$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8a5b404a-3119-3dd8-9f51-21cd63be9aa0.roa File: 8a5b404a-3119-3dd8-9f51-21cd63be9aa0.roa (raw, json) Hash identifier: xcvNGvC+62HVtyMPpoVLMCnYZWw1+Vrr9kpuDgkOkUo= Subject key identifier: 67:8F:0C:EB:F4:D5:3C:97:66:E7:02:BA:B8:2B:8B:46:D5:7D:C3:8A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E0ABE5FDCD60B7F47575C6D80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8a5b404a-3119-3dd8-9f51-21cd63be9aa0.roa Signing time: Tue 02 Jun 2026 21:10:11 +0000 ROA not before: Tue 02 Jun 2026 21:10:11 +0000 ROA not after: Mon 31 Aug 2026 21:10:11 +0000 asID: 205489 IP address blocks: 64.204.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:be:5f:dc:d6:0b:7f:47:57:5c:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jun 2 21:10:11 2026 GMT Not After : Aug 31 21:10:11 2026 GMT Subject: CN=a1228fbe-0dc9-4d13-a362-7424db445063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9c:4d:79:76:5b:65:34:7a:06:a2:78:45:16: a5:81:3f:43:9c:b7:18:b1:96:38:b6:41:cd:53:bb: 55:c4:0a:6a:cc:b2:23:49:cc:28:d4:d7:b7:d9:e3: bd:d2:05:fc:78:18:d5:6c:ec:e3:d0:e1:5a:66:f2: e9:e3:72:f7:e8:81:db:89:09:5b:22:66:ec:74:28: c5:4e:aa:1f:40:8c:7e:77:6a:17:f2:33:5d:5a:bb: 6b:82:74:a0:91:9d:7b:af:93:a0:7e:80:2d:15:f1: 6c:25:ea:d0:c7:c1:9d:f3:7b:0b:6c:a5:69:cb:88: 09:91:05:f7:5e:e5:77:fc:0d:9d:5b:28:d6:97:ba: f4:60:10:2a:83:54:f7:62:6b:18:83:6b:ae:84:bc: 96:2b:b0:ec:fd:99:3e:03:55:46:a3:b1:e1:e7:58: 4f:5c:e5:cb:f3:19:2a:f8:5b:7c:aa:70:47:8e:0b: b6:6f:bc:c4:02:9e:f4:0d:c9:f4:61:ce:49:cd:8d: e2:63:98:01:b5:f6:01:72:ff:a2:52:64:e4:d2:9d: 29:a3:16:28:3e:c5:63:7f:f1:8c:6e:7a:22:87:30: 69:a5:ba:2e:7e:29:f6:84:1b:c3:a0:fe:b8:8c:32: 77:a7:8e:52:7a:12:96:db:9f:1d:15:94:02:21:bf: 2e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8F:0C:EB:F4:D5:3C:97:66:E7:02:BA:B8:2B:8B:46:D5:7D:C3:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8a5b404a-3119-3dd8-9f51-21cd63be9aa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:87:7e:46:4c:fb:30:c1:c0:8e:6b:b0:2e:c1:6f:e9:ff:c5: 3b:e5:6d:ee:ca:1f:95:14:b8:f1:b9:ea:30:68:75:fa:40:97: 99:64:f6:9a:76:a8:52:b0:93:c7:ed:af:a0:77:7a:e4:2d:dc: c8:df:9d:88:17:af:3e:09:e6:73:fe:0b:6b:55:0a:60:d3:b2: 00:53:e1:a4:c7:ca:a6:42:ca:52:db:4d:16:9f:60:a5:bc:56: c1:c6:02:f6:d4:ca:48:7f:43:bb:cf:17:f7:ad:c6:6c:88:9c: c0:9b:c9:f2:97:5c:20:e3:7f:62:74:d5:f4:1f:d4:cd:12:02: 3d:0f:72:bc:60:60:a4:88:4a:09:9b:4f:05:7b:1b:96:fb:01: 3a:d7:3c:d4:71:2b:23:76:a4:f4:13:33:c1:14:dc:fe:66:85: 21:eb:62:84:58:30:77:74:c1:e5:d1:44:ae:c7:c8:c8:1d:5b: b6:d9:d2:e5:46:fb:0b:ed:28:35:61:ca:55:0a:77:c0:53:7a: 66:d0:c2:4f:18:fe:f2:c7:9c:2e:b0:05:80:dd:66:0a:bc:af: 58:64:09:33:29:ea:ff:e6:54:7b:19:cd:a3:da:af:8f:bc:e7: 16:68:c8:c6:34:f2:74:2e:e1:c2:3e:9f:42:11:5e:08:a8:67: 59:2d:bf:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Kvl/c1gt/R1dcbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDYwMjIxMTAxMVoXDTI2MDgzMTIxMTAxMVowLzEtMCsGA1UEAxMk YTEyMjhmYmUtMGRjOS00ZDEzLWEzNjItNzQyNGRiNDQ1MDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJxNeXZbZTR6BqJ4RRalgT9DnLcYsZY4tkHN U7tVxApqzLIjScwo1Ne32eO90gX8eBjVbOzj0OFaZvLp43L36IHbiQlbImbsdCjF TqofQIx+d2oX8jNdWrtrgnSgkZ17r5OgfoAtFfFsJerQx8Gd83sLbKVpy4gJkQX3 XuV3/A2dWyjWl7r0YBAqg1T3YmsYg2uuhLyWK7Ds/Zk+A1VGo7Hh51hPXOXL8xkq +Ft8qnBHjgu2b7zEAp70Dcn0Yc5JzY3iY5gBtfYBcv+iUmTk0p0poxYoPsVjf/GM bnoihzBppboufin2hBvDoP64jDJ3p45SehKW258dFZQCIb8u4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGePDOv01TyXZucCurgri0bVfcOKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOGE1YjQwNGEtMzExOS0z ZGQ4LTlmNTEtMjFjZDYzYmU5YWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMyVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMeHfkZM+zDBwI5rsC7Bb+n/xTvlbe7KH5UUuPG56jBodfpAl5lk9pp2 qFKwk8ftr6B3euQt3MjfnYgXrz4J5nP+C2tVCmDTsgBT4aTHyqZCylLbTRafYKW8 VsHGAvbUykh/Q7vPF/etxmyInMCbyfKXXCDjf2J01fQf1M0SAj0PcrxgYKSISgmb TwV7G5b7ATrXPNRxKyN2pPQTM8EU3P5mhSHrYoRYMHd0weXRRK7HyMgdW7bZ0uVG +wvtKDVhylUKd8BTembQwk8Y/vLHnC6wBYDdZgq8r1hkCTMp6v/mVHsZzaPar4+8 5xZoyMY08nQu4cI+n0IRXgioZ1ktv9Y= -----END CERTIFICATE-----Generated at Thu Jun 11 16:27:24 2026 by rpki-client