$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/501e2431-d9ed-3385-a27b-cd7e198bce7b.roa File: 501e2431-d9ed-3385-a27b-cd7e198bce7b.roa (raw, json) Hash identifier: SJq6GG4WXBI1+E1hMeqeSSH76vpJ6R8gLEaVFqzAa1g= Subject key identifier: 0C:E7:63:39:BF:BB:05:FE:3F:B6:EB:5A:84:2B:88:08:72:EB:B4:9F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D94C5AB10EC6C085766A23500 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/501e2431-d9ed-3385-a27b-cd7e198bce7b.roa Signing time: Tue 21 Apr 2026 14:59:29 +0000 ROA not before: Tue 21 Apr 2026 14:59:29 +0000 ROA not after: Mon 20 Jul 2026 14:59:29 +0000 asID: 5650 IP address blocks: 64.205.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:c5:ab:10:ec:6c:08:57:66:a2:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 21 14:59:29 2026 GMT Not After : Jul 20 14:59:29 2026 GMT Subject: CN=302e188a-952b-4696-8d59-7793f73f8581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:03:f1:b8:47:b7:19:36:be:26:6c:66:5f:42: fc:69:74:bb:b9:4a:6c:28:ce:3d:ea:de:63:a3:77: a2:46:fa:40:12:9f:e8:49:b8:1c:2b:ae:d8:93:9a: ca:59:8c:e0:a5:b2:47:de:e3:f1:5f:da:8d:b2:93: 66:5b:2d:84:00:31:4d:74:e2:af:3f:2a:d6:17:2e: 17:05:16:2f:ff:d0:fb:c6:88:f2:00:ab:90:36:7f: 9c:b8:27:8e:ea:3d:03:52:6b:9f:50:0a:ae:8c:a6: ce:fa:1c:70:5e:f4:79:ce:c9:0a:19:a8:67:81:d9: 46:df:16:00:47:76:8a:f5:5f:0b:30:86:d7:14:8f: 04:a2:58:d1:24:d7:5b:51:bb:cb:d4:cc:76:1b:8e: 61:21:02:55:c3:1a:54:73:07:a0:51:d7:22:87:89: 63:bf:fe:9e:cc:05:26:7e:35:14:28:55:d9:0f:82: ad:6b:c6:56:04:c8:1c:ca:f6:f3:5f:94:9c:e0:7b: ea:e1:9b:91:7f:ac:67:9a:ba:17:ea:06:b3:3b:87: dc:0a:69:f2:3e:3e:79:46:fb:12:64:79:6f:c4:1c: 1a:dc:99:1d:b4:11:f4:60:67:e3:53:9f:fe:c3:a3: 9a:13:c1:eb:74:ab:e7:5c:16:d1:6e:ad:c6:b5:df: 09:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E7:63:39:BF:BB:05:FE:3F:B6:EB:5A:84:2B:88:08:72:EB:B4:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/501e2431-d9ed-3385-a27b-cd7e198bce7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.205.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:cc:2e:87:f7:f5:df:55:67:96:bd:14:e8:6c:17:b2:d7:42: 4a:09:ed:92:0a:8a:99:ab:08:c9:0a:5c:41:bc:70:b5:9c:ff: 87:c9:51:b2:eb:0b:59:23:ae:9e:4f:57:2b:be:85:ec:dc:47: c0:2a:f1:0d:3a:bb:2a:cc:b3:c3:87:20:fa:e8:fe:5d:b5:d5: 4a:7e:d0:42:9d:6e:63:c9:aa:20:3a:48:0b:c4:ad:d0:32:2b: ca:83:e2:af:00:18:9f:0e:92:f4:64:6d:65:01:fb:97:ad:39: e7:0d:ae:b1:fc:b4:68:9c:45:88:e6:86:43:4a:9c:ca:e5:ad: 32:9a:41:ce:64:d2:5c:24:eb:a9:1d:87:f6:72:c9:29:f9:72: d4:40:a9:f3:4a:31:ce:18:7a:01:35:ab:64:3f:8f:54:24:05: 64:54:87:86:ba:8b:4d:4c:f9:5c:d0:22:b6:e0:7c:31:a3:f7: 6e:88:2f:35:ff:e8:64:2d:93:f3:24:c0:ce:37:75:e8:aa:42: a1:89:70:f9:98:bf:38:84:fb:0f:2c:1d:77:89:79:fc:6f:3d: 3b:8e:a8:99:42:08:89:f8:44:19:45:47:84:a7:09:93:e1:10: 4f:da:dc:3d:3d:78:fd:dc:fc:13:5f:02:68:82:95:4c:03:76: 84:c3:0a:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2UxasQ7GwIV2aiNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQyMTE0NTkyOVoXDTI2MDcyMDE0NTkyOVowLzEtMCsGA1UEAxMk MzAyZTE4OGEtOTUyYi00Njk2LThkNTktNzc5M2Y3M2Y4NTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigPxuEe3GTa+JmxmX0L8aXS7uUpsKM496t5j o3eiRvpAEp/oSbgcK67Yk5rKWYzgpbJH3uPxX9qNspNmWy2EADFNdOKvPyrWFy4X BRYv/9D7xojyAKuQNn+cuCeO6j0DUmufUAqujKbO+hxwXvR5zskKGahngdlG3xYA R3aK9V8LMIbXFI8EoljRJNdbUbvL1Mx2G45hIQJVwxpUcwegUdcih4ljv/6ezAUm fjUUKFXZD4Kta8ZWBMgcyvbzX5Sc4Hvq4ZuRf6xnmroX6gazO4fcCmnyPj55RvsS ZHlvxBwa3JkdtBH0YGfjU5/+w6OaE8HrdKvnXBbRbq3Gtd8J6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAznYzm/uwX+P7brWoQriAhy67SfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNTAxZTI0MzEtZDllZC0z Mzg1LWEyN2ItY2Q3ZTE5OGJjZTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQM04MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7MLof39d9VZ5a9FOhsF7LXQkoJ7ZIKipmrCMkKXEG8cLWc/4fJUbLr C1kjrp5PVyu+hezcR8Aq8Q06uyrMs8OHIPro/l211Up+0EKdbmPJqiA6SAvErdAy K8qD4q8AGJ8OkvRkbWUB+5etOecNrrH8tGicRYjmhkNKnMrlrTKaQc5k0lwk66kd h/ZyySn5ctRAqfNKMc4YegE1q2Q/j1QkBWRUh4a6i01M+VzQIrbgfDGj926ILzX/ 6GQtk/MkwM43deiqQqGJcPmYvziE+w8sHXeJefxvPTuOqJlCCIn4RBlFR4SnCZPh EE/a3D09eP3c/BNfAmiClUwDdoTDCvU= -----END CERTIFICATE-----Generated at Wed May 13 12:17:56 2026 by rpki-client