$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/be7230b6-5686-38f3-998b-5a5ed9b86d84.roa File: be7230b6-5686-38f3-998b-5a5ed9b86d84.roa (raw, json) Hash identifier: Qhganama3ip6BqK881QLlZr1roFt6IUMcRM8BSO1OBM= Subject key identifier: 19:DC:11:42:97:B4:F3:84:77:AC:D4:C9:F6:BD:EF:4F:CF:B7:87:77 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D5F93C426C0C0E5BD62609200 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/be7230b6-5686-38f3-998b-5a5ed9b86d84.roa Signing time: Thu 02 Apr 2026 13:41:06 +0000 ROA not before: Thu 02 Apr 2026 13:41:06 +0000 ROA not after: Wed 01 Jul 2026 13:41:06 +0000 asID: 402257 IP address blocks: 64.204.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:93:c4:26:c0:c0:e5:bd:62:60:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 2 13:41:06 2026 GMT Not After : Jul 1 13:41:06 2026 GMT Subject: CN=2b687875-739d-41b1-8c08-c910a0b2ad7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8d:25:08:e6:b9:ce:f9:47:11:50:82:ab:d6: 5d:39:53:97:fe:ba:48:59:5e:a4:9e:d8:cb:13:91: 02:2d:72:4e:ee:be:7e:6a:5a:0c:68:de:3d:4b:3e: 14:6a:57:1a:27:24:dc:36:8f:9a:62:5c:a9:1e:80: 1a:93:88:0e:2d:d3:89:80:8d:78:da:aa:b6:0e:22: 6e:83:f0:0d:a0:db:51:c0:33:a7:5c:07:e5:40:e8: 47:ee:ad:ae:42:c8:96:7b:41:2e:42:47:e5:5a:c4: cf:99:32:65:fb:ee:ec:9e:bb:29:5b:d6:8c:0c:6a: 48:d5:3f:53:66:61:dd:54:46:95:f1:69:4b:12:b8: 04:de:07:61:07:00:be:29:2c:66:ba:06:6d:4f:af: cd:a9:83:39:ee:f9:ed:2c:ca:9b:69:8f:2d:61:97: cd:9b:bc:46:a8:f5:be:42:10:0e:92:c6:f8:2c:1d: 38:c2:ef:04:4b:61:21:2d:dd:27:5d:6d:1e:bc:10: 1e:89:01:55:3f:8f:3c:92:41:cc:a8:b0:e6:3b:e6: ac:82:d0:14:e1:4c:98:f7:51:d1:20:e4:1f:81:57: 60:28:c4:32:cd:a3:4f:cf:1c:c4:12:37:eb:a8:1c: 8d:6a:8b:db:e7:c8:14:b1:a9:5c:f0:f8:b4:00:87: 55:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:DC:11:42:97:B4:F3:84:77:AC:D4:C9:F6:BD:EF:4F:CF:B7:87:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/be7230b6-5686-38f3-998b-5a5ed9b86d84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:9f:3e:0c:33:3c:c5:2b:22:b7:75:4e:db:3c:3f:2b:c8:b8: 9d:0d:a0:05:39:bb:f3:d8:b8:29:72:dd:52:3a:c5:a3:28:e5: 9d:77:37:a7:15:50:6a:94:b7:86:30:90:b9:21:d0:e1:19:d7: c5:25:79:ae:28:6b:42:70:1a:b8:26:ea:3e:f8:09:1d:1d:18: 94:e8:40:2f:04:2c:db:1e:92:58:36:6c:cd:e9:01:a5:81:84: 5f:7b:dd:04:24:17:e6:05:b8:8b:2c:1c:fe:d7:51:f7:23:4f: fc:01:9f:17:0f:16:54:db:08:78:91:78:0d:1c:90:e8:8e:ba: 25:64:81:e1:ef:33:db:80:b1:ba:59:f6:4b:10:30:99:d7:0c: 9c:eb:45:a8:ec:90:ae:db:f5:12:97:92:bf:78:64:c3:ca:f1: 7b:02:68:6f:64:74:59:5d:72:02:eb:a3:35:82:81:5a:6d:58: 05:5b:67:63:f3:16:e8:82:21:9e:f5:5e:72:88:95:09:96:1f: 95:02:ff:87:d5:b9:2f:4b:aa:43:1e:e2:f2:12:96:ab:7a:87: fb:f0:5e:11:ae:aa:a7:6e:02:55:ec:fe:c6:6b:51:f9:f2:56: 08:25:f9:5e:ba:65:42:e5:75:bf:1c:99:4e:ff:98:9d:ce:6c: 9f:f4:09:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1fk8QmwMDlvWJgkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQwMjEzNDEwNloXDTI2MDcwMTEzNDEwNlowLzEtMCsGA1UEAxMk MmI2ODc4NzUtNzM5ZC00MWIxLThjMDgtYzkxMGEwYjJhZDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY0lCOa5zvlHEVCCq9ZdOVOX/rpIWV6kntjL E5ECLXJO7r5+aloMaN49Sz4UalcaJyTcNo+aYlypHoAak4gOLdOJgI142qq2DiJu g/ANoNtRwDOnXAflQOhH7q2uQsiWe0EuQkflWsTPmTJl++7snrspW9aMDGpI1T9T ZmHdVEaV8WlLErgE3gdhBwC+KSxmugZtT6/NqYM57vntLMqbaY8tYZfNm7xGqPW+ QhAOksb4LB04wu8ES2EhLd0nXW0evBAeiQFVP488kkHMqLDmO+asgtAU4UyY91HR IOQfgVdgKMQyzaNPzxzEEjfrqByNaovb58gUsalc8Pi0AIdVvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBncEUKXtPOEd6zUyfa970/Pt4d3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmU3MjMwYjYtNTY4Ni0z OGYzLTk5OGItNWE1ZWQ5Yjg2ZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMwZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKfPgwzPMUrIrd1Tts8PyvIuJ0NoAU5u/PYuCly3VI6xaMo5Z13N6cV UGqUt4YwkLkh0OEZ18Ulea4oa0JwGrgm6j74CR0dGJToQC8ELNseklg2bM3pAaWB hF973QQkF+YFuIssHP7XUfcjT/wBnxcPFlTbCHiReA0ckOiOuiVkgeHvM9uAsbpZ 9ksQMJnXDJzrRajskK7b9RKXkr94ZMPK8XsCaG9kdFldcgLrozWCgVptWAVbZ2Pz FuiCIZ71XnKIlQmWH5UC/4fVuS9LqkMe4vISlqt6h/vwXhGuqqduAlXs/sZrUfny Vggl+V66ZULldb8cmU7/mJ3ObJ/0CQU= -----END CERTIFICATE-----Generated at Sat Apr 4 16:59:06 2026 by rpki-client