$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/287c7834-ba04-3941-a379-1c92f339e3c5.roa File: 287c7834-ba04-3941-a379-1c92f339e3c5.roa (raw, json) Hash identifier: 6x166nHmK2+bC987rHFGae8LkMddx4K0qLQOhE9t/Vg= Subject key identifier: 08:F5:40:F6:95:55:42:D3:C4:3E:AD:AF:8B:52:3D:A1:A4:E1:C9:1F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DAD97F171BCCACCCBB4E5FCF6 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/287c7834-ba04-3941-a379-1c92f339e3c5.roa Signing time: Thu 30 Apr 2026 12:22:34 +0000 ROA not before: Thu 30 Apr 2026 12:22:34 +0000 ROA not after: Wed 29 Jul 2026 12:22:34 +0000 asID: 6079 IP address blocks: 65.86.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:97:f1:71:bc:ca:cc:cb:b4:e5:fc:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 30 12:22:34 2026 GMT Not After : Jul 29 12:22:34 2026 GMT Subject: CN=1a57e157-025e-4fd9-b225-550a4225ac1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1b:dd:4a:68:00:f1:19:f9:ee:82:19:7f:fa: a1:19:22:34:d0:44:2a:ea:bf:64:9b:9a:33:a5:6a: d7:99:5f:a0:3d:07:e0:44:a4:8f:e0:b0:92:a1:16: 61:b6:d7:b5:bd:11:2d:42:18:c2:e8:bd:7c:f0:80: 54:2a:5a:10:23:7a:5b:97:8f:e2:3d:a8:28:d0:12: 9b:4d:ec:d5:6f:4c:e2:3e:c4:4f:b0:9e:21:da:4e: 98:2f:43:b0:f9:98:91:e2:fb:ab:b3:f5:b4:28:1a: ea:74:4c:af:74:51:38:03:5c:10:72:d7:20:dc:b5: fc:42:75:6f:dc:6e:73:f6:7e:97:a1:6d:3c:14:67: a4:37:db:79:7c:b4:40:54:10:34:d6:db:1d:4b:b2: 10:85:6c:b6:79:fa:67:55:5c:56:f1:d0:90:f4:7d: 93:4f:02:ce:71:9e:f1:d1:99:a7:92:b8:1f:bb:cf: b7:10:bb:fe:1d:fe:66:f7:06:9f:be:b1:19:37:de: 5e:df:c1:de:b6:b5:18:a7:ce:25:71:30:49:16:32: 0a:4e:bb:41:a0:d0:b1:92:76:6f:e4:b9:9b:20:e6: 49:ff:6f:fe:73:70:32:8a:a6:0c:be:0a:ad:8b:a8: 6b:2d:7c:7b:89:f0:84:02:bb:03:a4:f0:32:5c:e1: 5d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F5:40:F6:95:55:42:D3:C4:3E:AD:AF:8B:52:3D:A1:A4:E1:C9:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/287c7834-ba04-3941-a379-1c92f339e3c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:cf:ff:aa:80:a6:87:05:86:88:4f:a8:8d:30:86:5f:94:05: 6f:5f:28:a4:88:57:00:16:85:24:1b:7e:57:7f:12:b3:ef:68: 4f:8d:c6:32:b3:13:a8:80:02:b5:75:41:89:38:4d:82:85:f2: 66:3f:61:93:00:b8:9b:07:5e:3f:60:bf:f8:46:34:97:68:7d: 3b:39:c5:20:fd:2e:06:bf:87:9d:ad:c0:72:9a:09:9b:16:a1: f1:2a:3c:24:a1:59:6c:a2:a3:f6:af:76:1c:8e:bc:70:a7:cd: d3:23:ec:bc:ff:1f:25:db:25:f8:78:87:ec:65:80:68:e7:21: 1d:b6:03:7d:77:4f:c6:4d:8a:92:c0:71:4a:10:e6:26:7f:90: b5:3d:10:a7:2a:16:bf:f3:dc:62:18:49:18:a8:aa:b7:56:ef: 95:43:09:45:10:4c:82:72:ff:b7:30:28:46:25:57:37:6c:9d: f5:77:9a:4e:b4:65:78:4f:9d:89:f9:5d:ec:aa:92:06:46:20: c1:60:9b:ae:e1:73:6c:3a:ba:1a:1a:cd:52:79:cd:c7:a3:ce: 55:12:f0:48:aa:16:80:7e:5a:61:c7:81:ab:65:a9:88:1e:84: bf:1e:f2:2c:43:57:54:f4:96:43:33:06:1d:fb:d5:ba:91:1d: c2:1a:53:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tl/FxvMrMy7Tl/PYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQzMDEyMjIzNFoXDTI2MDcyOTEyMjIzNFowLzEtMCsGA1UEAxMk MWE1N2UxNTctMDI1ZS00ZmQ5LWIyMjUtNTUwYTQyMjVhYzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xvdSmgA8Rn57oIZf/qhGSI00EQq6r9km5oz pWrXmV+gPQfgRKSP4LCSoRZhtte1vREtQhjC6L188IBUKloQI3pbl4/iPago0BKb TezVb0ziPsRPsJ4h2k6YL0Ow+ZiR4vurs/W0KBrqdEyvdFE4A1wQctcg3LX8QnVv 3G5z9n6XoW08FGekN9t5fLRAVBA01tsdS7IQhWy2efpnVVxW8dCQ9H2TTwLOcZ7x 0Zmnkrgfu8+3ELv+Hf5m9wafvrEZN95e38HetrUYp84lcTBJFjIKTrtBoNCxknZv 5LmbIOZJ/2/+c3AyiqYMvgqti6hrLXx7ifCEArsDpPAyXOFdmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAj1QPaVVULTxD6tr4tSPaGk4ckfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjg3Yzc4MzQtYmEwNC0z OTQxLWEzNzktMWM5MmYzMzllM2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQVaWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHP/6qApocFhohPqI0whl+UBW9fKKSIVwAWhSQbfld/ErPvaE+NxjKz E6iAArV1QYk4TYKF8mY/YZMAuJsHXj9gv/hGNJdofTs5xSD9Lga/h52twHKaCZsW ofEqPCShWWyio/avdhyOvHCnzdMj7Lz/HyXbJfh4h+xlgGjnIR22A313T8ZNipLA cUoQ5iZ/kLU9EKcqFr/z3GIYSRioqrdW75VDCUUQTIJy/7cwKEYlVzdsnfV3mk60 ZXhPnYn5XeyqkgZGIMFgm67hc2w6uhoazVJ5zcejzlUS8EiqFoB+WmHHgatlqYge hL8e8ixDV1T0lkMzBh371bqRHcIaU3k= -----END CERTIFICATE-----Generated at Wed May 13 14:47:33 2026 by rpki-client