$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/038dfcae-6814-3ffe-ae25-acb4cff65a81.roa File: 038dfcae-6814-3ffe-ae25-acb4cff65a81.roa (raw, json) Hash identifier: 6y9ddE/JK4ZRiSJmz8EP5OvfCLKxOquUCmNNHN1OZRc= Subject key identifier: 6C:2D:3B:57:A9:0C:84:13:86:F1:2F:99:90:78:0B:0A:1A:5C:D6:11 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D237A72C3529DA3946DCFA280 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/038dfcae-6814-3ffe-ae25-acb4cff65a81.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 401362 IP address blocks: 216.132.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:72:c3:52:9d:a3:94:6d:cf:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=31eaec19-176d-47ae-8901-4118caf95089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5e:c6:18:bb:17:e7:e3:0e:09:ff:b7:3c:1e: 56:ff:0a:dd:3a:ba:1c:82:78:66:34:46:bb:72:8e: b8:3c:01:8c:59:54:99:08:1a:6f:ef:3f:ba:f2:06: 94:bc:db:66:e6:0d:fb:30:b3:08:90:aa:11:12:75: 0c:c7:43:2b:4a:93:e6:71:d6:10:f1:8f:3e:32:88: bb:be:71:4c:bb:ab:f5:66:dc:0b:a1:78:af:a8:f8: b1:fb:38:4d:c5:c3:d1:e0:9e:61:3e:e1:6b:37:6c: 6d:7d:bd:56:df:3e:3b:36:c8:81:bd:39:9a:38:42: 13:c4:3e:e1:29:ca:28:1e:dc:a6:2a:66:33:fa:14: 3e:1a:58:e8:a9:78:eb:b5:eb:6e:51:36:c6:ff:24: b7:8d:8d:8b:55:36:d0:9a:50:d0:c3:b0:07:51:1f: 26:5e:98:61:67:7a:51:69:c7:ce:be:cc:26:d0:c8: 21:a5:1c:51:46:96:ae:0f:09:34:f9:d6:11:cd:da: f5:48:b8:7b:01:97:c6:14:5d:e1:9e:56:a6:cc:c6: 59:0c:97:8b:36:ba:b8:23:30:5b:8a:b0:de:63:27: 9d:37:e2:b0:4f:56:c0:f3:63:d7:e7:6c:86:05:e9: e3:2c:a7:c1:48:75:9d:1a:08:6b:26:12:5d:c8:31: 5f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:2D:3B:57:A9:0C:84:13:86:F1:2F:99:90:78:0B:0A:1A:5C:D6:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/038dfcae-6814-3ffe-ae25-acb4cff65a81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:a5:cb:8a:90:68:de:95:dc:37:bb:fb:5e:0e:5e:cb:f4:f2: 59:4a:f1:60:dd:57:d4:50:cf:b1:8a:13:38:d1:6f:bc:f1:02: f2:ac:05:ac:c2:75:21:6c:50:33:b6:5b:5e:00:68:9c:1a:0f: 4f:b4:5f:1c:cf:3d:cd:86:8a:1d:98:7c:e6:0d:bb:7b:69:a8: ae:b4:83:0a:db:93:30:28:1a:ce:b1:cd:3c:13:62:7b:3d:e7: 9e:79:c8:92:63:f8:e6:d3:c8:3d:83:59:03:f4:05:b3:25:31: 58:a2:9e:90:9a:32:4e:bd:5f:be:88:cf:cf:29:f8:3c:7d:9f: 90:e9:e3:aa:38:58:21:6c:e5:64:c5:5e:8d:66:fa:a9:07:93: ca:dd:d0:ce:b6:36:0c:f1:f1:2d:47:1b:b4:2e:f7:40:74:1e: 16:b5:59:a4:e7:29:cd:ee:2e:bd:d5:a7:06:26:2d:4a:49:b8: a5:64:49:3e:96:f0:53:9e:33:e7:2c:78:a1:de:91:0d:45:1b: 1e:c2:c5:e3:bd:ad:16:b0:dd:0a:68:7b:5a:26:33:dc:b8:8b: 3b:0d:dc:e1:7a:71:da:d0:64:93:84:0b:b0:17:3c:c1:c6:58: 0c:66:81:ce:5d:c4:58:59:06:75:6b:cc:04:1e:0c:ac:91:58: bd:62:80:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jenLDUp2jlG3PooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MzFlYWVjMTktMTc2ZC00N2FlLTg5MDEtNDExOGNhZjk1MDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV7GGLsX5+MOCf+3PB5W/wrdOrocgnhmNEa7 co64PAGMWVSZCBpv7z+68gaUvNtm5g37MLMIkKoREnUMx0MrSpPmcdYQ8Y8+Moi7 vnFMu6v1ZtwLoXivqPix+zhNxcPR4J5hPuFrN2xtfb1W3z47NsiBvTmaOEITxD7h KcooHtymKmYz+hQ+GljoqXjrtetuUTbG/yS3jY2LVTbQmlDQw7AHUR8mXphhZ3pR acfOvswm0MghpRxRRpauDwk0+dYRzdr1SLh7AZfGFF3hnlamzMZZDJeLNrq4IzBb irDeYyedN+KwT1bA82PX52yGBenjLKfBSHWdGghrJhJdyDFfqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwtO1epDIQThvEvmZB4CwoaXNYRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDM4ZGZjYWUtNjgxNC0z ZmZlLWFlMjUtYWNiNGNmZjY1YTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2IToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALqly4qQaN6V3De7+14OXsv08llK8WDdV9RQz7GKEzjRb7zxAvKsBazC dSFsUDO2W14AaJwaD0+0XxzPPc2Gih2YfOYNu3tpqK60gwrbkzAoGs6xzTwTYns9 5555yJJj+ObTyD2DWQP0BbMlMViinpCaMk69X76Iz88p+Dx9n5Dp46o4WCFs5WTF Xo1m+qkHk8rd0M62Ngzx8S1HG7Qu90B0Hha1WaTnKc3uLr3VpwYmLUpJuKVkST6W 8FOeM+cseKHekQ1FGx7CxeO9rRaw3Qpoe1omM9y4izsN3OF6cdrQZJOEC7AXPMHG WAxmgc5dxFhZBnVrzAQeDKyRWL1igII= -----END CERTIFICATE-----Generated at Thu Mar 26 15:51:25 2026 by rpki-client