$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c1720730-03f8-312a-8c8e-afa061dd00e4.roa File: c1720730-03f8-312a-8c8e-afa061dd00e4.roa (raw, json) Hash identifier: Sk2ea38S0q1ZUBsVTxldnI9uy/K6KcglVYlvyZIQU/o= Subject key identifier: 20:A7:D9:8C:76:AC:66:4D:4D:3A:84:22:86:87:DE:38:66:7B:15:EF Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D569A20FB00085CBCE38615C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c1720730-03f8-312a-8c8e-afa061dd00e4.roa Signing time: Mon 30 Mar 2026 08:31:39 +0000 ROA not before: Mon 30 Mar 2026 08:31:39 +0000 ROA not after: Sun 28 Jun 2026 08:31:39 +0000 asID: 212238 IP address blocks: 64.204.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:56:9a:20:fb:00:08:5c:bc:e3:86:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 30 08:31:39 2026 GMT Not After : Jun 28 08:31:39 2026 GMT Subject: CN=8dddce63-c436-4c31-974b-a1b4a734fa9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:03:ed:09:67:95:b2:91:83:91:a4:82:60:3a: f0:b6:cf:4c:fe:a4:25:d1:cc:6a:ab:05:0f:f2:5e: bc:a1:5b:65:bf:d3:48:5d:00:16:17:d0:3d:5d:43: 59:c5:44:2d:e3:fb:1b:45:a5:e1:d0:93:9c:c3:e2: b1:6b:ed:77:6d:e2:7f:ad:ad:ff:9a:91:22:94:69: 0c:c8:fa:85:2d:9e:f2:c4:8d:6e:14:fc:74:90:cd: 28:84:79:84:e5:3b:22:2a:6f:b0:04:2a:3c:07:65: 38:a9:b4:b6:52:03:0d:cd:f1:f2:66:39:cf:cf:f9: 38:98:5d:b2:22:56:c2:40:05:66:24:76:e6:02:ca: 10:4a:9b:00:d7:6f:98:36:6b:83:4c:90:e3:57:24: 25:85:71:8a:a6:96:0b:d9:44:e9:df:03:60:62:bf: 3c:81:9b:ad:07:d9:8f:46:c0:b3:dd:22:1f:af:d9: 5d:9b:c3:91:eb:3a:88:ca:df:e9:ab:46:ae:0e:5a: bc:e9:c5:35:a6:0c:ce:c5:2b:b3:89:65:2f:c4:59: 1f:04:09:0d:00:c0:74:ee:1f:d0:1c:a0:19:35:8c: 4b:1d:07:92:de:e1:92:6c:ec:16:a5:82:63:65:41: 3c:55:c6:f6:0e:11:48:dd:f8:f3:da:3a:49:89:cf: 2b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A7:D9:8C:76:AC:66:4D:4D:3A:84:22:86:87:DE:38:66:7B:15:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c1720730-03f8-312a-8c8e-afa061dd00e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:a2:7a:23:55:f4:81:cc:e7:a9:ee:7c:4c:f7:4a:62:89:75: d2:73:7e:41:89:f8:c5:de:80:93:4f:5e:52:eb:ac:bf:5d:b4: 6c:32:64:fd:57:46:96:c4:d3:3c:81:91:c7:39:9f:cb:ca:db: 50:11:1d:93:41:69:11:21:76:c7:78:e0:3d:97:e6:ab:df:31: a2:e4:4c:3c:e3:4e:ff:20:9d:14:8a:b0:b8:1f:79:78:35:f2: 5d:16:5e:be:f1:be:15:d0:97:a0:af:48:94:53:2d:e8:51:05: e2:dd:10:d4:89:c4:7e:9a:71:36:72:22:28:57:0f:85:f0:0d: 0f:d9:26:ff:76:37:73:31:b8:70:cf:61:f7:19:81:78:e6:b9: 66:34:93:5a:9c:35:28:de:25:3d:1c:83:e6:e1:34:8e:c8:f2: b3:c3:38:0b:a7:0f:03:d3:de:b2:06:29:f9:a3:dd:30:eb:fe: dc:ba:c8:2a:39:da:c0:6d:24:49:87:33:0c:a3:74:54:d3:a3: bf:9e:76:d4:ec:1f:ea:20:f5:fe:b0:8b:d0:e3:30:77:92:1e: b2:77:4d:68:6d:e9:91:d0:fb:38:6a:58:2f:a4:2a:02:55:6a: 49:37:00:6d:f0:e4:22:50:00:b7:ad:f6:ba:c8:7b:ac:c6:72: 54:c0:f7:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1WmiD7AAhcvOOGFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMzMDA4MzEzOVoXDTI2MDYyODA4MzEzOVowLzEtMCsGA1UEAxMk OGRkZGNlNjMtYzQzNi00YzMxLTk3NGItYTFiNGE3MzRmYTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgPtCWeVspGDkaSCYDrwts9M/qQl0cxqqwUP 8l68oVtlv9NIXQAWF9A9XUNZxUQt4/sbRaXh0JOcw+Kxa+13beJ/ra3/mpEilGkM yPqFLZ7yxI1uFPx0kM0ohHmE5TsiKm+wBCo8B2U4qbS2UgMNzfHyZjnPz/k4mF2y IlbCQAVmJHbmAsoQSpsA12+YNmuDTJDjVyQlhXGKppYL2UTp3wNgYr88gZutB9mP RsCz3SIfr9ldm8OR6zqIyt/pq0auDlq86cU1pgzOxSuziWUvxFkfBAkNAMB07h/Q HKAZNYxLHQeS3uGSbOwWpYJjZUE8Vcb2DhFI3fjz2jpJic8rTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCn2Yx2rGZNTTqEIoaH3jhmexXvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzE3MjA3MzAtMDNmOC0z MTJhLThjOGUtYWZhMDYxZGQwMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmieiNV9IHM56nufEz3SmKJddJzfkGJ+MXegJNPXlLrrL9dtGwyZP1X RpbE0zyBkcc5n8vK21ARHZNBaREhdsd44D2X5qvfMaLkTDzjTv8gnRSKsLgfeXg1 8l0WXr7xvhXQl6CvSJRTLehRBeLdENSJxH6acTZyIihXD4XwDQ/ZJv92N3MxuHDP YfcZgXjmuWY0k1qcNSjeJT0cg+bhNI7I8rPDOAunDwPT3rIGKfmj3TDr/ty6yCo5 2sBtJEmHMwyjdFTTo7+edtTsH+og9f6wi9DjMHeSHrJ3TWht6ZHQ+zhqWC+kKgJV akk3AG3w5CJQALet9rrIe6zGclTA9yc= -----END CERTIFICATE-----Generated at Fri Apr 10 23:13:34 2026 by rpki-client