$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5ba06012-dcaa-38dc-8f0c-0186642e43b6.roa File: 5ba06012-dcaa-38dc-8f0c-0186642e43b6.roa (raw, json) Hash identifier: op1sRpKejb5TNmQMumHAPD3zaH4yiR+eLNgVRU/vGQM= Subject key identifier: 97:D3:90:E8:D3:BF:AD:55:4F:AD:BC:93:E9:75:41:67:8A:15:44:5E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D313613182B6C623D8BEB7FA0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5ba06012-dcaa-38dc-8f0c-0186642e43b6.roa Signing time: Mon 16 Mar 2026 23:05:08 +0000 ROA not before: Mon 16 Mar 2026 23:05:08 +0000 ROA not after: Sun 14 Jun 2026 23:05:08 +0000 asID: 205489 IP address blocks: 64.204.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:36:13:18:2b:6c:62:3d:8b:eb:7f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 16 23:05:08 2026 GMT Not After : Jun 14 23:05:08 2026 GMT Subject: CN=5f1a40b5-1ff0-44e9-bdd2-0e4e32e76826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:05:d6:80:b3:5b:d7:ca:57:59:ec:54:b3:4b: 45:9f:cc:21:18:9a:fb:8f:ba:a5:61:6e:10:16:20: ce:d8:17:40:6e:c9:d8:85:a5:fd:97:fd:19:aa:5b: e1:8f:a6:a5:8f:eb:21:b8:d9:07:8d:81:e7:5a:f4: 9e:14:83:1c:b1:23:8d:bb:98:2f:bf:05:c1:e4:b1: 38:25:52:47:39:42:59:b4:55:0d:6d:b1:78:eb:89: 46:ad:46:1c:e0:ef:6b:de:fc:49:ad:a1:19:76:68: 2d:eb:0f:d8:5d:19:d4:48:19:58:ce:be:81:c4:6f: e7:06:eb:ae:c3:63:f5:4f:fe:73:e4:06:ae:3a:c6: 5e:59:dd:18:b7:5c:31:9b:87:f0:f9:f2:08:73:7a: d8:e1:ed:e3:c6:eb:3a:dd:46:64:be:27:05:ae:f1: 53:ec:20:b5:6b:a7:e2:8c:39:7d:b5:96:60:f7:10: 39:1c:71:5b:02:e3:90:e0:a0:3b:96:0f:c3:33:1c: 0d:26:1d:72:0d:f8:c6:3b:b8:18:9f:41:16:3b:a1: 3a:f6:80:5d:f4:00:28:37:11:37:91:da:e5:a1:a5: 11:1c:9e:2f:76:a5:dc:ff:2a:28:7d:b0:ba:8c:21: 8c:f0:4d:01:8d:8f:5c:d6:a6:87:f1:b9:9e:7f:d8: 74:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D3:90:E8:D3:BF:AD:55:4F:AD:BC:93:E9:75:41:67:8A:15:44:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5ba06012-dcaa-38dc-8f0c-0186642e43b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:99:be:65:f4:a7:72:1e:f9:4b:59:b2:a7:fe:ba:74:26:b5: 2f:a4:51:7d:15:c3:93:6a:d2:10:0b:81:26:1b:8b:ab:90:79: 76:59:2c:88:96:8b:52:a3:59:83:59:db:33:8c:b4:25:86:64: e3:ff:96:b1:61:3d:54:88:09:92:28:c0:70:89:a5:b3:09:fe: 0b:23:24:87:7a:48:f2:c7:c6:58:ac:96:e4:e9:0a:0b:02:69: 6a:13:0f:1e:38:4e:b8:e1:a9:e6:90:80:56:f3:4b:d6:00:c9: 6e:ac:2b:3a:a0:57:79:61:13:5a:09:aa:06:42:0f:0f:3b:b8: 5a:a6:a0:68:4a:1c:ac:44:a4:ec:a0:32:8f:f1:ef:1d:30:51: 3c:ca:f6:fa:ef:99:b8:c9:c3:67:9d:66:66:3f:40:9e:5a:f9: 2d:9e:6d:54:eb:56:84:69:95:40:7e:dd:94:df:bb:b6:86:53: b8:12:37:8a:a4:bb:d5:71:17:10:00:18:56:a5:79:32:45:f5: af:d4:3f:41:3f:0c:e0:86:7e:93:33:90:5b:25:6f:3f:bd:33: 71:21:ec:cf:af:c4:cc:e0:e8:3e:8e:6b:75:95:a1:ce:94:10: c2:a6:6c:85:47:9d:88:0d:99:8f:a3:a7:aa:be:d4:1f:82:17: 21:31:24:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xNhMYK2xiPYvrf6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxNjIzMDUwOFoXDTI2MDYxNDIzMDUwOFowLzEtMCsGA1UEAxMk NWYxYTQwYjUtMWZmMC00NGU5LWJkZDItMGU0ZTMyZTc2ODI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQXWgLNb18pXWexUs0tFn8whGJr7j7qlYW4Q FiDO2BdAbsnYhaX9l/0Zqlvhj6alj+shuNkHjYHnWvSeFIMcsSONu5gvvwXB5LE4 JVJHOUJZtFUNbbF464lGrUYc4O9r3vxJraEZdmgt6w/YXRnUSBlYzr6BxG/nBuuu w2P1T/5z5AauOsZeWd0Yt1wxm4fw+fIIc3rY4e3jxus63UZkvicFrvFT7CC1a6fi jDl9tZZg9xA5HHFbAuOQ4KA7lg/DMxwNJh1yDfjGO7gYn0EWO6E69oBd9AAoNxE3 kdrloaURHJ4vdqXc/yoofbC6jCGM8E0BjY9c1qaH8bmef9h0jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfTkOjTv61VT628k+l1QWeKFUReMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNWJhMDYwMTItZGNhYS0z OGRjLThmMGMtMDE4NjY0MmU0M2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMypMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaZvmX0p3Ie+UtZsqf+unQmtS+kUX0Vw5Nq0hALgSYbi6uQeXZZLIiW i1KjWYNZ2zOMtCWGZOP/lrFhPVSICZIowHCJpbMJ/gsjJId6SPLHxlisluTpCgsC aWoTDx44TrjhqeaQgFbzS9YAyW6sKzqgV3lhE1oJqgZCDw87uFqmoGhKHKxEpOyg Mo/x7x0wUTzK9vrvmbjJw2edZmY/QJ5a+S2ebVTrVoRplUB+3ZTfu7aGU7gSN4qk u9VxFxAAGFaleTJF9a/UP0E/DOCGfpMzkFslbz+9M3Eh7M+vxMzg6D6Oa3WVoc6U EMKmbIVHnYgNmY+jp6q+1B+CFyExJDk= -----END CERTIFICATE-----Generated at Thu Mar 26 21:53:20 2026 by rpki-client