$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/70ea46b0-d89e-351a-9f85-9b7a139d613b.roa File: 70ea46b0-d89e-351a-9f85-9b7a139d613b.roa (raw, json) Hash identifier: 8HF+t5sqOuLIdP2+dSQteTL3wSe/WqdwEmBPgOyM6BU= Subject key identifier: EE:85:C7:11:54:51:E4:A9:FC:B0:8D:7B:04:35:0E:93:66:86:E5:E7 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D8AC55D4747ECC99478DB7F80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/70ea46b0-d89e-351a-9f85-9b7a139d613b.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 834 IP address blocks: 64.204.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:5d:47:47:ec:c9:94:78:db:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=c14864ea-b790-47b3-8f21-2d604ad1994d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:62:4d:c3:ec:9e:e5:10:5d:35:c5:17:d5:74: 45:85:dd:d5:80:54:60:5d:14:1a:f0:39:9a:51:4b: 87:1f:e9:74:f7:50:58:9c:f1:90:26:79:29:9a:44: c3:79:1e:88:4b:ff:9a:eb:ac:e8:4a:d2:a7:76:40: 8f:45:0a:83:c7:db:4d:8b:c8:2a:ee:4f:3d:24:54: a4:ed:20:52:b1:44:d4:b5:fc:65:f0:c9:69:29:52: d0:6e:1d:3b:e7:3c:b0:ea:a9:67:63:c2:b4:b2:9c: bb:08:44:f8:24:01:7a:7e:db:e7:6d:eb:03:c3:63: fd:ae:78:f8:b6:25:60:07:2f:4a:8e:1b:86:aa:4e: 04:1a:34:e0:4c:86:67:30:0d:e9:1a:c3:e1:2e:9c: 8d:0c:7b:ad:16:0c:58:62:79:93:cc:31:9c:1e:c3: cc:31:a1:c0:0a:c4:2d:90:c7:4e:07:66:d3:30:b5: dd:1f:9e:7d:f8:0b:41:49:d5:7b:f4:28:37:3a:15: 87:61:70:e4:2f:85:63:49:45:98:a8:b0:49:af:04: 56:2f:d7:c1:07:13:4a:2c:d6:8c:d1:11:49:c8:0a: 3b:6e:9f:f9:45:89:ec:d1:71:c1:03:7c:43:69:71: b5:8a:57:8f:36:15:c1:b7:86:85:19:80:b6:75:e7: 6f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:85:C7:11:54:51:E4:A9:FC:B0:8D:7B:04:35:0E:93:66:86:E5:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/70ea46b0-d89e-351a-9f85-9b7a139d613b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:43:e3:71:c7:c5:85:40:ca:11:6c:2d:93:d2:ad:f3:70:95: e4:01:38:66:c4:df:f1:76:bf:df:67:17:fe:98:7e:af:02:e3: 19:17:90:12:29:b0:35:69:f2:e6:09:97:d2:8a:5a:1d:6f:fd: 61:3d:12:5d:46:aa:44:34:cf:c9:ea:2d:0d:ca:15:86:21:74: bd:a4:8e:5b:e6:78:01:03:f7:6c:7d:75:bc:70:1a:b5:5c:dd: e9:35:2d:34:b1:08:5c:e1:90:b3:6b:1e:2b:0f:b4:4c:52:21: cb:cd:e9:f0:35:e7:43:58:fc:ac:a5:7d:d8:3a:89:93:2b:4d: e3:96:25:c1:97:4c:91:62:9d:02:c5:a9:b9:1c:50:6b:54:bc: e3:47:bb:88:80:6d:a4:ac:5b:ad:ad:45:8a:4b:48:db:83:71: 5b:0b:7a:a5:e5:ea:86:c6:27:d6:40:0e:ec:32:fa:34:43:1e: ea:d2:05:d8:5c:a5:9e:41:c9:06:df:6d:09:0c:1a:67:c1:25: 69:72:68:b3:5f:02:8e:01:48:ef:0f:8e:25:e7:26:dd:48:b7: 3b:38:83:b4:b1:b6:8c:94:da:29:b7:de:12:35:07:87:fd:7d: 61:34:78:78:e2:52:3a:35:40:99:e5:d5:dd:6b:de:f9:3a:1e: fb:05:90:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxV1HR+zJlHjbf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk YzE0ODY0ZWEtYjc5MC00N2IzLThmMjEtMmQ2MDRhZDE5OTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWJNw+ye5RBdNcUX1XRFhd3VgFRgXRQa8Dma UUuHH+l091BYnPGQJnkpmkTDeR6IS/+a66zoStKndkCPRQqDx9tNi8gq7k89JFSk 7SBSsUTUtfxl8MlpKVLQbh075zyw6qlnY8K0spy7CET4JAF6ftvnbesDw2P9rnj4 tiVgBy9KjhuGqk4EGjTgTIZnMA3pGsPhLpyNDHutFgxYYnmTzDGcHsPMMaHACsQt kMdOB2bTMLXdH559+AtBSdV79Cg3OhWHYXDkL4VjSUWYqLBJrwRWL9fBBxNKLNaM 0RFJyAo7bp/5RYns0XHBA3xDaXG1ilePNhXBt4aFGYC2dedvhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6FxxFUUeSp/LCNewQ1DpNmhuXnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNzBlYTQ2YjAtZDg5ZS0z NTFhLTlmODUtOWI3YTEzOWQ2MTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQMyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMpD43HHxYVAyhFsLZPSrfNwleQBOGbE3/F2v99nF/6Yfq8C4xkXkBIp sDVp8uYJl9KKWh1v/WE9El1GqkQ0z8nqLQ3KFYYhdL2kjlvmeAED92x9dbxwGrVc 3ek1LTSxCFzhkLNrHisPtExSIcvN6fA150NY/Kylfdg6iZMrTeOWJcGXTJFinQLF qbkcUGtUvONHu4iAbaSsW62tRYpLSNuDcVsLeqXl6obGJ9ZADuwy+jRDHurSBdhc pZ5ByQbfbQkMGmfBJWlyaLNfAo4BSO8PjiXnJt1Itzs4g7SxtoyU2im33hI1B4f9 fWE0eHjiUjo1QJnl1d1r3vk6HvsFkH4= -----END CERTIFICATE-----Generated at Wed May 13 10:45:39 2026 by rpki-client