$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aff91e4b-d022-32c6-ba4d-df487eef8a86.roa File: aff91e4b-d022-32c6-ba4d-df487eef8a86.roa (raw, json) Hash identifier: 9AEloXpqTOtIY55ELruRjW0KZDGIwpAmXMqeZekuoSQ= Subject key identifier: 3A:CA:FF:54:E8:0F:0D:0F:82:1F:77:1A:BA:CA:76:8C:14:A4:CD:62 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D8AC55CE38A66079B7C76BE00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aff91e4b-d022-32c6-ba4d-df487eef8a86.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 834 IP address blocks: 64.204.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:5c:e3:8a:66:07:9b:7c:76:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=45bee7ad-c439-4094-8efc-09349a04b8b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:23:f6:ad:e5:04:9b:33:75:fd:7f:41:77:bd: 74:07:87:52:9e:3a:76:d9:d9:1a:bc:83:b1:30:8b: ee:1a:95:ff:33:32:01:36:31:3d:0e:4b:62:e7:26: 20:e7:aa:9c:65:99:0e:13:a7:52:73:22:14:fa:c7: 7d:fd:15:dd:22:cb:33:8f:2f:2c:cd:7f:a8:b8:b6: d5:51:3b:a6:88:b0:04:24:38:6a:ae:2b:51:50:c8: c1:7f:ef:1f:3d:ef:7c:96:84:13:6f:29:48:1a:ec: 6e:c3:f8:68:7c:b7:aa:48:8e:43:52:f1:85:56:9f: b7:af:2b:83:7f:f5:4d:c6:77:ef:ef:3c:54:5e:68: a2:29:3c:65:f4:9b:f3:27:ea:64:ec:3f:cd:86:37: e2:02:b2:8d:8c:dc:e6:19:b9:06:91:71:71:c9:1a: 82:6b:28:2c:fe:4c:32:8b:2e:07:99:bd:de:61:93: 9a:61:13:21:ae:6c:7c:68:54:df:e4:28:57:b3:a6: ba:71:47:be:9f:a5:d8:fd:ba:cd:26:c1:30:53:81: 1a:9b:e1:d0:8e:7b:88:42:ce:1b:10:63:45:a6:67: 94:39:49:58:28:95:9c:f4:99:a6:b6:af:21:d4:72: 2f:ed:53:70:43:c0:44:ca:e1:29:c3:57:cd:21:7b: e4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:CA:FF:54:E8:0F:0D:0F:82:1F:77:1A:BA:CA:76:8C:14:A4:CD:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aff91e4b-d022-32c6-ba4d-df487eef8a86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:bd:c6:2b:82:4d:e4:8a:dd:b1:89:cd:a3:e4:6d:c4:f7:07: 4c:5c:4b:9f:e5:7b:e2:0d:ae:26:9a:67:db:da:0a:63:5a:b2: fa:da:44:8c:71:e4:9f:0a:1a:d4:a7:c1:02:05:b8:ea:9b:09: a3:7d:14:e8:92:90:80:d1:e0:01:6f:c1:fa:63:59:74:f1:1b: 1c:2d:2b:6a:a7:a8:4b:72:af:c1:b1:d2:91:ce:40:fc:88:57: 27:98:a2:6a:73:00:6a:aa:f4:8b:a2:db:bb:e4:43:8a:3c:58: 2a:65:87:fc:04:12:3e:12:fa:0b:e4:e5:5d:2e:51:c4:43:c2: 57:9f:fc:10:71:2c:39:93:2e:96:4b:a6:f2:2b:31:d6:f3:ff: 3f:6d:ba:e6:ff:42:f4:e2:c4:25:e9:6e:09:78:bd:c3:74:f7: 0c:cf:13:71:3c:14:66:7e:48:c1:8f:5f:a0:33:32:ec:5e:ce: a1:22:3b:e6:cd:43:9a:3f:21:29:6a:11:0d:09:a6:d3:23:00: 04:f1:e6:b4:ae:bd:52:30:be:4e:f8:0d:cc:6b:c7:79:e4:b5: 2a:00:a5:25:9e:80:bd:b1:74:14:61:b8:db:b2:82:06:9f:68: a6:71:b7:90:8c:d8:71:a9:f0:de:8a:38:c6:fe:31:aa:49:48: 60:da:b3:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxVzjimYHm3x2vgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk NDViZWU3YWQtYzQzOS00MDk0LThlZmMtMDkzNDlhMDRiOGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCP2reUEmzN1/X9Bd710B4dSnjp22dkavIOx MIvuGpX/MzIBNjE9Dkti5yYg56qcZZkOE6dScyIU+sd9/RXdIsszjy8szX+ouLbV UTumiLAEJDhqritRUMjBf+8fPe98loQTbylIGuxuw/hofLeqSI5DUvGFVp+3ryuD f/VNxnfv7zxUXmiiKTxl9JvzJ+pk7D/NhjfiArKNjNzmGbkGkXFxyRqCaygs/kwy iy4Hmb3eYZOaYRMhrmx8aFTf5ChXs6a6cUe+n6XY/brNJsEwU4Eam+HQjnuIQs4b EGNFpmeUOUlYKJWc9Jmmtq8h1HIv7VNwQ8BEyuEpw1fNIXvkDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrK/1ToDw0Pgh93GrrKdowUpM1iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWZmOTFlNGItZDAyMi0z MmM2LWJhNGQtZGY0ODdlZWY4YTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQMyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADy9xiuCTeSK3bGJzaPkbcT3B0xcS5/le+INriaaZ9vaCmNasvraRIxx 5J8KGtSnwQIFuOqbCaN9FOiSkIDR4AFvwfpjWXTxGxwtK2qnqEtyr8Gx0pHOQPyI VyeYompzAGqq9Iui27vkQ4o8WCplh/wEEj4S+gvk5V0uUcRDwlef/BBxLDmTLpZL pvIrMdbz/z9tuub/QvTixCXpbgl4vcN09wzPE3E8FGZ+SMGPX6AzMuxezqEiO+bN Q5o/ISlqEQ0JptMjAATx5rSuvVIwvk74Dcxrx3nktSoApSWegL2xdBRhuNuyggaf aKZxt5CM2HGp8N6KOMb+MapJSGDaswM= -----END CERTIFICATE-----Generated at Wed May 13 10:33:46 2026 by rpki-client