$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a8426506-8ae4-3749-a2a0-e165cb8c9044.roa File: a8426506-8ae4-3749-a2a0-e165cb8c9044.roa (raw, json) Hash identifier: 9QYLJ1Sl+8YtJRu06EiiVRsUvS3eWo8nKKyjVrSmzQg= Subject key identifier: 32:F0:03:69:11:BC:C1:EA:48:29:0C:C6:89:EC:A6:91:FA:84:28:82 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D8C2AB0375BBE70B538003580 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a8426506-8ae4-3749-a2a0-e165cb8c9044.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 39521 IP address blocks: 68.165.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:b0:37:5b:be:70:b5:38:00:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=07580fba-d024-4f61-aa9f-db6b18eecea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4c:17:15:5b:86:88:a6:ac:e0:cf:71:f7:fe: f2:06:4a:76:0c:36:2f:bd:03:52:0c:79:25:73:f1: 72:b9:27:08:b9:da:5b:a3:77:ea:27:bf:e0:bb:09: 98:cc:d7:29:45:56:b7:65:0e:cb:6a:b9:3c:b7:d0: 1e:65:72:70:db:d6:97:a2:05:71:26:1e:a6:65:ad: 03:35:17:e6:3a:6b:df:90:97:34:ca:c5:74:96:0f: e9:37:5a:0c:3d:c5:68:43:e6:47:ed:e7:49:05:71: a9:ad:4c:98:51:f6:46:e4:35:85:72:d6:29:15:2b: 0e:c4:1c:fb:06:bf:ae:81:e5:e6:1b:9c:bf:45:6d: 37:be:86:4e:80:ca:ca:4b:37:39:ba:66:69:9c:c2: d1:5d:4f:0a:71:55:70:04:4f:67:a8:dc:e3:92:3b: d9:3e:3a:2b:0d:46:b4:0e:d8:d6:ab:6a:05:41:41: 70:69:61:59:93:1a:b3:5b:20:a2:19:7d:7c:df:7c: 14:70:c1:98:a8:17:33:d8:a9:fc:8c:f7:41:28:a4: e5:07:ac:84:7a:f2:09:71:99:8d:ef:f7:dd:c1:b7: d0:81:00:12:91:5c:5e:4e:91:fe:53:df:91:4d:87: 26:d1:20:09:37:b8:8a:0e:cf:ee:a9:ea:8a:a4:23: 3c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F0:03:69:11:BC:C1:EA:48:29:0C:C6:89:EC:A6:91:FA:84:28:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a8426506-8ae4-3749-a2a0-e165cb8c9044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.165.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:20:6e:61:d3:a6:30:a9:06:e7:77:4c:9a:69:fa:db:5d:29: fc:67:87:36:54:e8:a2:f5:4f:67:52:e4:37:5b:2f:a6:f7:2a: 5b:1b:66:7a:1c:ed:8c:a4:31:db:ea:d1:46:6d:b3:68:f7:ae: b9:95:3f:b7:72:b2:14:4f:5a:c4:af:f6:02:d1:10:a3:61:f3: 7e:ea:d6:6d:84:00:a6:66:c1:a8:2f:85:f8:8a:08:68:6e:08: d8:cd:99:1f:9f:7c:87:c4:23:ea:af:85:28:cb:d8:31:84:b0: 64:52:c9:6f:cb:7a:a7:d3:62:af:ad:e0:49:4e:e3:6a:3f:a2: d6:88:7d:26:0f:51:cc:0e:c6:75:b9:74:2b:80:6d:49:59:9f: 80:bb:33:33:53:da:c2:97:89:f8:83:68:a8:29:1a:13:3d:12: 88:54:59:04:f2:b4:fd:bc:ce:3c:02:bf:7b:cb:b8:c8:a7:5a: 1f:cd:e3:dd:f0:96:97:66:b0:89:94:4b:3d:57:34:02:87:a3: 23:ec:8d:71:40:ea:f9:4a:1b:2b:74:e6:74:02:13:4d:0f:b3: 1d:af:3e:aa:2b:e9:da:02:6e:55:62:65:1b:04:8d:35:61:56: 21:51:c1:7c:4c:b5:4b:14:68:1f:a4:0e:10:9d:00:c7:aa:ef: 51:39:af:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKrA3W75wtTgANYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk MDc1ODBmYmEtZDAyNC00ZjYxLWFhOWYtZGI2YjE4ZWVjZWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUwXFVuGiKas4M9x9/7yBkp2DDYvvQNSDHkl c/FyuScIudpbo3fqJ7/guwmYzNcpRVa3ZQ7Lark8t9AeZXJw29aXogVxJh6mZa0D NRfmOmvfkJc0ysV0lg/pN1oMPcVoQ+ZH7edJBXGprUyYUfZG5DWFctYpFSsOxBz7 Br+ugeXmG5y/RW03voZOgMrKSzc5umZpnMLRXU8KcVVwBE9nqNzjkjvZPjorDUa0 DtjWq2oFQUFwaWFZkxqzWyCiGX1833wUcMGYqBcz2Kn8jPdBKKTlB6yEevIJcZmN 7/fdwbfQgQASkVxeTpH+U9+RTYcm0SAJN7iKDs/uqeqKpCM8twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLwA2kRvMHqSCkMxonsppH6hCiCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTg0MjY1MDYtOGFlNC0z NzQ5LWEyYTAtZTE2NWNiOGM5MDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKWMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcgbmHTpjCpBud3TJpp+ttdKfxnhzZU6KL1T2dS5DdbL6b3KlsbZnoc 7YykMdvq0UZts2j3rrmVP7dyshRPWsSv9gLREKNh837q1m2EAKZmwagvhfiKCGhu CNjNmR+ffIfEI+qvhSjL2DGEsGRSyW/LeqfTYq+t4ElO42o/otaIfSYPUcwOxnW5 dCuAbUlZn4C7MzNT2sKXifiDaKgpGhM9EohUWQTytP28zjwCv3vLuMinWh/N493w lpdmsImUSz1XNAKHoyPsjXFA6vlKGyt05nQCE00Psx2vPqor6doCblViZRsEjTVh ViFRwXxMtUsUaB+kDhCdAMeq71E5r5E= -----END CERTIFICATE-----Generated at Wed May 13 11:34:12 2026 by rpki-client