$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1bf053ce-273c-34bc-8110-aa141c14782d.roa File: 1bf053ce-273c-34bc-8110-aa141c14782d.roa (raw, json) Hash identifier: 9oW2nN53e2IWIGHsmve8MJXBfiOYO8XW/eymo3/tvPM= Subject key identifier: 71:39:91:2D:4A:C9:3D:05:3E:D0:E8:09:FC:AF:77:E2:80:06:74:14 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D4A8FB9E17DFB40A0AA62F300 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1bf053ce-273c-34bc-8110-aa141c14782d.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 5650 IP address blocks: 64.7.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:b9:e1:7d:fb:40:a0:aa:62:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=711264ca-a52d-425d-9dbf-f74ac2bf1e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cc:48:44:be:22:b6:54:3b:8e:d2:ac:c6:93: b4:9b:47:95:d5:e7:b9:9a:71:8b:d5:1e:b3:b6:f8: 76:52:53:7c:80:60:cc:9d:16:63:2a:bd:f7:1f:37: ed:05:a5:2e:69:f1:34:61:37:23:bd:7e:9a:83:be: df:56:a1:11:9c:6a:da:c3:04:9a:8f:80:3d:d9:ed: 7e:1f:0b:b2:f6:52:99:51:9c:27:56:a4:12:75:72: a5:2c:3e:c9:83:ba:f6:cd:87:22:e6:b4:90:8b:e5: 0c:f6:3f:da:79:37:3c:f4:37:d8:d3:3d:bb:2d:f0: ad:08:1e:ea:cc:0d:a7:fd:18:78:60:33:f8:59:79: 64:81:78:b7:ad:79:d8:55:5a:46:31:97:73:dd:76: 59:63:55:49:a6:f9:26:a0:21:60:84:6b:b9:cf:d1: 1d:4e:67:26:d4:a4:a4:f9:b7:24:13:9f:e2:74:f6: 8b:1a:e5:08:b5:c0:03:9d:d5:98:5e:d7:b8:db:c5: c4:06:5a:8c:76:23:fd:5e:b3:24:3e:53:05:33:ca: ab:8a:77:a7:50:17:78:96:4d:2a:c0:44:08:a8:a4: 6e:de:a6:35:7c:5b:61:62:2f:3e:f2:67:31:f4:cf: 02:4c:47:b0:95:b3:82:a4:63:f1:b1:3a:9b:47:fc: c4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:39:91:2D:4A:C9:3D:05:3E:D0:E8:09:FC:AF:77:E2:80:06:74:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1bf053ce-273c-34bc-8110-aa141c14782d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.7.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ad:52:32:60:85:37:24:a7:f2:af:49:68:e7:12:79:49:9e: f6:8d:14:a5:d5:d6:e8:f7:7f:75:83:0c:ff:33:04:05:4b:67: 25:e5:bf:b5:9b:d1:78:52:de:4e:29:b9:5b:8f:cb:5d:90:3a: f0:cc:34:36:72:17:59:5a:e4:33:d8:e0:bf:1a:1f:41:5f:30: 83:bf:18:9e:b1:b0:19:b8:08:21:c0:6c:77:de:02:b6:33:ad: 08:fa:4e:9b:8a:ea:a7:7b:d4:24:2e:84:84:6c:3c:a2:7a:c3: 9f:77:70:9b:31:7d:fd:00:1b:79:fa:e3:86:7b:c7:10:fc:39: b2:ae:73:13:42:cf:21:00:04:36:b2:7c:c2:ac:50:15:f7:60: 7d:8d:14:62:fe:d5:5b:c1:19:06:9a:f0:e7:2a:f7:0c:0a:bd: 1c:31:05:66:2a:c8:27:5a:e2:7e:d5:34:91:99:e6:de:0d:f6: c9:ea:73:d2:1e:03:45:2d:04:c1:3a:af:b0:7e:68:b9:ba:4e: b6:ab:73:ff:ac:fe:17:40:8b:bb:7d:fb:be:20:c6:04:78:8c: cb:27:1f:bc:3f:57:c1:c0:cc:52:d8:a8:9c:8c:03:12:30:3a: ed:52:6c:07:b2:fd:3d:ec:0e:33:ba:01:59:0d:97:ba:da:38: 2c:c5:5f:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj7nhfftAoKpi8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk NzExMjY0Y2EtYTUyZC00MjVkLTlkYmYtZjc0YWMyYmYxZTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8xIRL4itlQ7jtKsxpO0m0eV1ee5mnGL1R6z tvh2UlN8gGDMnRZjKr33HzftBaUuafE0YTcjvX6ag77fVqERnGrawwSaj4A92e1+ Hwuy9lKZUZwnVqQSdXKlLD7Jg7r2zYci5rSQi+UM9j/aeTc89DfY0z27LfCtCB7q zA2n/Rh4YDP4WXlkgXi3rXnYVVpGMZdz3XZZY1VJpvkmoCFghGu5z9EdTmcm1KSk +bckE5/idPaLGuUItcADndWYXte428XEBlqMdiP9XrMkPlMFM8qrinenUBd4lk0q wEQIqKRu3qY1fFthYi8+8mcx9M8CTEewlbOCpGPxsTqbR/zEOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHE5kS1KyT0FPtDoCfyvd+KABnQUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMWJmMDUzY2UtMjczYy0z NGJjLTgxMTAtYWExNDFjMTQ3ODJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQAcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqtUjJghTckp/KvSWjnEnlJnvaNFKXV1uj3f3WDDP8zBAVLZyXlv7Wb 0XhS3k4puVuPy12QOvDMNDZyF1la5DPY4L8aH0FfMIO/GJ6xsBm4CCHAbHfeArYz rQj6TpuK6qd71CQuhIRsPKJ6w593cJsxff0AG3n644Z7xxD8ObKucxNCzyEABDay fMKsUBX3YH2NFGL+1VvBGQaa8Ocq9wwKvRwxBWYqyCda4n7VNJGZ5t4N9snqc9Ie A0UtBME6r7B+aLm6Trarc/+s/hdAi7t9+74gxgR4jMsnH7w/V8HAzFLYqJyMAxIw Ou1SbAey/T3sDjO6AVkNl7raOCzFX3A= -----END CERTIFICATE-----Generated at Thu Mar 26 19:16:07 2026 by rpki-client