$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/618415b3-a6ef-383d-9a75-c3098f2f38e6.roa File: 618415b3-a6ef-383d-9a75-c3098f2f38e6.roa (raw, json) Hash identifier: L3mfjysaEGrcYsdSBTMvAZ4sdJ5y8uJkByBtOHQVsnE= Subject key identifier: 78:17:B0:A9:C9:78:58:79:11:8B:8B:EF:28:7B:B7:25:48:93:ED:F7 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D460A5FA5AEFC6D50DCDE2CC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/618415b3-a6ef-383d-9a75-c3098f2f38e6.roa Signing time: Tue 24 Mar 2026 10:09:04 +0000 ROA not before: Tue 24 Mar 2026 10:09:04 +0000 ROA not after: Mon 22 Jun 2026 10:09:04 +0000 asID: 32693 IP address blocks: 64.204.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:0a:5f:a5:ae:fc:6d:50:dc:de:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 24 10:09:04 2026 GMT Not After : Jun 22 10:09:04 2026 GMT Subject: CN=c7f22c12-5274-4e22-8552-db772ea82925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:df:d4:a9:e6:c1:fc:d3:a4:6e:61:f3:f8:91: 55:4c:4f:07:c1:9c:03:35:4e:19:f2:54:f5:a7:b7: 8d:60:0d:24:f2:da:6b:4e:4b:cf:0f:32:35:2c:b7: a1:ec:b1:a9:2c:c2:e9:e0:7e:21:8d:c8:57:c2:8e: 33:6b:52:b7:f2:55:d7:72:e3:3f:07:fe:86:20:bb: 65:d6:35:8a:36:7a:18:04:fb:7d:30:61:d4:1e:a3: a2:cc:fe:46:bd:23:44:c5:f5:8e:d6:8d:fd:03:ff: 65:93:83:3b:23:58:c9:8b:e8:ac:88:86:4a:86:3f: d8:b5:56:d2:5f:ab:fa:b8:04:7b:0c:8d:32:ee:27: d9:d3:81:57:34:c1:4d:aa:7b:d2:76:a4:39:54:b9: 6f:d6:a6:d2:94:a8:50:ef:09:a3:74:ac:3a:60:00: 5e:3f:f0:aa:59:52:28:a9:3b:df:2f:fa:fa:ab:88: bc:50:0c:7d:df:aa:67:bf:e2:f5:a6:ec:1a:1b:89: aa:7f:2e:5f:b1:d4:b1:4e:2e:98:a4:4b:31:66:74: 2d:ff:95:e6:2d:d9:57:bc:85:ec:9b:e4:eb:9e:42: 7b:f7:b7:cd:6b:83:83:cf:f7:1a:b2:1d:e3:24:d5: 9d:31:e3:dc:c2:9f:d1:14:2f:e9:9d:61:6c:d3:d0: 08:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:17:B0:A9:C9:78:58:79:11:8B:8B:EF:28:7B:B7:25:48:93:ED:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/618415b3-a6ef-383d-9a75-c3098f2f38e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:9c:0e:51:f5:79:35:6d:40:db:5c:33:d9:92:07:39:2b:83: 8f:99:4e:3a:e5:db:ed:2d:ba:2b:d1:bb:8c:32:7c:40:60:80: 4f:fd:66:24:85:8d:b0:af:6a:c1:a5:14:ca:38:5d:69:3f:e6: c5:97:fc:fd:c6:61:a9:5e:b4:cb:0b:d3:3b:07:9a:01:af:6a: a5:b7:68:c5:12:96:e7:6f:cb:e0:5e:b0:8f:cd:45:0f:23:5e: 33:c1:6c:b4:43:4c:66:70:ea:8f:f7:4a:21:4f:27:88:10:18: 66:3d:a1:4d:d9:ae:3b:a4:a6:4f:d1:3c:60:a3:bd:3a:bd:c0: 2f:74:00:86:e6:3b:58:38:64:ab:f8:44:d0:c3:84:43:5c:08: ed:8c:94:21:e6:37:85:38:50:72:52:c4:ee:8e:f9:45:ac:5e: ed:07:b4:5b:f0:1c:d4:8c:f8:e3:7d:62:48:50:58:78:88:34: 92:81:f0:13:65:6d:f5:5e:a3:1d:71:94:14:72:7f:dd:2f:80: 9e:a6:f4:aa:4e:49:c2:df:68:8e:d7:5f:34:66:fa:d7:76:54: 75:ad:94:06:db:6b:1c:2d:33:80:e4:4c:32:b1:d9:59:87:7a: a9:52:71:8d:c4:be:74:69:44:b4:23:6a:8d:d2:83:d0:f8:dd: a4:64:4c:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GCl+lrvxtUNzeLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyNDEwMDkwNFoXDTI2MDYyMjEwMDkwNFowLzEtMCsGA1UEAxMk YzdmMjJjMTItNTI3NC00ZTIyLTg1NTItZGI3NzJlYTgyOTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt/UqebB/NOkbmHz+JFVTE8HwZwDNU4Z8lT1 p7eNYA0k8tprTkvPDzI1LLeh7LGpLMLp4H4hjchXwo4za1K38lXXcuM/B/6GILtl 1jWKNnoYBPt9MGHUHqOizP5GvSNExfWO1o39A/9lk4M7I1jJi+isiIZKhj/YtVbS X6v6uAR7DI0y7ifZ04FXNMFNqnvSdqQ5VLlv1qbSlKhQ7wmjdKw6YABeP/CqWVIo qTvfL/r6q4i8UAx936pnv+L1puwaG4mqfy5fsdSxTi6YpEsxZnQt/5XmLdlXvIXs m+TrnkJ797fNa4ODz/cash3jJNWdMePcwp/RFC/pnWFs09AIEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgXsKnJeFh5EYuL7yh7tyVIk+33MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjE4NDE1YjMtYTZlZi0z ODNkLTlhNzUtYzMwOThmMmYzOGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMxmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+cDlH1eTVtQNtcM9mSBzkrg4+ZTjrl2+0tuivRu4wyfEBggE/9ZiSF jbCvasGlFMo4XWk/5sWX/P3GYaletMsL0zsHmgGvaqW3aMUSludvy+BesI/NRQ8j XjPBbLRDTGZw6o/3SiFPJ4gQGGY9oU3Zrjukpk/RPGCjvTq9wC90AIbmO1g4ZKv4 RNDDhENcCO2MlCHmN4U4UHJSxO6O+UWsXu0HtFvwHNSM+ON9YkhQWHiINJKB8BNl bfVeox1xlBRyf90vgJ6m9KpOScLfaI7XXzRm+td2VHWtlAbbaxwtM4DkTDKx2VmH eqlScY3EvnRpRLQjao3Sg9D43aRkTCU= -----END CERTIFICATE-----Generated at Wed Mar 25 18:15:10 2026 by rpki-client