$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fd33f5c9-9648-395b-a089-6c1740d4f220.roa File: fd33f5c9-9648-395b-a089-6c1740d4f220.roa (raw, json) Hash identifier: qY+JMc/kADr+FzfB+2LcA1C4/aNvNtYeSA8ebYENZKE= Subject key identifier: F2:FD:01:BF:12:5A:FD:02:30:C6:F2:B9:6D:9B:9C:A4:4A:0D:D8:EF Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D100CEED5F50B8E2939234800 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fd33f5c9-9648-395b-a089-6c1740d4f220.roa Signing time: Thu 05 Mar 2026 02:00:32 +0000 ROA not before: Thu 05 Mar 2026 02:00:32 +0000 ROA not after: Wed 03 Jun 2026 01:00:32 +0000 asID: 834 IP address blocks: 64.205.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:0c:ee:d5:f5:0b:8e:29:39:23:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 5 02:00:32 2026 GMT Not After : Jun 3 01:00:32 2026 GMT Subject: CN=c7d3ff36-e5a9-4a86-8896-f34b4590101b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:97:eb:ed:83:88:a7:8e:46:14:b2:2a:a0:ae: 1c:ef:f3:ec:56:da:95:a0:c3:cc:ba:0e:72:f3:c6: 8d:35:49:d0:64:fe:3a:5c:fe:9c:c8:87:9c:e6:4b: 25:f6:b6:98:7f:17:2b:0f:4a:9b:32:de:9d:af:21: 32:a5:c1:1f:f5:c6:70:bd:d1:08:e2:e3:0a:66:1e: d1:99:9d:16:35:b9:94:6c:00:e9:79:0d:74:f8:79: 19:d1:26:77:44:31:c5:56:47:69:b1:51:21:52:d2: ce:46:37:26:32:88:42:f2:e4:3a:58:f1:c9:cd:3a: 36:4d:80:5b:1a:8f:00:69:2b:ed:af:9c:ff:c2:2c: 27:2e:54:9a:52:86:48:5a:41:f3:f1:d7:ac:3c:1a: 7f:21:9d:c1:bf:93:bd:1f:b0:32:54:e3:fb:ff:ca: e3:86:4a:f4:66:18:0c:0c:db:85:04:ad:26:f8:e9: d7:fc:a8:6e:8f:96:bf:5c:ae:05:92:d7:32:16:91: df:88:88:e9:1e:a2:61:32:a2:dd:f4:33:45:41:13: ff:f2:c3:26:bf:95:9e:3c:69:66:5f:a1:b7:91:49: dc:0b:bd:68:09:31:bb:70:ab:9e:d0:d7:db:58:98: bd:7e:b7:4f:0d:bb:22:d4:c4:b0:98:20:28:4f:d9: f5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:FD:01:BF:12:5A:FD:02:30:C6:F2:B9:6D:9B:9C:A4:4A:0D:D8:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fd33f5c9-9648-395b-a089-6c1740d4f220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.205.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:4e:60:22:d3:fe:86:02:57:6e:12:bb:58:28:ff:54:47:e1: 1c:73:da:6e:32:62:32:81:e4:21:2d:b6:9d:9b:ea:2c:1f:37: cc:e6:d8:16:e0:2c:ee:e2:73:24:6c:16:37:7e:03:f4:de:5e: 96:a6:ef:3b:12:c9:5b:d7:76:28:24:e1:d0:17:30:27:2b:b5: 90:ac:82:47:33:e4:a8:16:9b:c0:b6:e9:10:3d:2b:6a:a8:da: ae:7f:8f:47:98:c3:3b:50:70:57:5c:31:09:62:f2:32:99:4a: 65:34:dd:6e:b3:0f:0b:35:92:58:0c:07:d1:c4:6a:9b:62:f3: b0:ba:e0:21:de:f6:54:54:f3:42:e6:16:98:36:e6:73:9b:ac: 5c:1e:10:e9:56:b0:ce:2c:25:ff:93:56:1f:f3:e4:3a:84:3a: 8e:6e:c9:38:c4:e8:a5:95:6d:25:e6:e6:e1:06:0c:5b:94:13: bd:d1:3c:04:5e:0a:6b:3b:03:34:68:73:ab:48:e5:72:49:fb: 10:6a:ee:35:3f:20:ec:8b:ce:c1:61:6b:f2:40:e8:8d:6d:ec: 64:95:1f:94:9b:a7:1a:29:c0:b9:a8:27:26:95:7d:e2:6e:fd: c0:32:b0:ed:1f:4d:c7:e1:23:12:a8:8f:56:ee:9d:dc:ce:48: 02:9c:6e:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0QDO7V9QuOKTkjSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk YzdkM2ZmMzYtZTVhOS00YTg2LTg4OTYtZjM0YjQ1OTAxMDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5fr7YOIp45GFLIqoK4c7/PsVtqVoMPMug5y 88aNNUnQZP46XP6cyIec5ksl9raYfxcrD0qbMt6dryEypcEf9cZwvdEI4uMKZh7R mZ0WNbmUbADpeQ10+HkZ0SZ3RDHFVkdpsVEhUtLORjcmMohC8uQ6WPHJzTo2TYBb Go8AaSvtr5z/wiwnLlSaUoZIWkHz8desPBp/IZ3Bv5O9H7AyVOP7/8rjhkr0ZhgM DNuFBK0m+OnX/Khuj5a/XK4FktcyFpHfiIjpHqJhMqLd9DNFQRP/8sMmv5WePGlm X6G3kUncC71oCTG7cKue0NfbWJi9frdPDbsi1MSwmCAoT9n16wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPL9Ab8SWv0CMMbyuW2bnKRKDdjvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmQzM2Y1YzktOTY0OC0z OTViLWEwODktNmMxNzQwZDRmMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQM2jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMdOYCLT/oYCV24Su1go/1RH4Rxz2m4yYjKB5CEttp2b6iwfN8zm2Bbg LO7icyRsFjd+A/TeXpam7zsSyVvXdigk4dAXMCcrtZCsgkcz5KgWm8C26RA9K2qo 2q5/j0eYwztQcFdcMQli8jKZSmU03W6zDws1klgMB9HEapti87C64CHe9lRU80Lm Fpg25nObrFweEOlWsM4sJf+TVh/z5DqEOo5uyTjE6KWVbSXm5uEGDFuUE73RPARe Cms7AzRoc6tI5XJJ+xBq7jU/IOyLzsFha/JA6I1t7GSVH5SbpxopwLmoJyaVfeJu /cAysO0fTcfhIxKoj1bundzOSAKcbqE= -----END CERTIFICATE-----Generated at Thu Mar 26 20:14:15 2026 by rpki-client