$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9dd31c80-cedf-3578-af2f-af7df90f3d39.roa File: 9dd31c80-cedf-3578-af2f-af7df90f3d39.roa (raw, json) Hash identifier: sX/M8b4Uib2HQKetQoc1V34crUpsMz0GLJH3fKKBTqI= Subject key identifier: 52:1A:90:35:12:DE:3D:BD:50:93:80:71:8E:25:12:CF:44:55:55:44 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DCC198C61EF2B7D95AFEB5980 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9dd31c80-cedf-3578-af2f-af7df90f3d39.roa Signing time: Mon 11 May 2026 10:37:57 +0000 ROA not before: Mon 11 May 2026 10:37:57 +0000 ROA not after: Sun 09 Aug 2026 10:37:57 +0000 asID: 29802 IP address blocks: 64.204.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cc:19:8c:61:ef:2b:7d:95:af:eb:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 11 10:37:57 2026 GMT Not After : Aug 9 10:37:57 2026 GMT Subject: CN=f9cf77fa-10cf-4f76-b240-f98b6e4d658c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:87:96:98:69:c5:23:8b:12:58:5d:31:80:42: d0:20:73:39:c0:8a:b1:09:fa:0f:27:a4:06:1b:a6: 3d:18:18:17:0d:c8:55:14:52:2b:3c:ac:a2:02:e5: 1f:b2:9a:8e:12:76:56:3f:3d:cd:54:4f:f3:60:85: 63:a8:1f:7b:de:fc:05:d8:22:3b:3a:9c:16:44:53: db:1e:81:32:c9:db:83:e9:a3:41:d0:6e:b7:9b:41: 6c:81:03:53:6f:b5:d9:83:be:a5:2d:76:04:d6:cc: 57:a4:bf:be:be:26:88:f7:db:f6:58:73:ab:d9:1c: 83:8b:2d:e8:d5:8f:3a:07:1f:18:98:cf:19:06:f2: 4e:1f:af:c2:e4:49:f3:7d:77:0e:d5:f3:c2:31:63: 0c:c5:ab:12:33:f4:d3:7c:e6:f3:6d:d1:72:58:60: 79:e8:08:c7:69:85:ce:4f:97:8e:b7:34:13:c4:d4: 45:34:e3:69:92:d5:b5:2c:5b:3c:6d:ba:6b:58:52: 73:f9:11:f7:44:cf:9f:90:b4:c6:64:f1:36:ab:19: 6a:4e:65:e3:f7:1b:f2:1a:56:97:cb:3d:9e:91:96: a6:1f:6b:32:4d:3d:c7:d2:bf:60:57:e0:7f:53:94: c4:00:04:7e:5f:e4:38:bb:00:07:0c:6d:b5:b3:3a: a2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1A:90:35:12:DE:3D:BD:50:93:80:71:8E:25:12:CF:44:55:55:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9dd31c80-cedf-3578-af2f-af7df90f3d39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:55:f1:e5:06:05:aa:bc:d0:b3:f1:e4:d4:79:9f:e0:39:00: 37:05:59:83:ea:6f:c1:8b:db:ac:92:bd:84:1c:93:f3:3c:f1: 8e:b8:3f:e7:b4:3f:14:0e:7f:1d:8a:5e:76:70:6d:03:e2:af: 00:45:2c:df:df:85:a1:79:e7:08:52:a7:80:a1:88:49:82:18: e4:35:61:ed:8b:6e:8e:ca:68:21:08:a1:cf:fa:dd:68:b7:73: e7:ef:24:42:dd:74:d0:37:04:e9:f2:b4:3d:1c:1e:4b:62:3f: 09:33:32:cd:90:04:39:0e:a4:40:c9:db:5c:ef:f2:52:71:d8: 38:d2:50:92:89:5a:4e:f0:3d:da:e0:b2:7b:d0:9d:24:40:40: 5f:87:b4:52:9f:75:86:9b:d8:bb:fe:d1:71:99:8f:e4:09:1b: 7a:1e:89:3f:e6:8a:04:e0:99:76:69:a9:da:c2:dd:b1:84:8e: cf:55:96:25:91:b6:58:6d:88:2c:28:4d:fe:cc:73:ce:2b:87: 17:a9:41:6a:06:da:d8:fe:f7:d8:28:6d:6a:f6:59:41:70:90: 02:30:d5:ca:0e:1c:61:f0:d3:70:4a:3f:04:4a:e3:ed:5a:bd: 21:67:60:b0:f6:7d:08:dc:23:78:65:67:df:2b:95:bc:87:36: 47:05:c5:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3MGYxh7yt9la/rWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUxMTEwMzc1N1oXDTI2MDgwOTEwMzc1N1owLzEtMCsGA1UEAxMk ZjljZjc3ZmEtMTBjZi00Zjc2LWIyNDAtZjk4YjZlNGQ2NThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYeWmGnFI4sSWF0xgELQIHM5wIqxCfoPJ6QG G6Y9GBgXDchVFFIrPKyiAuUfspqOEnZWPz3NVE/zYIVjqB973vwF2CI7OpwWRFPb HoEyyduD6aNB0G63m0FsgQNTb7XZg76lLXYE1sxXpL++viaI99v2WHOr2RyDiy3o 1Y86Bx8YmM8ZBvJOH6/C5EnzfXcO1fPCMWMMxasSM/TTfObzbdFyWGB56AjHaYXO T5eOtzQTxNRFNONpktW1LFs8bbprWFJz+RH3RM+fkLTGZPE2qxlqTmXj9xvyGlaX yz2ekZamH2syTT3H0r9gV+B/U5TEAAR+X+Q4uwAHDG21szqi8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIakDUS3j29UJOAcY4lEs9EVVVEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWRkMzFjODAtY2VkZi0z NTc4LWFmMmYtYWY3ZGY5MGYzZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMyFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFV8eUGBaq80LPx5NR5n+A5ADcFWYPqb8GL26ySvYQck/M88Y64P+e0 PxQOfx2KXnZwbQPirwBFLN/fhaF55whSp4ChiEmCGOQ1Ye2Lbo7KaCEIoc/63Wi3 c+fvJELddNA3BOnytD0cHktiPwkzMs2QBDkOpEDJ21zv8lJx2DjSUJKJWk7wPdrg snvQnSRAQF+HtFKfdYab2Lv+0XGZj+QJG3oeiT/migTgmXZpqdrC3bGEjs9VliWR tlhtiCwoTf7Mc84rhxepQWoG2tj+99gobWr2WUFwkAIw1coOHGHw03BKPwRK4+1a vSFnYLD2fQjcI3hlZ98rlbyHNkcFxW8= -----END CERTIFICATE-----Generated at Wed May 13 12:01:45 2026 by rpki-client