$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a24f86f5-70f7-3dbb-b311-8f37e4a5be75.roa File: a24f86f5-70f7-3dbb-b311-8f37e4a5be75.roa (raw, json) Hash identifier: SubxNxDLhFZ+E5HTLrEq8VlTbHVsXViJUcnyMBNPIa4= Subject key identifier: 2A:1B:6A:38:21:89:91:FE:FE:EF:E6:26:A6:1B:B3:95:52:DD:2E:D1 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E6B0A2BF6C4BB207A2FCD5900 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a24f86f5-70f7-3dbb-b311-8f37e4a5be75.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 834 IP address blocks: 216.132.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:2b:f6:c4:bb:20:7a:2f:cd:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=2923df07-e65a-4131-89c8-b7ff26305fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a5:0c:7a:63:2a:da:e4:39:b4:ab:48:e5:79: 26:42:f3:72:bd:ad:9f:71:98:df:e3:76:54:fd:a0: 4b:99:8b:ba:c5:f7:fc:2b:0f:b3:2a:94:23:fb:8f: 99:1a:89:a8:21:ff:e1:89:26:8b:60:e9:43:64:55: c1:05:98:9e:76:b3:4d:b3:9b:88:a1:69:4c:3b:f3: 50:0f:cf:ab:31:ab:35:b2:2d:aa:4d:c0:31:0d:b0: 98:54:15:12:d9:33:cd:d5:7a:66:cc:5c:20:6a:93: 47:36:a2:e0:a5:17:f1:c1:af:27:84:07:be:cb:8c: aa:96:1b:fb:02:e3:3c:dc:b7:50:31:5d:09:e5:28: 4d:e3:b2:54:00:c9:fc:d8:b1:46:31:e0:35:55:ac: bd:16:a4:1c:7b:62:2e:3c:f8:77:e5:35:0c:2d:57: be:39:f0:10:96:26:4e:3a:a8:34:c7:34:8e:e6:4e: 59:a1:f7:7e:c3:8c:4c:c2:81:2c:8b:d0:f6:8b:ef: 99:4d:aa:a8:7e:95:75:09:27:e5:1a:ce:b4:00:07: 9d:86:95:d0:fa:da:eb:0b:bb:12:6d:9a:94:99:7b: 58:a4:55:85:85:82:f8:fc:86:47:1c:58:be:03:83: 97:1f:11:94:09:8e:84:7e:33:3c:89:c4:94:31:62: a4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1B:6A:38:21:89:91:FE:FE:EF:E6:26:A6:1B:B3:95:52:DD:2E:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a24f86f5-70f7-3dbb-b311-8f37e4a5be75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:b8:19:bc:a4:52:74:14:01:3a:eb:d3:d4:27:c0:9f:1b:0a: 6b:f9:71:f5:28:98:2d:dc:12:12:67:7f:e6:77:87:3b:66:c0: 03:fc:fc:3f:65:60:d7:e8:42:7a:3f:f0:a3:46:9d:b6:90:c0: ce:8b:f4:45:a2:a1:09:7c:82:d8:c3:0c:20:5a:5d:40:81:a0: e1:17:18:d5:2b:77:d5:9d:00:1a:f3:cb:ee:a9:79:7e:1f:bb: ce:0a:39:44:06:4c:c9:02:9e:24:e6:b5:71:32:70:2f:c3:f3: fe:b1:7e:ce:19:d6:f4:66:2f:69:f5:88:1d:ec:b5:1d:33:26: 46:0b:d2:52:7e:19:a4:96:c7:c7:1e:70:af:d0:8a:2d:aa:a0: c7:9d:7b:e0:bd:ea:35:00:b7:25:15:30:a0:9b:c8:1a:5d:15: 22:5d:27:0f:33:f2:ba:c0:65:f3:9e:0e:a3:f8:a4:c3:fc:b7: 1f:1a:4c:66:43:90:95:c3:d7:70:89:2e:ec:c5:69:4c:d3:6e: a7:41:55:02:e7:ff:80:76:92:18:5b:17:1d:83:2d:69:14:40: ce:c4:ce:24:ea:ec:a0:67:98:f7:49:b8:60:2c:ef:6c:cf:b9: 78:d0:3a:fc:66:9d:e0:19:28:d5:d9:50:2d:b7:00:80:71:9a: 7b:d3:5f:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCiv2xLsgei/NWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk MjkyM2RmMDctZTY1YS00MTMxLTg5YzgtYjdmZjI2MzA1ZmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6UMemMq2uQ5tKtI5XkmQvNyva2fcZjf43ZU /aBLmYu6xff8Kw+zKpQj+4+ZGomoIf/hiSaLYOlDZFXBBZiedrNNs5uIoWlMO/NQ D8+rMas1si2qTcAxDbCYVBUS2TPN1XpmzFwgapNHNqLgpRfxwa8nhAe+y4yqlhv7 AuM83LdQMV0J5ShN47JUAMn82LFGMeA1Vay9FqQce2IuPPh35TUMLVe+OfAQliZO Oqg0xzSO5k5Zofd+w4xMwoEsi9D2i++ZTaqofpV1CSflGs60AAedhpXQ+trrC7sS bZqUmXtYpFWFhYL4/IZHHFi+A4OXHxGUCY6EfjM8icSUMWKkMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCobajghiZH+/u/mJqYbs5VS3S7RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTI0Zjg2ZjUtNzBmNy0z ZGJiLWIzMTEtOGYzN2U0YTViZTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2IRMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMO4GbykUnQUATrr09QnwJ8bCmv5cfUomC3cEhJnf+Z3hztmwAP8/D9l YNfoQno/8KNGnbaQwM6L9EWioQl8gtjDDCBaXUCBoOEXGNUrd9WdABrzy+6peX4f u84KOUQGTMkCniTmtXEycC/D8/6xfs4Z1vRmL2n1iB3stR0zJkYL0lJ+GaSWx8ce cK/Qii2qoMede+C96jUAtyUVMKCbyBpdFSJdJw8z8rrAZfOeDqP4pMP8tx8aTGZD kJXD13CJLuzFaUzTbqdBVQLn/4B2khhbFx2DLWkUQM7EziTq7KBnmPdJuGAs72zP uXjQOvxmneAZKNXZUC23AIBxmnvTX2Y= -----END CERTIFICATE-----Generated at Fri Jul 10 13:50:18 2026 by rpki-client