$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5970bdf9-6ff1-3b2c-accd-2bab9868fff9.roa File: 5970bdf9-6ff1-3b2c-accd-2bab9868fff9.roa (raw, json) Hash identifier: zadJpcdIdzENrOqCmglxYA/i+zTgrmLI/DSF8ZSsQ0I= Subject key identifier: F9:00:80:F4:33:17:59:D3:9C:ED:24:F5:C0:A7:10:6D:6E:C5:B5:42 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D22724926497B247C4E91B410 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5970bdf9-6ff1-3b2c-accd-2bab9868fff9.roa Signing time: Sun 04 Jan 2026 02:00:30 +0000 ROA not before: Sun 04 Jan 2026 02:00:30 +0000 ROA not after: Sat 04 Apr 2026 01:00:30 +0000 asID: 199527 IP address blocks: 64.145.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:22:72:49:26:49:7b:24:7c:4e:91:b4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jan 4 02:00:30 2026 GMT Not After : Apr 4 01:00:30 2026 GMT Subject: CN=1dad9d57-e459-4dd3-b889-41a293d70b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ab:c9:eb:29:e7:3f:c7:9d:e6:b3:f4:54:95: 0d:47:e2:a2:d0:4f:18:58:d9:b5:11:1b:1a:e1:c2: 09:02:89:54:17:a6:8e:07:63:48:13:03:f8:b1:07: db:f0:8b:40:75:bf:10:d6:e9:b0:bc:d5:af:63:58: ec:58:f8:20:be:35:a2:cc:15:1a:51:39:e2:59:42: c9:00:1e:ef:85:91:2f:c0:cd:83:76:eb:76:f1:23: 70:2c:19:fd:18:01:c6:09:74:e7:0e:8c:ab:54:3d: 86:cf:53:c9:9c:32:00:69:60:4e:61:c7:24:bf:1f: 7b:b0:46:d4:91:d2:fc:36:0d:9f:25:30:39:58:6c: c2:4a:36:f9:a2:70:87:9c:c1:2b:e0:91:05:cb:77: 28:26:6f:8b:fa:e4:e7:97:5a:93:6b:2e:22:90:60: 6a:d8:0e:2c:b0:7a:0f:1f:71:14:a9:03:b4:ce:fc: 73:eb:0e:38:ad:0c:0b:e7:0e:03:92:94:df:78:13: 2d:2a:4e:20:c7:40:46:37:cd:32:37:9c:d0:98:8c: 87:72:d3:81:04:99:f9:03:4b:d2:e1:7a:b0:89:1f: 1e:42:e5:e8:16:38:5d:14:b3:82:d3:c9:96:1d:51: 38:fb:b9:e4:37:de:30:02:d4:b8:1c:42:45:72:e9: 66:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:00:80:F4:33:17:59:D3:9C:ED:24:F5:C0:A7:10:6D:6E:C5:B5:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5970bdf9-6ff1-3b2c-accd-2bab9868fff9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.145.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:44:ea:8e:e7:6b:2f:d7:66:0b:f3:b5:35:43:84:12:15:e6: 1d:f0:d7:3f:da:85:fd:e4:5f:b7:6f:3b:d6:5f:56:9c:b0:61: 80:e9:31:6c:98:a1:67:6f:31:52:53:8b:29:0a:98:4b:13:86: 1c:2a:63:12:cd:a7:0f:c3:74:16:0b:97:15:4d:21:ad:00:79: a9:fb:22:ec:12:e2:5d:48:53:89:4a:83:28:94:5e:82:d2:88: 78:8c:bc:82:1d:a0:2d:f3:bf:7b:ef:06:20:90:f7:3d:0f:b4: ce:97:5f:91:4e:22:84:ad:32:48:e5:a9:28:b8:5f:a4:58:25: 57:94:43:69:3c:ec:9c:71:59:ab:28:e0:c6:6b:16:7a:f0:67: 72:9e:6a:99:44:54:02:69:0e:06:b2:5a:fe:f8:22:d5:8b:11: 6a:37:ad:bd:03:42:2d:29:1e:b6:a5:a8:00:f7:90:51:60:1d: e8:7b:f6:ce:b8:15:55:93:ad:1d:43:8a:ca:08:66:a3:a3:09: c7:fe:c1:b9:44:54:7f:a8:ea:9c:d9:e1:51:37:4a:8f:6c:eb: 87:e5:4b:6e:16:8f:f4:35:9d:ab:49:11:9c:a4:ce:1d:ac:d5: 40:9b:94:90:56:45:b1:60:90:96:a9:d3:09:6e:e2:d9:7d:26: c6:60:86:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ickkmSXskfE6RtBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDEwNDAyMDAzMFoXDTI2MDQwNDAxMDAzMFowLzEtMCsGA1UEAxMk MWRhZDlkNTctZTQ1OS00ZGQzLWI4ODktNDFhMjkzZDcwYjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqvJ6ynnP8ed5rP0VJUNR+Ki0E8YWNm1ERsa 4cIJAolUF6aOB2NIEwP4sQfb8ItAdb8Q1umwvNWvY1jsWPggvjWizBUaUTniWULJ AB7vhZEvwM2Ddut28SNwLBn9GAHGCXTnDoyrVD2Gz1PJnDIAaWBOYcckvx97sEbU kdL8Ng2fJTA5WGzCSjb5onCHnMEr4JEFy3coJm+L+uTnl1qTay4ikGBq2A4ssHoP H3EUqQO0zvxz6w44rQwL5w4DkpTfeBMtKk4gx0BGN80yN5zQmIyHctOBBJn5A0vS 4XqwiR8eQuXoFjhdFLOC08mWHVE4+7nkN94wAtS4HEJFculm4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkAgPQzF1nTnO0k9cCnEG1uxbVCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNTk3MGJkZjktNmZmMS0z YjJjLWFjY2QtMmJhYjk4NjhmZmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQJFkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5E6o7nay/XZgvztTVDhBIV5h3w1z/ahf3kX7dvO9ZfVpywYYDpMWyY oWdvMVJTiykKmEsThhwqYxLNpw/DdBYLlxVNIa0Aean7IuwS4l1IU4lKgyiUXoLS iHiMvIIdoC3zv3vvBiCQ9z0PtM6XX5FOIoStMkjlqSi4X6RYJVeUQ2k87JxxWaso 4MZrFnrwZ3KeaplEVAJpDgayWv74ItWLEWo3rb0DQi0pHralqAD3kFFgHeh79s64 FVWTrR1DisoIZqOjCcf+wblEVH+o6pzZ4VE3So9s64flS24Wj/Q1natJEZykzh2s 1UCblJBWRbFgkJap0wlu4tl9JsZghs0= -----END CERTIFICATE-----Generated at Sat Mar 21 17:54:43 2026 by rpki-client