$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8b0df0b8-a817-391e-9696-9579cf3f35f2.roa File: 8b0df0b8-a817-391e-9696-9579cf3f35f2.roa (raw, json) Hash identifier: 0vvRCp4tFCrzT3vIFbEF3TwAMK7q1Au/0D1+yFaB1hM= Subject key identifier: 76:B4:C1:D8:F1:F1:8C:F5:62:73:E6:F5:32:43:F7:22:39:AC:35:F5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D5884DEA5466F561AF64B1A80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8b0df0b8-a817-391e-9696-9579cf3f35f2.roa Signing time: Tue 31 Mar 2026 01:00:23 +0000 ROA not before: Tue 31 Mar 2026 01:00:23 +0000 ROA not after: Mon 29 Jun 2026 01:00:23 +0000 asID: 2914 IP address blocks: 64.8.248.0/24 maxlen: 24 64.8.249.0/24 maxlen: 24 64.8.250.0/24 maxlen: 24 64.8.251.0/24 maxlen: 24 64.8.252.0/24 maxlen: 24 64.8.253.0/24 maxlen: 24 74.82.110.0/24 maxlen: 24 74.82.111.0/24 maxlen: 24 155.229.74.0/24 maxlen: 24 155.229.75.0/24 maxlen: 24 155.229.76.0/24 maxlen: 24 155.229.77.0/24 maxlen: 24 206.217.75.0/24 maxlen: 24 206.217.78.0/24 maxlen: 24 206.217.91.0/24 maxlen: 24 206.217.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:58:84:de:a5:46:6f:56:1a:f6:4b:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 31 01:00:23 2026 GMT Not After : Jun 29 01:00:23 2026 GMT Subject: CN=e770e3c7-be93-4285-ba93-7a254636026a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9e:1b:8c:b5:52:5b:75:0e:86:48:68:18:2c: d8:0b:27:15:bb:ed:e4:55:59:5b:a7:a2:7a:e3:27: b8:5a:d9:e4:17:fe:58:44:de:33:34:f1:4a:f0:4e: 31:55:3a:07:b6:b0:b6:60:78:ca:1c:0c:e2:e0:54: c7:03:17:ea:8f:af:77:d0:ab:55:56:80:b1:a1:78: 0d:1d:d8:39:16:d2:ac:28:4b:8f:99:b2:50:84:22: 33:7e:08:b9:0b:66:cc:fe:34:a3:f0:a6:d1:be:4d: ab:24:13:0a:65:9e:7d:74:2f:0c:ab:55:c4:50:b8: a7:32:ea:27:f9:68:5b:c0:16:60:6e:9a:83:3b:f9: 55:06:95:38:e2:8a:e0:70:8e:b1:89:a4:95:51:38: 9c:50:f7:03:9d:a6:a2:5a:7a:e8:e2:f8:6b:f9:de: 52:6c:75:62:bd:09:7e:3b:ea:9a:3e:d0:4e:45:3c: 9d:83:93:da:c4:a2:01:e2:e6:4e:9c:d8:11:91:5d: 76:99:83:3e:9f:7f:a5:2f:25:0e:fd:9c:28:3e:16: d7:2e:51:2b:c8:cb:28:6a:bb:89:c7:a1:89:a6:8b: 48:80:70:0c:a9:7c:64:d7:62:4e:d1:ae:de:95:40: c5:d6:37:0d:ac:56:ec:92:6c:17:48:76:91:63:78: 17:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B4:C1:D8:F1:F1:8C:F5:62:73:E6:F5:32:43:F7:22:39:AC:35:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8b0df0b8-a817-391e-9696-9579cf3f35f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.8.248.0-64.8.253.255 74.82.110.0/23 155.229.74.0-155.229.77.255 206.217.75.0/24 206.217.78.0/24 206.217.91.0/24 206.217.