$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/de43b843-7e32-30b0-9407-e8dca58980c1.roa File: de43b843-7e32-30b0-9407-e8dca58980c1.roa (raw, json) Hash identifier: guaFK9J8QkvXAkT5DVXw3K32ZwTzD9oPTuUpx81EQN0= Subject key identifier: E8:6C:16:5C:CA:FC:2A:EB:F2:D5:64:FE:83:05:03:7C:1D:BE:45:AD Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D359FC8428CB0AB3746E07940 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/de43b843-7e32-30b0-9407-e8dca58980c1.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 152689 IP address blocks: 68.164.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:c8:42:8c:b0:ab:37:46:e0:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=8de19fdc-c8f1-47c9-a2d2-05f077d7b81c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5b:65:ab:da:8c:ee:37:3e:2d:1f:3e:54:bd: ea:11:c8:3d:29:bb:04:2d:ae:86:42:68:e9:04:72: b2:c5:9d:4c:1b:2e:d0:3b:c5:01:d9:b9:c5:2b:89: 2c:38:b9:a5:8d:3e:47:53:4c:c1:ad:20:b4:59:cd: 7b:a0:63:34:9d:a8:c7:35:c5:eb:5b:3f:5b:03:0b: 87:dd:57:3b:a4:51:07:7a:ab:89:f2:e9:61:82:10: dd:36:27:22:51:51:53:c5:a9:e9:01:08:91:68:70: b7:53:98:7f:bf:a5:f6:e3:7a:78:6c:71:40:e3:40: 82:c2:33:2b:e4:73:46:77:69:e5:49:e3:55:d1:cb: fe:58:24:62:56:88:01:e7:a2:37:f1:58:f1:14:7e: 39:83:a5:27:13:8d:1d:18:62:bf:5a:3d:92:18:a1: 6b:2f:e4:78:ec:0c:0c:2f:f4:b0:3b:12:c5:af:6a: 70:53:bf:81:00:38:55:8b:55:bf:3d:ec:4a:01:d5: 0e:93:42:97:e8:7d:ef:dd:3d:b9:ec:f2:a2:e8:bd: a7:0a:ad:4a:cb:70:c8:0b:dd:46:f1:7c:17:82:a1: 87:05:67:ec:de:52:64:e2:d2:f9:a5:b6:cf:df:aa: 38:a4:35:72:e0:16:37:af:b1:ad:dc:e0:69:2c:57: 7c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:6C:16:5C:CA:FC:2A:EB:F2:D5:64:FE:83:05:03:7C:1D:BE:45:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/de43b843-7e32-30b0-9407-e8dca58980c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:32:d8:6f:12:21:f9:9d:84:f9:f3:40:78:cf:c4:8b:f3:41: 69:04:62:3b:0d:85:a0:28:35:18:2a:b8:c9:75:e3:e7:d1:65: 9a:ed:82:57:df:fd:15:fa:00:33:7a:51:a4:18:1b:0a:33:b2: b2:6f:70:7f:9f:02:dd:c2:fd:13:4c:b0:6f:be:6c:bd:5a:4d: b1:9d:e5:e5:63:ff:bd:48:ac:fc:48:7d:0b:00:11:ac:ec:08: f0:ee:cd:e2:c9:26:d2:fb:0c:39:da:34:4e:33:70:8a:44:2f: 75:f0:de:ea:90:49:31:c2:c6:01:23:d2:c7:72:17:54:78:7c: d7:0a:88:29:b3:53:1f:99:e4:92:48:f6:9c:8f:c4:88:27:79: 73:5b:79:e7:9a:c5:f9:cc:29:83:5a:c6:5c:8d:df:3b:fc:c0: 19:9d:87:0b:a6:a3:ad:cb:ca:97:c9:b0:bc:13:cc:1f:3b:fe: 21:1a:4f:0d:36:31:56:bb:19:06:e7:2b:a8:82:0e:4f:3d:13: c9:bd:a6:d7:5a:ba:cc:2f:4f:01:35:28:88:98:33:6a:77:10: ed:a4:fc:31:03:41:ca:28:48:07:7b:8d:13:8c:42:5d:56:08: 3d:cd:f8:ec:b2:4b:95:b0:ca:2b:4f:8e:a7:4a:33:b0:9d:a1: ad:22:45:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n8hCjLCrN0bgeUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk OGRlMTlmZGMtYzhmMS00N2M5LWEyZDItMDVmMDc3ZDdiODFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhltlq9qM7jc+LR8+VL3qEcg9KbsELa6GQmjp BHKyxZ1MGy7QO8UB2bnFK4ksOLmljT5HU0zBrSC0Wc17oGM0najHNcXrWz9bAwuH 3Vc7pFEHequJ8ulhghDdNiciUVFTxanpAQiRaHC3U5h/v6X243p4bHFA40CCwjMr 5HNGd2nlSeNV0cv+WCRiVogB56I38VjxFH45g6UnE40dGGK/Wj2SGKFrL+R47AwM L/SwOxLFr2pwU7+BADhVi1W/PexKAdUOk0KX6H3v3T257PKi6L2nCq1Ky3DIC91G 8XwXgqGHBWfs3lJk4tL5pbbP36o4pDVy4BY3r7Gt3OBpLFd8LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhsFlzK/Crr8tVk/oMFA3wdvkWtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGU0M2I4NDMtN2UzMi0z MGIwLTk0MDctZThkY2E1ODk4MGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKSkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMy2G8SIfmdhPnzQHjPxIvzQWkEYjsNhaAoNRgquMl14+fRZZrtglff /RX6ADN6UaQYGwozsrJvcH+fAt3C/RNMsG++bL1aTbGd5eVj/71IrPxIfQsAEazs CPDuzeLJJtL7DDnaNE4zcIpEL3Xw3uqQSTHCxgEj0sdyF1R4fNcKiCmzUx+Z5JJI 9pyPxIgneXNbeeeaxfnMKYNaxlyN3zv8wBmdhwumo63LypfJsLwTzB87/iEaTw02 MVa7GQbnK6iCDk89E8m9ptdauswvTwE1KIiYM2p3EO2k/DEDQcooSAd7jROMQl1W CD3N+OyyS5WwyitPjqdKM7Cdoa0iRXA= -----END CERTIFICATE-----Generated at Thu Mar 26 06:00:00 2026 by rpki-client