$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f914572b-8874-3c3c-95ee-9b499c92b191.roa File: f914572b-8874-3c3c-95ee-9b499c92b191.roa (raw, json) Hash identifier: 9ufatEMrgfqJbxvmU1cUu8RZozvZpcHeLIMDPa5u/Io= Subject key identifier: DD:98:4D:81:B3:03:CE:7A:89:E2:1E:CF:1D:25:06:06:AA:A0:3A:4E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D97F28D14AF5136714056A5C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f914572b-8874-3c3c-95ee-9b499c92b191.roa Signing time: Wed 22 Apr 2026 18:17:21 +0000 ROA not before: Wed 22 Apr 2026 18:17:21 +0000 ROA not after: Tue 21 Jul 2026 18:17:21 +0000 asID: 205489 IP address blocks: 64.204.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:f2:8d:14:af:51:36:71:40:56:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 22 18:17:21 2026 GMT Not After : Jul 21 18:17:21 2026 GMT Subject: CN=40e46987-ba09-4e4a-9e49-488190a653d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c3:21:43:68:d7:c7:e2:7d:29:25:04:21:78: d4:81:12:d6:e3:30:72:a6:e7:34:7e:ba:83:3c:e3: 59:0b:be:32:e2:75:51:ab:5e:ec:0c:55:3e:dc:de: 61:92:7d:78:81:dd:1e:d0:39:1f:90:0c:1c:de:d8: c8:85:48:aa:ce:72:8e:aa:3c:84:1c:4f:20:2c:6c: f5:d0:c8:b5:2a:a4:00:49:ac:80:60:aa:92:a1:1f: 4f:b0:4e:8a:51:e3:d7:5e:7b:44:6a:4d:8c:fc:6f: c0:35:10:2d:94:90:37:1a:9d:99:1b:29:d9:94:db: 9a:c6:ac:42:10:d2:95:8a:40:3c:bd:49:b9:14:30: 71:ef:e7:ae:aa:e1:a0:4f:5a:2a:cc:25:9b:c6:96: 54:a6:6a:3a:a2:f0:74:e3:cb:33:cd:a6:c3:6d:b6: 45:cf:98:fe:1a:84:ef:a6:4d:93:ae:76:34:a1:8b: b3:3a:bf:48:a8:3f:4b:2a:2c:42:9d:78:48:ee:7d: 02:f5:0e:cb:d1:e3:27:7b:c3:de:11:59:6c:03:a0: fe:b4:39:19:cb:d3:ae:b2:70:c3:2b:5c:99:4b:2e: 0f:89:c6:2b:8a:33:9e:c0:5e:4d:73:b0:71:dc:89: 2a:af:9e:4a:d4:89:c7:7d:92:63:43:9e:df:df:da: 89:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:98:4D:81:B3:03:CE:7A:89:E2:1E:CF:1D:25:06:06:AA:A0:3A:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f914572b-8874-3c3c-95ee-9b499c92b191.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:76:04:79:37:0c:25:05:e0:db:de:53:ef:0b:d5:0b:58:b2: 9c:f7:86:f5:a0:2d:99:1d:c9:cb:72:00:fa:ef:1b:07:cb:4c: c1:8b:4e:2d:d8:ef:3b:6b:60:5a:c7:2f:13:32:1f:ad:ed:85: 64:cd:db:91:d6:cc:b4:64:3d:d8:0d:f6:f4:4f:9a:e1:98:64: f9:f2:66:a9:76:d5:0e:ab:6c:9b:e4:59:fe:15:33:60:c8:fc: 79:55:08:40:4b:57:93:61:02:8c:1e:90:46:08:45:7d:58:26: 7c:24:ca:de:1d:95:c6:00:f1:e9:61:32:6c:56:0c:15:ab:21: 70:fd:02:4b:40:cf:e2:0a:08:09:cc:df:ab:43:9b:d5:49:11: d6:d5:ce:6d:37:5f:06:ff:a2:20:10:1d:c5:82:33:97:b4:1e: 6b:ba:71:66:9d:ca:b8:f5:e3:5d:cb:54:e3:4e:3e:8e:85:bc: 33:05:f0:7a:fa:09:ba:5a:41:2f:94:3c:5c:4b:aa:3e:48:0b: cc:c0:7e:71:c1:46:04:22:6a:56:4a:4a:77:64:a3:ff:6f:42: 4c:14:ea:81:f2:68:37:54:da:40:7a:00:64:cd:6c:d8:0f:08: d7:bc:81:f8:68:4e:a4:8e:02:7a:13:de:a4:53:41:60:29:19: bd:68:23:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2X8o0Ur1E2cUBWpcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQyMjE4MTcyMVoXDTI2MDcyMTE4MTcyMVowLzEtMCsGA1UEAxMk NDBlNDY5ODctYmEwOS00ZTRhLTllNDktNDg4MTkwYTY1M2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcMhQ2jXx+J9KSUEIXjUgRLW4zBypuc0frqD PONZC74y4nVRq17sDFU+3N5hkn14gd0e0DkfkAwc3tjIhUiqznKOqjyEHE8gLGz1 0Mi1KqQASayAYKqSoR9PsE6KUePXXntEak2M/G/ANRAtlJA3Gp2ZGynZlNuaxqxC ENKVikA8vUm5FDBx7+euquGgT1oqzCWbxpZUpmo6ovB048szzabDbbZFz5j+GoTv pk2TrnY0oYuzOr9IqD9LKixCnXhI7n0C9Q7L0eMne8PeEVlsA6D+tDkZy9OusnDD K1yZSy4PicYrijOewF5Nc7Bx3Ikqr55K1InHfZJjQ57f39qJbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2YTYGzA856ieIezx0lBgaqoDpOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZjkxNDU3MmItODg3NC0z YzNjLTk1ZWUtOWI0OTljOTJiMTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMyiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALx2BHk3DCUF4NveU+8L1QtYspz3hvWgLZkdyctyAPrvGwfLTMGLTi3Y 7ztrYFrHLxMyH63thWTN25HWzLRkPdgN9vRPmuGYZPnyZql21Q6rbJvkWf4VM2DI /HlVCEBLV5NhAowekEYIRX1YJnwkyt4dlcYA8elhMmxWDBWrIXD9AktAz+IKCAnM 36tDm9VJEdbVzm03Xwb/oiAQHcWCM5e0Hmu6cWadyrj1413LVONOPo6FvDMF8Hr6 CbpaQS+UPFxLqj5IC8zAfnHBRgQialZKSndko/9vQkwU6oHyaDdU2kB6AGTNbNgP CNe8gfhoTqSOAnoT3qRTQWApGb1oI5E= -----END CERTIFICATE-----Generated at Mon Apr 27 12:35:46 2026 by rpki-client