$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4348905d-ba9b-3c31-8e83-6401396b704a.roa File: 4348905d-ba9b-3c31-8e83-6401396b704a.roa (raw, json) Hash identifier: TNXCsd2b9WJL9+3U4nalAGvNSefot99VRzFxoMWvwbc= Subject key identifier: EB:6A:17:AC:2A:46:31:D4:8A:93:01:D2:62:1F:1F:5A:4B:3E:DD:B4 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D4E4F3DA7DE0836F20C449300 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4348905d-ba9b-3c31-8e83-6401396b704a.roa Signing time: Fri 27 Mar 2026 09:14:17 +0000 ROA not before: Fri 27 Mar 2026 09:14:17 +0000 ROA not after: Thu 25 Jun 2026 09:14:17 +0000 asID: 5065 IP address blocks: 69.17.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:4f:3d:a7:de:08:36:f2:0c:44:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 27 09:14:17 2026 GMT Not After : Jun 25 09:14:17 2026 GMT Subject: CN=44fdae4a-48e0-4fe7-8d93-fd35b9b3b962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:19:f0:ab:a2:cb:8a:03:81:4f:80:61:5b:b7: fd:61:26:2c:fc:73:26:a7:4a:fd:39:93:93:67:95: 24:4f:5d:29:60:13:64:ad:bc:7f:38:a8:7e:d4:0c: 2c:da:3c:e8:91:df:1f:30:6a:5d:6f:ff:c3:f1:6d: 8b:40:6c:9b:e9:ab:dd:b1:17:76:28:2a:58:76:72: 30:1e:64:43:ee:a2:2c:ed:9f:58:10:b9:81:63:84: 4a:be:6c:48:b5:1c:66:8a:8f:ca:bb:ab:a2:7a:58: fb:a4:20:98:72:04:d0:fa:a1:bd:3c:bb:35:dd:1d: 8e:fc:b7:8b:f9:ab:dd:07:d3:ad:2c:f8:b9:96:ba: 56:68:4b:3f:e1:c9:b8:02:09:24:db:47:33:dd:a3: e2:df:8e:e9:b0:74:7f:aa:f6:d3:9c:64:04:9a:21: 31:f9:4f:eb:d8:34:8b:5c:7f:82:cf:86:3e:ae:d5: 2b:5d:d2:47:7c:7d:87:41:6e:6a:b9:5a:d4:87:25: cb:30:09:a7:a9:49:e1:cd:0a:33:8b:2b:18:d9:5a: 32:79:60:57:a0:f9:b4:2b:d2:c5:33:cc:71:3b:9b: 2e:b3:42:1a:4e:73:d4:d7:66:00:28:d6:ed:49:ef: ce:0f:65:7b:47:86:79:0e:d6:e9:4a:6d:af:99:c7: 84:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:6A:17:AC:2A:46:31:D4:8A:93:01:D2:62:1F:1F:5A:4B:3E:DD:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4348905d-ba9b-3c31-8e83-6401396b704a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 69.17.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:f8:40:8f:14:30:a8:1e:27:6a:17:2d:bf:12:ec:9e:53:e8: b6:22:77:a1:19:9d:d8:28:ca:1a:be:38:9f:c1:d6:63:88:98: 59:c2:22:5b:3b:3c:93:59:b3:16:35:c2:e1:a0:c7:33:cf:ea: 3c:67:aa:02:61:1b:ac:8a:1f:67:13:d1:34:1e:a4:40:04:fa: ca:98:7e:09:33:8a:c2:19:26:f9:09:4f:73:6b:70:f0:78:4e: 54:66:c3:96:00:75:af:48:21:70:3e:15:bd:7a:54:c7:83:b7: 7b:32:6e:37:e8:f1:7f:af:df:fd:e9:82:af:6a:cb:d5:4c:f2: 5c:44:93:d8:d5:07:d4:85:e9:20:9a:a3:a4:57:f0:3e:30:b9: ae:78:c5:56:fe:eb:77:43:fb:72:9e:af:e4:65:02:a4:33:e1: f2:e3:c2:48:05:9c:35:29:12:c9:1d:75:34:52:91:59:02:cf: 7a:e7:ec:8d:7a:30:6a:e1:2e:9b:95:85:01:4c:7c:bf:e7:ad: e6:6e:c2:84:8c:f8:cb:45:01:46:d7:61:be:45:c6:d0:e5:e8: fc:40:f5:39:da:6b:71:a8:51:c0:8c:79:c3:83:6e:ad:08:a2: 6f:36:87:f1:d6:37:e4:19:2b:cb:11:5c:f5:43:4f:c8:b5:7a: b4:8b:fc:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1OTz2n3gg28gxEkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyNzA5MTQxN1oXDTI2MDYyNTA5MTQxN1owLzEtMCsGA1UEAxMk NDRmZGFlNGEtNDhlMC00ZmU3LThkOTMtZmQzNWI5YjNiOTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBnwq6LLigOBT4BhW7f9YSYs/HMmp0r9OZOT Z5UkT10pYBNkrbx/OKh+1Aws2jzokd8fMGpdb//D8W2LQGyb6avdsRd2KCpYdnIw HmRD7qIs7Z9YELmBY4RKvmxItRxmio/Ku6uielj7pCCYcgTQ+qG9PLs13R2O/LeL +avdB9OtLPi5lrpWaEs/4cm4Agkk20cz3aPi347psHR/qvbTnGQEmiEx+U/r2DSL XH+Cz4Y+rtUrXdJHfH2HQW5quVrUhyXLMAmnqUnhzQoziysY2VoyeWBXoPm0K9LF M8xxO5sus0IaTnPU12YAKNbtSe/OD2V7R4Z5DtbpSm2vmceEywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtqF6wqRjHUipMB0mIfH1pLPt20MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDM0ODkwNWQtYmE5Yi0z YzMxLThlODMtNjQwMTM5NmI3MDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARRECMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHX4QI8UMKgeJ2oXLb8S7J5T6LYid6EZndgoyhq+OJ/B1mOImFnCIls7 PJNZsxY1wuGgxzPP6jxnqgJhG6yKH2cT0TQepEAE+sqYfgkzisIZJvkJT3NrcPB4 TlRmw5YAda9IIXA+Fb16VMeDt3sybjfo8X+v3/3pgq9qy9VM8lxEk9jVB9SF6SCa o6RX8D4wua54xVb+63dD+3Ker+RlAqQz4fLjwkgFnDUpEskddTRSkVkCz3rn7I16 MGrhLpuVhQFMfL/nreZuwoSM+MtFAUbXYb5FxtDl6PxA9Tnaa3GoUcCMecODbq0I om82h/HWN+QZK8sRXPVDT8i1erSL/KE= -----END CERTIFICATE-----Generated at Fri Apr 10 23:14:07 2026 by rpki-client