$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dedf6ac2-eb75-30a2-8d96-ce4a777a6ebb.roa File: dedf6ac2-eb75-30a2-8d96-ce4a777a6ebb.roa (raw, json) Hash identifier: fjfLK2ukIyQk0xRCVpXkS88VY+qVmAu932lROvki+lc= Subject key identifier: 87:41:AA:26:D7:C5:1F:90:26:40:95:24:67:D4:B7:52:47:4E:1C:4E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D460AA83CEA1E457617CA7980 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dedf6ac2-eb75-30a2-8d96-ce4a777a6ebb.roa Signing time: Tue 24 Mar 2026 10:09:38 +0000 ROA not before: Tue 24 Mar 2026 10:09:38 +0000 ROA not after: Mon 22 Jun 2026 10:09:38 +0000 asID: 32693 IP address blocks: 69.33.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:0a:a8:3c:ea:1e:45:76:17:ca:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 24 10:09:38 2026 GMT Not After : Jun 22 10:09:38 2026 GMT Subject: CN=953b445a-8783-45b7-b1f1-8e0f613ba81c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e9:d7:70:af:ca:89:5f:72:23:88:a3:b4:8e: a9:cb:00:34:94:8c:38:d2:7c:9d:f7:09:4a:32:c4: 97:d9:74:6b:4d:19:dd:4a:81:3b:10:e1:3a:a7:17: b1:05:68:bf:18:dd:3e:3e:ef:db:22:2c:b2:68:14: 39:2c:5d:12:e7:70:53:84:c6:ac:52:5d:18:be:17: 20:8d:62:1f:a8:08:ae:9a:49:f3:a7:07:e9:75:53: 77:28:67:ab:54:d8:10:42:dc:22:a1:6e:8f:33:cb: 81:7f:6c:56:70:8e:2a:17:9f:b6:72:5a:cf:23:42: d6:ba:2f:df:a9:64:3c:48:e0:10:46:dc:b4:d7:2f: 70:d7:6c:d0:9a:90:b6:12:a3:c4:ab:a5:10:96:1f: 39:5c:9e:39:79:2b:cb:ee:93:36:40:26:9c:98:68: 90:99:8f:03:94:54:46:18:c9:c7:a3:44:fd:5a:c0: 90:d1:3c:e6:0b:73:98:0e:58:7d:f9:ed:23:c1:c9: fe:52:c2:11:74:c8:3a:3f:0d:66:97:4e:67:76:16: e8:8e:dc:ca:2c:bc:da:9f:9a:f2:3c:24:a1:98:e1: 85:73:7a:44:e1:d3:6c:ce:42:58:14:ce:34:9b:51: bb:1c:73:5b:39:8d:ed:15:e8:0f:04:13:fa:da:57: 91:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:41:AA:26:D7:C5:1F:90:26:40:95:24:67:D4:B7:52:47:4E:1C:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dedf6ac2-eb75-30a2-8d96-ce4a777a6ebb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 69.33.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:c9:57:c3:38:92:68:48:d7:9e:ce:d9:49:cb:0d:fb:19:4e: 83:1f:c3:6a:2c:d9:d5:67:39:4b:d5:1f:4f:71:c4:34:42:bd: b1:81:d0:83:10:e1:ff:d6:af:60:11:72:aa:b0:fb:b3:b7:05: a6:fa:7c:fd:8a:19:91:60:a4:a7:06:ef:83:9a:bd:73:3c:2e: fb:f6:9f:2a:1a:66:45:3d:fd:f2:c7:83:be:09:a5:da:4e:12: 3a:4c:5d:be:71:65:58:98:83:f9:0c:97:5d:c9:10:62:52:ea: 6e:aa:45:a7:7f:a5:59:70:f4:75:55:1d:c9:07:a4:fd:43:b1: ce:36:21:53:2c:5b:df:1e:e5:16:ca:dc:2d:92:ba:6d:c0:7c: f4:51:fa:36:e2:ba:ca:c2:24:6a:de:9e:a9:91:08:aa:0a:1f: 81:a5:cd:ac:41:c9:b0:fb:00:f2:35:c5:f1:45:b8:25:76:21: fb:7c:93:4b:66:82:c5:b8:89:dd:1f:9a:0e:32:5d:0a:94:49: d5:11:dd:31:d2:65:14:87:60:8b:24:8c:97:c7:fe:de:c3:a0: 86:12:00:f7:dd:de:42:36:31:ce:4f:60:72:13:e9:03:08:64: c9:35:d1:42:eb:27:7b:25:ab:0d:67:e4:87:bd:84:89:1e:d1: e6:7f:f5:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GCqg86h5FdhfKeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyNDEwMDkzOFoXDTI2MDYyMjEwMDkzOFowLzEtMCsGA1UEAxMk OTUzYjQ0NWEtODc4My00NWI3LWIxZjEtOGUwZjYxM2JhODFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOnXcK/KiV9yI4ijtI6pywA0lIw40nyd9wlK MsSX2XRrTRndSoE7EOE6pxexBWi/GN0+Pu/bIiyyaBQ5LF0S53BThMasUl0Yvhcg jWIfqAiumknzpwfpdVN3KGerVNgQQtwioW6PM8uBf2xWcI4qF5+2clrPI0LWui/f qWQ8SOAQRty01y9w12zQmpC2EqPEq6UQlh85XJ45eSvL7pM2QCacmGiQmY8DlFRG GMnHo0T9WsCQ0TzmC3OYDlh9+e0jwcn+UsIRdMg6Pw1ml05ndhbojtzKLLzan5ry PCShmOGFc3pE4dNszkJYFM40m1G7HHNbOY3tFegPBBP62leRnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdBqibXxR+QJkCVJGfUt1JHThxOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGVkZjZhYzItZWI3NS0z MGEyLThkOTYtY2U0YTc3N2E2ZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSH0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/JV8M4kmhI157O2UnLDfsZToMfw2os2dVnOUvVH09xxDRCvbGB0IMQ 4f/Wr2ARcqqw+7O3Bab6fP2KGZFgpKcG74OavXM8Lvv2nyoaZkU9/fLHg74JpdpO EjpMXb5xZViYg/kMl13JEGJS6m6qRad/pVlw9HVVHckHpP1Dsc42IVMsW98e5RbK 3C2Sum3AfPRR+jbiusrCJGrenqmRCKoKH4GlzaxBybD7API1xfFFuCV2Ift8k0tm gsW4id0fmg4yXQqUSdUR3THSZRSHYIskjJfH/t7DoIYSAPfd3kI2Mc5PYHIT6QMI ZMk10ULrJ3slqw1n5Ie9hIke0eZ/9W8= -----END CERTIFICATE-----Generated at Wed Mar 25 18:14:10 2026 by rpki-client