$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4afec0f9-3c7d-398e-b98d-e941f5b86c79.roa File: 4afec0f9-3c7d-398e-b98d-e941f5b86c79.roa (raw, json) Hash identifier: cATesQSqDUC2tMyYubN/GL68JPdJ61H7W2vHWQX8WQQ= Subject key identifier: 65:66:B4:AE:C1:13:B1:18:47:0E:12:AE:63:45:7D:93:71:63:93:28 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E640FD40698D3C2B0F9462B00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4afec0f9-3c7d-398e-b98d-e941f5b86c79.roa Signing time: Sat 04 Jul 2026 21:00:12 +0000 ROA not before: Sat 04 Jul 2026 21:00:12 +0000 ROA not after: Fri 02 Oct 2026 21:00:12 +0000 asID: 5650 IP address blocks: 64.205.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:0f:d4:06:98:d3:c2:b0:f9:46:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 4 21:00:12 2026 GMT Not After : Oct 2 21:00:12 2026 GMT Subject: CN=e3f66d49-425b-41cc-a7ef-467c8499befa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:90:11:1a:f1:e2:a8:14:ab:7d:74:c7:8d:33: 81:0c:b1:90:a8:41:7a:87:53:1d:6c:58:5d:f4:55: 2b:65:28:d6:4c:39:2c:04:94:85:42:07:92:58:5f: e6:4c:b5:5a:55:08:ce:55:4b:6a:04:f8:9d:ad:38: 58:cd:96:f3:26:4b:d6:7b:f1:26:02:81:b8:d4:3c: f6:81:65:b2:f3:18:02:3b:96:37:8a:da:16:69:0d: 65:47:77:16:8f:d6:20:b0:55:7f:1f:06:33:75:53: 4f:e4:78:2d:1e:e8:ad:aa:19:32:f4:fb:af:23:64: 99:b1:67:b3:d7:8b:a4:91:a3:9a:5c:67:91:c5:ac: 64:6c:32:97:82:33:e5:7d:55:73:75:8b:6a:61:c9: 12:b9:6e:17:ff:cd:c3:8e:0c:83:cd:e1:15:f1:e4: b6:72:6b:f5:f0:28:7d:08:62:1b:f7:98:f4:43:fb: 63:24:5a:dd:53:e4:30:e0:14:fe:d4:10:de:ad:58: 79:32:2f:d1:9c:25:17:07:ea:d7:dc:e7:e5:bf:1e: 7d:fe:90:79:ac:70:b0:df:bf:a3:d4:08:55:1b:b5: c7:fa:28:43:e0:73:34:9b:0f:0e:79:bc:d5:13:78: 88:16:44:a5:4c:66:3b:b9:ca:c3:1c:6b:d1:99:35: 1f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:66:B4:AE:C1:13:B1:18:47:0E:12:AE:63:45:7D:93:71:63:93:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4afec0f9-3c7d-398e-b98d-e941f5b86c79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.205.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:92:f4:53:3f:dd:d1:12:af:8e:2c:56:66:b9:9b:b1:6c:b1: a6:a8:95:c6:28:8f:e8:96:13:28:21:82:6f:b3:ce:99:b5:0d: 17:ab:4f:86:b2:38:5a:46:84:52:1a:42:ba:b7:98:5b:04:86: d9:1b:e3:e9:7b:2c:ba:3a:ff:30:fe:08:ba:f9:20:e5:76:78: e7:cd:58:49:77:1d:84:bc:f3:3f:05:c5:97:95:6b:24:e0:f3: a7:ec:65:7c:35:a1:4a:85:ef:15:15:3d:8b:24:6d:d4:5e:71: 35:47:c6:a2:02:20:3b:ec:a6:6d:89:35:ba:a1:a8:6f:ad:5c: 68:10:80:27:62:9d:51:71:f4:9d:d8:ac:7a:2a:13:c9:9c:b4: 73:35:28:7c:f9:9e:3d:7d:5a:ac:e2:7d:a5:bd:20:20:aa:6a: 56:26:1b:f7:1a:82:17:71:2a:fc:d0:f9:b3:a9:99:14:3c:28: d0:d4:d7:f0:c6:43:a7:e1:68:62:63:57:72:62:93:ce:1f:5e: c2:ea:93:35:bf:16:0d:fd:89:ef:10:07:70:3b:8c:6f:4d:fb: 40:e0:42:0e:59:e4:9c:6c:e4:9c:83:99:e4:fe:33:d2:63:2e: 23:e3:52:20:de:c1:e4:79:21:eb:e2:bd:18:80:db:1a:aa:7c: 83:ff:83:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5kD9QGmNPCsPlGKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk ZTNmNjZkNDktNDI1Yi00MWNjLWE3ZWYtNDY3Yzg0OTliZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pARGvHiqBSrfXTHjTOBDLGQqEF6h1MdbFhd 9FUrZSjWTDksBJSFQgeSWF/mTLVaVQjOVUtqBPidrThYzZbzJkvWe/EmAoG41Dz2 gWWy8xgCO5Y3itoWaQ1lR3cWj9YgsFV/HwYzdVNP5HgtHuitqhky9PuvI2SZsWez 14ukkaOaXGeRxaxkbDKXgjPlfVVzdYtqYckSuW4X/83DjgyDzeEV8eS2cmv18Ch9 CGIb95j0Q/tjJFrdU+Qw4BT+1BDerVh5Mi/RnCUXB+rX3Oflvx59/pB5rHCw37+j 1AhVG7XH+ihD4HM0mw8OebzVE3iIFkSlTGY7ucrDHGvRmTUfAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVmtK7BE7EYRw4SrmNFfZNxY5MoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGFmZWMwZjktM2M3ZC0z OThlLWI5OGQtZTk0MWY1Yjg2Yzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQM0kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALaS9FM/3dESr44sVma5m7FssaaolcYoj+iWEyghgm+zzpm1DRerT4ay OFpGhFIaQrq3mFsEhtkb4+l7LLo6/zD+CLr5IOV2eOfNWEl3HYS88z8FxZeVayTg 86fsZXw1oUqF7xUVPYskbdRecTVHxqICIDvspm2JNbqhqG+tXGgQgCdinVFx9J3Y rHoqE8mctHM1KHz5nj19WqzifaW9ICCqalYmG/caghdxKvzQ+bOpmRQ8KNDU1/DG Q6fhaGJjV3Jik84fXsLqkzW/Fg39ie8QB3A7jG9N+0DgQg5Z5Jxs5JyDmeT+M9Jj LiPjUiDeweR5IevivRiA2xqqfIP/g40= -----END CERTIFICATE-----Generated at Mon Jul 20 13:48:52 2026 by rpki-client