$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/547a0a7f-24f2-3e7d-8111-3b7f3c3a4e14.roa File: 547a0a7f-24f2-3e7d-8111-3b7f3c3a4e14.roa (raw, json) Hash identifier: G+pMlQZkdlxXvuZCPfJvZBwU06iKztzDtUd4bb0efQM= Subject key identifier: 48:8C:FC:4A:11:29:D6:E2:58:02:2A:4D:34:02:62:12:C1:C3:55:B0 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D359F90A3B8FD51E74D595600 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/547a0a7f-24f2-3e7d-8111-3b7f3c3a4e14.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 152689 IP address blocks: 68.164.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:90:a3:b8:fd:51:e7:4d:59:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=ea6fe918-e462-4be7-a372-87bcc1dc0a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3b:d0:f9:51:1c:62:e6:8c:96:c6:e7:f8:40: 89:be:b6:25:e8:96:58:41:93:7e:21:54:1d:3e:9d: 9a:6f:8d:e6:8c:7f:96:46:77:d1:c0:30:3b:6c:67: 77:0e:e8:db:53:1a:01:1e:2f:20:98:6d:2b:e9:b0: 53:45:a2:78:85:e4:a0:9e:72:ac:16:17:46:00:47: b7:1b:ef:86:bb:d0:92:df:19:d9:02:39:ad:ce:26: e7:99:46:b8:c9:22:88:04:7b:55:35:42:51:23:8d: 53:4b:46:9c:0f:9b:32:8b:54:2d:fe:05:9b:30:f8: d0:f7:aa:c8:73:13:2c:d4:64:cc:19:6d:ca:69:55: 30:26:85:1b:d4:ef:b8:e0:6d:2e:d2:6a:0d:81:49: 3d:78:2d:a3:fe:c0:14:c5:28:e3:ae:04:ea:a1:d7: d7:db:b7:1a:fe:21:29:0f:c9:b5:dc:7e:01:89:06: 54:db:ac:63:43:a9:a3:0d:ee:b7:56:b1:a1:16:cb: 1b:91:1d:e4:32:f3:d9:58:9e:08:67:e2:e4:11:e3: 44:d7:97:ee:d1:a7:69:1b:f3:62:8e:cf:49:4e:4c: 6a:09:21:a2:e7:31:b8:65:bb:ce:b8:4d:26:a6:a1: 71:26:32:e5:07:4e:d0:33:54:42:13:c4:c8:65:14: 52:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8C:FC:4A:11:29:D6:E2:58:02:2A:4D:34:02:62:12:C1:C3:55:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/547a0a7f-24f2-3e7d-8111-3b7f3c3a4e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:73:bd:af:ee:7a:5c:16:4f:b3:0b:d5:14:9d:e9:e7:51:4d: 88:8b:cd:5a:f0:bb:01:5e:a3:e7:8c:19:58:92:65:98:e2:00: a0:9c:f9:6a:d3:ad:be:dc:40:6b:4d:ec:f1:13:60:8c:c1:94: 56:3f:36:ab:bc:48:1a:8c:2e:43:be:15:90:0d:e2:07:cc:90: f4:63:a3:56:ee:2a:8c:1c:60:30:bd:83:0f:dc:b9:fd:bd:b1: cc:05:37:83:f1:7f:0f:10:36:56:25:cc:47:f9:53:25:65:ff: d5:5f:12:1d:c4:54:5e:8b:1b:91:e4:63:c1:91:e1:06:9e:22: d6:9f:31:87:fa:f6:6c:f2:77:f9:92:cb:05:aa:96:85:6c:cd: 2d:56:a1:de:ed:9e:6e:91:07:0e:89:c4:40:ed:f3:d0:ec:45: 6f:a1:e6:99:10:2c:75:04:9b:ff:1d:b8:4a:75:f3:c5:82:3e: 2a:08:83:59:67:13:c8:49:b5:90:35:18:5d:da:ce:3f:a1:e4: 7a:33:c5:89:be:dc:24:96:d2:47:6a:ee:5e:ef:7b:14:87:39: 6d:40:cc:b1:6f:d8:94:27:4e:30:8b:fa:fe:9c:f2:cd:0a:b5: 7d:89:d1:eb:01:da:3e:9e:6a:15:18:2c:66:e4:9c:f6:b7:eb: 45:e7:88:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n5CjuP1R501ZVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk ZWE2ZmU5MTgtZTQ2Mi00YmU3LWEzNzItODdiY2MxZGMwYTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTvQ+VEcYuaMlsbn+ECJvrYl6JZYQZN+IVQd Pp2ab43mjH+WRnfRwDA7bGd3DujbUxoBHi8gmG0r6bBTRaJ4heSgnnKsFhdGAEe3 G++Gu9CS3xnZAjmtzibnmUa4ySKIBHtVNUJRI41TS0acD5syi1Qt/gWbMPjQ96rI cxMs1GTMGW3KaVUwJoUb1O+44G0u0moNgUk9eC2j/sAUxSjjrgTqodfX27ca/iEp D8m13H4BiQZU26xjQ6mjDe63VrGhFssbkR3kMvPZWJ4IZ+LkEeNE15fu0adpG/Ni js9JTkxqCSGi5zG4ZbvOuE0mpqFxJjLlB07QM1RCE8TIZRRSNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiM/EoRKdbiWAIqTTQCYhLBw1WwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNTQ3YTBhN2YtMjRmMi0z ZTdkLTgxMTEtM2I3ZjNjM2E0ZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKT8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFzva/uelwWT7ML1RSd6edRTYiLzVrwuwFeo+eMGViSZZjiAKCc+WrT rb7cQGtN7PETYIzBlFY/Nqu8SBqMLkO+FZAN4gfMkPRjo1buKowcYDC9gw/cuf29 scwFN4Pxfw8QNlYlzEf5UyVl/9VfEh3EVF6LG5HkY8GR4QaeItafMYf69mzyd/mS ywWqloVszS1Wod7tnm6RBw6JxEDt89DsRW+h5pkQLHUEm/8duEp188WCPioIg1ln E8hJtZA1GF3azj+h5HozxYm+3CSW0kdq7l7vexSHOW1AzLFv2JQnTjCL+v6c8s0K tX2J0esB2j6eahUYLGbknPa360XniEE= -----END CERTIFICATE-----Generated at Thu Mar 26 06:26:15 2026 by rpki-client