$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/823c652d-1ac2-3af0-b583-635db5b71488.roa File: 823c652d-1ac2-3af0-b583-635db5b71488.roa (raw, json) Hash identifier: uZG97oYC/oVYsVMbggcSf9F73gipI9xZ4v6uF2uuCto= Subject key identifier: 21:18:58:37:67:A0:82:B0:95:E4:15:4D:B5:41:DA:EB:C2:97:8E:F0 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DB05EE0F374CECA4A5C497580 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/823c652d-1ac2-3af0-b583-635db5b71488.roa Signing time: Fri 01 May 2026 12:15:01 +0000 ROA not before: Fri 01 May 2026 12:15:01 +0000 ROA not after: Thu 30 Jul 2026 12:15:01 +0000 asID: 834 IP address blocks: 64.204.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b0:5e:e0:f3:74:ce:ca:4a:5c:49:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 1 12:15:01 2026 GMT Not After : Jul 30 12:15:01 2026 GMT Subject: CN=44f6119a-8856-4081-957a-1f4294fcd794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4f:02:11:4a:95:96:cd:2b:b4:17:18:98:fe: a5:db:dd:6f:33:89:cd:76:19:de:40:9e:f7:79:a2: e2:51:1d:c3:b2:24:ca:dc:41:da:2e:27:5c:c5:79: 1b:27:64:28:41:a1:6d:15:7d:fd:f4:14:57:50:71: 67:46:b4:d5:eb:32:f2:06:30:af:5b:6a:d1:b8:28: 44:e5:2c:2c:5b:0a:d1:4e:07:2e:c5:2d:b8:72:96: 91:c8:f2:8c:93:26:79:1d:2d:ab:05:42:c2:7d:19: 2f:61:22:65:c9:06:3c:01:95:87:61:be:0e:51:ca: 81:0b:23:a1:8f:8a:db:9b:7a:a8:10:54:60:ea:f5: ec:e3:da:4d:32:3d:94:49:0a:b0:fa:d6:f7:a3:1f: 2a:57:7c:1f:e9:4e:cd:55:b4:ec:aa:32:85:69:96: 8f:5c:d2:a8:ee:ba:53:10:7e:69:9b:b0:67:50:af: 54:d6:9b:2b:aa:dc:c7:6a:08:fb:58:ac:13:82:27: af:e6:a6:9e:eb:32:c2:e3:d9:28:46:5e:dd:7d:92: 6a:fd:b5:e9:76:28:ae:75:24:a9:97:5e:81:e5:56: d7:ca:2e:14:b4:6f:d7:c1:34:21:b8:7d:da:6f:8b: 06:de:fa:14:e6:80:8d:16:26:5e:5c:6a:fa:54:f7: f3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:18:58:37:67:A0:82:B0:95:E4:15:4D:B5:41:DA:EB:C2:97:8E:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/823c652d-1ac2-3af0-b583-635db5b71488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.182.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:d5:68:45:df:18:bf:af:9d:28:db:b0:c4:8e:c5:2e:55:23: c9:39:38:a4:1a:95:d3:d6:f3:1b:47:6d:90:f8:6d:62:6e:aa: 37:a4:83:0b:2e:7b:5b:f4:c8:e3:8a:2b:9c:a4:d7:2c:3d:22: 31:4a:b1:63:eb:f1:a3:26:b9:f4:95:71:e0:b1:2c:cc:9a:f6: a3:17:2a:3d:14:61:57:7e:74:5d:bb:99:0b:d8:c5:bf:54:60: d6:b2:67:59:89:59:32:66:d8:35:b1:6b:fb:24:83:b8:14:f1: 6e:b1:d6:4c:a3:c2:0b:a0:8c:f2:96:d7:53:6b:2e:1c:72:b6: 2f:a7:d8:e9:31:80:69:23:fe:cf:e9:21:45:c6:47:6b:3e:6f: a6:6b:6f:57:60:e1:dd:1f:b3:20:55:83:53:30:bd:91:95:c3: 6c:2a:8d:74:9f:54:bc:bf:56:48:7c:28:2d:0b:d1:64:43:22: 61:6e:18:f7:ec:ce:0b:ae:bb:8e:26:fa:b5:a0:97:64:22:f1: a1:16:3c:a4:b7:64:85:63:fd:37:b2:a0:4f:c5:ad:94:88:8e: c1:14:02:69:d6:a3:5a:85:29:84:87:88:e8:86:45:1e:a5:4e: 79:37:ff:a8:24:8e:d6:40:33:aa:65:98:03:a6:f8:c3:c9:a7: 5b:97:72:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2wXuDzdM7KSlxJdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUwMTEyMTUwMVoXDTI2MDczMDEyMTUwMVowLzEtMCsGA1UEAxMk NDRmNjExOWEtODg1Ni00MDgxLTk1N2EtMWY0Mjk0ZmNkNzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk8CEUqVls0rtBcYmP6l291vM4nNdhneQJ73 eaLiUR3DsiTK3EHaLidcxXkbJ2QoQaFtFX399BRXUHFnRrTV6zLyBjCvW2rRuChE 5SwsWwrRTgcuxS24cpaRyPKMkyZ5HS2rBULCfRkvYSJlyQY8AZWHYb4OUcqBCyOh j4rbm3qoEFRg6vXs49pNMj2USQqw+tb3ox8qV3wf6U7NVbTsqjKFaZaPXNKo7rpT EH5pm7BnUK9U1psrqtzHagj7WKwTgiev5qae6zLC49koRl7dfZJq/bXpdiiudSSp l16B5VbXyi4UtG/XwTQhuH3ab4sG3voU5oCNFiZeXGr6VPfz7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEYWDdnoIKwleQVTbVB2uvCl47wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODIzYzY1MmQtMWFjMi0z YWYwLWI1ODMtNjM1ZGI1YjcxNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMy2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjVaEXfGL+vnSjbsMSOxS5VI8k5OKQaldPW8xtHbZD4bWJuqjekgwsu e1v0yOOKK5yk1yw9IjFKsWPr8aMmufSVceCxLMya9qMXKj0UYVd+dF27mQvYxb9U YNayZ1mJWTJm2DWxa/skg7gU8W6x1kyjwgugjPKW11NrLhxyti+n2OkxgGkj/s/p IUXGR2s+b6Zrb1dg4d0fsyBVg1MwvZGVw2wqjXSfVLy/Vkh8KC0L0WRDImFuGPfs zguuu44m+rWgl2Qi8aEWPKS3ZIVj/TeyoE/FrZSIjsEUAmnWo1qFKYSHiOiGRR6l Tnk3/6gkjtZAM6plmAOm+MPJp1uXcos= -----END CERTIFICATE-----Generated at Wed May 13 14:16:48 2026 by rpki-client