$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/421973d7-fab2-3940-8dd2-7f5a5f46a7ff.roa File: 421973d7-fab2-3940-8dd2-7f5a5f46a7ff.roa (raw, json) Hash identifier: xqK1rdtYViWD3704+kGPGasblTJ0Nzrw9Xfhcz9huH4= Subject key identifier: 33:EA:74:42:C8:B1:D6:0A:FD:BC:A0:DF:A4:92:FD:72:F4:4D:EB:05 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D343A0C692F96368A229A3680 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/421973d7-fab2-3940-8dd2-7f5a5f46a7ff.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 834 IP address blocks: 65.86.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:0c:69:2f:96:36:8a:22:9a:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=e9ed38f6-c6ca-4ce3-80f9-9247d383560a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:92:bd:65:5a:0f:40:81:86:18:33:fe:de:a6: af:d8:3f:65:de:5f:05:bd:dd:e3:8a:1a:53:af:8f: 1e:9d:49:2a:e7:60:c5:aa:4f:7e:30:aa:50:36:75: 90:e8:c9:02:49:d0:1d:03:97:a4:6d:0c:9e:71:d7: 2c:5d:65:e8:1d:c4:94:5c:62:16:c4:47:73:da:4b: 96:e2:50:8b:89:f5:a8:2d:b2:ba:56:01:2f:21:0a: 07:51:10:da:f4:55:9a:8a:bb:8a:34:f6:08:73:63: 7c:2d:ca:95:27:0e:18:23:ad:bc:4a:27:49:47:f4: 97:7f:ed:1f:1b:73:d4:79:5d:f3:27:da:56:63:dc: a5:8b:84:32:f2:06:e2:86:ab:30:fa:64:af:f2:ed: 0a:21:65:55:2d:f3:74:78:d4:24:8e:36:3e:40:41: 95:c4:80:0e:d6:a3:35:8a:1d:d7:ab:af:f2:53:a1: ae:96:17:69:41:ed:f9:9a:29:84:75:58:7b:18:ed: 0e:4f:17:50:3f:67:70:78:10:87:c6:c3:20:0e:8a: 38:bf:ee:1d:bc:3a:7e:2f:db:1f:c7:7c:7c:28:27: 98:a7:8c:de:c8:34:54:d1:74:1f:76:b5:26:74:3b: 7b:0c:58:67:a2:46:30:41:bb:b2:ad:78:53:9a:02: 30:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EA:74:42:C8:B1:D6:0A:FD:BC:A0:DF:A4:92:FD:72:F4:4D:EB:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/421973d7-fab2-3940-8dd2-7f5a5f46a7ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:61:bb:e2:9f:69:b5:dc:da:28:39:10:d3:ee:55:d9:55:0a: 18:7d:6f:6d:70:75:81:43:4b:7a:08:1a:43:30:bd:d4:29:3b: 8a:b9:49:5f:05:b4:d0:74:84:ef:39:38:ff:8c:8d:2c:45:45: 99:67:ab:b1:54:19:f2:0e:35:e6:3d:10:2e:13:a2:68:69:0b: 89:50:0f:bd:64:94:ff:b8:ca:e7:99:b5:da:e1:bb:61:76:67: a0:b2:06:32:07:f6:03:a8:2a:d3:99:4d:d8:fa:b4:ca:9f:98: d3:34:10:e0:b6:b5:30:d7:cb:c0:a2:2b:d6:34:9d:02:5e:de: a4:7a:9b:2f:08:d8:5f:19:53:d2:8c:08:80:ed:b9:ac:ea:ac: ba:f8:eb:31:4a:18:29:dc:3f:8f:b4:6e:7e:53:66:96:9c:d2: d9:40:fb:25:21:f8:fb:ee:7d:af:d3:36:48:39:79:a3:bb:af: 7f:64:6f:72:e7:5d:33:ee:c4:33:d3:d1:c7:ac:96:cf:8b:80: 80:b2:8d:4f:fc:c5:ca:2a:f3:48:11:07:0b:8f:97:82:26:64: 98:bf:5a:ff:e0:89:94:61:d6:08:92:66:da:79:19:3d:41:3d: c5:01:54:da:6f:15:e2:98:5f:36:35:d6:fc:ea:51:5f:fc:38: 4b:40:d1:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00OgxpL5Y2iiKaNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk ZTllZDM4ZjYtYzZjYS00Y2UzLTgwZjktOTI0N2QzODM1NjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpK9ZVoPQIGGGDP+3qav2D9l3l8Fvd3jihpT r48enUkq52DFqk9+MKpQNnWQ6MkCSdAdA5ekbQyecdcsXWXoHcSUXGIWxEdz2kuW 4lCLifWoLbK6VgEvIQoHURDa9FWairuKNPYIc2N8LcqVJw4YI628SidJR/SXf+0f G3PUeV3zJ9pWY9yli4Qy8gbihqsw+mSv8u0KIWVVLfN0eNQkjjY+QEGVxIAO1qM1 ih3Xq6/yU6GulhdpQe35mimEdVh7GO0OTxdQP2dweBCHxsMgDoo4v+4dvDp+L9sf x3x8KCeYp4zeyDRU0XQfdrUmdDt7DFhnokYwQbuyrXhTmgIw3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPqdELIsdYK/byg36SS/XL0TesFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDIxOTczZDctZmFiMi0z OTQwLThkZDItN2Y1YTVmNDZhN2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQVasMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5hu+KfabXc2ig5ENPuVdlVChh9b21wdYFDS3oIGkMwvdQpO4q5SV8F tNB0hO85OP+MjSxFRZlnq7FUGfIONeY9EC4TomhpC4lQD71klP+4yueZtdrhu2F2 Z6CyBjIH9gOoKtOZTdj6tMqfmNM0EOC2tTDXy8CiK9Y0nQJe3qR6my8I2F8ZU9KM CIDtuazqrLr46zFKGCncP4+0bn5TZpac0tlA+yUh+Pvufa/TNkg5eaO7r39kb3Ln XTPuxDPT0cesls+LgICyjU/8xcoq80gRBwuPl4ImZJi/Wv/giZRh1giSZtp5GT1B PcUBVNpvFeKYXzY11vzqUV/8OEtA0Tk= -----END CERTIFICATE-----Generated at Thu Mar 26 18:02:24 2026 by rpki-client