$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4f1502d9-787f-3767-aec0-3ca6e6a6e539.roa File: 4f1502d9-787f-3767-aec0-3ca6e6a6e539.roa (raw, json) Hash identifier: +ACnbH6FJj/ICwqTDuEVNUqe6CEyb0jJjU8lfYvBbJI= Subject key identifier: 4F:DA:ED:F8:59:E7:D7:70:0B:7F:CA:A4:B5:DB:80:69:45:31:8D:25 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D460A6A22B821B0B5C50F2300 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4f1502d9-787f-3767-aec0-3ca6e6a6e539.roa Signing time: Tue 24 Mar 2026 10:09:09 +0000 ROA not before: Tue 24 Mar 2026 10:09:09 +0000 ROA not after: Mon 22 Jun 2026 10:09:09 +0000 asID: 32693 IP address blocks: 64.204.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:0a:6a:22:b8:21:b0:b5:c5:0f:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 24 10:09:09 2026 GMT Not After : Jun 22 10:09:09 2026 GMT Subject: CN=67aa5fdd-d539-4a18-bdaa-1cac098f8a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b5:c0:cf:d0:c4:85:fe:2e:5e:b3:6b:4e:82: d9:53:a0:9f:7b:ac:92:82:52:4b:cc:bc:da:18:14: 75:04:a6:97:df:ac:1a:5b:40:75:15:c5:12:8d:a2: 12:61:bd:e0:d8:a6:4c:15:ec:71:7a:1b:65:21:23: 97:29:b0:4b:87:64:ab:ce:97:69:18:29:7f:bc:dc: 43:ce:ba:b7:13:2a:be:fc:e9:ea:14:f3:cb:c6:89: 89:24:db:e0:5b:eb:93:ec:b8:12:d3:2e:ed:db:20: 8a:ba:49:bc:86:9b:d8:d7:76:c9:dd:f0:7e:e9:9f: 53:b4:9a:51:1c:4e:62:87:00:4c:43:d9:7e:df:58: 3f:2f:5c:1f:fb:fe:52:dc:c7:d9:b1:d7:de:84:1c: 2e:d2:00:1f:a7:99:b9:8b:d3:d5:dd:80:53:fe:22: e4:61:c7:53:b0:f6:83:ec:96:b6:7c:5a:3b:76:24: 6b:0c:e6:41:89:32:43:fe:78:ff:67:12:31:d3:40: ec:ba:87:22:ca:72:9c:e6:c4:d3:49:18:c6:6b:a0: 7a:a1:38:17:e0:a4:3c:ca:47:5a:1f:64:e4:bb:b1: 2b:a4:4a:cd:12:8f:e7:1f:d2:02:5c:a7:b9:ba:40: 82:1e:22:ab:be:fe:ec:3e:04:d2:77:02:47:22:59: 87:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DA:ED:F8:59:E7:D7:70:0B:7F:CA:A4:B5:DB:80:69:45:31:8D:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4f1502d9-787f-3767-aec0-3ca6e6a6e539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:13:36:49:22:22:82:65:60:32:5e:9e:eb:99:27:aa:2a:11: 7e:f1:d7:24:6f:d1:1a:91:86:6d:a9:23:b2:a0:5c:7e:b6:79: 32:5b:15:e6:7b:cd:91:f5:9e:32:67:b0:0d:2c:49:a3:bb:ec: 3c:d5:c4:75:14:90:2d:9a:42:f5:0b:f4:bb:95:fb:ee:41:1c: 02:4c:9b:75:fe:b0:f3:a1:23:ad:ef:2a:50:f3:a8:3e:92:08: 92:1e:7e:1f:18:8b:82:54:bd:17:f3:6d:43:73:01:7b:2b:db: 96:73:98:43:c7:71:91:2e:96:37:0b:e2:32:bc:6e:e3:c3:72: e1:40:b2:ed:5a:7e:eb:6a:dd:6d:fb:fc:6b:30:d1:dd:5b:32: f9:73:97:8b:c2:11:4c:e0:bf:f4:53:20:59:21:fc:a8:43:28: 01:81:3f:a9:ad:60:58:a9:10:11:b8:b5:e2:8f:f1:b6:7e:01: eb:e2:96:49:e5:45:3d:1f:16:72:57:fa:cd:49:86:fb:40:49: 22:cf:bf:d4:fd:51:ec:71:55:da:b2:fe:a8:b9:f5:65:8a:10: ee:fa:48:ee:4d:2c:2d:43:0a:24:ac:9e:70:bf:b5:14:1d:97: 84:9c:0a:16:b4:0c:3c:4a:cd:23:3b:9f:1c:93:2e:cf:ab:7a: 8d:26:2c:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GCmoiuCGwtcUPIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyNDEwMDkwOVoXDTI2MDYyMjEwMDkwOVowLzEtMCsGA1UEAxMk NjdhYTVmZGQtZDUzOS00YTE4LWJkYWEtMWNhYzA5OGY4YTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLXAz9DEhf4uXrNrToLZU6Cfe6ySglJLzLza GBR1BKaX36waW0B1FcUSjaISYb3g2KZMFexxehtlISOXKbBLh2SrzpdpGCl/vNxD zrq3Eyq+/OnqFPPLxomJJNvgW+uT7LgS0y7t2yCKukm8hpvY13bJ3fB+6Z9TtJpR HE5ihwBMQ9l+31g/L1wf+/5S3MfZsdfehBwu0gAfp5m5i9PV3YBT/iLkYcdTsPaD 7Ja2fFo7diRrDOZBiTJD/nj/ZxIx00DsuociynKc5sTTSRjGa6B6oTgX4KQ8ykda H2Tku7ErpErNEo/nH9ICXKe5ukCCHiKrvv7sPgTSdwJHIlmHzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/a7fhZ59dwC3/KpLXbgGlFMY0lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGYxNTAyZDktNzg3Zi0z NzY3LWFlYzAtM2NhNmU2YTZlNTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMxkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0TNkkiIoJlYDJenuuZJ6oqEX7x1yRv0RqRhm2pI7KgXH62eTJbFeZ7 zZH1njJnsA0sSaO77DzVxHUUkC2aQvUL9LuV++5BHAJMm3X+sPOhI63vKlDzqD6S CJIefh8Yi4JUvRfzbUNzAXsr25ZzmEPHcZEuljcL4jK8buPDcuFAsu1afutq3W37 /Gsw0d1bMvlzl4vCEUzgv/RTIFkh/KhDKAGBP6mtYFipEBG4teKP8bZ+Aevilknl RT0fFnJX+s1JhvtASSLPv9T9UexxVdqy/qi59WWKEO76SO5NLC1DCiSsnnC/tRQd l4ScCha0DDxKzSM7nxyTLs+reo0mLKU= -----END CERTIFICATE-----Generated at Wed Mar 25 18:15:11 2026 by rpki-client