$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d35e2cbb-6331-3ee3-a3e2-5abccfb56b7c.roa File: d35e2cbb-6331-3ee3-a3e2-5abccfb56b7c.roa (raw, json) Hash identifier: fX/iKhZjluAQw7/gwEYJ80nF3H+knvkUdmCtXGizdjw= Subject key identifier: CE:E8:93:CA:26:E8:5B:F8:9F:35:05:3E:CC:25:04:7F:A5:79:C6:7A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D4B1AE94885838F7A46A2C900 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d35e2cbb-6331-3ee3-a3e2-5abccfb56b7c.roa Signing time: Thu 26 Mar 2026 05:41:25 +0000 ROA not before: Thu 26 Mar 2026 05:41:25 +0000 ROA not after: Wed 24 Jun 2026 05:41:25 +0000 asID: 206848 IP address blocks: 64.204.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:1a:e9:48:85:83:8f:7a:46:a2:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 26 05:41:25 2026 GMT Not After : Jun 24 05:41:25 2026 GMT Subject: CN=fec2e7b4-de13-45e5-a744-3a2057919fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:00:21:76:d3:7c:76:38:af:94:3d:e9:e1:75: 4f:22:99:5f:2d:87:bd:97:43:cc:92:4f:f8:bb:ba: c2:ba:37:1c:b2:67:43:dd:1a:00:61:6d:02:be:36: c0:be:03:2d:dd:62:0c:53:85:6a:03:14:f0:9f:b0: 49:df:68:f7:d7:ec:23:93:f8:29:fd:a0:fa:9a:9f: 25:ca:96:31:99:bd:23:88:8d:72:57:13:ee:cd:35: a2:2c:16:72:db:5d:08:b6:2e:85:35:48:8a:4b:9c: 5c:03:0a:a9:80:a1:97:93:12:94:54:ec:a8:07:5a: c3:35:f6:de:53:e0:f0:a5:f9:b4:49:95:5b:a8:db: 8a:17:00:f7:47:20:62:2c:f4:47:66:d5:a6:e7:ed: 83:0d:be:94:18:1d:e2:93:ed:09:e1:e9:d9:6c:0a: 6a:b1:de:7e:9f:1c:c0:d6:f5:ad:9d:32:65:b5:64: da:cf:c6:2f:a0:99:90:48:ac:dd:a6:2e:bb:89:39: 1f:93:bd:52:6a:50:f7:00:69:1d:ad:09:71:64:d2: b3:d7:80:c9:49:3f:0f:7b:be:d8:98:78:d1:c0:83: e6:96:8c:1d:f0:bc:38:3b:c1:e0:79:0b:bc:fa:92: 9a:34:c8:a9:ba:51:8c:2e:93:c6:f7:5c:76:a9:0d: 8f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E8:93:CA:26:E8:5B:F8:9F:35:05:3E:CC:25:04:7F:A5:79:C6:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d35e2cbb-6331-3ee3-a3e2-5abccfb56b7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:36:ec:29:3b:8b:ac:db:58:a2:17:af:d5:c7:24:ea:f5:01: 91:b1:29:69:f4:9b:83:c5:3c:83:9b:43:13:e1:c1:ee:07:f3: 88:74:80:63:da:8d:d6:d5:88:02:9d:ab:e2:7c:03:57:24:69: 0e:56:52:6f:28:be:01:f8:59:19:ae:ec:1f:a9:81:d0:18:cd: 5a:5f:06:6b:e4:af:17:0e:75:07:d5:0b:84:da:54:52:7d:dd: 7f:07:50:cf:8c:23:d2:24:cd:e0:28:11:6b:b1:47:a1:5a:29: ad:42:bd:e5:76:3f:84:23:59:d4:20:86:2a:7f:69:57:1b:61: 59:3c:26:3a:39:5c:88:bd:89:ab:16:b8:d5:55:4b:5b:21:59: 69:ab:92:d7:7d:9f:87:6f:9a:4b:9e:a9:03:aa:9b:00:3d:a4: 10:4f:57:53:b0:3a:ad:7b:11:1e:a8:39:a1:98:f9:43:0b:ae: 0b:05:8f:3e:f2:8d:60:5c:c5:4f:fe:d6:76:0e:bf:03:e6:8e: a2:8b:9c:b2:d0:20:73:9b:2f:87:4d:eb:9d:d0:dd:d8:e4:cf: c1:45:f3:dd:6c:dd:0a:4d:fc:35:11:6a:86:a2:0a:aa:eb:87: f6:74:a8:71:f3:fb:82:18:c3:1a:db:02:ef:66:4f:9b:6d:7b: 4b:75:4a:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1LGulIhYOPekaiyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyNjA1NDEyNVoXDTI2MDYyNDA1NDEyNVowLzEtMCsGA1UEAxMk ZmVjMmU3YjQtZGUxMy00NWU1LWE3NDQtM2EyMDU3OTE5ZmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAAhdtN8djivlD3p4XVPIplfLYe9l0PMkk/4 u7rCujccsmdD3RoAYW0CvjbAvgMt3WIMU4VqAxTwn7BJ32j31+wjk/gp/aD6mp8l ypYxmb0jiI1yVxPuzTWiLBZy210Iti6FNUiKS5xcAwqpgKGXkxKUVOyoB1rDNfbe U+Dwpfm0SZVbqNuKFwD3RyBiLPRHZtWm5+2DDb6UGB3ik+0J4enZbApqsd5+nxzA 1vWtnTJltWTaz8YvoJmQSKzdpi67iTkfk71SalD3AGkdrQlxZNKz14DJST8Pe77Y mHjRwIPmlowd8Lw4O8HgeQu8+pKaNMipulGMLpPG91x2qQ2PAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7ok8om6Fv4nzUFPswlBH+lecZ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDM1ZTJjYmItNjMzMS0z ZWUzLWEzZTItNWFiY2NmYjU2YjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMyLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJI27Ck7i6zbWKIXr9XHJOr1AZGxKWn0m4PFPIObQxPhwe4H84h0gGPa jdbViAKdq+J8A1ckaQ5WUm8ovgH4WRmu7B+pgdAYzVpfBmvkrxcOdQfVC4TaVFJ9 3X8HUM+MI9IkzeAoEWuxR6FaKa1CveV2P4QjWdQghip/aVcbYVk8Jjo5XIi9iasW uNVVS1shWWmrktd9n4dvmkueqQOqmwA9pBBPV1OwOq17ER6oOaGY+UMLrgsFjz7y jWBcxU/+1nYOvwPmjqKLnLLQIHObL4dN653Q3djkz8FF891s3QpN/DURaoaiCqrr h/Z0qHHz+4IYwxrbAu9mT5tte0t1Sp8= -----END CERTIFICATE-----Generated at Fri Apr 10 23:13:05 2026 by rpki-client