$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dea0ffe9-0f82-3f9e-af30-23d432fe1c95.roa File: dea0ffe9-0f82-3f9e-af30-23d432fe1c95.roa (raw, json) Hash identifier: k6KR0t9o8dqSqYx7n+5KUzIq9Wem2NGVM8u6Nrpsa3E= Subject key identifier: AA:28:83:A5:03:BC:98:5A:6C:1D:1D:1D:36:F2:66:CF:F0:13:42:FE Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D5884E754723F8E6C2EAF0300 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dea0ffe9-0f82-3f9e-af30-23d432fe1c95.roa Signing time: Tue 31 Mar 2026 01:00:23 +0000 ROA not before: Tue 31 Mar 2026 01:00:23 +0000 ROA not after: Mon 29 Jun 2026 01:00:23 +0000 asID: 3257 IP address blocks: 68.167.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:58:84:e7:54:72:3f:8e:6c:2e:af:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 31 01:00:23 2026 GMT Not After : Jun 29 01:00:23 2026 GMT Subject: CN=9c022bfb-391e-48a8-9c65-d6a3efeaa851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:92:9f:b6:32:71:b2:44:70:a7:23:b5:e4:91: b7:bf:90:18:95:24:c7:9c:d3:ea:a2:74:2c:15:75: eb:1d:2e:a2:08:e4:32:15:51:6d:0e:4e:e4:3e:43: a5:03:c7:b0:2f:9a:86:71:ac:ae:b2:73:64:06:50: 52:e7:79:0f:13:13:70:db:db:e2:fe:4a:9a:37:20: cf:af:87:fe:08:18:23:8b:fd:f8:68:98:12:d7:10: 6f:0a:e6:da:5f:c1:32:de:e0:20:d2:75:c1:de:04: cd:bc:bb:39:d5:6a:b5:59:39:be:00:d8:0d:e0:59: 11:e9:b1:54:cf:cb:42:f9:73:d8:ec:68:9d:c7:3d: 34:1a:54:d1:1a:80:e6:3e:96:a4:fc:d6:a8:21:02: 1e:1c:fd:20:56:84:e2:aa:b7:05:05:a9:46:a8:b1: 94:0e:bf:32:e6:39:66:9b:e5:1a:ad:96:e6:0b:ed: 66:2b:74:24:d9:42:3c:1c:63:29:e6:71:36:d5:c7: 3b:c3:37:ec:36:28:0c:ec:ec:6b:1c:d4:66:db:20: 22:1b:99:8f:84:ee:25:02:16:d6:9f:16:49:82:64: 75:53:5e:3b:db:5c:22:34:ef:ed:29:49:5a:62:dd: 5c:4b:76:70:4b:13:a1:ae:0e:e9:08:b9:a9:72:1d: 7b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:28:83:A5:03:BC:98:5A:6C:1D:1D:1D:36:F2:66:CF:F0:13:42:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dea0ffe9-0f82-3f9e-af30-23d432fe1c95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:4d:1c:b9:83:82:6e:b5:20:dd:65:b9:2d:60:de:a1:e7:14: 7e:f5:6e:79:fe:54:0e:a4:c6:45:36:f7:ae:64:0c:27:b9:b9: 7e:23:e9:a1:e5:58:47:c5:5a:f0:f9:34:36:5b:00:5c:1e:95: 48:fc:0b:3d:71:a4:71:98:e2:33:3f:01:19:a9:61:8c:fa:b0: cd:ec:81:91:fc:74:9f:3b:88:cd:68:50:aa:5b:54:c6:ad:fe: 92:5a:b0:c6:74:d4:51:13:25:1d:e5:06:3a:b9:db:0f:26:65: 2d:43:46:09:fd:0c:e9:4e:82:25:79:91:1a:f7:d2:ae:e7:7a: 64:cf:fd:a4:46:c7:78:6f:97:fe:e9:08:57:39:ec:f8:c4:0d: 2b:aa:ec:ad:7b:bb:cf:a6:84:64:65:52:ef:43:f2:cf:b7:85: cc:da:d6:08:b6:71:05:8d:a5:96:71:be:27:9c:b2:d9:9e:68: ed:7d:85:cb:ac:ef:7e:95:4e:ab:47:2e:59:e3:49:b5:75:5d: 18:00:07:14:51:49:13:d6:01:69:d7:46:76:f5:9e:46:ea:3b: d8:5b:61:74:a0:2a:01:f5:9f:8e:2f:58:6c:ad:5f:ac:ce:2d: c1:02:48:1f:3a:d9:97:e4:77:84:dc:62:42:97:30:cf:74:b6: a4:6d:86:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1YhOdUcj+ObC6vAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMzMTAxMDAyM1oXDTI2MDYyOTAxMDAyM1owLzEtMCsGA1UEAxMk OWMwMjJiZmItMzkxZS00OGE4LTljNjUtZDZhM2VmZWFhODUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJKftjJxskRwpyO15JG3v5AYlSTHnNPqonQs FXXrHS6iCOQyFVFtDk7kPkOlA8ewL5qGcayusnNkBlBS53kPExNw29vi/kqaNyDP r4f+CBgji/34aJgS1xBvCubaX8Ey3uAg0nXB3gTNvLs51Wq1WTm+ANgN4FkR6bFU z8tC+XPY7Gidxz00GlTRGoDmPpak/NaoIQIeHP0gVoTiqrcFBalGqLGUDr8y5jlm m+UarZbmC+1mK3Qk2UI8HGMp5nE21cc7wzfsNigM7OxrHNRm2yAiG5mPhO4lAhbW nxZJgmR1U14721wiNO/tKUlaYt1cS3ZwSxOhrg7pCLmpch176QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoog6UDvJhabB0dHTbyZs/wE0L+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGVhMGZmZTktMGY4Mi0z ZjllLWFmMzAtMjNkNDMyZmUxYzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKf/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9NHLmDgm61IN1luS1g3qHnFH71bnn+VA6kxkU2965kDCe5uX4j6aHl WEfFWvD5NDZbAFwelUj8Cz1xpHGY4jM/ARmpYYz6sM3sgZH8dJ87iM1oUKpbVMat /pJasMZ01FETJR3lBjq52w8mZS1DRgn9DOlOgiV5kRr30q7nemTP/aRGx3hvl/7p CFc57PjEDSuq7K17u8+mhGRlUu9D8s+3hcza1gi2cQWNpZZxviecstmeaO19hcus 736VTqtHLlnjSbV1XRgABxRRSRPWAWnXRnb1nkbqO9hbYXSgKgH1n44vWGytX6zO LcECSB862Zfkd4TcYkKXMM90tqRthgE= -----END CERTIFICATE-----Generated at Fri Apr 10 23:16:49 2026 by rpki-client