$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ac2e6252-7ec6-39d5-bc42-a1224a7dd4e8.roa File: ac2e6252-7ec6-39d5-bc42-a1224a7dd4e8.roa (raw, json) Hash identifier: R3CXoNnl5WV+Q87+GVJCxWtgJBe/uz3+mL1Rm35o+CI= Subject key identifier: EA:D2:79:1E:38:47:F0:BF:90:8A:A7:2E:31:C4:E9:27:89:34:02:64 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D465F9CDA4D0166DCC8D6B3A0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ac2e6252-7ec6-39d5-bc42-a1224a7dd4e8.roa Signing time: Tue 24 Mar 2026 13:00:41 +0000 ROA not before: Tue 24 Mar 2026 13:00:41 +0000 ROA not after: Mon 22 Jun 2026 13:00:41 +0000 asID: 9304 IP address blocks: 64.8.255.0/24 maxlen: 24 206.217.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:5f:9c:da:4d:01:66:dc:c8:d6:b3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 24 13:00:41 2026 GMT Not After : Jun 22 13:00:41 2026 GMT Subject: CN=cea5b8b7-7b37-4918-90f9-e35e1fe8646e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a2:ac:b6:ae:c3:7d:f6:24:c4:8b:7c:3e:e0: dc:d3:1f:c8:f9:cf:3e:9d:3f:34:e4:a9:55:13:59: 1a:b8:97:04:9c:1b:83:fc:4b:dc:7e:5b:22:48:82: 04:f0:12:d6:72:8d:79:ea:6a:5f:2f:0e:5b:06:81: 9b:54:d5:70:db:23:dc:12:e5:84:fa:51:24:8b:c5: a2:11:9d:2d:64:0e:d4:c6:7e:e0:b1:b7:c3:2e:c1: 86:91:24:a6:78:95:af:7c:da:c4:0f:1f:1b:6f:59: b0:4a:6e:f0:08:f8:23:21:38:87:f5:a9:21:d8:36: 9f:b0:c2:3d:be:55:7e:7e:2f:b2:1c:bf:45:df:6c: f8:92:62:46:f9:61:d1:3c:40:e4:0d:e6:22:af:df: dc:d6:98:7b:74:e4:92:2c:b2:5a:ac:8b:15:0c:db: 98:11:f7:6d:84:79:82:6d:74:b3:3b:48:44:2e:1b: 79:e2:69:5c:45:fa:ca:cd:cd:e1:02:ad:9e:27:64: 60:a1:9f:e0:f3:e5:5d:d9:11:07:72:87:63:c4:98: 0e:0f:e7:ea:a9:cf:7f:d7:43:02:a9:b7:ba:5d:ba: 08:62:02:30:65:42:6c:cb:4b:7a:21:59:fb:cc:20: eb:69:d2:00:c2:fd:11:d4:f6:81:27:d9:19:38:d8: 3b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D2:79:1E:38:47:F0:BF:90:8A:A7:2E:31:C4:E9:27:89:34:02:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ac2e6252-7ec6-39d5-bc42-a1224a7dd4e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.8.255.0/24 206.217.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:c9:81:79:47:22:0b:82:1a:6a:d8:33:7c:99:4d:e0:93:53: 8c:53:d5:d8:62:95:01:e0:16:0b:ea:5f:06:c9:17:c1:21:74: 53:82:ec:6d:6c:4a:ab:8c:39:6b:5a:12:fb:aa:f2:8b:eb:37: c9:40:fe:13:50:2f:c4:ee:4f:86:95:c0:45:6c:b7:4e:8b:51: 5c:06:38:58:68:7b:5d:78:c0:7b:bd:d0:22:67:70:db:67:11: bc:ef:c4:4e:e1:35:18:19:48:85:e4:b4:55:3b:b4:e7:e5:4a: 71:6a:58:f4:92:f5:cd:41:de:2e:70:53:ff:1e:8f:52:52:9f: 1a:d6:0a:d5:a1:27:40:e0:e0:5e:93:dc:2a:b0:35:04:71:b2: de:5b:a5:cb:b1:07:3e:e7:d6:b1:3a:c7:45:36:c7:1b:ee:1f: 11:b3:2a:70:07:ed:95:ea:1d:d5:29:80:16:15:fe:bd:8e:3b: d7:3b:e0:c1:6b:f0:ec:1c:0c:6a:63:c8:14:41:40:0c:eb:03: 23:c4:97:6a:f8:4c:10:e6:bd:01:c5:45:ef:79:85:e3:35:a3: 4b:d3:a6:e3:9a:90:ff:45:23:45:77:c5:b2:9f:39:4f:f0:94: f4:2a:39:3a:72:82:e2:37:2b:2d:b9:1f:ff:d9:33:fa:b4:e0: 6b:5c:63:c2 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1GX5zaTQFm3MjWs6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyNDEzMDA0MVoXDTI2MDYyMjEzMDA0MVowLzEtMCsGA1UEAxMk Y2VhNWI4YjctN2IzNy00OTE4LTkwZjktZTM1ZTFmZTg2NDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqKstq7DffYkxIt8PuDc0x/I+c8+nT805KlV E1kauJcEnBuD/EvcflsiSIIE8BLWco156mpfLw5bBoGbVNVw2yPcEuWE+lEki8Wi EZ0tZA7Uxn7gsbfDLsGGkSSmeJWvfNrEDx8bb1mwSm7wCPgjITiH9akh2DafsMI9 vlV+fi+yHL9F32z4kmJG+WHRPEDkDeYir9/c1ph7dOSSLLJarIsVDNuYEfdthHmC bXSzO0hELht54mlcRfrKzc3hAq2eJ2RgoZ/g8+Vd2REHcodjxJgOD+fqqc9/10MC qbe6XboIYgIwZUJsy0t6IVn7zCDradIAwv0R1PaBJ9kZONg7kwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOrSeR44R/C/kIqnLjHE6SeJNAJkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWMyZTYyNTItN2VjNi0z OWQ1LWJjNDItYTEyMjRhN2RkNGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQAj/AwQA ztlCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKrJgXlHIguCGmrYM3yZTeCTU4xT1dhilQHgFgvqXwbJF8Eh dFOC7G1sSquMOWtaEvuq8ovrN8lA/hNQL8TuT4aVwEVst06LUVwGOFhoe114wHu9 0CJncNtnEbzvxE7hNRgZSIXktFU7tOflSnFqWPSS9c1B3i5wU/8ej1JSnxrWCtWh J0Dg4F6T3CqwNQRxst5bpcuxBz7n1rE6x0U2xxvuHxGzKnAH7ZXqHdUpgBYV/r2O O9c74MFr8OwcDGpjyBRBQAzrAyPEl2r4TBDmvQHFRe95heM1o0vTpuOakP9FI0V3 xbKfOU/wlPQqOTpyguI3Ky25H//ZM/q04GtcY8I= -----END CERTIFICATE-----Generated at Thu Mar 26 05:25:23 2026 by rpki-client