$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3374afe0-3e68-3da3-9e79-8b0789ab6176.roa File: 3374afe0-3e68-3da3-9e79-8b0789ab6176.roa (raw, json) Hash identifier: khk1q2UCKrpaA+kudR9K1LGnPHxqq4V5lOP5JNq0Pa4= Subject key identifier: 08:57:E5:43:E2:45:C2:29:16:D6:55:EC:D2:20:F8:56:A3:88:28:73 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D95F0203A10A6B07B5B0E7A00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3374afe0-3e68-3da3-9e79-8b0789ab6176.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 834 IP address blocks: 69.17.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:20:3a:10:a6:b0:7b:5b:0e:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=c2727394-270d-484a-a317-e92b6429c16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fb:0d:ac:85:4c:07:3c:ca:22:c9:10:9a:ad: 32:36:d1:02:9b:bf:dd:59:c9:39:91:63:9c:b3:eb: 53:ae:f3:4e:71:4d:d1:ea:9e:7c:78:70:4e:04:be: d6:31:72:57:9e:11:3c:fa:b2:59:66:3c:8e:f9:c8: be:4f:96:ac:5f:8c:a9:a1:9a:30:1d:df:40:d7:b3: 77:7b:e2:07:65:7c:73:ed:e8:bf:5a:98:0c:a7:f1: 9b:7d:cf:99:4b:5e:2b:df:dc:a0:66:e1:ab:03:e7: c4:69:a2:aa:c9:20:99:1f:1f:19:cb:e1:a7:cb:ff: 98:89:2a:36:c8:79:f8:4b:14:b8:c5:93:38:2d:a1: 4c:a6:88:e9:26:0b:e2:ef:3f:79:a2:77:d6:cb:65: cf:d1:d1:9d:c1:df:92:1a:05:04:ce:a2:43:6d:31: f9:f4:0e:13:5b:3a:8f:99:5b:ca:88:b1:bc:5e:07: 18:60:d1:c0:86:7e:79:15:9a:c4:d3:3f:c8:a2:5e: 8c:d8:41:49:eb:fa:50:ea:50:c5:b3:e0:69:8f:e2: 3b:3a:20:33:bf:78:59:16:8d:33:b5:f7:1c:96:aa: 74:41:21:ed:33:8b:8b:1d:be:7c:7c:fc:be:50:97: 0e:74:81:c0:3a:5f:15:df:d4:50:41:c3:6e:0d:1d: 95:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:57:E5:43:E2:45:C2:29:16:D6:55:EC:D2:20:F8:56:A3:88:28:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3374afe0-3e68-3da3-9e79-8b0789ab6176.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 69.17.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:d3:9a:8e:99:20:01:87:bc:48:72:b2:2c:0f:7c:b7:0d:29: 31:34:6b:8e:dc:f8:99:9f:31:89:ae:ef:70:1f:c1:04:47:97: df:ab:4f:d9:c9:76:94:2f:fe:d9:3e:ac:f6:a7:70:5e:69:8a: c5:4e:e2:02:bb:5e:de:8c:1c:bd:1d:65:45:ac:3c:73:ab:87: 99:77:06:0f:e1:0c:98:50:3d:28:79:36:e0:01:85:e6:a1:d8: 08:eb:fc:a8:22:ca:15:c8:31:36:88:c4:6b:3a:38:80:58:6f: 76:bb:48:82:0e:ec:9f:40:c0:08:5d:5d:de:25:c3:1f:4c:ef: 55:08:8f:08:44:42:2d:70:47:aa:8d:b7:80:54:df:21:9f:0b: 49:64:9f:c1:d0:87:1a:f5:68:1c:df:e1:a0:4e:28:da:0d:44: 6d:ef:16:70:c5:04:a1:6a:c7:f4:dd:92:be:f6:91:1e:5e:fd: 36:1b:a6:cb:21:32:64:1b:8e:bf:56:e2:eb:74:b7:81:16:0b: 08:4b:d1:81:f3:aa:f5:93:2d:9f:48:3d:24:cd:30:53:46:d7: a6:9c:e7:e6:60:c4:5f:12:eb:e3:a9:cb:95:3c:7c:94:58:23: 23:a5:51:42:7c:99:63:d4:38:9a:ae:61:78:85:fe:09:b1:97: f8:ea:d7:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8CA6EKawe1sOegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk YzI3MjczOTQtMjcwZC00ODRhLWEzMTctZTkyYjY0MjljMTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvsNrIVMBzzKIskQmq0yNtECm7/dWck5kWOc s+tTrvNOcU3R6p58eHBOBL7WMXJXnhE8+rJZZjyO+ci+T5asX4ypoZowHd9A17N3 e+IHZXxz7ei/WpgMp/Gbfc+ZS14r39ygZuGrA+fEaaKqySCZHx8Zy+Gny/+YiSo2 yHn4SxS4xZM4LaFMpojpJgvi7z95onfWy2XP0dGdwd+SGgUEzqJDbTH59A4TWzqP mVvKiLG8XgcYYNHAhn55FZrE0z/Iol6M2EFJ6/pQ6lDFs+Bpj+I7OiAzv3hZFo0z tfcclqp0QSHtM4uLHb58fPy+UJcOdIHAOl8V39RQQcNuDR2VEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhX5UPiRcIpFtZV7NIg+FajiChzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzM3NGFmZTAtM2U2OC0z ZGEzLTllNzktOGIwNzg5YWI2MTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERREgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMnTmo6ZIAGHvEhysiwPfLcNKTE0a47c+JmfMYmu73AfwQRHl9+rT9nJ dpQv/tk+rPancF5pisVO4gK7Xt6MHL0dZUWsPHOrh5l3Bg/hDJhQPSh5NuABheah 2Ajr/KgiyhXIMTaIxGs6OIBYb3a7SIIO7J9AwAhdXd4lwx9M71UIjwhEQi1wR6qN t4BU3yGfC0lkn8HQhxr1aBzf4aBOKNoNRG3vFnDFBKFqx/Tdkr72kR5e/TYbpssh MmQbjr9W4ut0t4EWCwhL0YHzqvWTLZ9IPSTNMFNG16ac5+ZgxF8S6+Opy5U8fJRY IyOlUUJ8mWPUOJquYXiF/gmxl/jq1+Y= -----END CERTIFICATE-----Generated at Wed May 13 14:45:53 2026 by rpki-client