$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/038b429f-6e5d-32ce-9255-c57d409b5d4c.roa File: 038b429f-6e5d-32ce-9255-c57d409b5d4c.roa (raw, json) Hash identifier: dY3+y22yiWcMPv5WJg42DuQp6oCGMGuXTPyFJHxfPAs= Subject key identifier: 35:C0:7A:FD:B9:50:BF:EA:CD:77:AF:08:9E:37:6E:77:4D:24:C5:42 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EA787EC1C1B7D0C44CC0DDC80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/038b429f-6e5d-32ce-9255-c57d409b5d4c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 5650 IP address blocks: 64.205.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:ec:1c:1b:7d:0c:44:cc:0d:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=35ea7e78-c243-4e94-aad9-2ab6f3a03d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:dd:a8:69:03:4c:ea:67:6c:f3:79:0f:4a:2c: 27:4e:3c:cb:5a:39:f1:b7:fe:23:1c:fa:1f:96:20: 88:d4:51:35:cb:34:56:2a:2a:55:b4:7f:85:c3:8d: c8:ee:39:21:4e:41:c3:10:c6:87:20:02:86:49:95: ca:59:2e:b4:33:2c:87:0b:94:21:4e:d1:16:db:44: 9e:35:49:df:ab:ec:12:a3:49:cf:93:0b:dc:55:5c: 8c:e3:40:1c:aa:16:19:31:26:21:cb:d9:00:87:1c: b6:79:f0:33:91:a5:c0:80:8d:93:fa:da:e3:0c:73: 7f:5b:fb:ee:31:1e:fc:17:e9:a5:fb:ae:24:17:ed: f7:bb:c3:cf:34:37:ae:8a:e1:33:dd:30:b0:f6:7c: 38:79:d0:98:d8:6e:01:a5:0c:f9:65:e9:92:4e:89: 69:f3:c4:2c:bd:45:27:a8:61:44:a8:3d:48:35:5d: 51:87:6d:c0:26:78:e2:ed:c8:90:ee:dd:21:b2:37: ee:ba:de:ff:58:1e:2c:2f:5f:79:4d:f7:a0:80:bf: 65:fd:f8:5e:1b:5f:49:21:a2:b2:2a:b5:27:98:30: f5:a4:9e:cf:f4:26:56:56:dd:c3:bd:b6:63:cb:22: f1:73:26:66:b6:24:10:3d:12:7b:c7:09:4e:68:91: 76:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C0:7A:FD:B9:50:BF:EA:CD:77:AF:08:9E:37:6E:77:4D:24:C5:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/038b429f-6e5d-32ce-9255-c57d409b5d4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.205.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:3b:f4:ff:38:d9:b1:70:6f:83:41:c0:89:2e:ef:94:f2:0e: 9a:16:fe:78:6f:cf:4a:04:bd:43:fd:d8:a7:7b:e0:2b:84:5e: 9a:4d:09:99:de:a3:59:d1:ec:b5:91:28:e2:d2:c4:e0:79:72: 81:59:f3:bb:25:86:35:e7:79:10:00:ba:26:1b:3b:91:13:d7: 24:d9:00:01:85:e2:8c:56:f3:ce:e1:b7:3f:df:c5:b9:f1:04: bd:b9:2a:2f:12:16:a8:1c:27:2f:02:ba:03:35:47:aa:3e:8a: c5:46:90:ad:ba:b3:05:39:26:b9:d0:aa:f7:d0:cb:0d:db:46: d0:29:c7:90:70:dc:9a:40:d6:0a:d5:02:59:3e:03:b0:78:b3: 32:e9:b9:20:3a:3b:28:60:4f:e9:25:91:9e:65:af:fb:d7:ca: 4d:6d:3b:42:cf:21:b9:c9:4b:fd:af:7e:e5:8c:4f:04:c4:0e: 80:77:9d:2f:94:01:6f:ca:fd:af:62:3f:1f:89:d5:4b:ec:c2: 6f:56:b0:3f:52:72:b9:c0:55:55:b3:17:1e:75:7a:05:c4:86: 24:a4:8c:50:97:fa:1e:97:95:11:65:80:0e:bb:72:ae:ff:40: b5:8d:77:f7:a4:40:74:48:8b:f6:aa:e6:c0:a6:2a:a1:00:be: 73:0f:23:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh+wcG30MRMwN3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzVlYTdlNzgtYzI0My00ZTk0LWFhZDktMmFiNmYzYTAzZDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5t2oaQNM6mds83kPSiwnTjzLWjnxt/4jHPof liCI1FE1yzRWKipVtH+Fw43I7jkhTkHDEMaHIAKGSZXKWS60MyyHC5QhTtEW20Se NUnfq+wSo0nPkwvcVVyM40AcqhYZMSYhy9kAhxy2efAzkaXAgI2T+trjDHN/W/vu MR78F+ml+64kF+33u8PPNDeuiuEz3TCw9nw4edCY2G4BpQz5ZemSTolp88QsvUUn qGFEqD1INV1Rh23AJnji7ciQ7t0hsjfuut7/WB4sL195TfeggL9l/fheG19JIaKy KrUnmDD1pJ7P9CZWVt3DvbZjyyLxcyZmtiQQPRJ7xwlOaJF2qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXAev25UL/qzXevCJ43bndNJMVCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDM4YjQyOWYtNmU1ZC0z MmNlLTkyNTUtYzU3ZDQwOWI1ZDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQM0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC079P842bFwb4NBwIku75TyDpoW/nhvz0oEvUP92Kd74CuEXppNCZne o1nR7LWRKOLSxOB5coFZ87slhjXneRAAuiYbO5ET1yTZAAGF4oxW887htz/fxbnx BL25Ki8SFqgcJy8CugM1R6o+isVGkK26swU5JrnQqvfQyw3bRtApx5Bw3JpA1grV Alk+A7B4szLpuSA6OyhgT+klkZ5lr/vXyk1tO0LPIbnJS/2vfuWMTwTEDoB3nS+U AW/K/a9iPx+J1Uvswm9WsD9ScrnAVVWzFx51egXEhiSkjFCX+h6XlRFlgA67cq7/ QLWNd/ekQHRIi/aq5sCmKqEAvnMPI4E= -----END CERTIFICATE-----Generated at Wed Jul 29 05:00:04 2026 by rpki-client