$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2d7d6f5e-9d87-39dc-aeb7-aa5e808b23fd.roa File: 2d7d6f5e-9d87-39dc-aeb7-aa5e808b23fd.roa (raw, json) Hash identifier: bMVL7SjZqe27hg80fFJwsh6ymiMgliZ+5F6yRxZO540= Subject key identifier: AF:1D:EC:E6:9F:7F:03:9A:11:90:89:CF:37:87:27:2A:46:E3:F2:16 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D332078A630A1462611CD9880 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2d7d6f5e-9d87-39dc-aeb7-aa5e808b23fd.roa Signing time: Tue 17 Mar 2026 15:33:14 +0000 ROA not before: Tue 17 Mar 2026 15:33:14 +0000 ROA not after: Mon 15 Jun 2026 15:33:14 +0000 asID: 6079 IP address blocks: 65.86.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:33:20:78:a6:30:a1:46:26:11:cd:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 17 15:33:14 2026 GMT Not After : Jun 15 15:33:14 2026 GMT Subject: CN=1d005bb0-9b51-4eed-8ecc-15065811c732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d4:08:66:87:2f:4d:50:d3:6c:06:e3:2d:44: d3:60:54:e0:26:67:79:89:fb:ef:63:19:3d:ad:76: 40:72:99:ec:e2:ea:87:df:9d:7f:9a:6c:d4:a8:ce: 59:aa:42:aa:7c:fb:b7:ac:53:58:2a:9a:e8:ef:69: a6:e8:f6:3c:16:8d:df:d8:6a:6b:9f:0b:e5:0b:8d: 3e:90:fa:34:d4:51:99:09:83:48:dd:8b:a7:4a:f5: cf:8e:d4:97:d1:fa:da:ad:03:17:c0:72:82:fb:22: 43:6c:3a:0d:43:9e:2c:dc:d8:13:96:47:c0:54:7e: a8:4b:60:95:32:3e:6a:13:e9:29:85:17:2d:3f:29: 97:a1:66:57:3f:f0:2f:cf:3e:ef:7d:33:db:a0:8f: 63:e6:a6:bc:c6:6b:2e:f1:58:f1:98:cd:86:f5:ec: c4:cc:cd:cc:4c:ce:fc:d0:43:38:13:1d:cd:51:03: 54:49:3b:6d:a9:ed:6a:a6:d7:53:76:d2:e4:2b:3d: 28:2a:01:a5:72:e4:d1:43:e1:b2:c8:3b:b6:ce:06: 79:41:07:69:9a:d7:57:b3:99:7b:29:2d:9a:2d:7e: 73:f1:ed:7d:30:a0:ed:36:36:aa:43:6f:43:e0:07: f5:66:f0:20:4a:f7:14:29:cf:d4:27:53:81:74:1a: e7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1D:EC:E6:9F:7F:03:9A:11:90:89:CF:37:87:27:2A:46:E3:F2:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2d7d6f5e-9d87-39dc-aeb7-aa5e808b23fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:b3:3c:37:f1:dd:ef:b4:25:c4:30:23:18:2c:d0:74:27:72: 69:7f:d5:3b:8f:b6:15:ff:b3:a0:cf:f6:00:42:1a:be:08:aa: 8a:c7:5b:69:fd:48:f2:52:f5:13:35:08:89:e7:6c:28:53:20: a6:a1:6a:1b:53:23:8c:98:0c:02:dd:b8:51:94:71:b7:07:6a: bf:c2:85:ce:e5:f4:dd:50:47:7b:97:d3:cb:41:5a:d0:78:56: 13:05:82:7f:eb:18:2a:29:b9:48:0e:ad:02:a6:b8:d7:1c:70: a0:ea:b4:1f:73:aa:f3:6e:5c:4f:6a:49:b7:36:84:32:fd:de: 15:c7:84:ae:0c:f2:26:75:74:a0:61:9f:23:ef:28:7a:14:b9: 18:33:6d:37:e1:e4:a5:ad:85:f1:5c:35:c2:8f:8c:e3:4b:fd: 8c:d4:93:7e:40:03:d6:9b:1c:97:2a:73:dc:b5:25:6b:36:72: 9c:22:85:3f:a9:93:70:80:27:28:12:73:2a:c9:59:79:46:a2: 1b:e2:f0:41:5a:2f:f0:0e:3b:01:d5:4c:1e:25:d1:95:17:95: eb:e5:67:f4:b5:40:52:bc:ef:58:d3:7d:20:40:de:b6:f3:df: 25:dc:f6:ce:88:e9:54:6a:3b:4b:5e:8d:94:24:98:1b:ed:47: ea:1c:ef:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0zIHimMKFGJhHNmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxNzE1MzMxNFoXDTI2MDYxNTE1MzMxNFowLzEtMCsGA1UEAxMk MWQwMDViYjAtOWI1MS00ZWVkLThlY2MtMTUwNjU4MTFjNzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptQIZocvTVDTbAbjLUTTYFTgJmd5ifvvYxk9 rXZAcpns4uqH351/mmzUqM5ZqkKqfPu3rFNYKpro72mm6PY8Fo3f2GprnwvlC40+ kPo01FGZCYNI3YunSvXPjtSX0frarQMXwHKC+yJDbDoNQ54s3NgTlkfAVH6oS2CV Mj5qE+kphRctPymXoWZXP/Avzz7vfTPboI9j5qa8xmsu8VjxmM2G9ezEzM3MTM78 0EM4Ex3NUQNUSTttqe1qptdTdtLkKz0oKgGlcuTRQ+GyyDu2zgZ5QQdpmtdXs5l7 KS2aLX5z8e19MKDtNjaqQ29D4Af1ZvAgSvcUKc/UJ1OBdBrnPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8d7OaffwOaEZCJzzeHJypG4/IWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmQ3ZDZmNWUtOWQ4Ny0z OWRjLWFlYjctYWE1ZTgwOGIyM2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQVbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKzPDfx3e+0JcQwIxgs0HQncml/1TuPthX/s6DP9gBCGr4IqorHW2n9 SPJS9RM1CInnbChTIKahahtTI4yYDALduFGUcbcHar/Chc7l9N1QR3uX08tBWtB4 VhMFgn/rGCopuUgOrQKmuNcccKDqtB9zqvNuXE9qSbc2hDL93hXHhK4M8iZ1dKBh nyPvKHoUuRgzbTfh5KWthfFcNcKPjONL/YzUk35AA9abHJcqc9y1JWs2cpwihT+p k3CAJygScyrJWXlGohvi8EFaL/AOOwHVTB4l0ZUXlevlZ/S1QFK871jTfSBA3rbz 3yXc9s6I6VRqO0tejZQkmBvtR+oc788= -----END CERTIFICATE-----Generated at Thu Mar 26 04:47:01 2026 by rpki-client