$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c31c49aa-0429-3afe-8f73-5175d8298c56.roa File: c31c49aa-0429-3afe-8f73-5175d8298c56.roa (raw, json) Hash identifier: Q4E6ekr5CzW4u0QH2SXwLkt2tiXmuE0CM75TaFt787o= Subject key identifier: B7:42:D6:2E:87:E0:A4:B9:06:A8:30:E5:93:D4:5D:0B:47:93:4E:EF Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D4E84ECCAF0B87D990952D280 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c31c49aa-0429-3afe-8f73-5175d8298c56.roa Signing time: Fri 27 Mar 2026 11:02:27 +0000 ROA not before: Fri 27 Mar 2026 11:02:27 +0000 ROA not after: Thu 25 Jun 2026 11:02:27 +0000 asID: 34989 IP address blocks: 64.204.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:84:ec:ca:f0:b8:7d:99:09:52:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 27 11:02:27 2026 GMT Not After : Jun 25 11:02:27 2026 GMT Subject: CN=138896b5-61b7-4b1d-a1c2-8832a379d983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:12:a5:6c:42:a7:b1:0f:84:3c:ed:fa:d4:38: b2:e3:09:d6:53:02:75:be:fa:84:2d:af:a4:e6:4e: 4e:22:40:df:83:20:d1:d3:54:94:b4:4c:7f:c5:82: e5:b9:72:40:bf:c1:04:1f:bf:d0:8f:e9:d2:a0:19: 2b:6e:00:d7:93:e0:03:27:80:3b:f2:9b:83:af:a4: f4:18:99:12:88:be:b0:d6:45:67:c8:4c:19:0e:46: 0e:03:b9:44:93:5d:51:e3:85:86:8b:cd:5e:28:78: 8e:f7:cc:8c:79:cc:17:51:18:ce:3e:71:af:a0:21: 7f:ba:12:b2:ea:84:dd:9f:63:1c:9c:89:38:31:da: 13:99:84:54:51:e2:af:98:6a:2f:84:d6:4c:1c:cc: 0c:22:90:fc:5d:df:87:03:a1:93:a3:d6:c1:20:48: cf:a3:62:eb:c4:3d:a3:a9:98:c5:01:56:cf:6d:8d: bd:d7:25:41:91:e1:e7:01:a2:ba:3f:b6:e7:cd:0d: be:38:49:86:ca:f6:43:9c:fc:ca:84:48:82:90:aa: 9b:fa:5d:2d:c3:c9:5e:c0:87:39:46:c4:91:3f:0f: 9e:8e:25:d5:99:59:ff:d2:a8:a5:6f:d3:81:4b:bd: 3e:4d:9f:1e:68:64:a8:08:f5:83:05:c5:02:82:a9: 34:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:42:D6:2E:87:E0:A4:B9:06:A8:30:E5:93:D4:5D:0B:47:93:4E:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c31c49aa-0429-3afe-8f73-5175d8298c56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:d9:d2:7d:82:71:e4:e8:83:ce:40:be:f9:23:70:e7:fc:89: 98:10:8d:05:2a:76:c4:2c:2a:a9:9c:d3:7f:0a:34:02:5a:5d: 20:d4:35:8e:ec:62:40:f2:96:a2:3d:b9:31:99:90:49:1d:3d: 54:59:41:6a:0c:be:82:e4:48:91:db:e5:ed:4c:6c:3f:9c:00: 52:61:fe:28:c4:79:47:55:d5:89:84:ec:c2:49:d4:7c:97:c2: 48:e4:cb:80:77:61:df:4a:d6:93:99:29:cf:cc:a7:aa:59:98: f5:e8:34:17:1a:c7:5e:6a:6f:0f:f6:71:a9:f9:d0:b1:7f:a7: 11:e7:af:54:26:ef:ab:96:ff:24:5b:81:cb:3d:b9:af:4b:af: 73:ad:5e:da:a0:27:7d:28:8a:6c:4d:5e:36:33:ff:23:f8:54: 7d:29:4a:ac:49:ad:92:60:00:92:a2:f2:e4:cc:7f:bd:d7:ae: 94:5e:1e:97:95:86:c6:92:fe:fb:f5:94:8c:fc:8f:30:24:8b: e2:bb:a1:46:7f:50:8a:eb:db:b1:a4:e6:e2:fe:6b:b1:68:87: bc:24:aa:75:3c:36:6e:8f:a8:ad:97:5f:6b:7e:d5:03:2a:45: a2:70:4f:aa:df:b8:05:ac:19:c4:cb:db:8d:93:c2:cf:ca:8d: f4:61:14:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1OhOzK8Lh9mQlS0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyNzExMDIyN1oXDTI2MDYyNTExMDIyN1owLzEtMCsGA1UEAxMk MTM4ODk2YjUtNjFiNy00YjFkLWExYzItODgzMmEzNzlkOTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhKlbEKnsQ+EPO361Diy4wnWUwJ1vvqELa+k 5k5OIkDfgyDR01SUtEx/xYLluXJAv8EEH7/Qj+nSoBkrbgDXk+ADJ4A78puDr6T0 GJkSiL6w1kVnyEwZDkYOA7lEk11R44WGi81eKHiO98yMecwXURjOPnGvoCF/uhKy 6oTdn2McnIk4MdoTmYRUUeKvmGovhNZMHMwMIpD8Xd+HA6GTo9bBIEjPo2LrxD2j qZjFAVbPbY291yVBkeHnAaK6P7bnzQ2+OEmGyvZDnPzKhEiCkKqb+l0tw8lewIc5 RsSRPw+ejiXVmVn/0qilb9OBS70+TZ8eaGSoCPWDBcUCgqk0kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdC1i6H4KS5Bqgw5ZPUXQtHk07vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzMxYzQ5YWEtMDQyOS0z YWZlLThmNzMtNTE3NWQ4Mjk4YzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMy3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKvZ0n2CceTog85AvvkjcOf8iZgQjQUqdsQsKqmc038KNAJaXSDUNY7s YkDylqI9uTGZkEkdPVRZQWoMvoLkSJHb5e1MbD+cAFJh/ijEeUdV1YmE7MJJ1HyX wkjky4B3Yd9K1pOZKc/Mp6pZmPXoNBcax15qbw/2can50LF/pxHnr1Qm76uW/yRb gcs9ua9Lr3OtXtqgJ30oimxNXjYz/yP4VH0pSqxJrZJgAJKi8uTMf73XrpReHpeV hsaS/vv1lIz8jzAki+K7oUZ/UIrr27Gk5uL+a7Foh7wkqnU8Nm6PqK2XX2t+1QMq RaJwT6rfuAWsGcTL242Tws/KjfRhFAs= -----END CERTIFICATE-----Generated at Thu Apr 9 08:24:31 2026 by rpki-client