$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c6da0f4d-4aa2-367a-88e1-dd62a2f7fdb6.roa File: c6da0f4d-4aa2-367a-88e1-dd62a2f7fdb6.roa (raw, json) Hash identifier: kxRZF0PQymMn6/DPfdu/nKObWlmz9AapOUpqT/Fo04k= Subject key identifier: D3:69:A0:9B:45:D9:9A:6B:76:74:CA:59:94:57:C9:F3:6B:81:DF:76 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CA6E8EE1D216B1AD384C02E80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c6da0f4d-4aa2-367a-88e1-dd62a2f7fdb6.roa Signing time: Mon 26 Jan 2026 10:08:09 +0000 ROA not before: Mon 26 Jan 2026 10:08:09 +0000 ROA not after: Sun 26 Apr 2026 09:08:09 +0000 asID: 25369 IP address blocks: 65.86.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Feb 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a6:e8:ee:1d:21:6b:1a:d3:84:c0:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jan 26 10:08:09 2026 GMT Not After : Apr 26 09:08:09 2026 GMT Subject: CN=de0bd5a2-cbfd-4484-8616-f5c48caf58ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:73:5b:65:01:89:7e:7c:4a:02:4c:f0:63:2e: 4e:06:12:d6:fd:26:c7:90:4e:bc:7b:d6:a1:5b:46: aa:a4:03:d3:30:f4:dd:26:2b:51:cf:33:51:d6:21: e8:d1:3f:18:c4:3e:29:b6:12:69:e6:ad:77:2b:39: 52:fa:5b:9d:41:bf:aa:00:d7:94:00:f0:cc:8a:ef: a6:83:ab:4b:e3:f5:10:64:8a:cb:e9:89:7a:e2:0a: 11:8c:f0:70:0a:6d:26:d0:77:7c:7a:ba:88:67:ee: 61:95:04:10:d2:f5:d5:a0:2d:83:b5:68:89:66:63: c6:d9:7b:96:85:1e:53:1e:ad:bb:01:15:95:bf:13: 78:7a:75:cb:d7:4a:a0:f7:92:f5:ac:0b:95:4c:ad: 02:f0:57:cc:e9:d2:ae:37:87:eb:d1:5c:c9:df:3e: 52:7c:dd:46:c4:8a:42:cf:2c:e4:a1:e6:ac:fa:5d: ae:5b:ab:29:98:43:23:31:0c:54:b9:28:c1:3b:24: 78:22:b6:fa:a9:17:a7:51:ca:1a:b4:2d:26:b2:83: fc:33:4f:ef:5d:8b:61:b7:32:c3:e7:1d:96:ec:69: 6e:b3:c9:13:68:a6:8a:a1:93:24:ec:d6:34:85:74: 26:da:08:d8:15:fc:41:a0:0a:12:ba:6b:7e:c7:29: e9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:69:A0:9B:45:D9:9A:6B:76:74:CA:59:94:57:C9:F3:6B:81:DF:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c6da0f4d-4aa2-367a-88e1-dd62a2f7fdb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:35:57:a3:89:75:d1:2e:a2:f7:ea:90:20:3c:95:14:ee:fa: 22:4f:a6:1b:a7:e1:61:a4:d5:97:95:ae:86:e9:eb:70:b1:b7: 9e:d7:08:65:bf:17:77:14:05:11:26:6f:51:72:1f:63:4e:4f: ff:25:dd:d1:05:21:b5:a3:e2:d8:38:6d:ef:2e:7c:24:50:71: 38:02:eb:8d:c1:7f:9d:6b:9d:eb:67:ea:21:35:c0:2e:cf:7d: 00:d4:5e:ac:da:ae:c2:c7:d7:35:dc:b0:fb:9e:20:4c:92:f8: d4:44:c8:f5:0e:d1:b0:5d:f1:41:45:da:73:f9:ef:cf:d6:0e: 7b:60:36:cc:7f:e7:76:b6:6a:cc:2b:38:cf:69:7c:ef:9f:da: ce:c8:f4:ae:61:a5:b5:3d:ff:2b:c8:0d:d4:90:c2:43:6b:7e: 54:df:fd:58:21:2b:b8:1f:bb:6a:55:de:b8:1f:c8:15:dd:62: 2f:ae:e4:2b:be:86:36:ae:e1:11:5f:e7:9e:c7:50:f2:27:ef: f7:b3:fe:81:af:13:7e:00:3c:44:88:43:55:ec:e4:61:07:e5: e7:10:c5:c1:69:93:e5:7d:6a:d3:7b:c9:03:41:e7:29:dc:ea: dc:82:89:ed:2a:9d:32:ce:be:cb:00:3f:05:73:0d:ca:c5:b1: 53:51:aa:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEym6O4dIWsa04TALoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDEyNjEwMDgwOVoXDTI2MDQyNjA5MDgwOVowLzEtMCsGA1UEAxMk ZGUwYmQ1YTItY2JmZC00NDg0LTg2MTYtZjVjNDhjYWY1OGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3NbZQGJfnxKAkzwYy5OBhLW/SbHkE68e9ah W0aqpAPTMPTdJitRzzNR1iHo0T8YxD4pthJp5q13KzlS+ludQb+qANeUAPDMiu+m g6tL4/UQZIrL6Yl64goRjPBwCm0m0Hd8erqIZ+5hlQQQ0vXVoC2DtWiJZmPG2XuW hR5THq27ARWVvxN4enXL10qg95L1rAuVTK0C8FfM6dKuN4fr0VzJ3z5SfN1GxIpC zyzkoeas+l2uW6spmEMjMQxUuSjBOyR4Irb6qRenUcoatC0msoP8M0/vXYthtzLD 5x2W7Glus8kTaKaKoZMk7NY0hXQm2gjYFfxBoAoSumt+xynpLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNpoJtF2ZprdnTKWZRXyfNrgd92MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzZkYTBmNGQtNGFhMi0z NjdhLTg4ZTEtZGQ2MmEyZjdmZGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQVa4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFw1V6OJddEuovfqkCA8lRTu+iJPphun4WGk1ZeVrobp63Cxt57XCGW/ F3cUBREmb1FyH2NOT/8l3dEFIbWj4tg4be8ufCRQcTgC643Bf51rnetn6iE1wC7P fQDUXqzarsLH1zXcsPueIEyS+NREyPUO0bBd8UFF2nP578/WDntgNsx/53a2aswr OM9pfO+f2s7I9K5hpbU9/yvIDdSQwkNrflTf/VghK7gfu2pV3rgfyBXdYi+u5Cu+ hjau4RFf557HUPIn7/ez/oGvE34APESIQ1Xs5GEH5ecQxcFpk+V9atN7yQNB5ync 6tyCie0qnTLOvssAPwVzDcrFsVNRqiY= -----END CERTIFICATE-----Generated at Mon Feb 23 22:27:05 2026 by rpki-client