$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7026590c-8151-350b-9b29-a07906b0b7ee.roa File: 7026590c-8151-350b-9b29-a07906b0b7ee.roa (raw, json) Hash identifier: UpbJgUPtfV5mL3v0gfl7qsCbW6UP/alkBze36/TVeA8= Subject key identifier: 99:7C:DD:84:46:81:6F:21:B4:EA:62:80:5C:9D:0E:A1:F1:2D:07:81 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D932562556F2FAA2D360D3800 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7026590c-8151-350b-9b29-a07906b0b7ee.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 199959 IP address blocks: 65.86.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:62:55:6f:2f:aa:2d:36:0d:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=5d7ca4b4-12d9-4916-ae78-2a00bb1a0206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:67:78:ec:9f:c8:44:b7:5f:e1:42:0c:34:ad: 3a:bc:40:c1:7c:18:7e:04:18:49:7d:bc:86:4e:b8: 69:40:e7:cb:31:6a:81:78:e9:55:c2:bc:9a:93:56: 01:59:1c:cd:bf:d3:5f:8e:e8:7a:ff:47:cc:9a:cd: d9:d2:43:34:5e:80:0a:75:53:a4:95:a6:71:2e:c7: b7:b9:e4:09:eb:8e:cd:7e:14:b3:a7:9c:bf:d7:76: 20:0b:ae:d4:72:fe:97:d8:cf:68:93:f1:7c:c6:7e: 6a:51:c6:44:c0:45:06:b9:4a:e6:3d:82:90:cc:d7: ee:64:c2:c9:4c:aa:28:50:81:b4:a0:e2:15:88:0d: 14:f8:5c:5b:5b:9d:7d:a9:37:f6:ba:a0:5c:c6:b9: d6:8c:ff:6a:e0:ee:43:9d:21:d7:5a:d8:5f:31:17: 4c:18:45:e4:63:aa:25:84:2c:85:fe:81:44:d0:82: d1:77:5e:bf:99:65:3c:4b:78:54:8e:85:a8:55:7f: e8:a0:2c:4a:eb:e8:6b:64:c1:96:31:fa:75:56:c2: 6e:ee:0c:30:de:34:f3:2c:89:cc:4b:79:ab:d0:cb: 55:e1:49:06:84:9c:0a:90:3b:a8:af:f7:f3:44:c4: 0f:8c:34:75:59:91:cb:7d:71:57:ca:48:5f:09:d9: 72:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7C:DD:84:46:81:6F:21:B4:EA:62:80:5C:9D:0E:A1:F1:2D:07:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7026590c-8151-350b-9b29-a07906b0b7ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:dd:40:e8:13:92:49:f0:4f:f9:d8:3e:e0:be:b3:00:d9:34: 0b:89:6f:c2:c7:44:a8:6f:d6:81:64:67:af:f9:81:f7:21:b4: ed:a5:a9:c8:1b:da:15:a9:b5:58:e2:b9:c4:44:40:31:c4:be: d6:ac:ba:4f:ce:9e:7c:13:f3:8d:fa:71:a3:82:84:47:ae:52: cf:88:0c:97:a2:7b:47:69:6b:e7:39:ef:36:c7:80:6d:b9:e1: f8:d5:f4:97:01:64:4d:43:31:bf:58:1f:8f:de:e2:92:89:3d: 93:27:8d:50:01:31:c7:e7:0f:32:01:ad:84:63:4e:c1:2b:64: 2e:09:ad:bc:c4:5a:5a:d9:5a:09:2c:67:d1:09:3d:f8:cc:73: 66:71:d4:9e:a1:37:8d:93:9d:c5:c6:3b:e6:53:4b:48:e1:aa: 58:b0:df:ea:f3:16:68:c7:e5:d1:be:bb:e5:1c:c3:10:4f:f6: ee:f3:14:c3:6f:f4:81:be:92:a8:fc:e5:91:9d:52:58:7e:e4: 27:d8:54:6a:80:33:a4:ea:dd:21:c4:a3:5d:52:80:39:68:70: 4c:80:00:38:14:77:0d:88:b6:02:c4:7e:bb:fb:5f:88:95:9b: d5:50:76:a1:1a:b0:52:fd:1d:f7:ca:a8:50:f8:10:55:2f:4e: 23:53:6a:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJWJVby+qLTYNOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk NWQ3Y2E0YjQtMTJkOS00OTE2LWFlNzgtMmEwMGJiMWEwMjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1md47J/IRLdf4UIMNK06vEDBfBh+BBhJfbyG TrhpQOfLMWqBeOlVwryak1YBWRzNv9Nfjuh6/0fMms3Z0kM0XoAKdVOklaZxLse3 ueQJ647NfhSzp5y/13YgC67Ucv6X2M9ok/F8xn5qUcZEwEUGuUrmPYKQzNfuZMLJ TKooUIG0oOIViA0U+FxbW519qTf2uqBcxrnWjP9q4O5DnSHXWthfMRdMGEXkY6ol hCyF/oFE0ILRd16/mWU8S3hUjoWoVX/ooCxK6+hrZMGWMfp1VsJu7gww3jTzLInM S3mr0MtV4UkGhJwKkDuor/fzRMQPjDR1WZHLfXFXykhfCdly5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJl83YRGgW8htOpigFydDqHxLQeBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNzAyNjU5MGMtODE1MS0z NTBiLTliMjktYTA3OTA2YjBiN2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQVa8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHdQOgTkknwT/nYPuC+swDZNAuJb8LHRKhv1oFkZ6/5gfchtO2lqcgb 2hWptVjiucREQDHEvtasuk/OnnwT8436caOChEeuUs+IDJeie0dpa+c57zbHgG25 4fjV9JcBZE1DMb9YH4/e4pKJPZMnjVABMcfnDzIBrYRjTsErZC4JrbzEWlrZWgks Z9EJPfjMc2Zx1J6hN42TncXGO+ZTS0jhqliw3+rzFmjH5dG+u+UcwxBP9u7zFMNv 9IG+kqj85ZGdUlh+5CfYVGqAM6Tq3SHEo11SgDlocEyAADgUdw2ItgLEfrv7X4iV m9VQdqEasFL9HffKqFD4EFUvTiNTapE= -----END CERTIFICATE-----Generated at Mon Apr 27 08:39:51 2026 by rpki-client