$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/90e64b76-a6a4-3846-a602-bc6a6b0625d7.roa File: 90e64b76-a6a4-3846-a602-bc6a6b0625d7.roa (raw, json) Hash identifier: 23fRX/ZUUyR32qbvECckv2Xb80NDXKCqIlW/jhUT08M= Subject key identifier: 24:BA:69:5F:3F:7B:40:84:7B:2A:AB:CC:BF:E1:95:0E:BE:19:9E:CF Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D5C8F96B9B28E17BBC9746083 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/90e64b76-a6a4-3846-a602-bc6a6b0625d7.roa Signing time: Wed 01 Apr 2026 11:45:15 +0000 ROA not before: Wed 01 Apr 2026 11:45:15 +0000 ROA not after: Tue 30 Jun 2026 11:45:15 +0000 asID: 402257 IP address blocks: 64.204.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5c:8f:96:b9:b2:8e:17:bb:c9:74:60:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 1 11:45:15 2026 GMT Not After : Jun 30 11:45:15 2026 GMT Subject: CN=4baf0d89-e0f7-4081-983e-204250a619d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:98:08:d9:b9:2b:01:a4:e4:18:f5:97:28:99: 5b:4a:76:53:a9:c0:4f:49:40:aa:b5:47:1b:9e:9e: 7f:61:e1:79:ae:04:da:b2:a7:af:9e:d4:bc:8c:44: d7:ef:f7:8c:e4:44:17:c8:41:41:9d:6b:4a:1c:ad: 54:fd:d9:aa:ca:c7:be:a4:e1:75:5e:bc:31:35:61: 03:43:07:b4:56:b3:97:2c:d1:b3:6a:cd:86:9a:bb: 75:d3:b3:ed:70:41:ac:3b:9b:e3:3a:1a:6f:8d:fa: fa:d5:ba:53:61:39:1f:ac:19:b1:f4:3d:05:08:cc: 4b:31:a1:33:32:98:46:00:b6:4b:60:dc:75:df:ff: 63:53:0f:ee:4b:7c:0e:f7:44:0b:1f:0b:bd:c8:29: ca:36:41:d9:b7:25:61:c3:e3:14:ff:c0:6e:ec:7f: 84:ae:79:a0:71:00:06:b9:57:b5:b0:2e:08:02:1e: 91:4c:5e:d4:51:24:24:9c:d3:e7:ae:5f:20:d2:9c: e6:5d:4f:a5:29:6a:78:f0:98:6e:26:fd:8a:2e:6f: 33:08:68:c9:cf:cb:2e:e1:c4:f9:b9:64:d5:4a:2a: 0d:2e:b5:62:b3:9e:57:fa:be:69:7c:9b:9d:2e:f7: dc:46:59:c4:ef:d2:b1:24:15:18:43:cc:e8:35:b4: a5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BA:69:5F:3F:7B:40:84:7B:2A:AB:CC:BF:E1:95:0E:BE:19:9E:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/90e64b76-a6a4-3846-a602-bc6a6b0625d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:af:36:2d:09:27:be:c2:5f:f1:23:dc:7b:44:63:1e:2b:b4: b8:e8:16:01:8d:7c:02:45:ee:c6:aa:55:e6:3a:fb:61:2b:2e: c3:20:35:80:77:47:e6:ca:dc:21:9b:32:32:fb:99:ff:f9:20: 6b:df:39:ca:ff:f9:ca:39:25:8d:2b:49:74:93:7b:c4:97:8f: 62:8b:42:55:30:cd:aa:1e:fb:fb:c2:f7:0b:3a:1c:f0:0d:d7: 83:a0:ac:24:3b:8d:f3:fb:5b:80:ad:17:d3:70:7b:5e:a3:3b: 2e:c0:ec:38:4b:12:21:ec:d4:41:2d:ca:f0:58:4f:b9:51:a0: 7f:40:a0:92:cb:e0:de:7f:75:f1:ae:63:a3:b7:3d:4d:f6:1d: a8:59:d9:ef:cd:d4:2d:ba:ec:5f:a3:62:ce:07:05:d3:f0:06: 54:79:0f:0d:a5:06:39:29:83:99:8a:18:32:7b:2d:2e:e0:e0: a4:f8:c0:e5:86:ae:39:be:e7:c7:4e:81:01:1e:1a:e4:91:92: 6e:d0:52:a0:32:5c:40:69:d0:58:3e:e5:bf:a3:e5:a4:f7:8d: 81:65:a5:50:ee:65:8d:61:f0:74:6e:a4:50:fb:d7:04:13:79: 68:c8:0a:aa:04:47:50:91:34:9e:59:62:d7:05:68:e6:8e:17: bc:86:48:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1cj5a5so4Xu8l0YIMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQwMTExNDUxNVoXDTI2MDYzMDExNDUxNVowLzEtMCsGA1UEAxMk NGJhZjBkODktZTBmNy00MDgxLTk4M2UtMjA0MjUwYTYxOWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZgI2bkrAaTkGPWXKJlbSnZTqcBPSUCqtUcb np5/YeF5rgTasqevntS8jETX7/eM5EQXyEFBnWtKHK1U/dmqyse+pOF1XrwxNWED Qwe0VrOXLNGzas2Gmrt107PtcEGsO5vjOhpvjfr61bpTYTkfrBmx9D0FCMxLMaEz MphGALZLYNx13/9jUw/uS3wO90QLHwu9yCnKNkHZtyVhw+MU/8Bu7H+ErnmgcQAG uVe1sC4IAh6RTF7UUSQknNPnrl8g0pzmXU+lKWp48JhuJv2KLm8zCGjJz8su4cT5 uWTVSioNLrVis55X+r5pfJudLvfcRlnE79KxJBUYQ8zoNbSlAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCS6aV8/e0CEeyqrzL/hlQ6+GZ7PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTBlNjRiNzYtYTZhNC0z ODQ2LWE2MDItYmM2YTZiMDYyNWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMy0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMSvNi0JJ77CX/Ej3HtEYx4rtLjoFgGNfAJF7saqVeY6+2ErLsMgNYB3 R+bK3CGbMjL7mf/5IGvfOcr/+co5JY0rSXSTe8SXj2KLQlUwzaoe+/vC9ws6HPAN 14OgrCQ7jfP7W4CtF9Nwe16jOy7A7DhLEiHs1EEtyvBYT7lRoH9AoJLL4N5/dfGu Y6O3PU32HahZ2e/N1C267F+jYs4HBdPwBlR5Dw2lBjkpg5mKGDJ7LS7g4KT4wOWG rjm+58dOgQEeGuSRkm7QUqAyXEBp0Fg+5b+j5aT3jYFlpVDuZY1h8HRupFD71wQT eWjICqoER1CRNJ5ZYtcFaOaOF7yGSE8= -----END CERTIFICATE-----Generated at Sat Apr 4 17:01:43 2026 by rpki-client