$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/687647b6-932a-3428-8f72-3246cc4b3258.roa File: 687647b6-932a-3428-8f72-3246cc4b3258.roa (raw, json) Hash identifier: IlI/C0P1OuTWTPQE93NNyfzAU4s0zBpko36eNZyDoSY= Subject key identifier: C5:FF:DE:B0:F0:E4:7E:53:B1:6A:0D:84:3F:E1:78:7B:4B:1F:99:5B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D100CEE098FAD23341936CDC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/687647b6-932a-3428-8f72-3246cc4b3258.roa Signing time: Thu 05 Mar 2026 02:00:32 +0000 ROA not before: Thu 05 Mar 2026 02:00:32 +0000 ROA not after: Wed 03 Jun 2026 01:00:32 +0000 asID: 834 IP address blocks: 65.86.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:0c:ee:09:8f:ad:23:34:19:36:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 5 02:00:32 2026 GMT Not After : Jun 3 01:00:32 2026 GMT Subject: CN=af8bc42e-3bfe-42ff-9f44-d71d1ae439ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:22:b0:40:24:1e:87:b9:f8:a2:8f:d5:af:61: 47:1c:69:46:bd:c4:d8:1d:fc:38:d8:63:e4:38:f7: a1:03:91:87:f6:39:b4:5f:1b:b3:2d:da:5f:2b:fe: 33:22:a7:22:db:53:40:15:a8:b2:5a:7e:1b:c5:96: 1b:96:2e:af:51:7e:25:32:10:2f:66:72:dd:8a:6b: 7e:09:99:85:2b:cb:71:01:7b:54:47:82:5d:42:dd: 58:83:42:a3:e9:29:6f:97:52:89:ee:24:30:1d:cc: 20:1d:b6:5f:8c:4d:06:d4:b0:5a:54:62:fe:9d:d4: de:b2:b0:cc:7c:59:da:3f:6d:dd:10:df:3c:71:e1: f4:ba:3e:e3:31:72:eb:be:f3:d5:d7:d6:e7:2e:1c: a9:c2:af:a4:65:ef:ee:95:d9:8b:39:60:52:73:10: 26:3d:fd:d9:17:17:75:a1:a8:b7:db:c3:2e:59:6b: 41:f3:e2:b0:6c:07:39:3f:05:5a:40:cc:ab:64:85: 29:55:4f:7a:4f:e5:19:c7:ed:7b:43:48:bc:13:1f: f3:f0:7a:77:86:ee:b5:7a:34:86:62:bc:01:e8:11: a0:4f:f1:e9:a9:ca:b1:a1:a9:e9:01:32:ce:6b:c2: e5:b8:ad:98:e5:06:38:53:85:eb:31:c9:7b:77:3f: 05:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FF:DE:B0:F0:E4:7E:53:B1:6A:0D:84:3F:E1:78:7B:4B:1F:99:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/687647b6-932a-3428-8f72-3246cc4b3258.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:48:2f:97:65:e2:c5:2a:f8:f2:eb:78:6a:a1:20:67:aa:ae: 7f:16:6e:91:79:92:9c:aa:e7:53:60:f6:fd:55:47:38:81:57: 05:22:3f:4c:56:16:97:28:2e:77:4c:7a:7d:28:00:e8:b2:62: b4:52:81:84:a9:35:20:d7:44:0e:77:5f:e0:b6:65:a2:c3:82: 70:ba:16:fb:5b:84:33:f6:00:84:09:9b:0c:61:ea:11:65:33: 31:df:9a:60:a1:ac:b8:2d:ba:3b:7e:b5:fe:b3:a7:eb:bc:f1: e5:32:76:d8:1b:04:5f:bf:50:23:12:8c:79:df:8e:a7:55:48: a5:06:f6:f9:3e:65:45:ff:5c:1f:0d:4f:fd:bc:e5:46:b2:a2: ed:e0:93:74:f1:26:f8:06:d6:95:ca:e4:b7:65:2a:2c:03:c0: 45:6c:69:aa:57:80:ae:1b:2b:c7:da:9f:58:f9:f4:c0:d6:2f: ed:87:f4:6e:e1:08:7c:47:fb:c5:07:a5:07:be:10:9c:8c:c0: 45:42:b7:5f:83:80:61:7e:9e:f8:97:f4:7a:0f:a8:f0:d2:ca: 7d:98:ec:56:b4:82:48:7a:4a:6e:36:4c:ac:84:f2:29:ac:a0: 31:b4:78:c4:b2:e4:da:e7:ee:9e:34:57:66:75:ce:47:62:98: d2:b6:cd:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0QDO4Jj60jNBk2zcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk YWY4YmM0MmUtM2JmZS00MmZmLTlmNDQtZDcxZDFhZTQzOWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSKwQCQeh7n4oo/Vr2FHHGlGvcTYHfw42GPk OPehA5GH9jm0XxuzLdpfK/4zIqci21NAFaiyWn4bxZYbli6vUX4lMhAvZnLdimt+ CZmFK8txAXtUR4JdQt1Yg0Kj6Slvl1KJ7iQwHcwgHbZfjE0G1LBaVGL+ndTesrDM fFnaP23dEN88ceH0uj7jMXLrvvPV19bnLhypwq+kZe/uldmLOWBScxAmPf3ZFxd1 oai328MuWWtB8+KwbAc5PwVaQMyrZIUpVU96T+UZx+17Q0i8Ex/z8Hp3hu61ejSG YrwB6BGgT/HpqcqxoanpATLOa8LluK2Y5QY4U4XrMcl7dz8FawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMX/3rDw5H5TsWoNhD/heHtLH5lbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjg3NjQ3YjYtOTMyYS0z NDI4LThmNzItMzI0NmNjNGIzMjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNIL5dl4sUq+PLreGqhIGeqrn8WbpF5kpyq51Ng9v1VRziBVwUiP0xW FpcoLndMen0oAOiyYrRSgYSpNSDXRA53X+C2ZaLDgnC6FvtbhDP2AIQJmwxh6hFl MzHfmmChrLgtujt+tf6zp+u88eUydtgbBF+/UCMSjHnfjqdVSKUG9vk+ZUX/XB8N T/285Uayou3gk3TxJvgG1pXK5LdlKiwDwEVsaapXgK4bK8fan1j59MDWL+2H9G7h CHxH+8UHpQe+EJyMwEVCt1+DgGF+nviX9HoPqPDSyn2Y7Fa0gkh6Sm42TKyE8ims oDG0eMSy5Nrn7p40V2Z1zkdimNK2zT4= -----END CERTIFICATE-----Generated at Thu Mar 26 18:30:45 2026 by rpki-client