$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b35577d6-3a7d-3701-b286-73353987be3a.roa File: b35577d6-3a7d-3701-b286-73353987be3a.roa (raw, json) Hash identifier: oOMI51CsKfy+AIGbnO+MIBne/tzxii/5UWto99PjOnA= Subject key identifier: 1C:FA:61:9D:4A:C9:B1:8F:A9:A8:B0:4F:0C:56:5A:25:3C:4C:4D:5D Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E5BAF61ED7BA3AEAF2A3D7700 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b35577d6-3a7d-3701-b286-73353987be3a.roa Signing time: Wed 01 Jul 2026 21:00:12 +0000 ROA not before: Wed 01 Jul 2026 21:00:12 +0000 ROA not after: Tue 29 Sep 2026 21:00:12 +0000 asID: 834 IP address blocks: 65.86.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:af:61:ed:7b:a3:ae:af:2a:3d:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 1 21:00:12 2026 GMT Not After : Sep 29 21:00:12 2026 GMT Subject: CN=c72c6db6-a67e-4829-ac44-118c7b44c44a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f8:ae:f6:31:28:c1:49:25:1c:de:92:ac:b1: 7d:a2:bd:bf:29:ac:5f:80:af:e8:b8:4b:7e:96:0e: ea:95:43:f5:a5:4c:cc:82:a1:32:ec:94:37:3a:69: fc:ff:1d:fe:48:82:84:3b:e8:52:9c:3f:c3:ff:ea: 37:8a:8b:86:48:ef:a9:36:db:88:98:68:56:63:ef: ca:3b:d6:7e:b3:88:37:3b:83:50:21:3a:3d:f6:2c: ac:e6:cd:b7:d0:0a:e0:c6:bd:ba:60:f5:7c:cc:28: b3:63:8f:dd:1a:27:51:67:6e:ee:3e:ca:f0:b9:c4: 82:2c:01:8f:16:27:ff:52:8a:7d:d4:7f:ae:a8:df: 7a:e7:4c:b9:cc:d6:bf:a4:bf:2f:21:00:48:2e:26: 3d:73:31:d0:84:71:a2:37:00:b1:d1:1f:d5:76:f6: b4:19:1d:d9:90:a4:11:63:96:57:09:f4:78:ae:ba: ec:f1:1d:7c:b7:4a:57:06:90:13:72:71:78:4f:16: 0a:d6:b1:d6:0d:19:ae:09:53:2d:f5:9d:1a:2c:c6: 8f:32:64:95:82:84:9e:43:2d:e4:e7:7f:74:dc:32: 97:64:0b:f0:51:dd:f2:cc:76:62:e6:25:6e:d0:1e: 36:60:a4:93:8d:ad:df:0c:2f:6d:49:1b:e0:7f:0d: 9e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FA:61:9D:4A:C9:B1:8F:A9:A8:B0:4F:0C:56:5A:25:3C:4C:4D:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b35577d6-3a7d-3701-b286-73353987be3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:a8:af:95:62:c1:72:14:58:9f:de:af:06:1d:62:6f:00:08: 92:d4:e4:b4:a9:3d:cb:5d:ba:d5:5f:e7:66:70:29:a9:79:cc: b1:d8:22:a8:dc:fb:65:33:17:0a:51:ac:0e:ac:a2:21:6d:23: 44:e7:82:50:9a:3b:5f:42:29:64:bd:6d:44:97:fe:f7:bf:6a: 75:0e:5d:46:4d:0e:58:06:ed:0c:6e:8c:8d:dd:f0:c8:84:5f: f8:df:42:6c:5e:07:88:44:9c:7d:d2:ba:e0:f0:e0:5e:76:e9: 8d:13:ec:9f:c0:51:b0:6b:ba:2a:cb:df:c1:ac:1b:38:44:8e: bc:7f:97:c5:f7:b4:70:c8:12:86:36:87:bc:40:7e:32:26:87: c3:d5:ff:ba:7e:50:36:77:91:7a:2d:64:da:48:37:ac:43:85: 61:d3:38:99:3b:0f:38:60:14:11:eb:5c:bc:de:18:80:ad:42: a2:e4:a0:de:95:2e:ba:33:e5:09:dc:f9:af:d5:d3:59:4a:04: 4e:10:6c:41:8a:50:48:96:aa:3d:55:eb:b5:ae:a0:21:13:bb: 89:52:73:d2:7e:d4:68:57:07:45:d8:ba:8d:28:70:84:80:3a: a4:83:bd:6b:77:92:e2:56:d3:85:59:62:6d:51:bf:5e:82:4f: 64:a0:3c:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5br2Hte6Ouryo9dwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcwMTIxMDAxMloXDTI2MDkyOTIxMDAxMlowLzEtMCsGA1UEAxMk YzcyYzZkYjYtYTY3ZS00ODI5LWFjNDQtMTE4YzdiNDRjNDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfiu9jEowUklHN6SrLF9or2/KaxfgK/ouEt+ lg7qlUP1pUzMgqEy7JQ3Omn8/x3+SIKEO+hSnD/D/+o3iouGSO+pNtuImGhWY+/K O9Z+s4g3O4NQITo99iys5s230Argxr26YPV8zCizY4/dGidRZ27uPsrwucSCLAGP Fif/Uop91H+uqN9650y5zNa/pL8vIQBILiY9czHQhHGiNwCx0R/Vdva0GR3ZkKQR Y5ZXCfR4rrrs8R18t0pXBpATcnF4TxYK1rHWDRmuCVMt9Z0aLMaPMmSVgoSeQy3k 53903DKXZAvwUd3yzHZi5iVu0B42YKSTja3fDC9tSRvgfw2eHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBz6YZ1KybGPqaiwTwxWWiU8TE1dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjM1NTc3ZDYtM2E3ZC0z NzAxLWIyODYtNzMzNTM5ODdiZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQVYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2or5ViwXIUWJ/erwYdYm8ACJLU5LSpPctdutVf52ZwKal5zLHYIqjc +2UzFwpRrA6soiFtI0TnglCaO19CKWS9bUSX/ve/anUOXUZNDlgG7QxujI3d8MiE X/jfQmxeB4hEnH3SuuDw4F526Y0T7J/AUbBruirL38GsGzhEjrx/l8X3tHDIEoY2 h7xAfjImh8PV/7p+UDZ3kXotZNpIN6xDhWHTOJk7DzhgFBHrXLzeGICtQqLkoN6V Lroz5Qnc+a/V01lKBE4QbEGKUEiWqj1V67WuoCETu4lSc9J+1GhXB0XYuo0ocISA OqSDvWt3kuJW04VZYm1Rv16CT2SgPJc= -----END CERTIFICATE-----Generated at Thu Jul 23 23:28:47 2026 by rpki-client