$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33698bf2-4dfa-3031-b691-a5fc91900757.roa File: 33698bf2-4dfa-3031-b691-a5fc91900757.roa (raw, json) Hash identifier: hcKosMGJkTqE8aJc4w0Cdl6tp7WQ+j2IqsDOPZwi7aI= Subject key identifier: FC:C4:D8:16:BD:9A:D8:6D:3A:65:EA:88:56:97:4E:1A:9E:0D:0E:34 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D8695813483F358F45EBE7380 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33698bf2-4dfa-3031-b691-a5fc91900757.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 25369 IP address blocks: 65.86.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:81:34:83:f3:58:f4:5e:be:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=4f1e787a-017d-48d0-98c1-147038af5a5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2f:05:91:55:e5:9d:46:03:0b:1c:e6:34:fa: 74:30:8d:43:e2:1e:2a:99:c2:b6:a6:5d:9c:87:ee: 5f:65:83:ba:cb:e2:d4:1c:e9:1c:9c:1d:19:82:45: d9:82:bd:14:bd:16:71:78:77:da:5c:5b:6b:4c:4e: 40:86:77:39:4f:53:a8:e0:19:8b:e4:b7:0e:13:dd: 36:27:9d:77:c1:3d:18:0b:37:52:43:b8:78:db:46: 4e:91:31:ed:3d:2c:43:cb:4b:a1:82:7d:9b:4e:46: 52:40:12:bb:95:bc:8a:22:16:54:17:ab:23:00:89: 83:d5:56:77:dc:72:01:f0:0a:73:27:6c:a3:09:c2: 29:28:57:83:87:2b:9f:43:ba:3b:07:51:40:56:ed: 5e:0a:be:30:53:b4:2f:fb:9f:b1:0f:af:e9:4f:04: 2d:01:d3:8b:04:51:70:39:b6:e5:9c:8f:1d:ba:f0: a2:4c:dd:10:a9:40:04:c0:a9:d9:90:89:fc:1a:73: 6d:d6:ee:0b:04:1b:40:a0:56:4b:e0:e9:ff:9e:63: ae:61:dc:06:5e:20:de:ed:45:11:2a:be:42:c3:7e: 79:3f:e4:27:0d:95:1c:8c:8e:33:97:03:f0:e0:63: d6:76:7f:c0:5e:4f:6f:fd:7f:3e:e3:da:95:8a:03: fd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C4:D8:16:BD:9A:D8:6D:3A:65:EA:88:56:97:4E:1A:9E:0D:0E:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33698bf2-4dfa-3031-b691-a5fc91900757.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:0b:66:a1:e0:c4:77:f9:44:ff:b5:e1:fe:fe:c8:a4:ff:f6: b0:c5:97:51:4f:3e:31:9d:70:8a:06:3f:6e:6e:86:92:b6:47: f9:f7:66:fb:83:49:d7:6a:0d:42:09:b5:1d:5a:fc:9d:bd:26: 06:de:31:2a:2d:3a:2f:33:ad:5c:f6:91:da:8f:b8:74:21:50: 06:19:cd:be:af:6f:85:e2:23:ef:03:6d:71:fc:00:86:2a:1d: b2:63:18:6b:bf:0d:6c:e0:90:c9:f1:9d:90:66:09:2e:ef:a8: 14:ae:ec:d6:46:95:0e:5a:d0:c9:4c:1e:bc:e0:92:4a:1b:4f: c1:62:80:9d:74:7a:22:9a:72:7a:70:50:04:5b:9d:f9:32:cf: 03:00:71:c4:bf:c1:b9:b7:b8:e8:5f:4f:cd:82:5b:6f:3a:af: d1:b0:08:a9:74:13:0b:10:54:19:f1:8a:09:7a:6a:fb:89:68: da:90:a4:07:a4:ba:1d:d1:73:5b:89:f0:2c:b3:b9:bc:96:f9: 35:b6:c2:a7:db:15:21:68:83:4a:45:3f:ec:fd:0a:0e:45:ad: 3b:e3:b8:5b:fd:92:1e:b3:07:ea:36:4d:ad:5f:24:04:d2:27: aa:62:1a:9d:4c:65:75:0e:8f:a5:be:ca:83:82:a5:82:45:b7: e2:70:2e:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlYE0g/NY9F6+c4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk NGYxZTc4N2EtMDE3ZC00OGQwLTk4YzEtMTQ3MDM4YWY1YTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S8FkVXlnUYDCxzmNPp0MI1D4h4qmcK2pl2c h+5fZYO6y+LUHOkcnB0ZgkXZgr0UvRZxeHfaXFtrTE5Ahnc5T1Oo4BmL5LcOE902 J513wT0YCzdSQ7h420ZOkTHtPSxDy0uhgn2bTkZSQBK7lbyKIhZUF6sjAImD1VZ3 3HIB8ApzJ2yjCcIpKFeDhyufQ7o7B1FAVu1eCr4wU7Qv+5+xD6/pTwQtAdOLBFFw ObblnI8duvCiTN0QqUAEwKnZkIn8GnNt1u4LBBtAoFZL4On/nmOuYdwGXiDe7UUR Kr5Cw355P+QnDZUcjI4zlwPw4GPWdn/AXk9v/X8+49qVigP97QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzE2Ba9mthtOmXqiFaXThqeDQ40MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzM2OThiZjItNGRmYS0z MDMxLWI2OTEtYTVmYzkxOTAwNzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQVawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4LZqHgxHf5RP+14f7+yKT/9rDFl1FPPjGdcIoGP25uhpK2R/n3ZvuD SddqDUIJtR1a/J29JgbeMSotOi8zrVz2kdqPuHQhUAYZzb6vb4XiI+8DbXH8AIYq HbJjGGu/DWzgkMnxnZBmCS7vqBSu7NZGlQ5a0MlMHrzgkkobT8FigJ10eiKacnpw UARbnfkyzwMAccS/wbm3uOhfT82CW286r9GwCKl0EwsQVBnxigl6avuJaNqQpAek uh3Rc1uJ8CyzubyW+TW2wqfbFSFog0pFP+z9Cg5FrTvjuFv9kh6zB+o2Ta1fJATS J6piGp1MZXUOj6W+yoOCpYJFt+JwLok= -----END CERTIFICATE-----Generated at Fri Apr 17 22:02:18 2026 by rpki-client