$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8f38345d-1aa0-3e47-91bf-79591c9aeff6.roa File: 8f38345d-1aa0-3e47-91bf-79591c9aeff6.roa (raw, json) Hash identifier: zg84jA2jEbqTBftQ6My9ADvPhvK5EOGcyNMe8QyaI/A= Subject key identifier: 5C:E2:0A:98:5A:84:FD:3E:B4:3E:0B:31:F9:17:F2:55:15:11:C9:27 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D65153C6706096801648ED280 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8f38345d-1aa0-3e47-91bf-79591c9aeff6.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 834 IP address blocks: 68.167.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:3c:67:06:09:68:01:64:8e:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=b74b38c2-ce1a-4770-8702-3dbf2c1f7504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9d:9b:2c:0e:c6:25:3c:f3:e5:0d:39:81:24: cf:46:02:a6:70:3e:5e:fb:15:53:3e:46:17:13:16: e9:6b:95:f4:64:ee:9e:d9:9b:d2:87:54:a1:d9:3c: ad:e7:d3:1c:57:2a:15:73:d3:97:f0:88:46:16:d3: 55:07:b7:1f:a5:d3:94:c9:92:23:d1:9d:9b:f2:73: 8f:14:8f:c0:31:1e:c9:d5:0c:0c:80:e0:d3:0f:e7: cf:3a:a9:2e:ec:04:a4:ac:d7:8f:c6:d3:46:6e:b2: 52:aa:8e:d3:66:68:bf:52:02:ba:e9:e0:ab:50:da: 66:3a:d6:8b:ed:aa:18:61:78:0c:f0:2c:80:5e:97: b6:22:da:4e:15:80:6f:50:5c:99:a0:fd:3c:a7:c0: 78:4b:9c:a0:f8:7c:22:60:e3:de:2e:6a:3e:bf:e0: 1d:52:f4:23:64:7d:b1:b3:0b:34:e0:44:f7:c2:be: 7a:34:5d:0b:e9:c4:5c:7f:85:d5:6d:ff:0e:cb:41: 65:77:1c:66:5b:aa:af:03:e0:a2:d8:4c:32:25:3e: 82:aa:89:8d:56:ca:aa:d3:76:4f:2d:21:cc:ce:28: d1:20:43:3d:52:05:94:bd:10:ba:4e:ef:ae:90:b3: 5e:dd:33:12:01:61:7a:6e:4f:e1:cf:eb:8f:0b:51: 87:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E2:0A:98:5A:84:FD:3E:B4:3E:0B:31:F9:17:F2:55:15:11:C9:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8f38345d-1aa0-3e47-91bf-79591c9aeff6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:92:0b:bc:9f:b0:cd:23:e2:42:71:ee:19:c0:58:44:5e:de: 84:10:41:f3:c6:c4:17:b3:2e:e4:25:b3:ed:d8:98:d6:ba:85: e0:ba:4d:a1:59:b7:00:de:6f:5e:da:e7:d1:aa:08:e8:aa:31: 32:2d:5e:f0:7b:b4:1f:8a:63:7f:7f:58:f5:c4:d5:8c:06:90: 65:c1:4c:1f:18:2a:b8:05:52:fe:fd:ac:3b:ce:25:d5:c1:f1: c7:64:65:42:41:d6:b3:db:1d:d0:50:3a:d5:f7:0c:1e:0e:c5: 0b:a8:08:9c:fa:3f:de:b7:2d:5c:47:82:d0:01:bb:33:37:ef: 0d:b2:54:7e:9b:35:57:b7:fc:88:7f:46:d4:ab:26:d4:8e:53: 24:68:27:bc:a6:6a:c6:d6:fb:55:86:20:d6:04:24:5d:41:73: c1:dc:b7:29:93:b3:ac:89:6e:1d:25:6d:9c:c8:83:f9:c1:48: 9d:7f:e5:89:e4:35:fa:01:0f:5f:b1:09:0d:1e:3a:9d:c8:d2: eb:92:0c:68:10:30:92:00:f4:6a:1d:89:51:1a:3f:16:eb:cf: 1a:dd:91:50:ac:ce:a6:ef:05:f9:1c:3a:8e:c9:ed:eb:4c:ac: 28:71:3d:87:3c:92:3e:77:b8:46:18:4d:e0:8e:84:d2:c1:d5: 80:b2:cd:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFTxnBgloAWSO0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk Yjc0YjM4YzItY2UxYS00NzcwLTg3MDItM2RiZjJjMWY3NTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA252bLA7GJTzz5Q05gSTPRgKmcD5e+xVTPkYX Exbpa5X0ZO6e2ZvSh1Sh2Tyt59McVyoVc9OX8IhGFtNVB7cfpdOUyZIj0Z2b8nOP FI/AMR7J1QwMgODTD+fPOqku7ASkrNePxtNGbrJSqo7TZmi/UgK66eCrUNpmOtaL 7aoYYXgM8CyAXpe2ItpOFYBvUFyZoP08p8B4S5yg+HwiYOPeLmo+v+AdUvQjZH2x sws04ET3wr56NF0L6cRcf4XVbf8Oy0FldxxmW6qvA+Ci2EwyJT6CqomNVsqq03ZP LSHMzijRIEM9UgWUvRC6Tu+ukLNe3TMSAWF6bk/hz+uPC1GHgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFziCphahP0+tD4LMfkX8lUVEcknMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOGYzODM0NWQtMWFhMC0z ZTQ3LTkxYmYtNzk1OTFjOWFlZmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKc0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGSC7yfsM0j4kJx7hnAWERe3oQQQfPGxBezLuQls+3YmNa6heC6TaFZ twDeb17a59GqCOiqMTItXvB7tB+KY39/WPXE1YwGkGXBTB8YKrgFUv79rDvOJdXB 8cdkZUJB1rPbHdBQOtX3DB4OxQuoCJz6P963LVxHgtABuzM37w2yVH6bNVe3/Ih/ RtSrJtSOUyRoJ7ymasbW+1WGINYEJF1Bc8HctymTs6yJbh0lbZzIg/nBSJ1/5Ynk NfoBD1+xCQ0eOp3I0uuSDGgQMJIA9GodiVEaPxbrzxrdkVCszqbvBfkcOo7J7etM rChxPYc8kj53uEYYTeCOhNLB1YCyzcU= -----END CERTIFICATE-----Generated at Fri Apr 10 23:17:09 2026 by rpki-client