$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e3a55a7e-3f55-3156-bc00-ada9fc0fd324.roa File: e3a55a7e-3f55-3156-bc00-ada9fc0fd324.roa (raw, json) Hash identifier: et6FCKoQKLnnCX2VFNYPq7qoMI/dCZ50vNaz/3FO7d0= Subject key identifier: 6F:88:B7:A6:2C:6D:79:4D:60:2F:2A:69:3D:50:73:47:A4:D4:7C:28 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D47C5091882E25CD7AF45D280 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e3a55a7e-3f55-3156-bc00-ada9fc0fd324.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 9304 IP address blocks: 64.7.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c5:09:18:82:e2:5c:d7:af:45:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=2f0b7aee-6a26-4a4b-8b99-72467627ddf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0a:e3:ed:c2:05:13:ef:04:a2:15:96:39:62: e4:71:d0:62:2c:5d:1d:c4:70:89:b8:04:da:ab:ba: 05:e9:80:af:37:57:37:84:30:f3:31:e8:05:6f:32: e2:52:9f:85:28:7f:83:69:40:da:9f:c6:c6:10:df: 84:83:59:39:11:03:dd:1c:db:e0:b8:56:12:0a:a8: fa:b1:fd:56:a3:09:bc:6c:97:65:96:23:e4:6c:4f: 8c:3c:d8:67:e1:a0:db:bf:67:f4:9f:94:4c:92:e9: bc:73:28:b5:42:2a:68:c4:bd:44:9a:a3:14:61:50: 2a:1b:e6:f6:53:0f:8a:e6:5d:06:4b:60:8c:95:df: be:4e:f7:42:1f:ce:a4:5d:dd:54:0e:d9:30:7f:b9: 8d:10:d6:6d:4b:f2:fc:30:c5:5d:30:52:67:a3:33: 93:7e:8a:b2:95:0c:4b:97:d5:57:fa:4d:c0:1f:b7: a6:f7:f8:67:b4:a6:88:8c:4d:31:c1:78:b5:21:5b: 11:3a:41:43:45:66:b7:07:ca:d4:74:ae:b7:8f:3e: 0c:76:01:5f:dd:22:34:49:a3:a4:30:9b:cd:a2:26: 62:0a:ce:33:1a:26:97:60:f4:67:84:ed:14:b0:a7: 42:f2:c6:f1:6a:91:73:1e:b1:e7:81:23:6b:1b:3b: f1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:88:B7:A6:2C:6D:79:4D:60:2F:2A:69:3D:50:73:47:A4:D4:7C:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e3a55a7e-3f55-3156-bc00-ada9fc0fd324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.7.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:57:7e:3f:b5:60:4e:33:38:be:54:af:a2:d3:fe:5f:c3:ec: dd:5a:c5:9a:64:3f:4b:d5:a2:91:28:4a:a8:95:77:79:5d:2d: 9d:ef:df:fb:4e:90:38:3e:58:f7:08:fd:1a:32:3c:9a:6e:f4: 3a:55:5f:88:90:7a:de:79:40:e7:46:8f:8a:92:f8:5a:19:fd: dd:96:71:96:0a:2a:e6:48:76:60:a6:a4:21:bb:c9:7e:e2:f2: 93:46:47:04:ab:ed:94:96:ec:3f:d0:b1:17:09:c9:5e:ed:45: f6:e5:d9:9a:49:fc:c6:ab:ac:20:88:ba:6a:f1:dd:d2:13:e1: 6c:b5:d9:8e:61:68:a2:8b:e9:1e:1b:97:d2:54:62:1a:9b:e1: e1:a1:b3:47:71:9f:97:31:08:94:b3:a4:00:b4:9c:c7:32:66: 10:cd:d5:36:95:ca:81:80:66:4c:35:c7:58:30:0d:26:51:d6: 41:0c:c2:fe:7c:86:59:67:0c:22:bf:99:92:90:55:5b:c1:50: 00:54:36:16:92:98:d8:e8:84:58:3a:59:39:11:a8:36:e4:80: 05:df:d9:9a:21:74:e3:e4:66:13:1b:68:d0:26:a9:55:4b:49: d4:99:db:6f:a0:18:db:4e:cb:23:cb:d2:89:8f:e5:ad:cb:ef: ef:6a:eb:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxQkYguJc169F0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk MmYwYjdhZWUtNmEyNi00YTRiLThiOTktNzI0Njc2MjdkZGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6grj7cIFE+8EohWWOWLkcdBiLF0dxHCJuATa q7oF6YCvN1c3hDDzMegFbzLiUp+FKH+DaUDan8bGEN+Eg1k5EQPdHNvguFYSCqj6 sf1Wowm8bJdlliPkbE+MPNhn4aDbv2f0n5RMkum8cyi1QipoxL1EmqMUYVAqG+b2 Uw+K5l0GS2CMld++TvdCH86kXd1UDtkwf7mNENZtS/L8MMVdMFJnozOTfoqylQxL l9VX+k3AH7em9/hntKaIjE0xwXi1IVsROkFDRWa3B8rUdK63jz4MdgFf3SI0SaOk MJvNoiZiCs4zGiaXYPRnhO0UsKdC8sbxapFzHrHngSNrGzvxbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+It6YsbXlNYC8qaT1Qc0ek1HwoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZTNhNTVhN2UtM2Y1NS0z MTU2LWJjMDAtYWRhOWZjMGZkMzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQAcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALxXfj+1YE4zOL5Ur6LT/l/D7N1axZpkP0vVopEoSqiVd3ldLZ3v3/tO kDg+WPcI/RoyPJpu9DpVX4iQet55QOdGj4qS+FoZ/d2WcZYKKuZIdmCmpCG7yX7i 8pNGRwSr7ZSW7D/QsRcJyV7tRfbl2ZpJ/MarrCCIumrx3dIT4Wy12Y5haKKL6R4b l9JUYhqb4eGhs0dxn5cxCJSzpAC0nMcyZhDN1TaVyoGAZkw1x1gwDSZR1kEMwv58 hllnDCK/mZKQVVvBUABUNhaSmNjohFg6WTkRqDbkgAXf2ZohdOPkZhMbaNAmqVVL SdSZ22+gGNtOyyPL0omP5a3L7+9q67k= -----END CERTIFICATE-----Generated at Thu Mar 26 17:23:11 2026 by rpki-client