$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c5968e7c-e3fd-3cb7-b69a-5a76cecc7d28.roa File: c5968e7c-e3fd-3cb7-b69a-5a76cecc7d28.roa (raw, json) Hash identifier: zPrRpS2YlOi5JsLKB0zcDpdz5+JjXyuYdPGAeG7hbi0= Subject key identifier: 9C:1A:40:2E:86:87:96:85:88:4D:26:B1:83:E6:20:D9:AA:27:9A:39 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DCC60727C62F4DD0C36724A80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c5968e7c-e3fd-3cb7-b69a-5a76cecc7d28.roa Signing time: Mon 11 May 2026 13:00:31 +0000 ROA not before: Mon 11 May 2026 13:00:31 +0000 ROA not after: Sun 09 Aug 2026 13:00:31 +0000 asID: 834 IP address blocks: 64.204.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cc:60:72:7c:62:f4:dd:0c:36:72:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 11 13:00:31 2026 GMT Not After : Aug 9 13:00:31 2026 GMT Subject: CN=2cb4c6ab-3f95-41a7-9916-29535ac60258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fe:ba:9f:06:4f:76:8c:2c:05:ab:4f:25:5b: 03:5d:3e:d6:3b:f6:67:1e:7d:ad:14:58:e8:61:34: 74:8d:b4:32:27:0b:d1:6d:f8:7f:67:d0:a6:de:f2: f7:6e:96:b2:24:a6:7d:a9:c2:52:2c:87:f9:11:cd: 10:54:b1:c0:56:85:de:13:74:a9:66:ac:9a:6a:2a: 81:9c:48:f3:f4:bb:17:70:8f:be:bb:ba:d7:22:29: 3e:c7:aa:3f:8f:28:52:55:7f:f9:57:27:d1:eb:d7: 0f:eb:26:d2:39:85:7a:75:7d:38:4c:20:2e:ce:df: 99:fb:28:62:22:b3:63:6f:03:39:4b:8a:2d:27:4f: 37:6f:f8:fb:a0:89:0e:c5:13:48:1d:64:32:1c:b1: 59:e8:7c:8f:0f:24:14:5c:fb:b3:d6:33:d0:05:89: 51:91:c2:9a:d1:74:76:19:cb:e4:4a:89:99:c9:70: 6a:6d:4c:4b:db:cb:67:0f:9a:cb:4b:66:2e:c3:69: d8:5f:e1:19:a6:8d:d5:e7:9a:05:d7:e6:49:7b:f0: 34:15:75:0c:d9:e5:8c:a5:68:53:9e:02:f2:ed:69: ac:84:1c:cf:fc:cc:e5:3f:5c:cf:cc:cf:44:77:36: e3:63:84:d2:70:f5:27:31:c0:3b:bd:1a:21:97:c9: fa:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1A:40:2E:86:87:96:85:88:4D:26:B1:83:E6:20:D9:AA:27:9A:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c5968e7c-e3fd-3cb7-b69a-5a76cecc7d28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:3a:5c:98:83:29:c9:a2:02:f6:08:3d:51:03:9d:5b:32:35: d7:43:bc:c5:e1:4e:bd:bb:13:75:6c:4f:34:d4:3c:0f:f2:ad: 1a:5a:d5:10:0c:9a:3f:5c:40:1a:e6:af:07:8e:0b:86:ae:21: b4:60:34:87:28:87:80:91:32:d2:21:29:4b:02:0a:b6:89:31: 9b:38:21:89:00:87:35:e1:ee:54:fc:e6:ca:cc:f7:8e:f5:be: 5a:8b:94:66:8e:ce:bb:2f:0d:af:4d:7b:11:78:a2:ce:e7:f7: 9e:f3:e0:e8:86:91:35:c6:24:36:4b:89:1d:1a:49:f1:2c:00: e7:73:ea:65:fc:1c:59:6a:0b:87:52:56:18:9d:d2:22:6f:f1: ef:62:45:87:11:85:46:51:e8:bb:53:b3:44:ed:90:4b:d4:7d: 16:0e:b3:58:0b:11:9b:c7:31:9c:d1:36:5a:47:fe:81:aa:d4: c7:30:ef:1b:c9:18:fa:65:d4:7d:7a:85:ad:a0:a6:37:8c:f9: 0a:3f:89:e2:ae:28:48:fd:d2:36:b9:79:1a:8e:90:58:dd:7d: 09:5d:ee:b0:64:1e:85:f6:2b:98:b5:9e:bb:15:54:11:f1:4c: 0e:bb:c1:a4:54:72:10:3b:68:7a:64:0e:5e:36:5d:ef:f2:f6: 80:77:1e:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3MYHJ8YvTdDDZySoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUxMTEzMDAzMVoXDTI2MDgwOTEzMDAzMVowLzEtMCsGA1UEAxMk MmNiNGM2YWItM2Y5NS00MWE3LTk5MTYtMjk1MzVhYzYwMjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP66nwZPdowsBatPJVsDXT7WO/ZnHn2tFFjo YTR0jbQyJwvRbfh/Z9Cm3vL3bpayJKZ9qcJSLIf5Ec0QVLHAVoXeE3SpZqyaaiqB nEjz9LsXcI++u7rXIik+x6o/jyhSVX/5VyfR69cP6ybSOYV6dX04TCAuzt+Z+yhi IrNjbwM5S4otJ083b/j7oIkOxRNIHWQyHLFZ6HyPDyQUXPuz1jPQBYlRkcKa0XR2 GcvkSomZyXBqbUxL28tnD5rLS2Yuw2nYX+EZpo3V55oF1+ZJe/A0FXUM2eWMpWhT ngLy7WmshBzP/MzlP1zPzM9EdzbjY4TScPUnMcA7vRohl8n6tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwaQC6Gh5aFiE0msYPmINmqJ5o5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzU5NjhlN2MtZTNmZC0z Y2I3LWI2OWEtNWE3NmNlY2M3ZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMzqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJc6XJiDKcmiAvYIPVEDnVsyNddDvMXhTr27E3VsTzTUPA/yrRpa1RAM mj9cQBrmrweOC4auIbRgNIcoh4CRMtIhKUsCCraJMZs4IYkAhzXh7lT85srM9471 vlqLlGaOzrsvDa9NexF4os7n957z4OiGkTXGJDZLiR0aSfEsAOdz6mX8HFlqC4dS Vhid0iJv8e9iRYcRhUZR6LtTs0TtkEvUfRYOs1gLEZvHMZzRNlpH/oGq1Mcw7xvJ GPpl1H16ha2gpjeM+Qo/ieKuKEj90ja5eRqOkFjdfQld7rBkHoX2K5i1nrsVVBHx TA67waRUchA7aHpkDl42Xe/y9oB3Hvg= -----END CERTIFICATE-----Generated at Wed May 13 08:48:18 2026 by rpki-client