$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/687647b6-932a-3428-8f72-3246cc4b3258.roa File: 687647b6-932a-3428-8f72-3246cc4b3258.roa (raw, json) Hash identifier: xA/AsxYIq6pmxTZWO6qNo5LXHjRHloC/CBxxOMfEbQ4= Subject key identifier: 74:B7:B0:6F:D4:64:E4:D5:EE:04:50:17:AD:CF:18:AE:D4:98:F2:64 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DF0AB34F1538F9D6E69BC2E80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/687647b6-932a-3428-8f72-3246cc4b3258.roa Signing time: Sun 24 May 2026 13:00:30 +0000 ROA not before: Sun 24 May 2026 13:00:30 +0000 ROA not after: Sat 22 Aug 2026 13:00:30 +0000 asID: 834 IP address blocks: 65.86.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f0:ab:34:f1:53:8f:9d:6e:69:bc:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 24 13:00:30 2026 GMT Not After : Aug 22 13:00:30 2026 GMT Subject: CN=eb72d485-ae8f-4f31-a333-fb52b3971778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:80:01:cc:88:d3:07:03:b5:ae:ea:18:4a:40: 33:b6:24:74:19:86:b8:76:b3:ac:a8:f4:df:91:b9: 4c:1b:4f:d9:93:3a:e6:98:d1:c2:38:38:b6:67:9f: 46:09:53:f1:91:be:5c:7a:ff:ac:88:da:15:e7:a2: 44:16:73:3e:63:a0:b5:c7:a3:f9:97:3d:1d:06:62: 56:48:80:db:07:3e:eb:53:87:ca:2c:e5:d8:34:b0: 49:7d:8d:8a:43:7b:9a:c2:4c:e5:dc:00:12:03:88: e8:f6:fe:2f:de:8c:3c:34:1f:96:10:db:ab:e3:3c: e9:48:8a:e5:78:3e:a5:b3:06:47:a7:48:c7:f1:98: 5b:95:bb:17:56:ff:1e:53:7d:3b:a2:34:41:7b:14: 2d:03:a3:22:04:e9:a5:02:fc:37:9e:f7:65:22:d6: 13:9a:49:90:91:df:21:23:57:fb:3f:2a:99:fc:51: 6f:60:4b:34:46:29:8b:b3:4a:19:7e:13:7d:ec:79: 5f:6f:c2:ef:7f:19:db:0d:81:32:36:69:da:34:21: ea:31:05:2a:f5:d1:a2:d0:a3:ce:99:e1:96:8f:4e: 90:f5:a5:69:a0:57:b7:68:6f:4b:53:f6:5d:29:b3: 5f:d2:2d:42:cd:a9:f2:43:0a:c6:f8:88:98:c7:9c: 15:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B7:B0:6F:D4:64:E4:D5:EE:04:50:17:AD:CF:18:AE:D4:98:F2:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/687647b6-932a-3428-8f72-3246cc4b3258.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:00:c2:ae:a9:ae:4b:20:54:8f:46:5f:85:62:42:74:4d:14: a9:ef:7f:ee:ba:3e:d0:36:a1:2c:82:26:7c:7e:f5:ef:8b:49: 2f:d0:c2:13:a7:05:4a:25:55:31:c8:ba:93:55:18:42:45:c6: 8c:a8:3f:b4:d9:c5:bb:49:18:a2:51:5d:26:f9:04:7b:35:7d: 0c:7a:5d:94:f3:c2:b4:8e:13:de:d1:b5:9c:6f:8a:89:92:e9: 1c:7e:55:fc:59:ec:0f:ae:b1:2f:0c:47:a0:3e:22:16:ad:ec: 7f:37:55:d1:03:08:d2:54:61:a3:8e:b7:fe:5a:22:a6:58:e1: 09:7d:2b:1d:d2:60:f0:ef:fa:e6:90:a8:74:ab:89:16:0e:69: d6:c8:7d:3a:6d:02:ef:fc:bc:dc:5e:3a:63:f0:7c:42:89:a0: b7:95:51:9c:00:35:23:fd:a0:a2:90:df:06:d9:96:50:6c:43: fb:0b:90:ae:c4:29:c9:6b:04:37:ed:1a:2c:69:5b:5a:47:93: 14:5b:3a:5f:48:c5:cb:3c:68:30:a9:54:ca:1b:f8:b1:d2:a7: 28:b0:51:eb:22:f6:b3:24:a9:c7:cc:db:4b:42:e0:3d:f4:e2: c5:df:44:5a:5b:dc:10:8f:3d:bb:35:c1:5e:52:ce:f5:ee:e6: 01:8c:6b:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3wqzTxU4+dbmm8LoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUyNDEzMDAzMFoXDTI2MDgyMjEzMDAzMFowLzEtMCsGA1UEAxMk ZWI3MmQ0ODUtYWU4Zi00ZjMxLWEzMzMtZmI1MmIzOTcxNzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIABzIjTBwO1ruoYSkAztiR0GYa4drOsqPTf kblMG0/ZkzrmmNHCODi2Z59GCVPxkb5cev+siNoV56JEFnM+Y6C1x6P5lz0dBmJW SIDbBz7rU4fKLOXYNLBJfY2KQ3uawkzl3AASA4jo9v4v3ow8NB+WENur4zzpSIrl eD6lswZHp0jH8ZhblbsXVv8eU307ojRBexQtA6MiBOmlAvw3nvdlItYTmkmQkd8h I1f7PyqZ/FFvYEs0RimLs0oZfhN97Hlfb8LvfxnbDYEyNmnaNCHqMQUq9dGi0KPO meGWj06Q9aVpoFe3aG9LU/ZdKbNf0i1CzanyQwrG+IiYx5wVEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHS3sG/UZOTV7gRQF63PGK7UmPJkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjg3NjQ3YjYtOTMyYS0z NDI4LThmNzItMzI0NmNjNGIzMjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYAwq6prksgVI9GX4ViQnRNFKnvf+66PtA2oSyCJnx+9e+LSS/QwhOn BUolVTHIupNVGEJFxoyoP7TZxbtJGKJRXSb5BHs1fQx6XZTzwrSOE97RtZxviomS 6Rx+VfxZ7A+usS8MR6A+Ihat7H83VdEDCNJUYaOOt/5aIqZY4Ql9Kx3SYPDv+uaQ qHSriRYOadbIfTptAu/8vNxeOmPwfEKJoLeVUZwANSP9oKKQ3wbZllBsQ/sLkK7E KclrBDftGixpW1pHkxRbOl9Ixcs8aDCpVMob+LHSpyiwUesi9rMkqcfM20tC4D30 4sXfRFpb3BCPPbs1wV5SzvXu5gGMawo= -----END CERTIFICATE-----Generated at Tue May 26 02:33:56 2026 by rpki-client