$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7b3afb8a-0fa0-3768-867b-53d70458416a.roa File: 7b3afb8a-0fa0-3768-867b-53d70458416a.roa (raw, json) Hash identifier: X+eumoX+JFcB2X/zkLPJsMzdKbOjPoVZf1el1UNSDfM= Subject key identifier: 91:96:83:4B:4F:7C:63:D9:A1:3A:1F:8E:C0:BD:FE:CB:F6:95:74:5C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D98BAB6341787EDB6A3665D80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7b3afb8a-0fa0-3768-867b-53d70458416a.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 834 IP address blocks: 65.86.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:b6:34:17:87:ed:b6:a3:66:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=b2e1e4d8-e6a7-4d9d-b1c3-b359d855e70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a2:3b:65:f6:8d:1c:10:58:ac:13:c2:ab:82: 48:ae:cf:18:fd:f6:bb:8b:14:57:ca:76:bc:28:49: d6:5b:b9:f8:c4:08:ab:4f:a0:94:63:67:9e:ee:7b: 38:cd:54:b9:18:58:c3:ba:f6:f1:f9:f4:55:9e:8d: 93:bf:28:ab:67:1d:b0:3e:0e:fe:2d:79:f1:c0:18: 3a:89:1e:6e:fd:72:f4:e5:f4:0c:53:1f:13:e4:b7: d1:07:64:0b:af:c6:8d:f1:21:ea:4f:1d:00:5e:1a: ae:99:10:af:58:e8:ee:de:48:ed:c0:5a:3b:66:76: 75:16:07:b8:26:67:6b:75:d5:7f:40:ea:3a:34:54: 6e:b1:23:f7:01:87:93:01:05:82:0d:0b:bd:06:cd: 7c:b4:92:15:db:0e:d6:e4:58:13:5c:39:1e:08:1f: c6:85:68:68:e4:48:60:9f:5e:64:e3:19:7b:c5:99: 2a:b1:92:97:bd:d8:5f:d6:dd:52:80:46:09:3e:ca: d7:9e:9b:58:a0:d0:42:f9:9e:e5:44:e8:62:29:6e: c6:5a:4d:28:22:d7:da:54:76:e5:a1:80:de:75:57: cc:94:41:00:8b:71:40:52:68:34:22:d8:69:ae:6c: 6f:47:9d:08:9d:2c:4b:d8:da:f2:c2:52:7b:59:81: ea:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:96:83:4B:4F:7C:63:D9:A1:3A:1F:8E:C0:BD:FE:CB:F6:95:74:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7b3afb8a-0fa0-3768-867b-53d70458416a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:76:7a:7e:d6:ca:56:ae:db:a1:ca:49:92:1f:c0:49:05:b1: 9c:f8:3b:1f:3c:67:12:67:59:ca:d1:d7:50:bd:2c:1d:06:b6: c5:4c:85:d6:c1:d7:c1:21:b0:b2:25:df:ff:78:bd:3d:24:71: ba:fb:ed:70:8e:55:3c:08:7c:21:59:ef:31:44:db:4e:2f:f3: 9c:6d:ee:4e:7d:a8:ec:55:56:33:24:86:cd:df:de:43:f5:e8: 83:de:86:b3:71:b7:01:50:f5:21:13:2e:d6:10:d7:47:74:9e: 72:1b:03:e4:9f:ee:b5:1b:23:bd:45:e7:09:62:cf:1c:12:c3: 4b:fa:74:cd:14:21:59:b9:29:1c:d4:82:0b:91:96:07:da:fe: 3f:64:9a:ef:c6:ea:2f:0a:99:cf:68:82:1c:2c:2b:35:66:18: e6:18:dd:68:3e:e9:31:85:c0:b7:cd:c3:0f:ae:8a:58:3c:72: cb:08:f7:6b:e4:93:f0:c8:09:58:64:eb:03:ef:3c:98:44:d6: 7b:40:30:67:cc:45:20:b2:e1:ef:fe:65:91:ef:5f:95:ad:fb: 4c:6e:11:98:a2:e6:62:ef:a1:6d:5d:33:e0:00:10:ae:e3:d6: 5d:55:1c:8f:36:8a:19:f3:30:32:9f:43:4a:b0:40:8c:7f:2e: b4:6c:b4:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YurY0F4fttqNmXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk YjJlMWU0ZDgtZTZhNy00ZDlkLWIxYzMtYjM1OWQ4NTVlNzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6I7ZfaNHBBYrBPCq4JIrs8Y/fa7ixRXyna8 KEnWW7n4xAirT6CUY2ee7ns4zVS5GFjDuvbx+fRVno2TvyirZx2wPg7+LXnxwBg6 iR5u/XL05fQMUx8T5LfRB2QLr8aN8SHqTx0AXhqumRCvWOju3kjtwFo7ZnZ1Fge4 JmdrddV/QOo6NFRusSP3AYeTAQWCDQu9Bs18tJIV2w7W5FgTXDkeCB/GhWho5Ehg n15k4xl7xZkqsZKXvdhf1t1SgEYJPsrXnptYoNBC+Z7lROhiKW7GWk0oItfaVHbl oYDedVfMlEEAi3FAUmg0IthprmxvR50InSxL2NrywlJ7WYHqHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGWg0tPfGPZoTofjsC9/sv2lXRcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvN2IzYWZiOGEtMGZhMC0z NzY4LTg2N2ItNTNkNzA0NTg0MTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQVZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMp2en7Wylau26HKSZIfwEkFsZz4Ox88ZxJnWcrR11C9LB0GtsVMhdbB 18EhsLIl3/94vT0kcbr77XCOVTwIfCFZ7zFE204v85xt7k59qOxVVjMkhs3f3kP1 6IPehrNxtwFQ9SETLtYQ10d0nnIbA+Sf7rUbI71F5wlizxwSw0v6dM0UIVm5KRzU gguRlgfa/j9kmu/G6i8Kmc9oghwsKzVmGOYY3Wg+6TGFwLfNww+uilg8cssI92vk k/DICVhk6wPvPJhE1ntAMGfMRSCy4e/+ZZHvX5Wt+0xuEZii5mLvoW1dM+AAEK7j 1l1VHI82ihnzMDKfQ0qwQIx/LrRstKs= -----END CERTIFICATE-----Generated at Wed May 13 12:33:55 2026 by rpki-client