$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5e4b64e0-8cbb-34f7-a7cd-db5f48ee3606.roa File: 5e4b64e0-8cbb-34f7-a7cd-db5f48ee3606.roa (raw, json) Hash identifier: 3rBz7Jj+E9fUfWX9paGuhdRC+TJZ8f341SHxoJp7lII= Subject key identifier: 87:1C:6F:C6:BF:D8:C5:3F:73:70:A1:5C:F0:27:3C:6B:85:C5:58:78 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D71682F15B3BF99E31D7F7000 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5e4b64e0-8cbb-34f7-a7cd-db5f48ee3606.roa Signing time: Wed 08 Apr 2026 22:57:50 +0000 ROA not before: Wed 08 Apr 2026 22:57:50 +0000 ROA not after: Tue 07 Jul 2026 22:57:50 +0000 asID: 7029 IP address blocks: 65.86.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:68:2f:15:b3:bf:99:e3:1d:7f:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 8 22:57:50 2026 GMT Not After : Jul 7 22:57:50 2026 GMT Subject: CN=0fb874e0-1cb5-4452-9aca-b1228925a712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:92:5c:90:14:d7:8f:02:97:5f:3a:a9:ed:4c: f3:1d:7e:49:7b:b9:89:ac:8a:b0:3c:c3:e7:14:38: 2c:1e:76:77:d8:da:7d:34:90:e9:6a:4d:7e:6d:91: e1:ec:47:27:8d:1c:a5:61:29:95:71:a7:fd:5f:53: b0:77:75:75:d1:d4:d1:7c:4b:02:01:d8:ec:50:de: 9f:26:d7:e6:61:17:00:2a:19:e9:58:0b:2e:25:0a: e0:46:9f:c4:c1:29:7a:09:7b:f1:75:a6:c8:29:93: a9:45:38:35:95:b4:59:3e:dc:2c:0f:a2:4b:fe:a4: e9:b8:bd:ab:ef:6b:06:5c:94:42:de:06:4d:45:f0: 66:3d:4c:2f:84:a8:ae:63:e0:4a:5e:a8:04:9c:5d: 33:66:a0:0b:26:bf:a9:0f:a2:d2:e3:57:38:dc:9c: ba:ff:f0:35:9f:e1:d8:6e:45:a5:c9:2a:85:06:d7: a3:2a:67:6b:a8:76:31:fb:bf:95:5b:be:36:94:73: ae:b7:1d:bd:1e:1d:90:31:0a:12:78:c5:41:b7:0d: c5:17:7d:a3:4a:c6:b2:15:e8:e3:ca:62:a1:83:88: 34:62:90:97:37:15:07:83:54:92:fa:53:4d:49:a2: 05:ce:be:b0:c2:71:13:bd:49:7e:dd:f0:08:76:29: fd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1C:6F:C6:BF:D8:C5:3F:73:70:A1:5C:F0:27:3C:6B:85:C5:58:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5e4b64e0-8cbb-34f7-a7cd-db5f48ee3606.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:08:6c:f7:4a:35:7d:ce:92:63:60:c6:16:62:d9:0e:cd:75: 72:37:f9:6b:a4:87:92:5b:81:6d:0f:bc:41:4f:e3:35:8e:3b: cb:28:b1:0a:63:bb:7c:63:c8:89:0b:59:aa:00:68:95:b0:a0: 5c:0d:8f:55:5a:f0:44:de:b0:3b:a5:1e:35:dc:ee:f0:2d:f3: e9:14:8b:8c:4e:4b:74:55:ff:f8:da:70:2b:76:3f:b6:a4:f3: 4a:e9:73:0a:23:df:9e:a1:00:e6:50:70:b9:b3:ee:d2:e3:8f: c4:4b:0a:67:b2:c0:6e:1c:ad:c4:27:90:ea:17:79:cb:ee:95: fa:ad:5c:9d:36:99:d4:91:31:4e:0e:fc:c0:b8:75:a8:46:2b: 4f:b7:25:46:8b:82:2f:a8:c9:95:81:8d:3f:72:aa:ca:12:51: b1:a9:3f:9c:e8:f5:3d:33:4c:7f:8a:9a:e8:2f:ac:1b:99:7b: b4:8d:a2:5b:1d:6b:a3:e4:c7:3e:db:7a:ab:79:3f:7a:ad:e2: 8d:76:2d:5c:fb:1d:e1:73:80:61:da:58:10:cf:cb:d1:5d:47: 8c:38:12:1a:84:f3:37:9e:b3:a1:92:a1:dc:f5:c3:6f:50:84: 84:28:d3:02:6e:b6:1f:d0:1e:08:a8:40:23:45:9c:ff:9e:09: 67:dd:a0:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xaC8Vs7+Z4x1/cAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQwODIyNTc1MFoXDTI2MDcwNzIyNTc1MFowLzEtMCsGA1UEAxMk MGZiODc0ZTAtMWNiNS00NDUyLTlhY2EtYjEyMjg5MjVhNzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5JckBTXjwKXXzqp7UzzHX5Je7mJrIqwPMPn FDgsHnZ32Np9NJDpak1+bZHh7EcnjRylYSmVcaf9X1Owd3V10dTRfEsCAdjsUN6f JtfmYRcAKhnpWAsuJQrgRp/EwSl6CXvxdabIKZOpRTg1lbRZPtwsD6JL/qTpuL2r 72sGXJRC3gZNRfBmPUwvhKiuY+BKXqgEnF0zZqALJr+pD6LS41c43Jy6//A1n+HY bkWlySqFBtejKmdrqHYx+7+VW742lHOutx29Hh2QMQoSeMVBtw3FF32jSsayFejj ymKhg4g0YpCXNxUHg1SS+lNNSaIFzr6wwnETvUl+3fAIdin9kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIccb8a/2MU/c3ChXPAnPGuFxVh4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNWU0YjY0ZTAtOGNiYi0z NGY3LWE3Y2QtZGI1ZjQ4ZWUzNjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQVaSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQIbPdKNX3OkmNgxhZi2Q7NdXI3+Wukh5JbgW0PvEFP4zWOO8sosQpj u3xjyIkLWaoAaJWwoFwNj1Va8ETesDulHjXc7vAt8+kUi4xOS3RV//jacCt2P7ak 80rpcwoj356hAOZQcLmz7tLjj8RLCmeywG4crcQnkOoXecvulfqtXJ02mdSRMU4O /MC4dahGK0+3JUaLgi+oyZWBjT9yqsoSUbGpP5zo9T0zTH+KmugvrBuZe7SNolsd a6Pkxz7beqt5P3qt4o12LVz7HeFzgGHaWBDPy9FdR4w4EhqE8zees6GSodz1w29Q hIQo0wJuth/QHgioQCNFnP+eCWfdoJc= -----END CERTIFICATE-----Generated at Fri Apr 10 23:13:03 2026 by rpki-client