$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/70ea46b0-d89e-351a-9f85-9b7a139d613b.roa File: 70ea46b0-d89e-351a-9f85-9b7a139d613b.roa (raw, json) Hash identifier: mvdmwCkiW9WlwDYF5Q68MuK1u9DO4BK0NDy3npr5zHc= Subject key identifier: A0:8B:6D:E2:33:40:93:E1:CB:8E:2E:E7:8A:2D:1B:DA:57:77:5E:CC Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E6B0A30351EE01DD6F5ED3680 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/70ea46b0-d89e-351a-9f85-9b7a139d613b.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 834 IP address blocks: 64.204.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:30:35:1e:e0:1d:d6:f5:ed:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=bb29d3fc-fcc8-48aa-9449-367a3c3fd0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bc:7e:48:b9:2c:ad:56:7d:cb:63:60:1d:cb: 23:67:98:d8:5c:62:92:f5:65:d1:84:28:68:16:14: 3e:98:86:3c:d8:10:ff:11:40:85:2a:3a:e4:87:cc: e5:5d:0d:c2:96:0c:9b:e7:b1:3a:98:05:f1:5a:e5: 7b:0d:2e:61:8a:61:d3:e6:f6:18:b0:a1:84:b1:f4: 43:67:b5:63:a9:39:50:70:f8:a1:16:f1:4e:8d:c1: 84:b9:ea:90:29:b1:12:52:3c:ff:cb:5f:57:eb:b1: fe:79:d8:d2:50:49:07:e4:30:1a:2a:c0:d3:67:e2: 92:18:d8:ed:d2:c9:08:6c:8a:e3:1f:9b:b2:3e:fc: c2:0c:2c:9f:f6:94:71:5f:30:ab:5d:ad:b1:33:53: dc:44:69:f1:22:ba:7e:e0:cc:ee:3b:48:e9:61:1b: 81:73:9b:6a:13:3c:cb:cc:b7:45:8c:ba:4b:e8:7b: b4:84:21:ca:74:a7:70:c7:3e:99:65:5d:7b:d7:7c: 50:04:ac:d3:36:13:b6:0b:af:3f:00:c3:64:19:40: 76:26:9d:a1:a1:84:ba:c1:a6:bb:1b:c0:b3:01:4e: 0d:84:08:84:60:1e:ee:33:e2:9e:65:4b:d7:ea:f6: 39:9f:73:88:d0:8e:ad:5c:29:f8:ad:91:85:65:59: d7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8B:6D:E2:33:40:93:E1:CB:8E:2E:E7:8A:2D:1B:DA:57:77:5E:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/70ea46b0-d89e-351a-9f85-9b7a139d613b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:51:95:32:e9:52:fd:3b:c3:f8:8a:43:47:99:f6:59:59:ce: e3:37:41:cd:65:3b:5c:64:e6:b9:e6:4b:cf:45:54:c6:94:38: 7a:57:9e:43:e2:74:71:16:04:a4:b0:9f:5d:79:90:1f:ae:c9: 53:be:43:1b:e9:64:de:e4:50:27:81:0a:72:73:a7:32:1d:0e: 26:37:78:5c:fa:4c:33:1f:08:20:49:56:03:d7:26:b7:d5:95: cd:7a:79:1d:ab:2c:b1:7f:b9:0a:d5:0c:0f:35:c8:64:45:a6: ed:3c:30:f6:d4:34:e9:c7:81:6f:30:e4:0d:5f:9b:bf:4d:b4: 3e:93:90:b0:aa:16:c8:53:5e:52:0b:e2:0d:af:69:15:cc:47: a4:4e:18:fc:6c:36:d7:79:6b:31:8e:fd:f6:d4:59:fa:c8:4f: 3c:f7:78:27:5a:36:8c:01:dc:72:fb:95:85:57:d6:b1:77:48: 10:72:b7:00:82:c4:37:b2:7e:00:c0:8f:07:5f:b2:16:ad:a4: aa:8d:a5:43:d8:87:d4:4a:b4:c0:3b:7f:74:29:f9:08:81:df: e8:01:ea:28:71:34:75:49:cc:70:a0:c7:61:39:32:2d:c2:4a: f1:0f:ad:d3:3b:f6:67:13:14:b5:9d:f6:c4:22:fb:be:34:9e: 33:5c:86:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCjA1HuAd1vXtNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk YmIyOWQzZmMtZmNjOC00OGFhLTk0NDktMzY3YTNjM2ZkMGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurx+SLksrVZ9y2NgHcsjZ5jYXGKS9WXRhCho FhQ+mIY82BD/EUCFKjrkh8zlXQ3Clgyb57E6mAXxWuV7DS5himHT5vYYsKGEsfRD Z7VjqTlQcPihFvFOjcGEueqQKbESUjz/y19X67H+edjSUEkH5DAaKsDTZ+KSGNjt 0skIbIrjH5uyPvzCDCyf9pRxXzCrXa2xM1PcRGnxIrp+4MzuO0jpYRuBc5tqEzzL zLdFjLpL6Hu0hCHKdKdwxz6ZZV1713xQBKzTNhO2C68/AMNkGUB2Jp2hoYS6waa7 G8CzAU4NhAiEYB7uM+KeZUvX6vY5n3OI0I6tXCn4rZGFZVnXswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCLbeIzQJPhy44u54otG9pXd17MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNzBlYTQ2YjAtZDg5ZS0z NTFhLTlmODUtOWI3YTEzOWQ2MTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQMyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpRlTLpUv07w/iKQ0eZ9llZzuM3Qc1lO1xk5rnmS89FVMaUOHpXnkPi dHEWBKSwn115kB+uyVO+QxvpZN7kUCeBCnJzpzIdDiY3eFz6TDMfCCBJVgPXJrfV lc16eR2rLLF/uQrVDA81yGRFpu08MPbUNOnHgW8w5A1fm79NtD6TkLCqFshTXlIL 4g2vaRXMR6ROGPxsNtd5azGO/fbUWfrITzz3eCdaNowB3HL7lYVX1rF3SBBytwCC xDeyfgDAjwdfshatpKqNpUPYh9RKtMA7f3Qp+QiB3+gB6ihxNHVJzHCgx2E5Mi3C SvEPrdM79mcTFLWd9sQi+740njNchhA= -----END CERTIFICATE-----Generated at Fri Jul 10 13:49:52 2026 by rpki-client