$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2e1abd8e-1bb5-34ad-b4c4-0c5ae93dcf9d.roa File: 2e1abd8e-1bb5-34ad-b4c4-0c5ae93dcf9d.roa (raw, json) Hash identifier: kWg8MPl6sCHEDlAZzRD6y8jo39vVn/dq1AQyBSI4wn8= Subject key identifier: D3:DA:12:AE:8D:5B:C6:30:25:F0:E9:FD:D3:E9:2F:FA:59:98:13:A2 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D4911E99846785A23BD916F00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2e1abd8e-1bb5-34ad-b4c4-0c5ae93dcf9d.roa Signing time: Wed 25 Mar 2026 12:11:41 +0000 ROA not before: Wed 25 Mar 2026 12:11:41 +0000 ROA not after: Tue 23 Jun 2026 12:11:41 +0000 asID: 61272 IP address blocks: 64.204.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:11:e9:98:46:78:5a:23:bd:91:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 25 12:11:41 2026 GMT Not After : Jun 23 12:11:41 2026 GMT Subject: CN=1d622871-564c-453e-af75-704a6ab1d1ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:eb:40:93:22:d9:5e:e4:f7:bf:b8:bb:ef:b3: 55:4a:27:9a:d6:ca:26:ec:63:4c:cb:48:f9:c1:94: 9a:e0:6b:c4:b3:d1:bc:ee:3c:b5:0a:32:3d:08:5f: 07:81:a8:33:2b:2b:4f:52:28:f6:2a:4f:ef:e5:93: 3e:5f:13:ea:74:75:65:e7:32:4b:cb:2e:ec:5d:e0: e8:e1:84:ca:63:58:60:52:ab:59:c2:3b:96:b3:af: 59:9c:72:bd:bb:8d:6d:ab:d2:ac:da:f1:0e:f3:4c: 1a:e4:6a:5b:6e:16:2d:5e:fa:1f:39:7c:c0:d9:6b: 1a:0a:e0:6b:74:6f:5d:c6:2e:f5:e0:e2:c5:54:1a: 82:4d:b7:f5:5b:a5:3d:0c:22:e3:e3:95:27:e5:62: 1d:b3:66:05:7e:dc:69:a9:0e:eb:46:aa:67:c6:59: 44:c9:46:b0:3d:8e:db:60:46:12:c7:6b:08:47:ef: 2d:d3:f4:0c:74:5f:13:44:32:96:8d:52:45:6a:5e: ed:35:6f:23:28:42:61:4b:09:d8:fa:d6:0f:f9:7f: 2c:87:e9:a6:89:6e:6c:6c:8c:23:55:23:ad:8b:b3: ab:fa:26:f5:18:1c:37:8c:8c:eb:63:5a:59:bb:ce: e2:5a:67:b9:84:e4:9d:99:a7:69:d6:83:fa:8f:46: e9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DA:12:AE:8D:5B:C6:30:25:F0:E9:FD:D3:E9:2F:FA:59:98:13:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2e1abd8e-1bb5-34ad-b4c4-0c5ae93dcf9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:6c:e3:49:2c:e0:b0:c1:11:17:5a:6a:4e:7e:5f:a1:cb:24: 16:3e:96:5e:b1:bc:78:63:63:90:71:31:87:15:cb:80:35:ab: b2:10:f5:b7:48:8a:09:3f:59:5f:98:47:46:9d:67:14:fd:eb: 4b:99:1a:81:b7:ce:53:40:23:ab:d7:ee:9a:55:fd:36:34:1d: 3c:05:d1:3c:e7:70:f7:44:ce:96:ef:cf:6e:74:61:92:b8:4e: d9:d6:55:08:1d:3b:4a:ff:2c:a9:0d:af:1b:db:2c:b1:63:c8: 6d:1d:2c:38:0d:a1:50:6c:b1:c4:09:5c:07:29:63:8e:6c:7b: 0d:02:79:53:63:50:26:9f:f5:20:f9:9f:5f:1e:78:dc:99:b0: 29:43:c4:bd:4c:10:51:23:8b:3d:3c:2a:85:8c:31:45:a1:94: 52:1f:16:d3:3b:89:27:4d:73:9e:41:fd:67:fd:d5:6e:50:0b: a3:af:b9:da:b7:51:27:74:50:37:b8:c8:06:20:c4:b5:90:eb: f9:da:70:38:24:93:2c:af:64:ec:de:86:3a:7d:d3:f0:e9:d8: 53:af:63:58:be:b2:54:e1:8e:91:97:b5:d1:96:29:1e:02:03: 10:66:d2:56:e9:f9:8d:f9:92:db:f4:25:e9:1f:98:d9:bd:10: 92:85:6a:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JEemYRnhaI72RbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyNTEyMTE0MVoXDTI2MDYyMzEyMTE0MVowLzEtMCsGA1UEAxMk MWQ2MjI4NzEtNTY0Yy00NTNlLWFmNzUtNzA0YTZhYjFkMWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OtAkyLZXuT3v7i777NVSiea1som7GNMy0j5 wZSa4GvEs9G87jy1CjI9CF8HgagzKytPUij2Kk/v5ZM+XxPqdHVl5zJLyy7sXeDo 4YTKY1hgUqtZwjuWs69ZnHK9u41tq9Ks2vEO80wa5GpbbhYtXvofOXzA2WsaCuBr dG9dxi714OLFVBqCTbf1W6U9DCLj45Un5WIds2YFftxpqQ7rRqpnxllEyUawPY7b YEYSx2sIR+8t0/QMdF8TRDKWjVJFal7tNW8jKEJhSwnY+tYP+X8sh+mmiW5sbIwj VSOti7Or+ib1GBw3jIzrY1pZu87iWme5hOSdmadp1oP6j0bpMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPaEq6NW8YwJfDp/dPpL/pZmBOiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmUxYWJkOGUtMWJiNS0z NGFkLWI0YzQtMGM1YWU5M2RjZjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMytMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAps40ks4LDBERdaak5+X6HLJBY+ll6xvHhjY5BxMYcVy4A1q7IQ9bdI igk/WV+YR0adZxT960uZGoG3zlNAI6vX7ppV/TY0HTwF0TzncPdEzpbvz250YZK4 TtnWVQgdO0r/LKkNrxvbLLFjyG0dLDgNoVBsscQJXAcpY45sew0CeVNjUCaf9SD5 n18eeNyZsClDxL1MEFEjiz08KoWMMUWhlFIfFtM7iSdNc55B/Wf91W5QC6Ovudq3 USd0UDe4yAYgxLWQ6/nacDgkkyyvZOzehjp90/Dp2FOvY1i+slThjpGXtdGWKR4C AxBm0lbp+Y35ktv0JekfmNm9EJKFapA= -----END CERTIFICATE-----Generated at Thu Mar 26 04:32:10 2026 by rpki-client