$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f2845bdd-85eb-33f9-9009-6ff8debf4c07.roa File: f2845bdd-85eb-33f9-9009-6ff8debf4c07.roa (raw, json) Hash identifier: Yax3XBf4HcB9p3m/VmAaV9dQbo831kxa2TUhqxLDdUg= Subject key identifier: 2F:2A:20:48:30:23:01:CB:DD:7B:44:8C:D1:56:FB:83:E5:94:49:A2 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DA693FF8CD05DE4550EF38580 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f2845bdd-85eb-33f9-9009-6ff8debf4c07.roa Signing time: Tue 28 Apr 2026 00:03:58 +0000 ROA not before: Tue 28 Apr 2026 00:03:58 +0000 ROA not after: Mon 27 Jul 2026 00:03:58 +0000 asID: 834 IP address blocks: 65.86.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:93:ff:8c:d0:5d:e4:55:0e:f3:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 28 00:03:58 2026 GMT Not After : Jul 27 00:03:58 2026 GMT Subject: CN=baaa208b-7e02-46d7-8ac5-69b4aa51dd86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:72:8c:f1:03:a8:49:20:61:b6:d8:12:8b:dd: 2e:26:0c:d2:3f:26:75:22:3e:52:d6:bd:19:f6:be: 97:6b:a7:37:4c:ea:84:fe:06:b3:2e:b0:c9:f3:54: f7:14:b8:d0:91:4a:64:54:b5:cc:b7:e0:3c:d6:89: cf:6c:e7:17:74:6b:ef:07:60:af:3e:06:50:d5:ca: c4:16:4f:01:0e:95:f0:45:c9:b6:43:60:0c:cd:60: 6e:0d:26:c0:2d:5c:e3:a9:4c:ce:b8:3c:11:8f:d9: d8:58:36:2c:9e:77:1c:54:7f:bc:e8:3f:be:e0:f8: e5:77:29:de:ab:c8:2e:be:26:7e:25:bd:bb:e5:b6: 73:77:16:47:fc:be:4f:57:1d:69:50:05:0e:60:28: ef:ab:8b:1e:66:38:ed:bb:22:80:30:e4:ac:00:50: 3e:92:ea:43:17:b8:ce:14:08:7a:b1:58:de:55:f8: 58:d2:87:33:20:34:d7:47:4b:75:d4:f4:ca:1f:29: d5:6d:15:81:e3:2b:69:31:f0:ae:2a:ba:f2:48:e0: e2:33:91:40:7e:ad:bf:89:b1:11:09:ce:0b:85:eb: 61:f1:80:43:55:14:39:ba:87:6e:ca:df:d1:24:bf: ff:26:69:70:ab:3c:a8:62:8c:55:57:27:aa:0c:f3: a5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:2A:20:48:30:23:01:CB:DD:7B:44:8C:D1:56:FB:83:E5:94:49:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f2845bdd-85eb-33f9-9009-6ff8debf4c07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:13:22:61:0f:ba:e0:4f:2d:40:08:e7:1c:20:ec:f3:a3:a3: b5:f3:7e:b1:13:bd:2b:1e:1e:e7:9c:38:b4:aa:c9:61:49:f6: df:eb:09:bd:f2:52:4f:0a:89:11:6c:a1:e3:0d:49:aa:d2:e6: 83:a9:5c:94:26:eb:d4:31:de:8c:6e:63:be:0b:93:79:70:4d: 60:21:e1:76:94:90:55:4c:1e:7d:db:2e:a3:9a:5f:24:ce:bb: 14:63:59:40:cf:be:74:bf:ef:85:a8:29:85:bc:03:ba:5b:95: a7:c0:35:a9:54:6b:e1:79:43:5b:be:16:e1:44:7b:db:52:d9: 06:21:52:4c:42:b9:e3:a2:c7:4b:62:54:6a:c3:56:2f:41:b7: 4b:03:7e:d4:9f:a0:9f:8c:61:f2:69:25:82:f9:ee:c0:ae:42: 6e:84:ed:ac:29:82:4b:e3:37:6a:aa:69:57:d0:80:d4:10:0f: 07:26:56:05:17:dc:a1:b9:2e:ac:05:64:c4:5a:f3:63:63:d8: 78:a6:37:cb:59:3a:97:08:6e:d1:b0:be:fc:fd:8a:26:51:7e: cd:3c:94:76:c9:8d:a4:a3:7e:30:1c:d1:8e:ab:05:3f:6b:38: 0a:af:37:93:3b:cb:6e:df:1d:4b:86:1b:84:54:74:08:b1:f8: c6:bf:65:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2mk/+M0F3kVQ7zhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQyODAwMDM1OFoXDTI2MDcyNzAwMDM1OFowLzEtMCsGA1UEAxMk YmFhYTIwOGItN2UwMi00NmQ3LThhYzUtNjliNGFhNTFkZDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3KM8QOoSSBhttgSi90uJgzSPyZ1Ij5S1r0Z 9r6Xa6c3TOqE/gazLrDJ81T3FLjQkUpkVLXMt+A81onPbOcXdGvvB2CvPgZQ1crE Fk8BDpXwRcm2Q2AMzWBuDSbALVzjqUzOuDwRj9nYWDYsnnccVH+86D++4Pjldyne q8guviZ+Jb275bZzdxZH/L5PVx1pUAUOYCjvq4seZjjtuyKAMOSsAFA+kupDF7jO FAh6sVjeVfhY0oczIDTXR0t11PTKHynVbRWB4ytpMfCuKrrySODiM5FAfq2/ibER Cc4Lheth8YBDVRQ5uoduyt/RJL//JmlwqzyoYoxVVyeqDPOl7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8qIEgwIwHL3XtEjNFW+4PllEmiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZjI4NDViZGQtODVlYi0z M2Y5LTkwMDktNmZmOGRlYmY0YzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQVYsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcTImEPuuBPLUAI5xwg7POjo7XzfrETvSseHuecOLSqyWFJ9t/rCb3y Uk8KiRFsoeMNSarS5oOpXJQm69Qx3oxuY74Lk3lwTWAh4XaUkFVMHn3bLqOaXyTO uxRjWUDPvnS/74WoKYW8A7pblafANalUa+F5Q1u+FuFEe9tS2QYhUkxCueOix0ti VGrDVi9Bt0sDftSfoJ+MYfJpJYL57sCuQm6E7awpgkvjN2qqaVfQgNQQDwcmVgUX 3KG5LqwFZMRa82Nj2HimN8tZOpcIbtGwvvz9iiZRfs08lHbJjaSjfjAc0Y6rBT9r OAqvN5M7y27fHUuGG4RUdAix+Ma/ZRE= -----END CERTIFICATE-----Generated at Wed May 13 13:00:48 2026 by rpki-client