$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/43b7eb70-7241-3db5-bf0f-5595a7a2ac5b.roa File: 43b7eb70-7241-3db5-bf0f-5595a7a2ac5b.roa (raw, json) Hash identifier: vNa3ocT/nDLa6wykkO9N4mMR7xQn1Munyh86vPb51V0= Subject key identifier: 09:7A:C5:C1:2A:27:18:38:C1:3E:11:5B:EE:20:E7:E6:8F:72:46:89 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DC423FC6A58FD96FC5CED19C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/43b7eb70-7241-3db5-bf0f-5595a7a2ac5b.roa Signing time: Fri 08 May 2026 14:12:31 +0000 ROA not before: Fri 08 May 2026 14:12:31 +0000 ROA not after: Thu 06 Aug 2026 14:12:31 +0000 asID: 205502 IP address blocks: 64.204.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c4:23:fc:6a:58:fd:96:fc:5c:ed:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 8 14:12:31 2026 GMT Not After : Aug 6 14:12:31 2026 GMT Subject: CN=f25cc2e9-8b63-4794-a6af-40e1869259de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:14:a9:78:a0:1c:32:e5:1a:08:10:e4:2c:b9: c7:42:8b:3f:b8:25:d8:f7:bf:6a:af:ba:da:e9:c3: cb:a7:9a:59:54:28:93:ff:8f:39:a5:df:63:8c:1f: a0:20:e6:41:2b:8e:03:36:c4:64:a0:17:d6:7b:9c: 58:d0:a4:c2:74:4c:c1:cb:5d:cc:b4:14:4a:72:64: f7:1c:30:6a:97:04:9e:f6:05:ad:c4:ad:84:2b:82: 3b:72:f9:83:e1:a2:ee:f2:64:15:cb:5f:e2:d6:88: fa:86:23:c9:4a:31:15:b1:90:2e:d3:86:1a:08:83: f4:e4:8e:5a:f9:89:fc:87:38:70:c0:fa:78:75:ff: 8b:a1:cf:0d:f1:ea:db:e5:c3:f1:8a:7c:67:37:10: 3b:01:cf:18:cd:c6:15:5c:14:3b:37:40:2a:ca:92: f7:b0:48:df:84:7b:ba:5d:1b:4e:0d:7e:3f:83:33: 57:0a:2d:0f:28:19:e3:d3:9c:d1:db:da:a5:1b:bf: 7a:3b:81:bc:cf:05:9f:51:70:d0:4d:16:65:da:01: 5d:70:82:b2:73:5c:d3:8a:eb:76:c6:02:a7:53:95: 32:d6:6a:41:af:d2:df:86:ea:03:5e:f5:96:ed:dc: 77:78:60:41:9d:3f:5b:94:fa:42:6a:5e:c9:b6:d4: ea:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7A:C5:C1:2A:27:18:38:C1:3E:11:5B:EE:20:E7:E6:8F:72:46:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/43b7eb70-7241-3db5-bf0f-5595a7a2ac5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:69:56:61:d6:2b:4b:92:83:52:34:a4:d2:e1:eb:6c:9c:db: 56:1d:ce:61:30:67:d3:ea:00:c4:9b:2d:3a:cf:14:18:45:67: 21:96:6c:84:da:b4:34:0b:3b:c2:0e:b9:42:46:24:cc:33:23: a1:d4:bc:50:d6:b6:38:b2:b4:8b:bd:05:bb:93:02:d7:9b:70: af:d3:63:bc:2a:4f:d6:97:d0:0d:96:92:1a:00:ad:7a:36:74: 4f:f5:55:64:ce:bf:8a:6e:80:c3:08:d6:e8:45:33:98:c5:d6: 56:e4:bd:8a:ae:a5:dc:54:7b:2c:83:b8:87:04:9d:27:ff:16: 8d:13:d5:99:f2:ee:f7:09:e6:2e:99:0b:2f:fc:33:53:76:e3: d8:10:9f:8a:ce:d5:ff:d2:18:b1:0b:0d:e2:29:0e:89:a0:ed: ae:d0:76:98:60:03:56:75:16:24:77:d4:45:31:2a:34:ee:b7: ff:b3:ab:4e:a7:7d:d9:d7:09:cf:6a:64:e0:0b:0f:d6:9a:b3: 83:bf:6e:68:d5:21:56:a4:65:79:9e:e4:c3:b4:60:ca:f0:0d: 7d:6f:4e:d1:36:6e:c2:6d:cc:d1:7a:b3:e6:2f:e6:b7:df:0f: 3d:56:f3:2e:3f:3d:36:c0:bc:0b:94:64:1a:8c:72:6b:31:35: fc:d2:d1:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3EI/xqWP2W/FztGcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUwODE0MTIzMVoXDTI2MDgwNjE0MTIzMVowLzEtMCsGA1UEAxMk ZjI1Y2MyZTktOGI2My00Nzk0LWE2YWYtNDBlMTg2OTI1OWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BSpeKAcMuUaCBDkLLnHQos/uCXY979qr7ra 6cPLp5pZVCiT/485pd9jjB+gIOZBK44DNsRkoBfWe5xY0KTCdEzBy13MtBRKcmT3 HDBqlwSe9gWtxK2EK4I7cvmD4aLu8mQVy1/i1oj6hiPJSjEVsZAu04YaCIP05I5a +Yn8hzhwwPp4df+Loc8N8erb5cPxinxnNxA7Ac8YzcYVXBQ7N0AqypL3sEjfhHu6 XRtODX4/gzNXCi0PKBnj05zR29qlG796O4G8zwWfUXDQTRZl2gFdcIKyc1zTiut2 xgKnU5Uy1mpBr9LfhuoDXvWW7dx3eGBBnT9blPpCal7JttTqdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAl6xcEqJxg4wT4RW+4g5+aPckaJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDNiN2ViNzAtNzI0MS0z ZGI1LWJmMGYtNTU5NWE3YTJhYzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMx6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxpVmHWK0uSg1I0pNLh62yc21YdzmEwZ9PqAMSbLTrPFBhFZyGWbITa tDQLO8IOuUJGJMwzI6HUvFDWtjiytIu9BbuTAtebcK/TY7wqT9aX0A2WkhoArXo2 dE/1VWTOv4pugMMI1uhFM5jF1lbkvYqupdxUeyyDuIcEnSf/Fo0T1Zny7vcJ5i6Z Cy/8M1N249gQn4rO1f/SGLELDeIpDomg7a7QdphgA1Z1FiR31EUxKjTut/+zq06n fdnXCc9qZOALD9aas4O/bmjVIVakZXme5MO0YMrwDX1vTtE2bsJtzNF6s+Yv5rff Dz1W8y4/PTbAvAuUZBqMcmsxNfzS0SM= -----END CERTIFICATE-----Generated at Wed May 13 11:58:43 2026 by rpki-client