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:52:4f:10:a5:c3:b7:7a:d9:5e:ef:c7:3f:aa:ad:5f:34:c4: 01:b0:43:b1:a1:b2:2f:e8:78:b8:5f:61:9d:91:99:2f:f0:15: 6a:bf:f5:ad:e8:c3:5b:64:37:22:02:a2:da:34:72:dc:bf:08: 37:2a:1f:3d:2d:9e:78:4e:b3:94:50:3d:88:5d:07:bc:b3:ce: 9d:ef:d3:e3:e9:0c:77:d8:a7:f4:c4:c4:22:15:af:ed:9b:67: c3:ae:9b:5d:09:4c:76:23:11:87:00:f7:f4:d9:ba:68:8e:90: f1:3f:f9:e5:54:df:70:8c:ff:1d:2b:e9:bc:56:c4:ff:88:e3: 80:07:36:10:bf:05:ce:d3:ea:6f:37:9b:5c:79:b6:99:8a:7b: d8:a4:5a:75:d5:c9:98:e3:65:e6:39:1b:c5:86:d4:01:3a:da: 95:85:6b:ff:4c:2a:1a:f3:2c:ce:41:18:1d:76:6b:e0:ab:ce: 46:20:c3:2f:b0:5e:99:e5:cc:d3:d5:4b:9e:c1:f6:81:60:a3: 81:0f:d8:b4:d3:7e:6d:34:9f:b4:ad:65:6e:64:02:0b:80:f9: 2e:d6:cd:97:18:0c:ac:51:08:1d:e5:dc:cd:0d:60:56:2a:15: c3:53:45:eb:56:37:18:7e:e2:96:59:32:26:18:01:b8:6f:32: f2:93:27:94 -----BEGIN CERTIFICATE----- MIIGdzCCBV+gAwIBAgIUAQ0Mn0MoWE1YhN6lRm9WGvZLGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMzMTAxMDAyM1oXDTI2MDYyOTAxMDAyM1owLzEtMCsGA1UEAxMk ZTc3MGUzYzctYmU5My00Mjg1LWJhOTMtN2EyNTQ2MzYwMjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk54bjLVSW3UOhkhoGCzYCycVu+3kVVlbp6J6 4ye4WtnkF/5YRN4zNPFK8E4xVToHtrC2YHjKHAzi4FTHAxfqj6930KtVVoCxoXgN Hdg5FtKsKEuPmbJQhCIzfgi5C2bM/jSj8KbRvk2rJBMKZZ59dC8Mq1XEULinMuon +WhbwBZgbpqDO/lVBpU44orgcI6xiaSVUTicUPcDnaaiWnro4vhr+d5SbHVivQl+ O+qaPtBORTydg5PaxKIB4uZOnNgRkV12mYM+n3+lLyUO/ZwoPhbXLlEryMsoaruJ x6GJpotIgHAMqXxk12JO0a7elUDF1jcNrFbskmwXSHaRY3gXvQIDAQABo4IDiTCC A4UwHQYDVR0OBBYEFHa0wdjx8Yz1YnPm9TJD9yI5rDX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOGIwZGYwYjgtYTgxNy0z OTFlLTk2OTYtOTU3OWNmM2YzNWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6MAwDBANACPgD BAFACPwDBAFKUm4wDAMEAZvlSgMEAZvlTAMEAM7ZSwMEAM7ZTgMEAM7ZWwMEAM7Z YDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQA0Uk8QpcO3etle78c/qq1fNMQBsEOxobIv6Hi4X2GdkZkv8BVq v/Wt6MNbZDciAqLaNHLcvwg3Kh89LZ54TrOUUD2IXQe8s86d79Pj6Qx32Kf0xMQi Fa/tm2fDrptdCUx2IxGHAPf02bpojpDxP/nlVN9wjP8dK+m8VsT/iOOABzYQvwXO 0+pvN5tcebaZinvYpFp11cmY42XmORvFhtQBOtqVhWv/TCoa8yzOQRgddmvgq85G IMMvsF6Z5czT1UuewfaBYKOBD9i0035tNJ+0rWVuZAILgPku1s2XGAysUQgd5dzN DWBWKhXDU0XrVjcYfuKWWTImGAG4bzLykyeU -----END CERTIFICATE-----Generated at Fri Apr 10 23:16:46 2026 by rpki-client