$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c41b68d5-177e-3498-8cb0-07035e18da9b.roa File: c41b68d5-177e-3498-8cb0-07035e18da9b.roa (raw, json) Hash identifier: iu2Onxtj3p2JfNQz8zkb+yI9iA3o95XOQhuKEfOlh/M= Subject key identifier: A6:87:A6:C3:B9:A4:72:91:A4:CE:A5:90:5E:C8:65:48:47:BA:8B:05 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D5D90C727CFCAB8729D3B5C80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c41b68d5-177e-3498-8cb0-07035e18da9b.roa Signing time: Wed 01 Apr 2026 20:23:28 +0000 ROA not before: Wed 01 Apr 2026 20:23:28 +0000 ROA not after: Tue 30 Jun 2026 20:23:28 +0000 asID: 6079 IP address blocks: 64.204.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5d:90:c7:27:cf:ca:b8:72:9d:3b:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 1 20:23:28 2026 GMT Not After : Jun 30 20:23:28 2026 GMT Subject: CN=90c10249-e7e2-4243-8a06-8c4c76d0f62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5d:c0:32:eb:8a:54:5b:f4:45:4d:77:cb:8b: 57:45:d0:32:88:c0:f0:37:34:5f:45:92:85:c5:b4: 31:2e:da:d3:8b:eb:cf:6f:24:ba:60:ad:75:8e:86: 18:c8:08:76:c0:08:80:14:08:b4:08:4a:03:0d:54: 20:40:8d:d8:88:c8:ea:67:44:fd:dc:ff:b9:3c:e7: 19:7d:cd:79:fe:93:02:c8:62:4f:d4:dd:1d:28:81: b0:8f:41:73:ea:a8:8a:7e:59:9c:32:6c:d2:f3:dc: 1d:2c:b7:90:19:d9:ca:60:15:af:6f:16:bc:ff:dc: 4d:9c:2c:ad:97:0a:95:82:b9:62:1d:f2:85:89:c3: de:0f:66:8e:90:3b:a8:83:7a:c0:72:91:74:44:ff: b8:3a:97:ad:f9:8f:e6:8a:09:5e:54:1a:f2:43:b6: e9:01:07:fe:91:53:34:47:27:8d:92:6d:43:1f:4d: 37:a0:f0:ac:4f:76:44:d7:6b:c3:1b:9c:fe:31:49: e1:a5:43:b1:47:c3:f8:42:86:cd:d0:08:fd:3e:c4: a3:4c:45:39:d4:f8:23:96:37:ef:d4:7b:81:22:a1: d7:51:b2:12:1c:b8:ba:10:e8:52:9f:21:c8:56:29: b5:84:2b:fb:20:84:88:87:7c:8c:fc:c0:fb:b2:c5: 0b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:87:A6:C3:B9:A4:72:91:A4:CE:A5:90:5E:C8:65:48:47:BA:8B:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c41b68d5-177e-3498-8cb0-07035e18da9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:b6:89:92:ca:db:a5:b5:24:79:1f:e7:75:5b:dc:8c:6d:8f: 12:e0:18:ea:f1:8c:38:80:fa:23:fe:7d:3f:fc:47:2e:3f:11: 12:43:43:b8:35:af:f2:8d:02:b8:07:8f:b3:ad:26:68:a7:2f: 38:cc:95:b4:f4:0e:18:5b:c5:9d:b4:71:2a:92:b4:3e:25:72: 81:90:1b:48:d7:82:3b:a3:2e:38:15:5d:b4:6f:b7:d6:08:ff: 13:5a:99:84:f4:d5:45:99:34:38:68:42:0e:ca:cc:82:b9:04: ce:3f:27:0e:84:5c:f4:33:ec:b9:4d:da:14:a3:32:b8:f7:dd: 1f:1e:b3:33:76:2a:dd:c4:d7:52:a1:40:20:6a:3a:61:a3:d5: d1:31:21:d9:25:60:9d:9c:f7:ee:b7:85:de:f2:3c:2c:3d:f6: fa:dc:48:69:51:98:01:38:56:88:4f:6d:97:52:8b:1f:18:0d: ca:c2:24:9e:d9:5a:6e:fb:37:f9:b9:82:a1:eb:35:5a:20:35: 33:ba:b2:69:8f:ef:6b:a5:c7:33:68:15:8e:f9:76:f5:ab:9b: 5a:e8:41:c9:ec:99:61:0f:65:91:9d:08:e7:fb:b8:85:ea:6f: eb:cb:d3:b5:09:e8:29:74:4a:84:ce:70:47:e5:4b:d8:77:dc: f2:50:55:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1dkMcnz8q4cp07XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQwMTIwMjMyOFoXDTI2MDYzMDIwMjMyOFowLzEtMCsGA1UEAxMk OTBjMTAyNDktZTdlMi00MjQzLThhMDYtOGM0Yzc2ZDBmNjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll3AMuuKVFv0RU13y4tXRdAyiMDwNzRfRZKF xbQxLtrTi+vPbyS6YK11joYYyAh2wAiAFAi0CEoDDVQgQI3YiMjqZ0T93P+5POcZ fc15/pMCyGJP1N0dKIGwj0Fz6qiKflmcMmzS89wdLLeQGdnKYBWvbxa8/9xNnCyt lwqVgrliHfKFicPeD2aOkDuog3rAcpF0RP+4Opet+Y/migleVBryQ7bpAQf+kVM0 RyeNkm1DH003oPCsT3ZE12vDG5z+MUnhpUOxR8P4QobN0Aj9PsSjTEU51Pgjljfv 1HuBIqHXUbISHLi6EOhSnyHIVim1hCv7IISIh3yM/MD7ssULTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaHpsO5pHKRpM6lkF7IZUhHuosFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzQxYjY4ZDUtMTc3ZS0z NDk4LThjYjAtMDcwMzVlMThkYTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMwuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAO2iZLK26W1JHkf53Vb3IxtjxLgGOrxjDiA+iP+fT/8Ry4/ERJDQ7g1 r/KNArgHj7OtJminLzjMlbT0DhhbxZ20cSqStD4lcoGQG0jXgjujLjgVXbRvt9YI /xNamYT01UWZNDhoQg7KzIK5BM4/Jw6EXPQz7LlN2hSjMrj33R8eszN2Kt3E11Kh QCBqOmGj1dExIdklYJ2c9+63hd7yPCw99vrcSGlRmAE4VohPbZdSix8YDcrCJJ7Z Wm77N/m5gqHrNVogNTO6smmP72ulxzNoFY75dvWrm1roQcnsmWEPZZGdCOf7uIXq b+vL07UJ6Cl0SoTOcEflS9h33PJQVRI= -----END CERTIFICATE-----Generated at Fri Apr 10 23:12:58 2026 by rpki-client