$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/852b7347-0414-387a-86a5-d122f726f04b.roa File: 852b7347-0414-387a-86a5-d122f726f04b.roa (raw, json) Hash identifier: 6Ad0ijs4UGA37bsU1U9/eeTjrRVyuHGBxvhPQSMJlkE= Subject key identifier: 49:1F:D1:16:7A:2C:40:B3:B7:C3:92:E8:67:D7:BF:AE:C5:7B:27:4A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D34E215B37D39CDC7E7ADB440 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/852b7347-0414-387a-86a5-d122f726f04b.roa Signing time: Wed 18 Mar 2026 06:39:09 +0000 ROA not before: Wed 18 Mar 2026 06:39:09 +0000 ROA not after: Tue 16 Jun 2026 06:39:09 +0000 asID: 11059 IP address blocks: 64.204.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:e2:15:b3:7d:39:cd:c7:e7:ad:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 18 06:39:09 2026 GMT Not After : Jun 16 06:39:09 2026 GMT Subject: CN=97d24af0-09d5-4b7c-be41-a7173a847751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b9:e0:dd:f2:3f:e7:fc:ca:d2:06:86:23:78: eb:c1:88:ff:52:10:65:9b:c6:80:42:ca:25:aa:54: c3:35:cc:5e:b9:38:5d:3d:98:49:cd:49:1d:94:a2: db:42:52:4c:d4:b5:d7:2f:81:04:1c:1b:6c:83:a0: 2a:17:e4:65:47:fa:4d:f9:a6:e6:8a:6f:50:45:62: 16:da:36:57:66:10:0c:2d:48:e5:54:5f:71:b3:7e: a1:82:85:f2:cd:26:78:03:25:34:c8:65:b8:94:d1: 19:6c:e3:2c:4c:6f:f5:a7:df:fb:db:70:a0:10:11: 80:e7:58:6b:f6:a3:04:79:f0:72:0a:fd:5d:a0:45: b0:99:b1:91:a8:db:c1:37:14:8e:27:23:c9:7c:b5: b3:f4:16:69:3e:3f:9e:47:33:20:f7:68:51:42:59: b2:7f:e6:1c:4c:b3:61:9d:16:4d:f9:b1:ee:ad:f6: 6e:6a:ab:8c:c0:4b:be:79:8f:85:ed:26:a3:69:33: 41:1f:0a:98:0b:99:8b:40:0d:21:18:09:ad:66:af: 91:86:bc:e6:5f:c3:d3:34:62:f4:93:2f:12:4f:a8: 69:11:11:35:62:5c:c9:65:f4:68:0e:75:0d:4f:6b: e3:65:b4:9e:9d:cc:68:d7:be:16:1d:94:4e:cc:f6: 2b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1F:D1:16:7A:2C:40:B3:B7:C3:92:E8:67:D7:BF:AE:C5:7B:27:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/852b7347-0414-387a-86a5-d122f726f04b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:e2:64:7c:de:ac:e2:38:9c:7e:7e:3d:d6:3d:35:6a:aa:09: 98:42:dd:fd:03:c7:eb:f6:55:b8:8e:97:78:aa:b1:13:b0:c7: f6:ef:3f:a9:93:08:5a:9d:4c:86:43:2f:cf:bb:c1:62:31:c7: 66:77:ce:5c:d2:4d:0d:43:4d:b3:aa:88:0e:d7:d2:3b:a1:52: 55:6a:1b:70:45:88:11:4a:36:62:4b:c7:fe:58:06:30:59:80: a9:ce:d5:c9:47:51:b8:ae:ce:49:e7:2a:2c:99:df:53:72:83: 21:f2:82:e7:cc:62:53:db:a4:37:3a:1a:3a:bb:c9:06:1f:81: d4:fe:9d:db:49:76:54:3c:85:dd:6d:0f:a0:00:d8:ae:c6:7c: da:41:06:dd:e6:af:c7:36:69:06:6e:66:76:a3:dd:76:0a:9c: 78:c2:eb:ab:06:64:1c:3d:20:c9:0a:f3:81:03:d1:d4:eb:f1: 92:50:2d:7b:56:21:ca:fe:bd:73:0d:ef:39:53:59:2e:ab:88: f6:7a:77:0f:a1:70:48:98:fc:86:42:3e:e7:18:a4:f5:31:f5: ab:b3:2c:1c:70:b2:1d:ca:6b:bb:c1:8e:69:f4:9b:14:d8:db: 19:19:ca:43:32:eb:10:68:1f:4c:23:87:90:a2:23:c8:e9:5a: bd:97:ba:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE004hWzfTnNx+ettEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxODA2MzkwOVoXDTI2MDYxNjA2MzkwOVowLzEtMCsGA1UEAxMk OTdkMjRhZjAtMDlkNS00YjdjLWJlNDEtYTcxNzNhODQ3NzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rng3fI/5/zK0gaGI3jrwYj/UhBlm8aAQsol qlTDNcxeuThdPZhJzUkdlKLbQlJM1LXXL4EEHBtsg6AqF+RlR/pN+abmim9QRWIW 2jZXZhAMLUjlVF9xs36hgoXyzSZ4AyU0yGW4lNEZbOMsTG/1p9/723CgEBGA51hr 9qMEefByCv1doEWwmbGRqNvBNxSOJyPJfLWz9BZpPj+eRzMg92hRQlmyf+YcTLNh nRZN+bHurfZuaquMwEu+eY+F7SajaTNBHwqYC5mLQA0hGAmtZq+RhrzmX8PTNGL0 ky8ST6hpERE1YlzJZfRoDnUNT2vjZbSencxo174WHZROzPYrrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkf0RZ6LECzt8OS6GfXv67FeydKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODUyYjczNDctMDQxNC0z ODdhLTg2YTUtZDEyMmY3MjZmMDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQMyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3iZHzerOI4nH5+PdY9NWqqCZhC3f0Dx+v2VbiOl3iqsROwx/bvP6mT CFqdTIZDL8+7wWIxx2Z3zlzSTQ1DTbOqiA7X0juhUlVqG3BFiBFKNmJLx/5YBjBZ gKnO1clHUbiuzknnKiyZ31NygyHygufMYlPbpDc6Gjq7yQYfgdT+ndtJdlQ8hd1t D6AA2K7GfNpBBt3mr8c2aQZuZnaj3XYKnHjC66sGZBw9IMkK84ED0dTr8ZJQLXtW Icr+vXMN7zlTWS6riPZ6dw+hcEiY/IZCPucYpPUx9auzLBxwsh3Ka7vBjmn0mxTY 2xkZykMy6xBoH0wjh5CiI8jpWr2Xup4= -----END CERTIFICATE-----Generated at Thu Mar 26 19:02:02 2026 by rpki-client