$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9421f814-f006-31a4-bf32-ed81207a42c8.roa File: 9421f814-f006-31a4-bf32-ed81207a42c8.roa (raw, json) Hash identifier: CJXUKgtJEo+lvdC9HkauK7JABdwCh/o8vx43DKePC58= Subject key identifier: A5:DE:0A:12:CF:7E:40:CE:DF:D2:E6:75:0C:96:EB:EA:26:3B:02:DC Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D65448664642F8A35064964C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9421f814-f006-31a4-bf32-ed81207a42c8.roa Signing time: Sat 04 Apr 2026 14:36:17 +0000 ROA not before: Sat 04 Apr 2026 14:36:17 +0000 ROA not after: Fri 03 Jul 2026 14:36:17 +0000 asID: 402268 IP address blocks: 64.204.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:44:86:64:64:2f:8a:35:06:49:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 4 14:36:17 2026 GMT Not After : Jul 3 14:36:17 2026 GMT Subject: CN=3123c6f1-221b-48c9-ba80-77ec00ed52f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:dc:ab:ca:f6:bb:b0:e8:08:d5:3e:29:36:37: 17:29:9f:cc:88:40:94:af:11:d3:8a:2f:d0:35:c2: cf:23:35:4f:16:14:48:60:be:b2:76:a5:8f:a0:81: 64:71:0a:e9:a4:7c:9d:fb:81:9f:f9:7f:3a:37:d8: 50:16:10:9c:30:ff:79:90:31:31:7c:a3:ef:1a:ea: 91:72:68:76:ce:a0:67:08:4a:e8:87:2e:09:c5:2f: 2c:e3:17:a3:06:ad:d6:0f:a9:ad:36:5c:d8:41:7c: ae:ac:e1:87:ef:8b:0b:fe:1d:c7:60:e7:32:42:c5: e4:40:61:51:3d:30:ce:dc:44:57:0c:99:66:fa:c5: 1b:ae:11:c8:50:3b:04:27:f8:5e:2f:db:5f:dc:5c: 20:c8:f5:b5:b1:53:27:60:88:35:29:b8:e4:cb:0c: 22:59:fe:60:23:39:58:9f:83:02:08:7b:89:38:c6: 3e:e2:71:20:e8:92:70:4f:e0:44:27:db:63:5b:2c: c0:29:df:2d:07:cf:4f:b0:be:61:84:23:e3:ab:2d: 92:77:70:b1:0a:74:3c:12:a0:3a:37:ce:a6:2b:8b: 76:3a:30:10:9a:22:a3:39:91:58:20:3a:24:64:fb: 39:51:53:3a:f8:38:76:62:dc:4d:5c:61:23:92:33: 95:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DE:0A:12:CF:7E:40:CE:DF:D2:E6:75:0C:96:EB:EA:26:3B:02:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9421f814-f006-31a4-bf32-ed81207a42c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:ec:72:85:5c:eb:ee:c3:3c:a7:25:69:aa:6c:c2:de:b8:d9: c0:73:68:50:e5:a2:d4:3d:6c:81:e5:11:d4:8e:2d:6d:9b:43: ee:67:7a:ef:09:88:4f:63:8d:d3:67:77:84:26:35:85:5d:1c: 31:3d:18:01:64:46:37:4d:15:33:a6:a9:a2:cc:dc:5f:ed:0b: eb:52:22:ac:e6:81:8c:ff:03:22:e3:e9:d8:e4:17:3d:dc:ad: 6d:81:85:04:29:bb:74:fe:81:3d:d9:66:fa:5b:c7:d5:d0:2d: d7:16:45:fa:11:57:f7:29:cb:9d:e8:1f:81:15:09:ce:a7:61: f4:ea:55:96:2b:27:90:ec:2d:b5:4c:b9:60:20:b8:74:4f:62: 0d:2c:b5:0a:b8:78:c6:f2:c9:aa:a3:95:9f:61:15:c9:05:bf: f3:0d:f0:88:57:a7:c3:58:3a:ba:7b:88:05:84:9b:5d:6b:27: 64:56:a6:1a:b5:a1:30:12:b8:3f:41:11:33:79:c7:40:5f:68: ac:e7:9e:d7:ce:88:23:1f:04:35:0b:a6:d7:c1:fe:68:56:84: 82:49:c1:12:d1:da:45:25:a1:9c:64:dd:6a:ee:52:91:a0:48: 7e:dc:22:9c:01:ca:22:92:05:ef:a3:a5:c0:52:6a:fd:30:10: 86:32:dd:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lRIZkZC+KNQZJZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQwNDE0MzYxN1oXDTI2MDcwMzE0MzYxN1owLzEtMCsGA1UEAxMk MzEyM2M2ZjEtMjIxYi00OGM5LWJhODAtNzdlYzAwZWQ1MmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNyryva7sOgI1T4pNjcXKZ/MiECUrxHTii/Q NcLPIzVPFhRIYL6ydqWPoIFkcQrppHyd+4Gf+X86N9hQFhCcMP95kDExfKPvGuqR cmh2zqBnCErohy4JxS8s4xejBq3WD6mtNlzYQXyurOGH74sL/h3HYOcyQsXkQGFR PTDO3ERXDJlm+sUbrhHIUDsEJ/heL9tf3FwgyPW1sVMnYIg1KbjkywwiWf5gIzlY n4MCCHuJOMY+4nEg6JJwT+BEJ9tjWyzAKd8tB89PsL5hhCPjqy2Sd3CxCnQ8EqA6 N86mK4t2OjAQmiKjOZFYIDokZPs5UVM6+Dh2YtxNXGEjkjOVkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXeChLPfkDO39LmdQyW6+omOwLcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTQyMWY4MTQtZjAwNi0z MWE0LWJmMzItZWQ4MTIwN2E0MmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMwqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXscoVc6+7DPKclaapswt642cBzaFDlotQ9bIHlEdSOLW2bQ+5neu8J iE9jjdNnd4QmNYVdHDE9GAFkRjdNFTOmqaLM3F/tC+tSIqzmgYz/AyLj6djkFz3c rW2BhQQpu3T+gT3ZZvpbx9XQLdcWRfoRV/cpy53oH4EVCc6nYfTqVZYrJ5DsLbVM uWAguHRPYg0stQq4eMbyyaqjlZ9hFckFv/MN8IhXp8NYOrp7iAWEm11rJ2RWphq1 oTASuD9BETN5x0BfaKznntfOiCMfBDULptfB/mhWhIJJwRLR2kUloZxk3WruUpGg SH7cIpwByiKSBe+jpcBSav0wEIYy3Vg= -----END CERTIFICATE-----Generated at Fri Apr 10 23:14:33 2026 by rpki-client