$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/47a4431a-3b57-3f7a-af48-0be58ad3d1b1.roa File: 47a4431a-3b57-3f7a-af48-0be58ad3d1b1.roa (raw, json) Hash identifier: JtHxa2egU2dml5tb1IYDw8gsGByrNPrNrqRX+E4qV8s= Subject key identifier: 73:7E:72:4C:43:E1:2F:A5:02:C9:AC:63:E9:AD:8C:6B:33:60:46:01 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DAD917DC75E8327BB000D5FC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/47a4431a-3b57-3f7a-af48-0be58ad3d1b1.roa Signing time: Thu 30 Apr 2026 12:09:34 +0000 ROA not before: Thu 30 Apr 2026 12:09:34 +0000 ROA not after: Wed 29 Jul 2026 12:09:34 +0000 asID: 399955 IP address blocks: 64.81.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:91:7d:c7:5e:83:27:bb:00:0d:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 30 12:09:34 2026 GMT Not After : Jul 29 12:09:34 2026 GMT Subject: CN=440ab300-430c-4ebd-9a1c-9912cad3412a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ab:d4:ee:7c:fb:f4:b5:ab:28:e2:21:6b:87: 86:6a:f1:fe:bb:dc:e7:d0:d9:5e:46:28:93:8d:77: 7b:26:39:21:d8:6e:91:4b:fd:67:91:fe:e1:e4:cd: d6:38:8a:b4:a7:a4:6d:e0:4b:92:ab:39:66:2e:3f: 44:a7:8d:e6:08:e2:55:7f:d9:38:8f:71:09:50:1e: a3:87:fa:db:66:fe:bf:68:fa:f1:1f:e4:4e:69:ef: 88:c3:c8:fc:1b:41:82:71:c0:d7:f7:bd:41:1f:ce: 6b:c4:46:52:f3:ba:52:5c:a3:03:25:2a:2d:c7:89: 8d:1c:cf:c2:52:9d:43:60:5a:33:a7:41:a0:dd:be: eb:88:b7:b1:1c:ca:10:e9:46:9f:a6:5a:3e:94:6a: e2:a8:1a:4b:81:20:c3:b9:a4:cb:a1:db:40:57:af: 05:69:8d:2d:68:03:f9:eb:96:43:84:d2:62:b4:b8: 9d:0b:64:9c:a5:33:65:72:a6:02:97:30:c2:77:d1: 24:60:18:56:7e:27:ef:ae:a3:1e:57:88:a7:c5:93: 87:24:e0:4b:43:e6:f3:f4:ae:1b:15:11:d5:02:2e: c9:06:03:59:15:72:ba:57:ee:d6:80:18:ce:60:94: bc:d2:15:be:44:b5:54:75:f2:71:42:04:ed:46:8c: 9b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7E:72:4C:43:E1:2F:A5:02:C9:AC:63:E9:AD:8C:6B:33:60:46:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/47a4431a-3b57-3f7a-af48-0be58ad3d1b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.81.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:dd:6b:0c:60:2a:c2:d5:af:b7:98:b3:09:ef:8e:62:fa:f6: f6:33:f0:53:fb:b0:de:b3:64:ce:9e:4b:26:12:2b:7b:40:ef: 5b:21:be:93:bb:4e:9d:60:85:1f:96:58:cc:ad:e4:08:2e:8b: c8:f2:c3:e1:05:75:c0:11:6c:7a:77:5c:7c:50:41:fe:15:25: 90:d0:f7:aa:09:66:3f:82:ea:2b:ce:5c:98:e4:fb:60:f6:85: 05:54:b4:fe:88:23:c8:e1:08:fe:1e:4f:09:a9:93:7b:70:5e: 23:2c:80:ae:84:81:5e:3d:26:e8:c0:b0:ec:30:db:75:e0:c6: 86:22:7a:62:11:8b:b6:4e:1e:31:cb:cc:06:a2:35:78:9f:e3: a6:6d:c2:6f:58:e5:05:9a:89:c2:b1:9d:37:c3:ab:d3:92:06: 16:29:87:2d:23:9f:ea:ab:05:7e:6b:57:6e:5b:b6:2e:4b:16: dd:be:77:fd:21:c0:20:45:3c:d4:ae:21:dd:b1:4a:e4:fc:ac: b9:82:f2:64:53:b2:23:61:84:80:c3:59:46:31:52:17:a3:01: 8e:4f:33:4e:14:fc:38:ac:c6:0f:db:e7:43:81:d9:30:fc:72: f9:67:e8:82:df:37:88:fd:be:fb:09:6c:2b:38:0c:81:f2:0d: dc:5d:a0:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tkX3HXoMnuwANX8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQzMDEyMDkzNFoXDTI2MDcyOTEyMDkzNFowLzEtMCsGA1UEAxMk NDQwYWIzMDAtNDMwYy00ZWJkLTlhMWMtOTkxMmNhZDM0MTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqvU7nz79LWrKOIha4eGavH+u9zn0NleRiiT jXd7Jjkh2G6RS/1nkf7h5M3WOIq0p6Rt4EuSqzlmLj9Ep43mCOJVf9k4j3EJUB6j h/rbZv6/aPrxH+ROae+Iw8j8G0GCccDX971BH85rxEZS87pSXKMDJSotx4mNHM/C Up1DYFozp0Gg3b7riLexHMoQ6Uafplo+lGriqBpLgSDDuaTLodtAV68FaY0taAP5 65ZDhNJitLidC2ScpTNlcqYClzDCd9EkYBhWfifvrqMeV4inxZOHJOBLQ+bz9K4b FRHVAi7JBgNZFXK6V+7WgBjOYJS80hW+RLVUdfJxQgTtRoyb2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHN+ckxD4S+lAsmsY+mtjGszYEYBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDdhNDQzMWEtM2I1Ny0z ZjdhLWFmNDgtMGJlNThhZDNkMWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQFGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMbdawxgKsLVr7eYswnvjmL69vYz8FP7sN6zZM6eSyYSK3tA71shvpO7 Tp1ghR+WWMyt5Agui8jyw+EFdcARbHp3XHxQQf4VJZDQ96oJZj+C6ivOXJjk+2D2 hQVUtP6II8jhCP4eTwmpk3twXiMsgK6EgV49JujAsOww23XgxoYiemIRi7ZOHjHL zAaiNXif46Ztwm9Y5QWaicKxnTfDq9OSBhYphy0jn+qrBX5rV25bti5LFt2+d/0h wCBFPNSuId2xSuT8rLmC8mRTsiNhhIDDWUYxUhejAY5PM04U/Disxg/b50OB2TD8 cvln6ILfN4j9vvsJbCs4DIHyDdxdoIY= -----END CERTIFICATE-----Generated at Wed May 13 14:46:59 2026 by rpki-client