$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c5683fb2-3840-362e-bcae-0075a8e1260c.roa File: c5683fb2-3840-362e-bcae-0075a8e1260c.roa (raw, json) Hash identifier: 8P0MU49bHjqPTC1wGlDGB0ohTIa+gVKDE6cv9OrPaHQ= Subject key identifier: 03:0B:FD:C5:4A:DC:66:B8:F5:94:FD:5B:A5:7B:90:C6:31:CF:B1:31 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D9F7FFE32A98E2BE890117C80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c5683fb2-3840-362e-bcae-0075a8e1260c.roa Signing time: Sat 25 Apr 2026 11:13:00 +0000 ROA not before: Sat 25 Apr 2026 11:13:00 +0000 ROA not after: Fri 24 Jul 2026 11:13:00 +0000 asID: 834 IP address blocks: 69.33.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:7f:fe:32:a9:8e:2b:e8:90:11:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 25 11:13:00 2026 GMT Not After : Jul 24 11:13:00 2026 GMT Subject: CN=0f4b8576-bd49-4fcc-a0f4-5106cc2de3f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9f:8e:c6:24:54:fb:e7:20:b5:4e:1a:60:d4: a8:75:11:d3:f7:63:e6:90:91:f7:24:44:d7:65:f3: 21:b1:90:ae:07:a3:2e:d9:1e:d4:82:5f:c8:95:1a: ac:01:e3:f5:32:f9:52:bb:30:7e:ab:c2:79:4a:a6: c5:5e:b5:d0:4e:1d:1d:cc:62:c9:36:fc:4c:a5:8c: e9:8e:0a:fa:43:29:b5:37:e2:0c:db:ed:82:ba:35: 57:c4:dd:3b:99:d1:1b:78:50:6a:29:eb:37:b4:6d: 0d:59:98:73:c4:e0:c2:19:61:b2:19:68:11:81:3f: 54:6d:6e:24:a4:4d:a4:e6:d5:0b:0b:95:ec:82:cb: 94:58:9f:46:82:a9:cd:8a:76:9c:e6:7d:57:c6:70: 82:5c:ec:66:65:f0:b1:52:4c:7e:82:7e:c5:58:6e: 0f:cc:a3:0e:f9:12:98:3f:21:af:15:79:0a:8e:00: 67:19:22:e6:f4:34:fe:c0:fc:d7:d5:76:e1:9d:86: 42:c2:45:f8:98:4a:4c:19:b0:34:9e:36:b1:32:a1: c0:ef:62:ef:35:96:6f:9c:16:87:e5:c2:43:7d:f8: 29:78:71:d7:95:06:dd:d1:49:91:5c:f0:c6:6d:ba: 7f:25:6b:c0:cf:c6:fc:30:55:d0:a3:c6:1a:e0:b2: 0d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0B:FD:C5:4A:DC:66:B8:F5:94:FD:5B:A5:7B:90:C6:31:CF:B1:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c5683fb2-3840-362e-bcae-0075a8e1260c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 69.33.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:28:4b:8b:23:0f:2c:9d:4a:b4:d0:71:c1:cd:21:2b:fc:d2: 1b:00:68:d6:73:43:9e:68:9c:f4:0b:af:c9:84:3c:b3:a9:a2: e9:46:ab:76:c3:6e:54:4c:fb:d4:62:89:da:b2:f6:75:1a:ab: 26:85:ae:87:e1:5e:0d:e0:e0:6b:4f:99:fb:ce:f0:f0:ea:bd: 3f:f4:8e:05:0c:5c:83:fe:a1:b1:74:af:02:a6:74:fd:fe:bc: 65:08:06:9d:c3:55:28:ab:eb:30:5a:29:c4:06:61:78:ad:e7: 00:ad:fb:8f:a0:dd:af:3b:23:5a:c8:8b:75:24:21:11:a6:d8: b1:63:0b:14:38:bd:55:35:ff:9c:d7:5c:d9:63:be:61:59:98: f2:00:59:9a:9a:b2:f9:da:28:61:54:7c:5d:e8:c1:eb:e5:79: 2c:f6:8d:30:97:05:a0:97:d8:1d:ac:1c:17:8c:3e:1c:1a:1d: 4d:a7:3d:72:30:b1:fa:ce:02:b4:83:d3:6b:8d:78:47:22:7d: 49:bb:d4:f9:2f:bd:6e:c8:72:af:bb:34:3f:1b:9e:ae:dd:75: 63:98:95:ad:6b:95:63:20:00:0d:5f:0e:08:3b:79:11:a5:a6: 8c:11:08:39:43:50:ec:81:b6:fd:0d:08:00:2c:2a:0d:63:79: 16:aa:ed:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ff/4yqY4r6JARfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQyNTExMTMwMFoXDTI2MDcyNDExMTMwMFowLzEtMCsGA1UEAxMk MGY0Yjg1NzYtYmQ0OS00ZmNjLWEwZjQtNTEwNmNjMmRlM2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp+OxiRU++cgtU4aYNSodRHT92PmkJH3JETX ZfMhsZCuB6Mu2R7Ugl/IlRqsAeP1MvlSuzB+q8J5SqbFXrXQTh0dzGLJNvxMpYzp jgr6Qym1N+IM2+2CujVXxN07mdEbeFBqKes3tG0NWZhzxODCGWGyGWgRgT9UbW4k pE2k5tULC5XsgsuUWJ9GgqnNinac5n1XxnCCXOxmZfCxUkx+gn7FWG4PzKMO+RKY PyGvFXkKjgBnGSLm9DT+wPzX1XbhnYZCwkX4mEpMGbA0njaxMqHA72LvNZZvnBaH 5cJDffgpeHHXlQbd0UmRXPDGbbp/JWvAz8b8MFXQo8Ya4LINywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAML/cVK3Ga49ZT9W6V7kMYxz7ExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzU2ODNmYjItMzg0MC0z NjJlLWJjYWUtMDA3NWE4ZTEyNjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSHFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMYoS4sjDyydSrTQccHNISv80hsAaNZzQ55onPQLr8mEPLOpoulGq3bD blRM+9Riidqy9nUaqyaFrofhXg3g4GtPmfvO8PDqvT/0jgUMXIP+obF0rwKmdP3+ vGUIBp3DVSir6zBaKcQGYXit5wCt+4+g3a87I1rIi3UkIRGm2LFjCxQ4vVU1/5zX XNljvmFZmPIAWZqasvnaKGFUfF3owevleSz2jTCXBaCX2B2sHBeMPhwaHU2nPXIw sfrOArSD02uNeEcifUm71PkvvW7Icq+7ND8bnq7ddWOYla1rlWMgAA1fDgg7eRGl powRCDlDUOyBtv0NCAAsKg1jeRaq7QA= -----END CERTIFICATE-----Generated at Tue May 12 21:41:55 2026 by rpki-client