$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a7f14a21-b85c-3479-8df8-c2ffa39ad1f6.roa File: a7f14a21-b85c-3479-8df8-c2ffa39ad1f6.roa (raw, json) Hash identifier: EJAuFyATeLBP5srOBpa5q+SLnMtD5RRbC1fjNunIKyE= Subject key identifier: 0F:6D:53:BE:94:B2:4B:8C:FE:CE:01:F0:A2:90:09:3B:39:08:50:1C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D5D0363FF707163CB01D41480 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a7f14a21-b85c-3479-8df8-c2ffa39ad1f6.roa Signing time: Wed 01 Apr 2026 15:38:35 +0000 ROA not before: Wed 01 Apr 2026 15:38:35 +0000 ROA not after: Tue 30 Jun 2026 15:38:35 +0000 asID: 402265 IP address blocks: 64.204.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5d:03:63:ff:70:71:63:cb:01:d4:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 1 15:38:35 2026 GMT Not After : Jun 30 15:38:35 2026 GMT Subject: CN=1984f651-3033-4795-a57c-d6faffddf8c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e0:95:f7:7b:e0:17:47:a3:6d:ab:ad:28:38: c5:d8:56:c8:0e:30:ad:d5:32:63:bf:dd:35:85:0a: d8:41:57:3a:b4:ee:80:30:95:7f:20:16:78:35:84: b6:6c:be:73:fd:07:54:e8:69:91:11:2c:9a:64:0d: be:30:be:2e:c6:62:4a:8c:a8:1e:46:15:3b:34:69: 4e:03:f5:35:0e:5f:bf:a5:36:0c:d2:a9:4e:7e:f2: 74:7e:6f:82:30:27:3d:ed:1d:54:fe:3d:37:f8:e2: 31:25:c4:56:90:9f:56:22:38:81:ae:55:7a:1f:fd: 51:b6:3f:7c:de:71:29:18:69:3d:ea:47:3b:60:36: 98:99:fb:09:44:71:0f:08:00:a0:e3:87:aa:d6:d0: ac:f4:70:8d:cb:4c:78:ab:f8:49:ab:fe:14:4b:6e: 8d:e8:7e:52:02:b8:f5:04:d3:b3:6d:cb:f1:09:1c: e1:e1:58:b9:bb:6f:c4:33:e9:98:77:59:16:b3:e4: fd:10:9d:d2:21:e2:88:00:f5:c6:5e:9c:66:4f:ab: ba:1d:3f:49:51:f0:04:6f:41:3f:de:07:fc:46:3d: 65:3a:4c:0f:89:e9:17:16:1b:69:8f:b6:9d:96:62: b5:75:d7:6a:23:a3:7e:cf:19:e6:9d:18:8c:33:23: 92:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:6D:53:BE:94:B2:4B:8C:FE:CE:01:F0:A2:90:09:3B:39:08:50:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a7f14a21-b85c-3479-8df8-c2ffa39ad1f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:5e:69:35:66:1e:c7:ad:e5:2b:70:24:3b:98:85:0e:33:a5: 7d:30:38:57:be:7d:ba:9a:0d:4e:52:5f:25:e8:17:3d:e5:17: a9:d9:b3:db:4d:1d:61:95:6c:94:11:12:f8:6b:3e:5d:de:f2: d6:2c:fd:79:08:43:6d:18:ce:a6:94:8c:e9:68:a5:ca:10:af: 3d:4f:97:ca:b7:dc:cf:87:1f:21:db:9b:09:5e:2b:9c:58:ac: ac:ea:6f:3e:62:91:72:f2:f2:3a:d9:a0:ed:14:ea:f2:16:67: cc:2e:2a:85:a1:0a:cc:24:09:8f:5f:84:db:53:80:9d:a3:c1: bf:9f:37:5f:86:95:39:31:9c:0e:d8:e0:e6:1b:df:95:3a:ed: 33:33:fc:48:4f:4c:c2:9f:2c:82:e0:e3:9b:0a:a4:fe:62:7e: 81:eb:c8:c8:15:1e:0f:db:da:68:26:88:86:a2:52:2d:3f:4c: d7:3f:32:92:45:f5:f9:9d:ae:88:8e:d5:96:7d:4b:80:3f:52: ce:5c:29:d0:e6:e2:37:44:0c:13:a1:0b:c6:5e:33:1f:1c:07: 0c:17:f5:88:bc:21:db:d7:63:43:24:0c:d6:4b:d4:ec:84:18: 13:1d:0c:78:fc:c7:00:c0:d5:8b:01:eb:8a:dc:84:d6:be:db: 73:55:28:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1dA2P/cHFjywHUFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQwMTE1MzgzNVoXDTI2MDYzMDE1MzgzNVowLzEtMCsGA1UEAxMk MTk4NGY2NTEtMzAzMy00Nzk1LWE1N2MtZDZmYWZmZGRmOGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+CV93vgF0ejbautKDjF2FbIDjCt1TJjv901 hQrYQVc6tO6AMJV/IBZ4NYS2bL5z/QdU6GmRESyaZA2+ML4uxmJKjKgeRhU7NGlO A/U1Dl+/pTYM0qlOfvJ0fm+CMCc97R1U/j03+OIxJcRWkJ9WIjiBrlV6H/1Rtj98 3nEpGGk96kc7YDaYmfsJRHEPCACg44eq1tCs9HCNy0x4q/hJq/4US26N6H5SArj1 BNOzbcvxCRzh4Vi5u2/EM+mYd1kWs+T9EJ3SIeKIAPXGXpxmT6u6HT9JUfAEb0E/ 3gf8Rj1lOkwPiekXFhtpj7adlmK1dddqI6N+zxnmnRiMMyOSKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9tU76UskuM/s4B8KKQCTs5CFAcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTdmMTRhMjEtYjg1Yy0z NDc5LThkZjgtYzJmZmEzOWFkMWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVeaTVmHset5StwJDuYhQ4zpX0wOFe+fbqaDU5SXyXoFz3lF6nZs9tN HWGVbJQREvhrPl3e8tYs/XkIQ20YzqaUjOlopcoQrz1Pl8q33M+HHyHbmwleK5xY rKzqbz5ikXLy8jrZoO0U6vIWZ8wuKoWhCswkCY9fhNtTgJ2jwb+fN1+GlTkxnA7Y 4OYb35U67TMz/EhPTMKfLILg45sKpP5ifoHryMgVHg/b2mgmiIaiUi0/TNc/MpJF 9fmdroiO1ZZ9S4A/Us5cKdDm4jdEDBOhC8ZeMx8cBwwX9Yi8IdvXY0MkDNZL1OyE GBMdDHj8xwDA1YsB64rchNa+23NVKBs= -----END CERTIFICATE-----Generated at Fri Apr 10 23:13:34 2026 by rpki-client