$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/95afe5d6-2f01-323d-99b8-c405a085d4f9.roa File: 95afe5d6-2f01-323d-99b8-c405a085d4f9.roa (raw, json) Hash identifier: IM9vna6QR92daXh2L5Dr8DtfFWik8kJgWN8LSW3k9Cg= Subject key identifier: C5:94:C1:10:9B:E2:3F:32:2C:C6:67:2D:C7:DC:E7:7C:B2:B1:3D:6D Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D0BD96B29E2ECAB5B8C848A40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/95afe5d6-2f01-323d-99b8-c405a085d4f9.roa Signing time: Tue 03 Mar 2026 13:53:32 +0000 ROA not before: Tue 03 Mar 2026 13:53:32 +0000 ROA not after: Mon 01 Jun 2026 12:53:32 +0000 asID: 2914 IP address blocks: 68.167.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:d9:6b:29:e2:ec:ab:5b:8c:84:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 3 13:53:32 2026 GMT Not After : Jun 1 12:53:32 2026 GMT Subject: CN=aa22e020-8587-4ce6-acdd-823478d0c426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c5:10:c5:3c:8b:b2:da:5c:9d:96:2d:36:18: 2a:41:83:56:bf:e6:28:f0:f7:6f:f7:1c:0c:a5:50: b7:08:0b:cb:13:16:98:c7:53:d0:77:00:0a:ce:47: c4:d0:8c:38:df:a7:52:ad:7f:a5:11:06:8f:b8:d4: 07:5b:44:56:3a:0f:de:73:68:fc:16:78:10:c5:1b: 5c:b4:40:5e:89:88:c2:0d:58:32:2c:55:4c:6b:91: d2:d2:7e:c7:f0:a0:c4:36:9b:bf:38:f7:38:2f:07: 13:a7:96:67:e3:df:66:87:53:3b:a7:25:ce:4c:a2: b0:de:b5:f1:b2:93:55:a4:9e:8b:07:57:23:1c:d6: 70:9e:21:80:40:7a:f2:da:9f:56:ce:b8:e9:04:b0: 66:df:0e:b2:8c:b9:14:90:9d:ac:19:04:a9:2b:4d: 8b:35:40:76:47:42:fa:a6:8c:e9:fe:5b:df:6e:fb: 7c:db:4e:93:15:71:65:45:8b:85:c1:b6:cc:ed:01: 22:7c:96:f1:74:4a:b3:94:5c:95:bc:81:5d:2d:6d: 18:1d:9f:6c:2d:39:7d:58:43:f1:02:c3:00:ec:e6: b0:61:c1:41:28:f6:8d:7b:8b:3b:1e:4a:6a:0c:07: 3a:a1:6d:cd:d5:cb:39:52:b0:f8:56:61:3a:88:b5: de:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:94:C1:10:9B:E2:3F:32:2C:C6:67:2D:C7:DC:E7:7C:B2:B1:3D:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/95afe5d6-2f01-323d-99b8-c405a085d4f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:88:5b:62:dc:c4:b1:e5:af:c5:a9:1b:1d:da:5f:38:a9:b9: 4c:71:07:53:0c:ac:2c:12:77:2f:47:ad:0d:3c:12:cb:f6:b3: 25:dd:c9:0b:49:dc:cb:95:db:0e:3b:bd:da:99:95:7a:c4:71: e8:f9:26:74:c4:a1:d6:59:1f:9f:73:fd:1a:9e:72:b1:a6:f0: 98:d3:91:f9:db:4d:0d:70:f9:7d:9e:43:3b:bf:30:55:5c:23: 52:7f:e1:70:4b:50:f5:7b:29:12:92:83:72:86:fb:4d:d6:9a: f6:5a:b2:96:e6:67:23:56:01:8b:3d:a3:16:41:f8:92:fe:87: ab:5b:52:d8:55:fe:6c:2b:d3:2c:29:f6:18:c9:a1:cc:d3:1f: bf:c4:08:f9:28:84:bc:c0:35:f8:39:82:0c:5e:0f:75:25:13: 75:a3:51:62:1b:83:ee:60:dd:36:e1:c7:39:6d:70:7c:3b:8d: cf:ab:0c:dd:3e:cc:c5:90:02:26:1d:0f:dc:e4:48:6f:02:e9: 1c:84:2e:1a:e6:95:14:a6:f7:10:df:68:6d:c2:8c:74:6c:c8: 87:93:be:ff:a7:94:dc:39:3c:25:a1:11:bc:c8:05:14:cb:d4: fb:e0:17:64:8c:25:77:6e:10:6d:3b:5b:ad:e4:13:7e:02:f4: 7a:02:0c:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0L2Wsp4uyrW4yEikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwMzEzNTMzMloXDTI2MDYwMTEyNTMzMlowLzEtMCsGA1UEAxMk YWEyMmUwMjAtODU4Ny00Y2U2LWFjZGQtODIzNDc4ZDBjNDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMUQxTyLstpcnZYtNhgqQYNWv+Yo8Pdv9xwM pVC3CAvLExaYx1PQdwAKzkfE0Iw436dSrX+lEQaPuNQHW0RWOg/ec2j8FngQxRtc tEBeiYjCDVgyLFVMa5HS0n7H8KDENpu/OPc4LwcTp5Zn499mh1M7pyXOTKKw3rXx spNVpJ6LB1cjHNZwniGAQHry2p9WzrjpBLBm3w6yjLkUkJ2sGQSpK02LNUB2R0L6 pozp/lvfbvt8206TFXFlRYuFwbbM7QEifJbxdEqzlFyVvIFdLW0YHZ9sLTl9WEPx AsMA7OawYcFBKPaNe4s7HkpqDAc6oW3N1cs5UrD4VmE6iLXesQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWUwRCb4j8yLMZnLcfc53yysT1tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTVhZmU1ZDYtMmYwMS0z MjNkLTk5YjgtYzQwNWEwODVkNGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKcEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALmIW2LcxLHlr8WpGx3aXzipuUxxB1MMrCwSdy9HrQ08Esv2syXdyQtJ 3MuV2w47vdqZlXrEcej5JnTEodZZH59z/RqecrGm8JjTkfnbTQ1w+X2eQzu/MFVc I1J/4XBLUPV7KRKSg3KG+03WmvZaspbmZyNWAYs9oxZB+JL+h6tbUthV/mwr0ywp 9hjJoczTH7/ECPkohLzANfg5ggxeD3UlE3WjUWIbg+5g3TbhxzltcHw7jc+rDN0+ zMWQAiYdD9zkSG8C6RyELhrmlRSm9xDfaG3CjHRsyIeTvv+nlNw5PCWhEbzIBRTL 1PvgF2SMJXduEG07W63kE34C9HoCDIk= -----END CERTIFICATE-----Generated at Thu Mar 26 17:59:57 2026 by rpki-client