$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/37cbc0be-ac75-3aad-97f2-716025baeb23.roa File: 37cbc0be-ac75-3aad-97f2-716025baeb23.roa (raw, json) Hash identifier: xyR+C6lG6lGKKZCvqJOJUZgqHFZxXbhRnhrsOPgAaZo= Subject key identifier: 36:85:1A:08:20:B2:AF:D6:2F:FE:D6:BA:F0:A9:F3:A7:7C:C0:B4:03 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D43209740CE85DDEDF081C900 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/37cbc0be-ac75-3aad-97f2-716025baeb23.roa Signing time: Mon 23 Mar 2026 09:06:24 +0000 ROA not before: Mon 23 Mar 2026 09:06:24 +0000 ROA not after: Sun 21 Jun 2026 09:06:24 +0000 asID: 834 IP address blocks: 64.204.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:43:20:97:40:ce:85:dd:ed:f0:81:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 23 09:06:24 2026 GMT Not After : Jun 21 09:06:24 2026 GMT Subject: CN=5de93deb-0e03-48fa-bfe0-afaba99824f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b3:45:12:d6:ab:f1:98:66:21:a5:49:23:4c: cc:22:e4:8f:cc:11:4a:79:ae:c3:ad:16:00:18:81: bd:d7:55:ee:11:e1:2b:0a:bf:fb:c5:2e:81:bd:92: 4b:14:09:1e:45:ba:8c:53:a1:d5:4a:43:ef:e8:02: ed:5d:dc:a8:5f:7d:44:97:9a:1a:d7:0e:77:8d:1d: e5:22:64:91:d6:18:7e:dd:5e:bf:35:e8:76:5e:ba: 2d:88:11:ef:27:2e:44:0c:cd:b0:99:fd:44:51:b5: 94:9b:2c:1c:f1:6b:7c:eb:f0:8c:19:3b:df:9f:92: 6f:c2:b9:ea:b7:56:3d:8a:10:df:a2:7c:28:84:45: 93:59:5a:87:74:0a:1a:b0:3d:30:f3:bb:f0:f3:c0: b0:a0:15:6b:6d:33:6d:ab:e3:36:78:dc:e3:58:8f: 0a:4f:a0:d9:0d:ab:5a:f8:57:d2:02:3c:67:15:3c: f8:0a:63:a2:ab:f1:bf:11:af:4b:88:8a:9f:2c:b9: a3:4a:d1:9b:48:88:ea:40:d0:f2:90:c9:16:91:14: 53:0d:ba:48:5c:d0:3d:6c:74:9a:55:43:6b:8f:29: ad:6a:55:a6:c7:fd:4c:e8:aa:07:e7:6f:5d:56:34: 42:01:2a:b0:ab:81:a9:d3:ef:d3:78:13:3f:5a:41: 4f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:85:1A:08:20:B2:AF:D6:2F:FE:D6:BA:F0:A9:F3:A7:7C:C0:B4:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/37cbc0be-ac75-3aad-97f2-716025baeb23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:29:ea:bd:f2:4c:8f:dc:09:ed:24:6b:e8:b0:45:4f:d6:9b: ac:09:3a:7b:bf:28:0b:34:8a:07:f0:dc:3c:17:c3:6c:5d:10: fb:a0:a8:c2:76:74:ab:0f:a2:23:20:ef:35:f1:5c:52:0b:77: f0:98:a4:36:01:db:b3:a2:67:56:75:91:a5:b3:05:95:46:7b: c0:4a:b5:4a:e6:d0:cc:e4:04:d3:69:10:26:1b:0a:c1:6c:4c: b8:4f:01:ce:ce:1f:85:6a:19:08:00:ff:f1:63:25:43:7e:bf: 5a:7e:77:d6:21:96:a1:58:32:57:7d:4f:05:8f:e1:fc:fd:c9: 25:59:4a:6d:c9:86:bc:3f:aa:8b:31:1e:a9:14:db:0b:b1:4e: a2:2d:d3:cc:09:03:35:ee:c8:6f:a2:ee:65:0c:72:a8:84:c6: 6d:fc:ff:30:d6:97:7b:a7:32:a2:b9:50:f0:4f:d2:c3:73:7c: 7d:53:7b:cd:ac:65:4c:a2:6f:4a:c2:05:76:71:91:8a:11:6a: 13:13:0f:39:40:6f:b8:fb:a4:8c:f5:76:80:59:b5:49:92:f5: c3:d8:80:e8:d7:cd:1c:29:e4:ee:92:43:e7:24:7d:49:20:bd: 27:ad:41:05:99:a2:c0:69:c7:15:7a:67:b3:1e:28:a3:b1:4c: 46:b7:d8:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1DIJdAzoXd7fCByQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyMzA5MDYyNFoXDTI2MDYyMTA5MDYyNFowLzEtMCsGA1UEAxMk NWRlOTNkZWItMGUwMy00OGZhLWJmZTAtYWZhYmE5OTgyNGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7NFEtar8ZhmIaVJI0zMIuSPzBFKea7DrRYA GIG911XuEeErCr/7xS6BvZJLFAkeRbqMU6HVSkPv6ALtXdyoX31El5oa1w53jR3l ImSR1hh+3V6/Neh2XrotiBHvJy5EDM2wmf1EUbWUmywc8Wt86/CMGTvfn5Jvwrnq t1Y9ihDfonwohEWTWVqHdAoasD0w87vw88CwoBVrbTNtq+M2eNzjWI8KT6DZData +FfSAjxnFTz4CmOiq/G/Ea9LiIqfLLmjStGbSIjqQNDykMkWkRRTDbpIXNA9bHSa VUNrjymtalWmx/1M6KoH529dVjRCASqwq4Gp0+/TeBM/WkFPcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaFGgggsq/WL/7WuvCp86d8wLQDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzdjYmMwYmUtYWM3NS0z YWFkLTk3ZjItNzE2MDI1YmFlYjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMzMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0p6r3yTI/cCe0ka+iwRU/Wm6wJOnu/KAs0igfw3DwXw2xdEPugqMJ2 dKsPoiMg7zXxXFILd/CYpDYB27OiZ1Z1kaWzBZVGe8BKtUrm0MzkBNNpECYbCsFs TLhPAc7OH4VqGQgA//FjJUN+v1p+d9YhlqFYMld9TwWP4fz9ySVZSm3Jhrw/qosx HqkU2wuxTqIt08wJAzXuyG+i7mUMcqiExm38/zDWl3unMqK5UPBP0sNzfH1Te82s ZUyib0rCBXZxkYoRahMTDzlAb7j7pIz1doBZtUmS9cPYgOjXzRwp5O6SQ+ckfUkg vSetQQWZosBpxxV6Z7MeKKOxTEa32NY= -----END CERTIFICATE-----Generated at Thu Mar 26 21:53:15 2026 by rpki-client