$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6e8caefe-97f8-34c1-b543-4e634e1ec25a.roa File: 6e8caefe-97f8-34c1-b543-4e634e1ec25a.roa (raw, json) Hash identifier: cgW7F4c5cZl2XS3qpFAequ8ux7rxSywzQT9Mvb6+YKc= Subject key identifier: B3:4E:39:AE:0C:2D:2F:F6:5D:15:CA:D6:14:D4:83:DC:D6:64:88:E6 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E61456061A0736CD9269041C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6e8caefe-97f8-34c1-b543-4e634e1ec25a.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 5065 IP address blocks: 198.144.104.0/24 maxlen: 24 198.144.105.0/24 maxlen: 24 198.144.106.0/24 maxlen: 24 198.144.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:45:60:61:a0:73:6c:d9:26:90:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=d2c036fc-db79-459e-8600-45ca61d885b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a7:9a:8f:b9:2e:90:c7:74:67:6e:8e:e1:9c: 68:da:74:35:1c:54:52:10:a9:f4:90:97:cb:3e:79: 90:88:08:2e:8b:ee:9b:bd:17:9e:38:28:cb:31:b4: b1:af:cf:ba:08:82:f4:c7:30:00:f2:b7:a2:fd:df: c3:a1:66:91:b1:69:b6:85:e6:eb:10:74:2b:97:44: 28:42:7a:65:de:8f:15:6a:94:a5:c3:b9:e8:c0:f5: 2f:ea:81:bb:23:e3:49:a5:ef:6a:41:f6:94:00:7c: b7:f3:74:3c:bd:83:4d:31:66:9d:7c:19:5f:c8:e4: f6:7e:e8:b8:27:13:5a:fc:d1:a8:ba:0d:47:46:9c: eb:d1:40:b9:c0:56:51:87:9f:fb:7b:b4:1b:8d:72: 58:6b:ff:8d:2a:7e:0b:ea:1b:e4:d3:98:94:57:9b: 0d:2b:97:a1:b5:07:c3:3a:26:a0:a7:5f:66:90:87: 11:c1:c3:9a:b6:d8:78:fe:ad:b2:05:6e:d2:f3:4e: 1d:da:58:48:b9:f1:20:7b:cc:b3:34:d3:56:04:9a: 80:9f:ef:9e:51:ea:7d:17:57:8b:ba:09:5b:91:84: b4:39:cb:f8:07:56:5f:5a:a2:77:1d:8f:3e:c9:88: e3:68:39:66:d4:5a:3c:95:5c:32:0b:8d:c5:a7:15: 70:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4E:39:AE:0C:2D:2F:F6:5D:15:CA:D6:14:D4:83:DC:D6:64:88:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6e8caefe-97f8-34c1-b543-4e634e1ec25a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 198.144.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:78:41:39:90:ca:f4:5f:97:ac:9d:9d:62:5d:f4:11:9e:38: 6c:e0:5e:37:89:54:e7:1d:a7:27:58:c0:2b:03:4d:21:03:39: e9:b7:bc:c5:90:df:87:64:85:1e:24:6f:b0:a8:7e:30:7f:36: 4c:86:65:8b:a3:7f:31:41:b3:ce:e4:cc:38:06:ce:94:ef:67: ca:d4:30:43:29:e0:b3:79:95:be:72:05:ff:ac:75:5b:23:17: a4:c1:c5:61:57:34:02:e9:83:ee:e8:6b:58:e3:9e:dc:9d:8b: ce:81:0b:92:94:3c:a7:ac:bf:b1:c4:c4:18:7a:1e:f3:5f:b8: 77:83:88:10:2b:66:fd:0e:15:0a:44:e1:e0:a5:b8:b1:35:ba: 1a:f4:e7:99:10:19:7d:6d:86:1a:fd:cf:c8:c7:ec:8b:92:24: bf:d4:57:aa:cc:ef:8b:cd:91:c0:62:54:c8:f4:0f:2b:78:6c: 20:c4:2b:4d:7f:5f:98:93:72:65:92:0f:78:c6:48:8d:40:1b: 0b:52:95:b6:a6:ca:a1:89:29:9d:3b:2a:bc:ce:a2:88:5b:ab: b7:a6:a8:03:76:49:d6:14:87:e9:0f:9f:40:50:af:27:97:07: 84:6b:dd:6a:9f:78:2b:cc:86:72:94:f6:d2:c7:97:55:7b:47: 73:48:14:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRWBhoHNs2SaQQcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk ZDJjMDM2ZmMtZGI3OS00NTllLTg2MDAtNDVjYTYxZDg4NWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqeaj7kukMd0Z26O4Zxo2nQ1HFRSEKn0kJfL PnmQiAgui+6bvReeOCjLMbSxr8+6CIL0xzAA8rei/d/DoWaRsWm2hebrEHQrl0Qo Qnpl3o8VapSlw7nowPUv6oG7I+NJpe9qQfaUAHy383Q8vYNNMWadfBlfyOT2fui4 JxNa/NGoug1HRpzr0UC5wFZRh5/7e7QbjXJYa/+NKn4L6hvk05iUV5sNK5ehtQfD Oiagp19mkIcRwcOatth4/q2yBW7S804d2lhIufEge8yzNNNWBJqAn++eUep9F1eL uglbkYS0Ocv4B1ZfWqJ3HY8+yYjjaDlm1Fo8lVwyC43FpxVwywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNOOa4MLS/2XRXK1hTUg9zWZIjmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNmU4Y2FlZmUtOTdmOC0z NGMxLWI1NDMtNGU2MzRlMWVjMjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxpBoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA94QTmQyvRfl6ydnWJd9BGeOGzgXjeJVOcdpydYwCsDTSEDOem3vMWQ 34dkhR4kb7CofjB/NkyGZYujfzFBs87kzDgGzpTvZ8rUMEMp4LN5lb5yBf+sdVsj F6TBxWFXNALpg+7oa1jjntydi86BC5KUPKesv7HExBh6HvNfuHeDiBArZv0OFQpE 4eCluLE1uhr055kQGX1thhr9z8jH7IuSJL/UV6rM74vNkcBiVMj0Dyt4bCDEK01/ X5iTcmWSD3jGSI1AGwtSlbamyqGJKZ07KrzOoohbq7emqAN2SdYUh+kPn0BQryeX B4Rr3WqfeCvMhnKU9tLHl1V7R3NIFDA= -----END CERTIFICATE-----Generated at Fri Jul 10 13:50:04 2026 by rpki-client