$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cd4cf28a-2dd4-3116-8997-d70f8dfcb0e1.roa File: cd4cf28a-2dd4-3116-8997-d70f8dfcb0e1.roa (raw, json) Hash identifier: kDPh+rJrzZ6nV4hNlehzz7TFKyxc42/Lyf5+N/yjaZg= Subject key identifier: 2A:64:26:A1:C4:C0:F6:96:01:0D:59:9D:5D:58:F3:5F:A0:F3:45:34 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D13A2724DEED165F436F6A7C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cd4cf28a-2dd4-3116-8997-d70f8dfcb0e1.roa Signing time: Fri 06 Mar 2026 08:49:15 +0000 ROA not before: Fri 06 Mar 2026 08:49:15 +0000 ROA not after: Thu 04 Jun 2026 07:49:15 +0000 asID: 397630 IP address blocks: 64.204.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:13:a2:72:4d:ee:d1:65:f4:36:f6:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 6 08:49:15 2026 GMT Not After : Jun 4 07:49:15 2026 GMT Subject: CN=d967f63d-dff9-4d41-bfd0-8ead3ae49b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:47:e4:7c:5e:60:31:50:bc:ff:79:42:9e:c9: 3c:50:f9:86:b4:e3:0a:15:c5:e4:42:ab:22:15:75: 60:20:c2:bb:a5:93:eb:d7:ca:ce:a9:ac:a7:97:89: a5:02:fc:8c:99:b3:ed:dc:08:f9:b3:72:7b:20:f0: 35:19:4a:f7:3c:0c:b7:5e:7e:68:bb:da:13:2d:b9: 98:ad:9b:9c:89:9b:76:76:9d:24:f9:40:1e:2a:3d: 04:6b:70:b9:7f:1a:3f:14:64:10:45:5f:2e:16:35: ab:3f:fd:61:e4:50:a1:c0:4a:96:75:9d:2e:26:02: 67:57:e9:89:80:06:0c:f7:e3:5e:79:10:67:e7:b1: 5b:11:73:78:c4:d7:a8:c2:72:c3:c8:eb:4a:d8:1c: b6:d3:e1:6a:fc:ca:3f:9c:3f:e2:bd:4f:9c:22:02: 79:0b:c5:7c:14:71:13:80:92:cc:c2:50:2b:7f:c6: 06:ce:f0:fb:8b:68:0c:1f:61:19:3c:6c:8a:21:36: dd:0c:e5:7a:f8:33:26:c0:06:68:72:8f:35:dd:7e: 5c:3c:3a:8d:b9:c1:f1:e9:64:0b:22:fa:98:d9:64: 90:74:9e:69:f1:24:0d:f0:6e:42:1d:b9:48:a9:ca: 5c:62:ec:7f:26:6d:e5:9e:53:92:3e:73:ec:ea:70: 87:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:64:26:A1:C4:C0:F6:96:01:0D:59:9D:5D:58:F3:5F:A0:F3:45:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cd4cf28a-2dd4-3116-8997-d70f8dfcb0e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:0b:d8:72:18:13:e3:18:5b:f7:13:fe:a8:16:88:1b:f9:45: 29:4e:ed:d0:0d:fe:d1:2e:cc:8a:ee:a9:f1:bd:08:20:ac:03: 53:99:3e:ca:e0:9d:8a:f5:07:e1:3b:85:1b:72:94:ce:24:a4: 9c:e8:ff:4f:b4:26:33:31:12:e5:08:bc:15:cb:16:ae:cc:df: 45:f5:62:24:c4:97:e7:6c:23:44:df:4e:0a:d1:db:6d:c8:2e: d8:47:a6:41:60:02:fa:7c:66:20:ac:0b:c1:9a:52:d3:c0:3b: 48:9d:e9:c1:e3:73:af:29:ed:1e:18:3d:6e:56:52:4a:33:14: 47:9a:58:31:cf:63:9d:95:c3:cf:ed:cf:5e:81:3b:00:c9:c9: dd:e8:48:f0:d7:ae:9e:95:db:8a:b7:53:75:dd:51:dc:4b:e6: ac:7c:d4:68:b4:7d:16:86:f4:2f:c1:b1:e3:40:19:26:9b:11: 3e:cb:81:07:1e:92:9c:f2:0f:54:6d:36:28:db:62:80:df:69: 22:28:fd:dd:31:f8:09:ab:e1:8b:6b:31:5c:11:89:53:7c:fc: 83:fb:2a:c0:d1:47:fc:25:66:d1:98:b1:d8:76:57:2b:17:66: 52:b6:93:17:1f:db:34:bf:d9:56:a3:af:3f:8a:8f:99:b8:fd: aa:9c:a9:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0TonJN7tFl9Db2p8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwNjA4NDkxNVoXDTI2MDYwNDA3NDkxNVowLzEtMCsGA1UEAxMk ZDk2N2Y2M2QtZGZmOS00ZDQxLWJmZDAtOGVhZDNhZTQ5YjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kfkfF5gMVC8/3lCnsk8UPmGtOMKFcXkQqsi FXVgIMK7pZPr18rOqaynl4mlAvyMmbPt3Aj5s3J7IPA1GUr3PAy3Xn5ou9oTLbmY rZuciZt2dp0k+UAeKj0Ea3C5fxo/FGQQRV8uFjWrP/1h5FChwEqWdZ0uJgJnV+mJ gAYM9+NeeRBn57FbEXN4xNeownLDyOtK2By20+Fq/Mo/nD/ivU+cIgJ5C8V8FHET gJLMwlArf8YGzvD7i2gMH2EZPGyKITbdDOV6+DMmwAZoco813X5cPDqNucHx6WQL IvqY2WSQdJ5p8SQN8G5CHblIqcpcYux/Jm3lnlOSPnPs6nCHBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpkJqHEwPaWAQ1ZnV1Y81+g80U0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2Q0Y2YyOGEtMmRkNC0z MTE2LTg5OTctZDcwZjhkZmNiMGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMy8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoL2HIYE+MYW/cT/qgWiBv5RSlO7dAN/tEuzIruqfG9CCCsA1OZPsrg nYr1B+E7hRtylM4kpJzo/0+0JjMxEuUIvBXLFq7M30X1YiTEl+dsI0TfTgrR223I LthHpkFgAvp8ZiCsC8GaUtPAO0id6cHjc68p7R4YPW5WUkozFEeaWDHPY52Vw8/t z16BOwDJyd3oSPDXrp6V24q3U3XdUdxL5qx81Gi0fRaG9C/BseNAGSabET7LgQce kpzyD1RtNijbYoDfaSIo/d0x+Amr4YtrMVwRiVN8/IP7KsDRR/wlZtGYsdh2VysX ZlK2kxcf2zS/2Vajrz+Kj5m4/aqcqcg= -----END CERTIFICATE-----Generated at Thu Mar 26 04:46:44 2026 by rpki-client