$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aff91e4b-d022-32c6-ba4d-df487eef8a86.roa File: aff91e4b-d022-32c6-ba4d-df487eef8a86.roa (raw, json) Hash identifier: xO6IqfPgXz6tR4PgoQT2ZsCLZE4GHfDKBaeq36Navng= Subject key identifier: 53:AC:FA:3A:AC:06:D7:CD:21:30:70:31:74:B6:A5:1B:21:5F:91:D3 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E6B0A193B4F7051F0D4133940 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aff91e4b-d022-32c6-ba4d-df487eef8a86.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 834 IP address blocks: 64.204.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:19:3b:4f:70:51:f0:d4:13:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=86d93762-9077-45b3-ad66-307378bd743b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a1:8b:5a:ee:31:23:cf:6b:1e:a4:5a:1d:ff: b0:2b:27:cc:77:65:ab:22:d7:3e:05:f7:a8:ae:47: e0:a0:c8:42:ea:cb:6e:a8:24:a3:d4:5d:a1:e6:9e: f4:2f:f1:89:9d:29:36:6e:14:5f:9b:3f:76:63:e1: fb:8f:a9:b9:4b:cc:95:79:00:4a:72:50:51:46:30: 39:5b:b1:96:d1:21:6d:e5:3c:4c:77:41:54:45:fb: da:fe:e7:3c:66:91:24:58:e8:2f:97:47:11:31:b9: 3b:36:fd:b4:aa:e5:f5:26:07:03:40:17:78:3b:c2: 2f:75:d1:f3:06:4a:8c:23:6f:e3:b3:4c:04:12:f6: ea:c1:f4:7d:8c:2c:5d:2e:07:4a:d8:f4:2b:23:0f: 55:90:eb:55:02:3c:83:80:6f:99:d7:cc:8a:8a:19: 1d:ea:b5:bf:a8:01:c8:eb:5e:f7:8a:2f:6b:61:5e: af:56:ed:62:a4:65:47:c3:3a:52:61:7f:24:db:24: 3a:34:e3:cb:8d:c5:ab:bd:76:a2:78:96:73:9d:8c: 6f:0d:2c:ad:0c:d6:ab:f1:18:37:3a:63:0b:87:8b: 90:12:78:f6:6e:c0:a0:ab:61:63:8d:11:7a:fe:ff: 31:53:51:11:ad:52:9b:25:cf:82:b4:31:58:45:87: 9d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AC:FA:3A:AC:06:D7:CD:21:30:70:31:74:B6:A5:1B:21:5F:91:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aff91e4b-d022-32c6-ba4d-df487eef8a86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:57:d1:44:20:76:dd:70:55:b6:8c:d7:66:de:9d:aa:ee:97: 96:26:70:be:ae:0a:2e:5a:89:08:9b:39:aa:ed:f9:c0:7d:e1: 22:ff:84:40:26:e9:b1:fb:89:cf:e1:72:a0:aa:96:5a:1b:1a: ae:e9:22:93:15:15:94:0b:8f:54:a5:c6:a9:d8:6e:6d:b8:f3: c6:e1:b1:7b:b3:89:38:8b:21:54:f5:09:77:5d:ad:f1:37:06: 1a:bd:6b:a6:07:f3:19:7f:c5:76:31:ed:fd:ca:e3:f3:1f:5e: 10:1d:00:ff:9d:45:9c:8f:78:10:11:0f:83:c7:03:ad:3d:a9: d3:81:59:d8:e1:a6:92:60:70:66:5d:4d:83:b8:0c:cb:4c:0b: 88:4f:84:7d:b6:89:e4:33:c9:fa:31:44:15:fc:ed:09:ce:ac: 26:ac:9d:86:3f:6d:31:69:51:2e:9a:44:80:83:d3:41:df:99: ee:c4:8f:80:f2:e8:62:a6:c1:77:ab:d0:d9:6e:cb:dd:2b:f1: d3:94:ff:6b:e1:fd:e9:c2:63:6c:1a:c5:c3:be:2b:5b:d1:5f: e1:83:d1:a4:d6:36:37:e7:32:2c:87:d8:92:f7:b3:2f:69:a6: 09:82:ae:43:97:a1:f3:06:28:44:9a:34:41:32:b6:08:b2:9a: 0e:d5:22:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rChk7T3BR8NQTOUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk ODZkOTM3NjItOTA3Ny00NWIzLWFkNjYtMzA3Mzc4YmQ3NDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKGLWu4xI89rHqRaHf+wKyfMd2WrItc+Bfeo rkfgoMhC6stuqCSj1F2h5p70L/GJnSk2bhRfmz92Y+H7j6m5S8yVeQBKclBRRjA5 W7GW0SFt5TxMd0FURfva/uc8ZpEkWOgvl0cRMbk7Nv20quX1JgcDQBd4O8IvddHz BkqMI2/js0wEEvbqwfR9jCxdLgdK2PQrIw9VkOtVAjyDgG+Z18yKihkd6rW/qAHI 6173ii9rYV6vVu1ipGVHwzpSYX8k2yQ6NOPLjcWrvXaieJZznYxvDSytDNar8Rg3 OmMLh4uQEnj2bsCgq2FjjRF6/v8xU1ERrVKbJc+CtDFYRYedhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOs+jqsBtfNITBwMXS2pRshX5HTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWZmOTFlNGItZDAyMi0z MmM2LWJhNGQtZGY0ODdlZWY4YTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQMyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRX0UQgdt1wVbaM12benarul5YmcL6uCi5aiQibOart+cB94SL/hEAm 6bH7ic/hcqCqllobGq7pIpMVFZQLj1SlxqnYbm2488bhsXuziTiLIVT1CXddrfE3 Bhq9a6YH8xl/xXYx7f3K4/MfXhAdAP+dRZyPeBARD4PHA609qdOBWdjhppJgcGZd TYO4DMtMC4hPhH22ieQzyfoxRBX87QnOrCasnYY/bTFpUS6aRICD00Hfme7Ej4Dy 6GKmwXer0Nluy90r8dOU/2vh/enCY2waxcO+K1vRX+GD0aTWNjfnMiyH2JL3sy9p pgmCrkOXofMGKESaNEEytgiymg7VIp8= -----END CERTIFICATE-----Generated at Fri Jul 10 13:49:14 2026 by rpki-client