$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a1de1923-7adb-3301-b9bb-9f4a65ce68c6.roa File: a1de1923-7adb-3301-b9bb-9f4a65ce68c6.roa (raw, json) Hash identifier: DFvmImBcdEVpSeCDSEaARD3vhvVr9cxr8mDvUPs7qsA= Subject key identifier: AD:FD:9E:8B:24:99:4C:7B:C3:07:41:2E:70:BE:65:B3:64:FD:79:54 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DA3E56CBE236D965524025280 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a1de1923-7adb-3301-b9bb-9f4a65ce68c6.roa Signing time: Mon 27 Apr 2026 01:00:24 +0000 ROA not before: Mon 27 Apr 2026 01:00:24 +0000 ROA not after: Sun 26 Jul 2026 01:00:24 +0000 asID: 834 IP address blocks: 66.92.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:e5:6c:be:23:6d:96:55:24:02:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 27 01:00:24 2026 GMT Not After : Jul 26 01:00:24 2026 GMT Subject: CN=8c53e1a7-e700-4a8c-9e5b-347dab581f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4d:5c:99:23:72:03:0f:05:b5:6b:d6:a0:59: 92:e9:0e:7f:9a:5e:db:0d:ff:66:ce:d7:b1:4d:8c: 67:bf:04:f5:70:6f:aa:b4:cb:8a:02:86:5f:8f:e8: 9c:83:dd:23:35:e0:f6:d7:ed:aa:ce:47:6f:f4:50: 4a:60:eb:43:25:59:e3:9a:1a:35:9d:7c:fa:c1:07: ba:19:8b:7a:1d:2e:cf:81:33:fa:3f:ed:95:54:3c: b0:d1:d2:02:ed:00:50:0c:db:89:fb:db:1e:8f:f9: ad:a5:3d:a8:af:0a:75:89:fb:d8:5b:af:0c:02:45: 16:e7:e7:89:69:da:cf:b1:98:81:3a:aa:46:8d:2e: f1:0b:80:6c:d5:19:80:16:19:5b:1f:37:82:91:6a: 3a:2d:53:f2:f7:44:4c:6e:9f:8d:8f:94:a3:a8:c4: f7:dc:2f:46:28:2c:c7:84:6f:12:c6:60:a7:a3:2a: 26:f2:8a:d6:16:64:83:8e:c5:f5:8d:cb:62:0a:e1: 8a:62:8a:b5:25:d2:d7:ae:8f:ce:c2:5b:46:bf:26: cb:54:20:0b:b1:16:f7:51:bd:fd:da:76:06:36:01: 24:10:ec:e4:f9:bb:6d:ba:70:e3:8d:75:11:d8:6a: a1:83:b3:21:0f:7f:ef:bf:b4:91:ba:52:62:e2:51: 1c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FD:9E:8B:24:99:4C:7B:C3:07:41:2E:70:BE:65:B3:64:FD:79:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a1de1923-7adb-3301-b9bb-9f4a65ce68c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ac:5d:eb:19:c4:19:32:24:39:e3:89:af:03:c9:5a:54:d9: 5f:36:12:a7:d1:49:d8:1a:6c:01:ec:cc:9f:fb:8c:8d:e2:c4: ba:36:de:9c:24:96:67:c5:ef:f7:27:7c:82:4c:d7:ca:9b:d9: 19:8b:47:81:64:39:8a:95:d3:d0:e6:a9:10:34:91:ce:a7:ec: fc:5e:c8:4a:89:9c:01:12:01:26:17:22:a3:19:ac:68:91:cb: fe:79:78:1b:49:90:d9:67:e3:35:6f:7b:95:12:48:ec:94:03: da:e7:17:d9:54:23:a5:e7:2e:37:52:8f:cd:78:5c:bc:8f:52: 78:32:13:f3:ad:13:8f:2d:26:5f:22:93:40:36:49:bb:dd:c6: ae:ec:64:36:63:a9:e4:6a:37:cf:bc:23:f8:1a:7f:bf:99:3e: 97:e7:71:e0:1a:53:09:0f:73:92:bf:c3:6d:9d:01:46:d7:c2: 10:84:70:32:0c:e8:61:1c:f0:6e:7f:e5:53:bc:66:b7:a4:5c: 70:26:41:c7:73:e5:54:a9:18:13:b3:48:48:61:4d:5d:3d:de: cc:fc:68:c7:55:dd:f6:d5:bf:d8:87:5d:e5:80:11:6e:be:bf: aa:fc:33:2d:f7:4c:91:7c:8e:d4:f5:49:bf:e7:00:28:70:12: d7:12:f7:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2j5Wy+I22WVSQCUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQyNzAxMDAyNFoXDTI2MDcyNjAxMDAyNFowLzEtMCsGA1UEAxMk OGM1M2UxYTctZTcwMC00YThjLTllNWItMzQ3ZGFiNTgxZjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE1cmSNyAw8FtWvWoFmS6Q5/ml7bDf9mztex TYxnvwT1cG+qtMuKAoZfj+icg90jNeD21+2qzkdv9FBKYOtDJVnjmho1nXz6wQe6 GYt6HS7PgTP6P+2VVDyw0dIC7QBQDNuJ+9sej/mtpT2orwp1ifvYW68MAkUW5+eJ adrPsZiBOqpGjS7xC4Bs1RmAFhlbHzeCkWo6LVPy90RMbp+Nj5SjqMT33C9GKCzH hG8SxmCnoyom8orWFmSDjsX1jctiCuGKYoq1JdLXro/OwltGvybLVCALsRb3Ub39 2nYGNgEkEOzk+bttunDjjXUR2Gqhg7MhD3/vv7SRulJi4lEcsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK39noskmUx7wwdBLnC+ZbNk/XlUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTFkZTE5MjMtN2FkYi0z MzAxLWI5YmItOWY0YTY1Y2U2OGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlz4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6sXesZxBkyJDnjia8DyVpU2V82EqfRSdgabAHszJ/7jI3ixLo23pwk lmfF7/cnfIJM18qb2RmLR4FkOYqV09DmqRA0kc6n7PxeyEqJnAESASYXIqMZrGiR y/55eBtJkNln4zVve5USSOyUA9rnF9lUI6XnLjdSj814XLyPUngyE/OtE48tJl8i k0A2Sbvdxq7sZDZjqeRqN8+8I/gaf7+ZPpfnceAaUwkPc5K/w22dAUbXwhCEcDIM 6GEc8G5/5VO8ZrekXHAmQcdz5VSpGBOzSEhhTV093sz8aMdV3fbVv9iHXeWAEW6+ v6r8My33TJF8jtT1Sb/nAChwEtcS9xk= -----END CERTIFICATE-----Generated at Wed May 13 13:19:08 2026 by rpki-client