$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aa5b3ef9-74c6-3269-b6e8-b052e2696e09.roa File: aa5b3ef9-74c6-3269-b6e8-b052e2696e09.roa (raw, json) Hash identifier: kmmUnRnDtoVMokkUnJ8K/4UQl67PizYX5SFiEs1jjxc= Subject key identifier: 47:09:91:08:99:10:4F:F1:38:42:B9:A9:E2:B9:C4:AA:3B:32:BF:0E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D5FBF6A9525C33E3F33A860C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aa5b3ef9-74c6-3269-b6e8-b052e2696e09.roa Signing time: Thu 02 Apr 2026 15:09:03 +0000 ROA not before: Thu 02 Apr 2026 15:09:03 +0000 ROA not after: Wed 01 Jul 2026 15:09:03 +0000 asID: 402257 IP address blocks: 64.204.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:bf:6a:95:25:c3:3e:3f:33:a8:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 2 15:09:03 2026 GMT Not After : Jul 1 15:09:03 2026 GMT Subject: CN=13537e2d-84d3-4c7a-953e-9898c6938696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e9:99:ba:37:70:e1:f8:6a:5a:ac:1f:08:7c: cd:6f:be:58:bf:73:13:68:dd:2f:a4:1e:18:50:20: 79:04:2c:b1:66:52:48:e4:9f:61:03:21:35:30:cb: 83:43:e3:27:45:22:5e:b6:a5:91:cd:66:e2:76:98: de:30:80:40:7c:b2:b9:ba:16:41:7d:d4:bf:22:a8: 74:0e:c6:2b:a1:d5:12:f6:ca:76:93:de:e3:89:45: 95:34:60:dd:da:b5:61:a3:36:61:da:63:57:d4:95: 8c:ab:83:ab:10:26:f3:1b:a0:2d:da:f5:8b:58:7d: 53:93:b0:ec:30:a0:92:6c:88:e2:a3:66:98:46:d3: 3a:f1:76:e3:77:88:36:d6:8e:2c:52:67:3c:6a:e7: 69:22:d7:04:55:77:8a:6e:a1:f4:ae:f6:1d:59:d7: ac:31:b0:82:34:16:83:66:ee:00:d5:9d:a9:13:9c: 31:ee:cb:f9:14:fc:63:6a:14:8a:5e:94:38:d2:0f: 11:b8:1d:08:f5:0f:32:6e:64:54:47:ef:ac:5b:dd: ff:a0:13:bd:37:55:71:55:4a:3e:2e:fc:a3:ac:7e: a5:4f:ba:69:23:da:de:4f:8a:6d:fc:97:1b:06:48: 4c:6e:85:ef:40:19:ed:af:40:2c:23:34:bb:c6:65: 60:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:09:91:08:99:10:4F:F1:38:42:B9:A9:E2:B9:C4:AA:3B:32:BF:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aa5b3ef9-74c6-3269-b6e8-b052e2696e09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:62:2d:cb:f4:47:49:9b:4a:26:e9:66:1e:4d:0c:6c:48:fd: 7f:b9:bf:0f:14:e7:bb:b5:35:40:e8:dc:1c:54:bf:08:ac:3d: 89:f9:7a:7b:aa:99:50:db:ad:ce:43:66:81:45:3a:61:50:5f: f0:26:82:c0:44:4c:f4:5f:6f:ae:27:ca:7c:e8:ee:65:95:68: 5b:fe:03:cf:50:ec:77:12:ab:a4:04:d5:e7:bf:ed:eb:24:dc: fa:a8:71:91:d2:bd:b7:e8:b3:a6:8e:d4:85:4a:63:87:16:7a: 33:8f:f9:d5:c4:cd:fa:ad:b9:4e:5f:37:7a:2d:4c:01:96:f4: 80:4e:09:6a:3e:f5:32:f7:82:e7:4a:50:f7:64:9e:df:de:9b: 7f:36:40:44:a5:f8:51:32:c5:2a:e7:77:d7:4e:49:2d:36:5a: 22:b6:47:26:8a:a4:03:18:70:a4:49:2a:72:c4:3a:e5:f3:5a: d9:e8:88:8e:c5:af:ab:ab:e4:56:57:ed:c7:fa:9c:6d:ca:85: 5e:43:4e:91:35:9c:05:55:3e:82:24:48:4b:84:78:52:8a:46: bf:6c:79:be:f4:57:61:2c:7a:62:77:92:e1:b2:7b:f4:f6:8a: 6c:e8:8c:7c:7f:ef:58:60:09:07:04:cb:9f:d0:39:e9:25:9f: 57:f9:d1:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1fv2qVJcM+PzOoYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQwMjE1MDkwM1oXDTI2MDcwMTE1MDkwM1owLzEtMCsGA1UEAxMk MTM1MzdlMmQtODRkMy00YzdhLTk1M2UtOTg5OGM2OTM4Njk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+mZujdw4fhqWqwfCHzNb75Yv3MTaN0vpB4Y UCB5BCyxZlJI5J9hAyE1MMuDQ+MnRSJetqWRzWbidpjeMIBAfLK5uhZBfdS/Iqh0 DsYrodUS9sp2k97jiUWVNGDd2rVhozZh2mNX1JWMq4OrECbzG6At2vWLWH1Tk7Ds MKCSbIjio2aYRtM68Xbjd4g21o4sUmc8audpItcEVXeKbqH0rvYdWdesMbCCNBaD Zu4A1Z2pE5wx7sv5FPxjahSKXpQ40g8RuB0I9Q8ybmRUR++sW93/oBO9N1VxVUo+ LvyjrH6lT7ppI9reT4pt/JcbBkhMboXvQBntr0AsIzS7xmVg5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcJkQiZEE/xOEK5qeK5xKo7Mr8OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWE1YjNlZjktNzRjNi0z MjY5LWI2ZTgtYjA1MmUyNjk2ZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMz5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxiLcv0R0mbSibpZh5NDGxI/X+5vw8U57u1NUDo3BxUvwisPYn5enuq mVDbrc5DZoFFOmFQX/AmgsBETPRfb64nynzo7mWVaFv+A89Q7HcSq6QE1ee/7esk 3PqocZHSvbfos6aO1IVKY4cWejOP+dXEzfqtuU5fN3otTAGW9IBOCWo+9TL3gudK UPdknt/em382QESl+FEyxSrnd9dOSS02WiK2RyaKpAMYcKRJKnLEOuXzWtnoiI7F r6ur5FZX7cf6nG3KhV5DTpE1nAVVPoIkSEuEeFKKRr9seb70V2EsemJ3kuGye/T2 imzojHx/71hgCQcEy5/QOekln1f50VY= -----END CERTIFICATE-----Generated at Sat Apr 4 16:59:48 2026 by rpki-client