZjM1MTAwNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKcoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIktalk6sUySX8CsshWYnO2p5haJ+asuBsW8O8Kq0UZu2pswIsiDiSjM vk8UTZ+GRxfePNYyaqXbZBplnItRtlnGvhU2oTU9mYHHFPEpPGY87dWpgozoSlDl xQA/RRZawJj9BVT9NckXku+YmRQhtXWs+r95VVzK7D/t1WG+HNVbMIi9Bef5cYVl r/RtIKMaxr5WpgK8f5WVtrdwMTLIqHX5cCfKWwZ9dxZ73nFCY4rY0QqBcX0reFCQ XRNzTEzR+nNRG383dfSl3kuoenWxAvk3O55h4mNkkwS2FpKceS80rJcSADvph3cR p6us2QH+y2AGtpbaoFkB55qOezy9S3k= -----END CERTIFICATE-----Generated at Wed Jun 3 08:18:14 2026 by rpki-client