$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c39a9387-a003-3bfe-bbcf-16d2a164c679.roa File: c39a9387-a003-3bfe-bbcf-16d2a164c679.roa (raw, json) Hash identifier: yvbCtQLRGQx3sECciNbbwnRchJg+x+4hIe+mFVEzprk= Subject key identifier: 43:FB:1F:E0:C4:70:4D:BA:43:B4:B9:E6:5D:7C:E9:21:D2:B5:BD:B5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DCC6C75254AB70E96D7A31880 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c39a9387-a003-3bfe-bbcf-16d2a164c679.roa Signing time: Mon 11 May 2026 13:25:00 +0000 ROA not before: Mon 11 May 2026 13:25:00 +0000 ROA not after: Sun 09 Aug 2026 13:25:00 +0000 asID: 16509 IP address blocks: 64.204.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cc:6c:75:25:4a:b7:0e:96:d7:a3:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 11 13:25:00 2026 GMT Not After : Aug 9 13:25:00 2026 GMT Subject: CN=6a6e355c-3836-4f34-a3bc-2389770cf83c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fa:06:44:6a:06:51:c2:38:a2:a9:43:2e:65: 04:21:33:ab:da:36:81:ee:38:25:a1:e8:d6:d6:7c: 94:bd:f0:45:bf:50:db:cd:4d:e3:6a:72:5e:db:20: da:ca:94:df:a5:ae:be:e6:1f:8b:a4:26:5e:0d:03: 4c:a5:7c:ab:91:41:83:94:97:26:44:6d:31:ce:e2: 4f:38:ad:60:27:33:de:86:ef:a9:99:6b:0c:49:e7: 2a:f5:83:44:84:d8:36:cb:62:8d:6d:f7:65:f2:c8: 91:a8:d3:52:8b:35:c5:e4:3b:d1:d6:38:45:17:aa: 35:e4:96:a6:9f:23:a9:1b:31:80:4b:d6:10:db:84: 9f:9b:3b:29:be:26:06:e4:af:5e:5c:e6:c0:5e:62: 99:67:93:f0:dc:16:aa:b6:39:ab:fc:cd:0e:c0:6e: 91:56:8f:3b:35:65:d0:4c:de:e2:4b:e3:13:67:93: 23:8a:33:53:f6:a7:98:8f:36:15:5e:a7:85:ca:2b: 76:09:7b:b4:9e:f6:4d:19:b7:e1:48:e6:8c:4d:94: 6c:a7:96:30:2e:34:61:f4:aa:fa:7a:88:45:4b:2e: 24:79:07:df:52:e8:71:da:3b:55:7c:52:38:6e:1c: 82:74:4b:70:ae:7d:09:d9:9e:87:01:67:71:8a:3e: 65:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FB:1F:E0:C4:70:4D:BA:43:B4:B9:E6:5D:7C:E9:21:D2:B5:BD:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c39a9387-a003-3bfe-bbcf-16d2a164c679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:e5:81:e5:c1:9b:f9:12:e3:d8:4c:3c:5c:b5:57:26:0d:45: 24:b3:73:5b:0d:ba:46:b1:a8:5a:53:29:4c:d4:70:16:af:2e: 0e:07:e6:a4:cc:48:17:60:c8:0a:5f:3c:46:ba:3a:b2:3d:40: a1:93:88:19:26:45:5d:00:cb:c3:35:5b:8d:79:98:a6:23:86: 05:0b:ab:68:c4:de:55:65:00:30:ec:f4:70:8b:aa:f4:54:0a: 71:07:12:ef:45:fa:8e:11:d8:82:95:46:5d:25:66:64:8c:fd: 2e:c0:75:07:91:82:6d:00:67:02:3b:7d:6c:a0:2a:40:2d:6c: 23:d0:43:40:25:15:79:e9:6f:7e:1a:94:56:f6:2c:ce:14:f9: 69:08:b1:72:db:ac:d1:62:55:4c:1c:ba:8a:e4:5a:95:cd:4f: 79:9f:fa:03:6c:93:ce:a0:ff:9f:04:ec:88:d5:1c:86:b8:e4: b7:b1:50:51:e1:8b:ed:59:a0:bd:92:a0:f5:18:ff:dc:b6:f8: 60:83:fd:07:1b:74:a2:70:9f:0d:8c:32:53:57:68:96:97:53: ce:1d:58:a1:a8:b8:58:e1:a1:55:15:25:08:24:5c:cd:18:53: 4b:e2:b1:ee:31:e2:7b:58:a5:9c:57:0a:99:02:70:8d:39:4c: 58:0e:c1:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3MbHUlSrcOltejGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUxMTEzMjUwMFoXDTI2MDgwOTEzMjUwMFowLzEtMCsGA1UEAxMk NmE2ZTM1NWMtMzgzNi00ZjM0LWEzYmMtMjM4OTc3MGNmODNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovoGRGoGUcI4oqlDLmUEITOr2jaB7jgloejW 1nyUvfBFv1DbzU3janJe2yDaypTfpa6+5h+LpCZeDQNMpXyrkUGDlJcmRG0xzuJP OK1gJzPehu+pmWsMSecq9YNEhNg2y2KNbfdl8siRqNNSizXF5DvR1jhFF6o15Jam nyOpGzGAS9YQ24SfmzspviYG5K9eXObAXmKZZ5Pw3Baqtjmr/M0OwG6RVo87NWXQ TN7iS+MTZ5MjijNT9qeYjzYVXqeFyit2CXu0nvZNGbfhSOaMTZRsp5YwLjRh9Kr6 eohFSy4keQffUuhx2jtVfFI4bhyCdEtwrn0J2Z6HAWdxij5lcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEP7H+DEcE26Q7S55l186SHStb21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzM5YTkzODctYTAwMy0z YmZlLWJiY2YtMTZkMmExNjRjNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHlgeXBm/kS49hMPFy1VyYNRSSzc1sNukaxqFpTKUzUcBavLg4H5qTM SBdgyApfPEa6OrI9QKGTiBkmRV0Ay8M1W415mKYjhgULq2jE3lVlADDs9HCLqvRU CnEHEu9F+o4R2IKVRl0lZmSM/S7AdQeRgm0AZwI7fWygKkAtbCPQQ0AlFXnpb34a lFb2LM4U+WkIsXLbrNFiVUwcuorkWpXNT3mf+gNsk86g/58E7IjVHIa45LexUFHh i+1ZoL2SoPUY/9y2+GCD/QcbdKJwnw2MMlNXaJaXU84dWKGouFjhoVUVJQgkXM0Y U0vise4x4ntYpZxXCpkCcI05TFgOwSU= -----END CERTIFICATE-----Generated at Tue May 12 21:41:54 2026 by rpki-client