$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/967d75f4-611f-35cb-91b4-828de1fa4954.roa File: 967d75f4-611f-35cb-91b4-828de1fa4954.roa (raw, json) Hash identifier: XMhzTTdNuD5dMKuNoXMFulrc1Br53lLqIOIH+M7MLB8= Subject key identifier: 1C:E2:F4:05:07:60:DE:3A:50:F0:F0:9B:D4:F5:06:77:7B:14:27:77 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DB67C550F84EA36237D726A40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/967d75f4-611f-35cb-91b4-828de1fa4954.roa Signing time: Sun 03 May 2026 16:49:13 +0000 ROA not before: Sun 03 May 2026 16:49:13 +0000 ROA not after: Sat 01 Aug 2026 16:49:13 +0000 asID: 834 IP address blocks: 64.204.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b6:7c:55:0f:84:ea:36:23:7d:72:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 3 16:49:13 2026 GMT Not After : Aug 1 16:49:13 2026 GMT Subject: CN=63564f5a-95b2-4a0f-be0b-06c68661e1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:21:68:1b:8b:a2:c9:ac:f6:1e:8f:95:f9:f0: 0f:91:7a:09:be:20:e6:59:fd:f8:d3:6b:dc:88:a9: de:38:23:9d:69:5e:b4:89:78:a4:34:4d:71:92:64: fb:93:26:6d:9a:30:48:b4:6f:f2:70:42:5c:b7:b5: 64:cb:72:e4:2c:3d:f8:d7:03:26:60:c7:6d:3f:f2: dd:06:32:e9:4c:84:96:a6:ae:20:01:3c:0f:45:d2: 8d:28:66:25:bd:dc:48:ff:93:c9:d7:53:b0:9a:c0: b1:f9:d8:7a:ec:65:c1:0f:ab:45:73:8e:17:da:66: eb:f3:f3:49:72:ab:23:bd:7d:42:7a:c7:5a:29:4f: 37:a0:32:39:7b:b7:c0:54:54:9d:45:12:fb:8f:44: fc:5a:87:76:1e:8d:8a:9b:a7:33:87:51:f5:97:f7: df:f0:04:75:1d:12:75:dc:04:40:af:9b:12:ec:35: c4:0b:fd:52:29:69:36:a7:43:83:86:b4:3e:e0:78: b7:06:5d:ec:22:22:e1:a0:99:0d:1f:82:7f:c5:99: ac:b9:af:7c:f9:b8:95:2c:89:11:c3:7e:54:c2:6b: c4:41:46:e5:35:60:f5:1d:1a:71:30:5e:4a:cc:6e: d9:7f:0a:68:c3:18:77:30:f7:da:f4:83:a9:e4:cc: 38:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E2:F4:05:07:60:DE:3A:50:F0:F0:9B:D4:F5:06:77:7B:14:27:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/967d75f4-611f-35cb-91b4-828de1fa4954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:f1:8d:10:29:fe:15:21:dd:93:4c:ca:a9:2f:74:03:e7:e0: 95:c4:28:dc:78:83:7f:b4:78:9e:58:d7:ef:39:44:2d:df:e7: 69:50:17:9e:8b:e6:7c:de:29:a5:ff:e6:49:76:f8:9e:fe:24: 97:11:85:51:f6:90:80:16:3c:54:55:68:83:50:ad:2f:af:1b: 66:00:cc:73:60:79:31:c1:a3:1c:64:e0:ca:9e:0f:dc:41:79: 6f:85:4a:02:9e:e9:15:8c:49:e0:18:ed:63:58:c0:fd:69:5f: 10:21:eb:7f:26:71:44:85:1e:7a:ee:35:80:8c:ed:2c:6e:4a: 41:51:51:2e:af:26:3e:aa:29:5e:21:45:04:2a:af:df:f3:72: 8e:96:f4:13:3a:2c:df:d0:e3:45:3d:67:2d:05:c5:7c:a8:d0: 25:dd:ee:93:78:02:61:bb:a8:f7:db:d6:db:76:80:24:8e:82: a7:e3:cb:de:c3:f6:d7:1e:60:e4:b2:d6:b9:42:a0:1b:bc:c1: b1:46:5a:98:85:a8:af:f7:4d:78:4d:80:86:b4:c5:41:a6:d3: b9:eb:11:ff:4e:93:7f:ab:94:b8:e0:20:60:6d:58:64:ac:5a: 40:ab:18:6d:cd:f8:e8:a5:05:db:6c:1c:d9:83:63:e6:01:45: 5f:ca:dc:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE22fFUPhOo2I31yakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUwMzE2NDkxM1oXDTI2MDgwMTE2NDkxM1owLzEtMCsGA1UEAxMk NjM1NjRmNWEtOTViMi00YTBmLWJlMGItMDZjNjg2NjFlMWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSFoG4uiyaz2Ho+V+fAPkXoJviDmWf3402vc iKneOCOdaV60iXikNE1xkmT7kyZtmjBItG/ycEJct7Vky3LkLD341wMmYMdtP/Ld BjLpTISWpq4gATwPRdKNKGYlvdxI/5PJ11OwmsCx+dh67GXBD6tFc44X2mbr8/NJ cqsjvX1CesdaKU83oDI5e7fAVFSdRRL7j0T8Wod2Ho2Km6czh1H1l/ff8AR1HRJ1 3ARAr5sS7DXEC/1SKWk2p0ODhrQ+4Hi3Bl3sIiLhoJkNH4J/xZmsua98+biVLIkR w35UwmvEQUblNWD1HRpxMF5KzG7Zfwpowxh3MPfa9IOp5Mw4WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzi9AUHYN46UPDwm9T1Bnd7FCd3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTY3ZDc1ZjQtNjExZi0z NWNiLTkxYjQtODI4ZGUxZmE0OTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMxBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzxjRAp/hUh3ZNMyqkvdAPn4JXEKNx4g3+0eJ5Y1+85RC3f52lQF56L 5nzeKaX/5kl2+J7+JJcRhVH2kIAWPFRVaINQrS+vG2YAzHNgeTHBoxxk4MqeD9xB eW+FSgKe6RWMSeAY7WNYwP1pXxAh638mcUSFHnruNYCM7SxuSkFRUS6vJj6qKV4h RQQqr9/zco6W9BM6LN/Q40U9Zy0FxXyo0CXd7pN4AmG7qPfb1tt2gCSOgqfjy97D 9tceYOSy1rlCoBu8wbFGWpiFqK/3TXhNgIa0xUGm07nrEf9Ok3+rlLjgIGBtWGSs WkCrGG3N+OilBdtsHNmDY+YBRV/K3Ec= -----END CERTIFICATE-----Generated at Wed May 13 13:23:57 2026 by rpki-client