$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aaf9548f-7b0a-3b8e-9ef8-308e043a7813.roa File: aaf9548f-7b0a-3b8e-9ef8-308e043a7813.roa (raw, json) Hash identifier: 6KOHxcjt4mLFEpZmn9om7AxduG3Zr7mH31rcR45c3As= Subject key identifier: 1B:2D:3C:B0:DC:BA:E9:6C:97:BD:B2:BB:86:D9:A2:48:D4:A7:47:02 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E305D3C13657B796CA6149240 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aaf9548f-7b0a-3b8e-9ef8-308e043a7813.roa Signing time: Tue 16 Jun 2026 08:35:10 +0000 ROA not before: Tue 16 Jun 2026 08:35:10 +0000 ROA not after: Mon 14 Sep 2026 08:35:10 +0000 asID: 215607 IP address blocks: 64.204.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:30:5d:3c:13:65:7b:79:6c:a6:14:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jun 16 08:35:10 2026 GMT Not After : Sep 14 08:35:10 2026 GMT Subject: CN=c058bdf6-ecee-429e-a99f-522b4d17d239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:73:96:49:23:e1:30:88:c9:62:c7:a7:58:af: 90:f2:a5:52:5b:f3:57:fb:00:2c:6f:68:96:00:3e: 1f:88:b3:6d:37:b4:bf:32:29:89:91:28:c9:37:a7: d0:59:d3:52:89:10:57:7b:bb:d3:6b:9c:c1:bf:dc: 29:07:66:c9:d8:2a:b4:6a:09:70:94:05:3a:f1:7f: ff:81:3f:5f:be:83:48:41:9a:ed:82:dd:20:84:e3: f2:31:23:c6:66:26:5d:d7:dc:b4:c8:03:63:a0:95: 49:66:c8:1d:18:d0:4d:aa:90:b7:61:15:62:80:68: 02:54:d4:2e:bf:28:75:15:3f:58:3e:24:21:37:43: ce:b7:88:e3:46:52:50:f7:35:ab:32:a1:24:6f:37: 64:45:4e:b6:a5:fb:21:a8:92:62:16:82:e3:7b:cb: 8f:c6:9a:11:80:65:4b:b1:61:5e:01:cb:9d:51:14: b7:e9:20:96:ea:b5:f5:6a:35:9d:6f:42:44:e9:a8: 35:e5:ae:cf:9d:3b:19:c2:fd:06:ec:fe:dc:1c:b9: ac:f7:ec:07:03:66:42:6b:c5:31:52:ea:4c:83:f7: 65:08:3d:32:ac:d2:94:7a:3a:bf:5e:1e:fa:72:e7: 6b:6c:82:e6:e8:34:ae:21:67:43:4f:27:31:61:11: c8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2D:3C:B0:DC:BA:E9:6C:97:BD:B2:BB:86:D9:A2:48:D4:A7:47:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aaf9548f-7b0a-3b8e-9ef8-308e043a7813.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:42:da:ba:30:8b:de:11:68:bd:1b:b3:0a:ea:b5:e0:67:26: 1f:01:6c:33:41:f4:de:27:dc:b6:d7:8d:12:1d:60:77:c1:c0: 8c:5f:d9:12:39:bb:6d:cb:78:ac:4c:4a:a5:0f:d7:0a:9e:61: e8:a3:3b:1b:67:0d:30:1d:51:b5:de:9b:f1:f5:e3:ad:3d:88: a0:db:df:57:f9:1f:6f:c3:e3:5f:70:44:aa:1c:bd:aa:a1:50: e5:65:c8:7f:cd:15:9c:8d:b7:f7:f9:19:1c:55:4b:34:c1:10: e0:6c:ec:9f:20:b3:e8:44:29:34:01:8b:f2:33:b9:9c:17:f4: ab:39:44:ef:b8:cf:49:2f:0f:e8:b7:dd:cf:c7:da:12:bc:70: d8:1d:76:98:bb:61:54:89:db:ec:46:66:4b:d4:20:0f:57:ce: 48:42:95:85:ab:54:72:fd:09:75:35:3e:f5:79:03:15:47:16: 61:b7:e3:34:08:99:f1:38:b6:2e:68:e5:66:45:c5:1d:69:dc: c8:e7:3e:a2:38:c6:d4:72:d7:78:26:4c:25:3c:84:b6:66:50: 63:bb:a9:4d:ca:3d:a1:ae:78:d7:c0:f6:56:26:69:5b:29:fb: be:d5:9a:8d:0d:28:8b:82:9b:4f:aa:d8:6f:60:80:45:ab:3a: c1:5a:05:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4wXTwTZXt5bKYUkkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDYxNjA4MzUxMFoXDTI2MDkxNDA4MzUxMFowLzEtMCsGA1UEAxMk YzA1OGJkZjYtZWNlZS00MjllLWE5OWYtNTIyYjRkMTdkMjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3OWSSPhMIjJYsenWK+Q8qVSW/NX+wAsb2iW AD4fiLNtN7S/MimJkSjJN6fQWdNSiRBXe7vTa5zBv9wpB2bJ2Cq0aglwlAU68X// gT9fvoNIQZrtgt0ghOPyMSPGZiZd19y0yANjoJVJZsgdGNBNqpC3YRVigGgCVNQu vyh1FT9YPiQhN0POt4jjRlJQ9zWrMqEkbzdkRU62pfshqJJiFoLje8uPxpoRgGVL sWFeAcudURS36SCW6rX1ajWdb0JE6ag15a7PnTsZwv0G7P7cHLms9+wHA2ZCa8Ux UupMg/dlCD0yrNKUejq/Xh76cudrbILm6DSuIWdDTycxYRHIswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBstPLDcuulsl72yu4bZokjUp0cCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWFmOTU0OGYtN2IwYS0z YjhlLTllZjgtMzA4ZTA0M2E3ODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMwjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANC2rowi94RaL0bswrqteBnJh8BbDNB9N4n3LbXjRIdYHfBwIxf2RI5 u23LeKxMSqUP1wqeYeijOxtnDTAdUbXem/H14609iKDb31f5H2/D419wRKocvaqh UOVlyH/NFZyNt/f5GRxVSzTBEOBs7J8gs+hEKTQBi/IzuZwX9Ks5RO+4z0kvD+i3 3c/H2hK8cNgddpi7YVSJ2+xGZkvUIA9XzkhClYWrVHL9CXU1PvV5AxVHFmG34zQI mfE4ti5o5WZFxR1p3MjnPqI4xtRy13gmTCU8hLZmUGO7qU3KPaGueNfA9lYmaVsp +77Vmo0NKIuCm0+q2G9ggEWrOsFaBSQ= -----END CERTIFICATE-----Generated at Mon Jun 22 18:21:01 2026 by rpki-client