$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1e8f25a4-3f6b-3a57-bd05-3654e3d05a30.roa File: 1e8f25a4-3f6b-3a57-bd05-3654e3d05a30.roa (raw, json) Hash identifier: XNWW5wenBWQTq/jNEs629KzJZctZrTCaC5XKBgXx7So= Subject key identifier: DB:09:A4:60:13:23:3C:C5:2A:D9:B1:AB:13:7D:69:16:16:5E:C4:A0 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D39CF744995E4C0588ABD6AE0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1e8f25a4-3f6b-3a57-bd05-3654e3d05a30.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 395092 IP address blocks: 64.81.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:74:49:95:e4:c0:58:8a:bd:6a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=fe5e9ce5-1535-45a5-9012-005a80f1f2b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:75:15:08:73:09:3a:b9:c6:d1:48:23:22:27: a3:23:c7:17:42:32:26:6a:88:25:b1:d0:cf:3a:35: 34:64:17:b2:75:1c:92:f4:15:9e:aa:66:ba:57:93: 34:79:6f:6c:11:3f:1f:e1:c4:e4:4a:55:f7:a6:ca: 49:6b:c5:ae:11:30:ef:7a:b0:e5:76:8c:fc:f9:f7: 5f:c5:e0:45:9a:f0:52:72:8f:e2:8e:5a:9f:9f:62: d8:69:f9:c2:78:8a:ad:86:78:22:36:7a:f5:2a:cc: 9b:63:0b:c0:fa:82:87:5c:b7:22:f5:4f:c8:0e:4a: 2f:90:4a:ad:b8:9e:57:cb:4f:76:40:0c:13:fe:b4: bd:0d:ea:8f:b9:a5:fb:9c:15:e8:a3:67:ce:7c:d1: e4:d6:e1:64:d3:d1:d3:62:5e:47:54:2f:91:5e:65: c5:c1:7c:f8:9c:52:bc:c5:ce:a0:b8:f9:35:05:39: f5:17:98:f8:57:16:da:f8:26:74:f5:e1:32:d9:5d: 59:02:03:de:75:28:ee:07:6e:3a:6d:4f:73:0e:3b: d0:95:d9:b2:c0:da:30:db:43:7e:3c:9b:b2:d8:e3: d0:1d:ff:5d:99:3a:c1:f7:fc:2c:ac:cc:dc:ea:fa: c1:09:11:88:bc:0e:7e:b5:ff:4c:5b:c7:23:1c:39: a2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:09:A4:60:13:23:3C:C5:2A:D9:B1:AB:13:7D:69:16:16:5E:C4:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1e8f25a4-3f6b-3a57-bd05-3654e3d05a30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.81.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:04:19:59:f6:9a:e2:38:a3:68:9a:4f:7c:ce:0a:1b:96:bd: f4:f9:80:71:a0:af:d8:e8:97:92:81:4c:bf:c9:23:4e:45:23: 60:81:3d:bf:fa:8e:71:5c:54:88:3b:da:cd:77:35:d0:f5:fc: e4:6f:de:5b:ee:1a:79:4c:7c:28:c9:32:f8:88:67:c2:ea:f6: 08:8a:21:f6:60:5a:bf:37:5d:4b:46:ff:2c:0b:b7:3f:9a:eb: d4:46:f1:5f:29:d4:4c:46:4a:b6:4a:73:17:ab:72:bd:07:03: 64:a1:09:1b:24:4b:d7:42:10:6f:43:c9:dd:67:79:93:50:c0: 4b:f3:a0:4f:03:e5:4c:bd:e5:ed:69:22:11:67:14:d0:91:7f: dd:ea:ef:3f:fd:51:99:13:99:09:c8:6e:aa:c8:13:77:c3:55: 75:d4:15:1e:9a:51:0c:55:40:f1:65:44:d9:e4:47:57:97:b8: e2:85:c9:87:e9:62:ca:13:84:44:2a:ff:aa:35:73:e8:3b:d4: 3b:c5:d1:97:34:22:ef:98:4b:49:88:bc:8a:68:54:62:48:e2: d5:bc:f4:b6:fd:be:27:76:03:1e:97:d5:e2:ce:35:0d:d5:29: a6:b8:c9:ba:dc:88:f2:cc:27:fd:f7:c6:f5:f4:22:f0:c6:03: 2a:b0:10:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z3RJleTAWIq9auAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk ZmU1ZTljZTUtMTUzNS00NWE1LTkwMTItMDA1YTgwZjFmMmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHUVCHMJOrnG0UgjIiejI8cXQjImaoglsdDP OjU0ZBeydRyS9BWeqma6V5M0eW9sET8f4cTkSlX3pspJa8WuETDverDldoz8+fdf xeBFmvBSco/ijlqfn2LYafnCeIqthngiNnr1KsybYwvA+oKHXLci9U/IDkovkEqt uJ5Xy092QAwT/rS9DeqPuaX7nBXoo2fOfNHk1uFk09HTYl5HVC+RXmXFwXz4nFK8 xc6guPk1BTn1F5j4Vxba+CZ09eEy2V1ZAgPedSjuB246bU9zDjvQldmywNow20N+ PJuy2OPQHf9dmTrB9/wsrMzc6vrBCRGIvA5+tf9MW8cjHDmidwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsJpGATIzzFKtmxqxN9aRYWXsSgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMWU4ZjI1YTQtM2Y2Yi0z YTU3LWJkMDUtMzY1NGUzZDA1YTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFG9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8EGVn2muI4o2iaT3zOChuWvfT5gHGgr9jol5KBTL/JI05FI2CBPb/6 jnFcVIg72s13NdD1/ORv3lvuGnlMfCjJMviIZ8Lq9giKIfZgWr83XUtG/ywLtz+a 69RG8V8p1ExGSrZKcxercr0HA2ShCRskS9dCEG9Dyd1neZNQwEvzoE8D5Uy95e1p IhFnFNCRf93q7z/9UZkTmQnIbqrIE3fDVXXUFR6aUQxVQPFlRNnkR1eXuOKFyYfp YsoThEQq/6o1c+g71DvF0Zc0Iu+YS0mIvIpoVGJI4tW89Lb9vid2Ax6X1eLONQ3V Kaa4ybrciPLMJ/33xvX0IvDGAyqwECM= -----END CERTIFICATE-----Generated at Thu Mar 26 20:10:01 2026 by rpki-client