$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7031424a-a711-304f-9a5e-ca1372668b32.roa File: 7031424a-a711-304f-9a5e-ca1372668b32.roa (raw, json) Hash identifier: uEIq8iJCkICZBrzUHq0y7h+0B+6B5jH/c/tXp/IwgwU= Subject key identifier: 63:C0:7D:2E:4D:68:DF:A1:A5:66:5B:48:AA:D9:F8:A3:C2:6E:2A:32 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D460A54BE6539A5C6E29183C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7031424a-a711-304f-9a5e-ca1372668b32.roa Signing time: Tue 24 Mar 2026 10:08:58 +0000 ROA not before: Tue 24 Mar 2026 10:08:58 +0000 ROA not after: Mon 22 Jun 2026 10:08:58 +0000 asID: 32693 IP address blocks: 64.204.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:0a:54:be:65:39:a5:c6:e2:91:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 24 10:08:58 2026 GMT Not After : Jun 22 10:08:58 2026 GMT Subject: CN=55c2c100-5a05-4357-9fa2-e59c5f181089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9f:ab:3f:e2:23:5d:85:07:cc:0d:53:ae:73: 5f:84:34:2d:47:00:ba:2e:ac:21:89:58:ce:a5:55: d3:a7:53:00:2f:11:ca:60:ec:b0:b1:ee:30:a6:c0: b2:b6:3b:9e:05:fb:84:4b:47:9b:81:56:2f:78:fd: b6:22:a0:81:bc:d1:da:47:6f:8b:b6:ed:71:f9:c6: 7a:8b:30:47:ef:21:20:a2:ef:e4:cc:39:78:95:9d: 64:f1:7d:9f:0e:38:9f:7d:d4:b7:13:8c:1f:45:b6: f9:31:7c:67:41:ad:87:cf:61:aa:2a:6e:81:ab:4e: 51:44:c9:c1:03:ec:50:cc:6e:63:00:0b:95:d0:3b: aa:ad:b9:b8:27:0d:75:b3:8a:5c:54:ab:5d:ed:69: 79:c8:15:2d:52:c0:5d:c0:fc:38:6d:2d:89:10:38: e6:8e:f7:9c:48:fb:be:94:f1:3f:5b:cb:f0:31:5f: eb:7f:e9:90:a8:7b:d5:b9:55:37:b7:78:5e:50:91: 08:77:6c:f6:20:7a:3f:06:c2:f8:e0:eb:49:23:81: 97:53:99:2f:11:24:56:38:f2:52:d7:33:35:3f:4f: 38:b7:f5:35:81:86:11:84:4c:ab:23:71:7a:3f:5d: e0:c4:c4:80:ab:e0:ea:02:5a:2a:80:21:51:d9:df: 56:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C0:7D:2E:4D:68:DF:A1:A5:66:5B:48:AA:D9:F8:A3:C2:6E:2A:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7031424a-a711-304f-9a5e-ca1372668b32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:8a:1f:39:ea:0c:d2:a9:d8:c2:74:2e:70:bc:48:1b:f2:15: 78:73:f4:e4:b6:62:f5:a8:aa:a9:dd:c5:8d:32:67:f8:bf:04: 0e:7d:06:c9:f5:ab:1e:4b:8f:71:24:d6:7c:b3:93:4a:2b:47: 67:f6:4e:df:ae:87:bc:16:01:e3:d7:63:53:db:4e:10:e9:1b: ee:3d:62:e6:35:db:c0:1c:67:e7:00:76:6a:f0:e2:68:85:3a: 72:32:58:e0:9a:1e:c4:8d:52:f9:48:f7:60:52:f9:bb:a4:af: 3f:93:4e:ce:6a:f7:ec:6b:69:a9:37:77:a9:8d:9d:58:79:d1: 1f:e4:f1:17:d8:67:91:0e:60:79:35:4d:50:68:22:dd:1b:dd: 65:35:48:70:87:c9:b5:bd:c0:ab:c0:68:a7:5f:7f:33:06:79: 97:c3:11:33:8a:95:5a:23:b2:86:7b:21:5b:19:c1:09:f9:36: 12:16:3a:c6:31:60:08:cd:78:58:68:32:ff:f7:69:a6:bb:58: bb:bd:66:02:61:7a:ac:db:20:74:11:f2:08:60:bc:86:8e:2f: 90:4b:92:e3:aa:0e:c3:0d:0d:ca:dc:f5:5e:44:91:70:35:66: 2e:40:45:6b:86:e7:c7:35:bc:bf:03:dd:ec:c0:5b:db:28:4b: 2b:e5:65:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GClS+ZTmlxuKRg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyNDEwMDg1OFoXDTI2MDYyMjEwMDg1OFowLzEtMCsGA1UEAxMk NTVjMmMxMDAtNWEwNS00MzU3LTlmYTItZTU5YzVmMTgxMDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ+rP+IjXYUHzA1TrnNfhDQtRwC6LqwhiVjO pVXTp1MALxHKYOywse4wpsCytjueBfuES0ebgVYveP22IqCBvNHaR2+Ltu1x+cZ6 izBH7yEgou/kzDl4lZ1k8X2fDjiffdS3E4wfRbb5MXxnQa2Hz2GqKm6Bq05RRMnB A+xQzG5jAAuV0Duqrbm4Jw11s4pcVKtd7Wl5yBUtUsBdwPw4bS2JEDjmjvecSPu+ lPE/W8vwMV/rf+mQqHvVuVU3t3heUJEId2z2IHo/BsL44OtJI4GXU5kvESRWOPJS 1zM1P084t/U1gYYRhEyrI3F6P13gxMSAq+DqAloqgCFR2d9WiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPAfS5NaN+hpWZbSKrZ+KPCbioyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNzAzMTQyNGEtYTcxMS0z MDRmLTlhNWUtY2ExMzcyNjY4YjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMxoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECKHznqDNKp2MJ0LnC8SBvyFXhz9OS2YvWoqqndxY0yZ/i/BA59Bsn1 qx5Lj3Ek1nyzk0orR2f2Tt+uh7wWAePXY1PbThDpG+49YuY128AcZ+cAdmrw4miF OnIyWOCaHsSNUvlI92BS+bukrz+TTs5q9+xraak3d6mNnVh50R/k8RfYZ5EOYHk1 TVBoIt0b3WU1SHCHybW9wKvAaKdffzMGeZfDETOKlVojsoZ7IVsZwQn5NhIWOsYx YAjNeFhoMv/3aaa7WLu9ZgJheqzbIHQR8ghgvIaOL5BLkuOqDsMNDcrc9V5EkXA1 Zi5ARWuG58c1vL8D3ezAW9soSyvlZQM= -----END CERTIFICATE-----Generated at Wed Mar 25 18:20:56 2026 by rpki-client