$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2181e171-3bf1-33a0-bef2-4c189a832d98.roa File: 2181e171-3bf1-33a0-bef2-4c189a832d98.roa (raw, json) Hash identifier: 144Cnn5YinIKOIN8ySq8CXgigrK37i+xFKFMCkhUGMg= Subject key identifier: 70:52:6C:51:42:1D:C0:BC:9C:17:08:27:5F:E2:75:06:B3:76:3C:98 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CA75C5A77EB9F82F80C9B57E0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2181e171-3bf1-33a0-bef2-4c189a832d98.roa Signing time: Mon 26 Jan 2026 14:00:41 +0000 ROA not before: Mon 26 Jan 2026 14:00:41 +0000 ROA not after: Sun 26 Apr 2026 13:00:41 +0000 asID: 9009 IP address blocks: 64.139.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a7:5c:5a:77:eb:9f:82:f8:0c:9b:57:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jan 26 14:00:41 2026 GMT Not After : Apr 26 13:00:41 2026 GMT Subject: CN=9f0d4192-7e7b-4bc8-bb4f-092f3ec71b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:35:cd:b2:22:fd:70:06:89:6f:6f:77:4c:b4: b8:8e:09:8c:c0:f9:fb:37:d3:5b:b4:df:93:e8:fd: 96:41:e1:a7:50:06:09:32:a2:d5:32:4d:20:8d:a5: e3:39:41:fa:b2:69:41:08:57:ee:19:1e:d9:d1:db: 7d:ab:bf:7f:02:06:62:2d:e4:c4:f3:ce:5c:a8:32: 0b:5f:eb:8e:bb:a7:a5:37:cd:77:b4:ce:cd:eb:89: 7a:1f:3e:8d:af:8b:aa:a4:16:89:80:18:1c:fb:6d: 24:76:73:6d:d5:30:c5:96:cd:fd:8e:74:8a:18:54: aa:3a:8a:49:53:dd:f4:ca:37:b3:42:ce:0a:76:fa: f6:aa:5d:cb:c0:fd:54:b6:24:51:0b:4e:8f:79:f6: bf:40:71:f9:de:3a:75:09:73:75:b7:60:7b:ec:a0: b3:b7:ec:19:67:df:42:89:9e:e6:c8:12:b4:f7:27: a8:b5:d7:42:11:62:61:19:71:39:bc:b3:67:6a:76: 4f:92:4e:8c:fa:e4:43:f8:4f:ca:6b:bc:95:17:36: 4a:48:ef:e4:08:77:2c:48:65:a8:7e:b5:dc:08:9a: ec:4f:3c:79:da:e2:46:5b:fb:38:f2:12:9b:29:90: 8a:a1:7b:db:e9:70:40:5c:3b:5b:d9:2b:be:91:00: 24:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:52:6C:51:42:1D:C0:BC:9C:17:08:27:5F:E2:75:06:B3:76:3C:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2181e171-3bf1-33a0-bef2-4c189a832d98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.139.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:a9:3a:80:db:08:1a:62:d3:35:a8:8e:b2:bf:71:80:30:79: 88:cd:19:fe:27:c7:dd:5b:a9:cb:06:de:9e:d8:ae:3d:3e:ea: 2c:5e:8c:15:28:1a:54:2f:65:db:fa:c7:63:a0:b5:2c:dc:6f: c1:9d:1b:04:05:49:3d:39:98:df:eb:a3:a9:a7:a6:16:5a:be: 83:3f:51:ca:66:b1:5b:ec:3e:81:99:66:a1:49:10:36:db:a9: 50:34:61:66:e6:33:96:d8:a4:82:41:6a:78:8a:a3:16:45:6f: 3a:a3:1c:48:e8:04:59:7a:08:5c:63:c2:7e:4a:ea:7d:84:7f: 63:87:53:ed:b2:25:87:39:c7:c4:e6:b9:ae:7c:f1:1d:ae:ca: a9:3c:17:28:61:32:ff:89:bf:6d:82:f2:01:7e:f6:6a:d8:9a: 2f:dc:b1:ce:1d:ee:61:51:28:05:fb:35:94:28:90:71:39:95: e1:c1:7d:10:07:e4:17:17:20:80:20:25:b4:5e:aa:1e:4d:86: 43:34:86:e0:f6:8c:f6:33:20:fd:07:e8:39:a4:ae:f0:8a:1d: ac:2c:a6:b3:ee:8a:d8:92:4b:40:2e:9e:f4:50:cb:83:22:c7: 85:81:0f:b4:75:f5:e5:49:d7:f6:75:88:5c:1a:79:64:b7:f4: 65:31:9e:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEynXFp365+C+AybV+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDEyNjE0MDA0MVoXDTI2MDQyNjEzMDA0MVowLzEtMCsGA1UEAxMk OWYwZDQxOTItN2U3Yi00YmM4LWJiNGYtMDkyZjNlYzcxYjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojXNsiL9cAaJb293TLS4jgmMwPn7N9NbtN+T 6P2WQeGnUAYJMqLVMk0gjaXjOUH6smlBCFfuGR7Z0dt9q79/AgZiLeTE885cqDIL X+uOu6elN813tM7N64l6Hz6Nr4uqpBaJgBgc+20kdnNt1TDFls39jnSKGFSqOopJ U930yjezQs4Kdvr2ql3LwP1UtiRRC06Pefa/QHH53jp1CXN1t2B77KCzt+wZZ99C iZ7myBK09yeotddCEWJhGXE5vLNnanZPkk6M+uRD+E/Ka7yVFzZKSO/kCHcsSGWo frXcCJrsTzx52uJGW/s48hKbKZCKoXvb6XBAXDtb2Su+kQAkkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBSbFFCHcC8nBcIJ1/idQazdjyYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjE4MWUxNzEtM2JmMS0z M2EwLWJlZjItNGMxODlhODMyZDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQIsEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWpOoDbCBpi0zWojrK/cYAweYjNGf4nx91bqcsG3p7Yrj0+6ixejBUo GlQvZdv6x2OgtSzcb8GdGwQFST05mN/ro6mnphZavoM/UcpmsVvsPoGZZqFJEDbb qVA0YWbmM5bYpIJBaniKoxZFbzqjHEjoBFl6CFxjwn5K6n2Ef2OHU+2yJYc5x8Tm ua588R2uyqk8FyhhMv+Jv22C8gF+9mrYmi/csc4d7mFRKAX7NZQokHE5leHBfRAH 5BcXIIAgJbReqh5NhkM0huD2jPYzIP0H6DmkrvCKHawsprPuitiSS0AunvRQy4Mi x4WBD7R19eVJ1/Z1iFwaeWS39GUxniw= -----END CERTIFICATE-----Generated at Sun Mar 1 21:00:52 2026 by rpki-client