$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3bd3260d-6889-3a5c-8b2d-8ad1f243b7d0.roa File: 3bd3260d-6889-3a5c-8b2d-8ad1f243b7d0.roa (raw, json) Hash identifier: UP8nBBUcxNq07cfhajwhIQz3piv9ZXNmCRUHN2IcD0U= Subject key identifier: 0F:D7:5D:7F:CE:29:DC:A1:5C:07:1B:63:8D:AD:B3:4B:F7:EA:F1:69 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D95EFEA3ED3E75DB070A6E100 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3bd3260d-6889-3a5c-8b2d-8ad1f243b7d0.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 40605 IP address blocks: 64.93.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:ea:3e:d3:e7:5d:b0:70:a6:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=927f9fc8-949f-464c-bf7b-4b8b4c82b048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:54:e5:d9:f8:0b:35:19:3b:0e:f3:57:0d:c7: 35:2d:b5:24:86:b7:48:74:7c:48:57:fc:01:eb:70: 82:0a:34:35:14:8b:fb:e4:42:11:ba:d7:ce:23:eb: af:ed:5d:09:48:87:3c:40:e7:8d:34:eb:cf:34:6e: d9:26:55:29:36:94:6a:c2:dc:69:6f:88:45:c4:b2: 16:eb:e5:5e:4c:85:1d:7a:6e:96:cb:9a:48:d9:f0: 98:dd:ed:03:12:2c:a7:c0:ba:95:94:5f:15:66:2f: 36:f0:51:c7:d8:c0:af:aa:f2:19:b4:6c:94:c4:56: 6b:3b:60:50:0a:14:72:f9:cc:73:a7:31:6c:cd:1d: 1d:95:1e:20:e5:73:c5:ac:ac:bf:58:c8:86:ab:b4: 91:dc:32:d2:4e:35:1d:06:fd:86:40:40:01:c6:fe: 02:12:d3:66:f4:0c:e4:56:13:48:2b:88:5e:f3:05: 17:06:5d:5b:c3:70:00:b0:6b:40:63:0d:8b:c2:a2: 99:ce:6a:14:49:9f:bf:50:ae:72:5e:5c:6a:69:ae: f5:a3:14:a5:a6:93:36:0f:d2:70:fb:32:9f:cb:8e: be:ae:97:2b:6a:06:9d:9d:8e:92:30:5e:03:fc:c8: 62:de:a3:74:e2:f9:9b:4b:1e:eb:16:2d:c6:60:df: 32:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D7:5D:7F:CE:29:DC:A1:5C:07:1B:63:8D:AD:B3:4B:F7:EA:F1:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3bd3260d-6889-3a5c-8b2d-8ad1f243b7d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.93.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:30:cc:44:14:5b:c4:9d:f1:47:37:75:c5:8c:93:3a:b8:a7: 03:bd:1d:48:b6:4a:22:0e:bc:e9:66:fa:85:07:9c:f0:9c:de: b9:db:30:1c:1d:2f:12:b9:fb:86:86:d7:bf:9b:43:34:55:9e: 02:9c:76:e9:90:75:82:f0:37:ce:b7:98:2b:2a:03:34:93:1c: 7d:24:5e:1c:cf:36:98:66:16:89:77:ce:4e:4d:bc:35:fa:15: c1:26:24:22:1f:fa:61:0b:9b:7a:85:d6:f1:15:d5:82:13:12: 55:84:f7:36:81:46:87:50:dd:17:5e:ad:28:d3:22:c0:08:97: 21:38:73:ea:2f:b9:c2:00:9b:e9:90:95:2b:8c:46:42:62:e4: 99:c2:ef:a1:b3:44:dd:83:17:cd:d9:df:6c:33:35:8f:be:e3: ad:29:0e:4f:c3:3d:34:d1:38:ad:17:8a:66:82:9d:94:59:14: 22:f5:ab:cc:f8:f0:95:eb:a1:4c:29:27:e1:c1:e5:fc:ea:2b: ce:37:e0:f4:3d:28:95:59:42:6e:bd:44:4b:18:b8:4c:ac:54: 21:3f:5e:db:6f:9f:7c:78:f7:7b:4b:87:ed:b5:43:b8:bd:50: 21:26:62:a2:8e:64:5f:93:63:0e:02:76:42:f7:ee:9f:d8:07: 78:a2:25:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V7+o+0+ddsHCm4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk OTI3ZjlmYzgtOTQ5Zi00NjRjLWJmN2ItNGI4YjRjODJiMDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVTl2fgLNRk7DvNXDcc1LbUkhrdIdHxIV/wB 63CCCjQ1FIv75EIRutfOI+uv7V0JSIc8QOeNNOvPNG7ZJlUpNpRqwtxpb4hFxLIW 6+VeTIUdem6Wy5pI2fCY3e0DEiynwLqVlF8VZi828FHH2MCvqvIZtGyUxFZrO2BQ ChRy+cxzpzFszR0dlR4g5XPFrKy/WMiGq7SR3DLSTjUdBv2GQEABxv4CEtNm9Azk VhNIK4he8wUXBl1bw3AAsGtAYw2LwqKZzmoUSZ+/UK5yXlxqaa71oxSlppM2D9Jw +zKfy46+rpcragadnY6SMF4D/Mhi3qN04vmbSx7rFi3GYN8yQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/XXX/OKdyhXAcbY42ts0v36vFpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2JkMzI2MGQtNjg4OS0z YTVjLThiMmQtOGFkMWYyNDNiN2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQF0cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQwzEQUW8Sd8Uc3dcWMkzq4pwO9HUi2SiIOvOlm+oUHnPCc3rnbMBwd LxK5+4aG17+bQzRVngKcdumQdYLwN863mCsqAzSTHH0kXhzPNphmFol3zk5NvDX6 FcEmJCIf+mELm3qF1vEV1YITElWE9zaBRodQ3RderSjTIsAIlyE4c+ovucIAm+mQ lSuMRkJi5JnC76GzRN2DF83Z32wzNY++460pDk/DPTTROK0XimaCnZRZFCL1q8z4 8JXroUwpJ+HB5fzqK8434PQ9KJVZQm69REsYuEysVCE/Xttvn3x493tLh+21Q7i9 UCEmYqKOZF+TYw4CdkL37p/YB3iiJbc= -----END CERTIFICATE-----Generated at Wed May 13 12:14:59 2026 by rpki-client