$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/488c2fba-1a56-371f-9ebb-566202a98ae2.roa File: 488c2fba-1a56-371f-9ebb-566202a98ae2.roa (raw, json) Hash identifier: fPeSK3Ik2cnemjUj4cb16/mW8eJqOWswnl0jtDeYn6c= Subject key identifier: 2A:2B:D3:7E:4B:D5:DC:E1:63:E4:70:16:EE:E9:C2:AB:FD:8E:93:BB Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EA68C78D6D4CFC9D409B3D7EA Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/488c2fba-1a56-371f-9ebb-566202a98ae2.roa Signing time: Tue 28 Jul 2026 16:35:44 +0000 ROA not before: Tue 28 Jul 2026 16:35:44 +0000 ROA not after: Mon 26 Oct 2026 16:35:44 +0000 asID: 397423 IP address blocks: 64.204.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a6:8c:78:d6:d4:cf:c9:d4:09:b3:d7:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 28 16:35:44 2026 GMT Not After : Oct 26 16:35:44 2026 GMT Subject: CN=ba2221fe-11f8-43bc-8e7a-2230f1017385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8d:52:9a:db:3a:c0:39:64:0a:34:28:62:2c: 6a:d0:c8:71:0a:00:21:ae:3e:d3:07:12:2e:60:3f: 4d:08:c3:64:1a:36:b4:0c:34:4c:de:88:47:de:a3: 35:98:ea:18:58:be:10:f9:d5:0a:fc:96:77:af:da: eb:3f:6f:1b:34:ec:fa:66:a8:64:ee:6f:46:a7:95: cf:67:f4:3a:71:a6:00:e0:7a:f8:a0:8b:cb:8b:1d: b8:e0:77:a0:30:48:3b:24:d7:bd:e2:58:a6:71:bf: ae:83:87:d1:45:bf:71:0f:1c:85:cb:dd:90:05:76: 6a:35:42:77:2f:7a:d3:47:4f:8e:98:74:74:57:71: fc:70:24:0a:de:7b:3c:ca:8f:ea:59:71:ea:32:f0: d1:ff:b4:2f:ff:93:af:be:96:21:48:f1:30:cf:b4: a9:f3:c2:88:e0:68:d4:b4:91:41:80:0b:88:27:c5: d9:c0:44:34:27:29:25:41:e1:b6:a8:a7:ae:c2:c2: 32:da:99:5d:45:1e:20:4e:e9:57:1d:28:6c:42:dd: f4:c8:e4:9f:4f:ae:6a:43:b4:0a:66:09:21:8f:42: b2:b7:f3:0c:39:0f:98:41:cb:a3:8b:f0:2c:c3:32: 78:98:31:c2:38:c8:22:28:ab:8e:67:8c:d9:38:36: 7b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2B:D3:7E:4B:D5:DC:E1:63:E4:70:16:EE:E9:C2:AB:FD:8E:93:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/488c2fba-1a56-371f-9ebb-566202a98ae2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:d5:81:fe:9e:07:27:47:cb:6a:0f:2e:52:bd:69:a2:44:5f: e8:a3:08:74:9f:12:6c:29:09:e1:97:84:f7:64:ad:5c:9d:48: f4:80:1e:bd:27:f9:01:45:13:9c:47:97:fe:6e:03:d1:09:9a: 91:e2:a6:a9:14:c9:b0:9d:d4:b6:e8:d5:80:f4:e2:5a:f2:d6: e6:f2:b7:74:06:04:1e:07:d9:97:8e:54:70:07:c8:92:27:f8: 24:2d:6f:0f:4b:e4:4c:48:d4:ca:9d:bf:e5:f1:d6:c8:a3:6d: db:ef:f5:09:3f:20:88:4b:89:60:76:ac:19:d0:56:6c:ad:fa: ba:93:3d:e9:53:ad:e8:f1:86:4a:d8:8c:84:96:78:46:a9:2f: bc:fe:4a:df:c4:de:0d:68:d4:cf:79:42:09:57:e1:d0:d4:e4: dc:f2:c0:de:00:ce:4e:ca:16:c2:b4:8e:c4:58:e2:52:58:9c: 7c:e5:fb:26:6a:73:d1:8a:08:d1:f8:b2:61:8b:1d:f0:7e:70: 3c:30:13:16:c8:85:2d:5b:bc:a3:f9:1f:ad:56:0a:80:b7:ed: 6a:eb:b9:d0:48:e8:4e:d9:18:62:6f:78:3c:b8:32:66:b5:9a: 9f:75:6e:30:95:b5:f9:33:fd:3d:f4:68:d0:d1:c1:7a:fe:98: 42:85:ef:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6mjHjW1M/J1Amz1+owDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyODE2MzU0NFoXDTI2MTAyNjE2MzU0NFowLzEtMCsGA1UEAxMk YmEyMjIxZmUtMTFmOC00M2JjLThlN2EtMjIzMGYxMDE3Mzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro1Smts6wDlkCjQoYixq0MhxCgAhrj7TBxIu YD9NCMNkGja0DDRM3ohH3qM1mOoYWL4Q+dUK/JZ3r9rrP28bNOz6Zqhk7m9Gp5XP Z/Q6caYA4Hr4oIvLix244HegMEg7JNe94limcb+ug4fRRb9xDxyFy92QBXZqNUJ3 L3rTR0+OmHR0V3H8cCQK3ns8yo/qWXHqMvDR/7Qv/5OvvpYhSPEwz7Sp88KI4GjU tJFBgAuIJ8XZwEQ0JyklQeG2qKeuwsIy2pldRR4gTulXHShsQt30yOSfT65qQ7QK Zgkhj0Kyt/MMOQ+YQcuji/AswzJ4mDHCOMgiKKuOZ4zZODZ7kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCor035L1dzhY+RwFu7pwqv9jpO7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDg4YzJmYmEtMWE1Ni0z NzFmLTllYmItNTY2MjAyYTk4YWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMyPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHVgf6eBydHy2oPLlK9aaJEX+ijCHSfEmwpCeGXhPdkrVydSPSAHr0n +QFFE5xHl/5uA9EJmpHipqkUybCd1Lbo1YD04lry1ubyt3QGBB4H2ZeOVHAHyJIn +CQtbw9L5ExI1Mqdv+Xx1sijbdvv9Qk/IIhLiWB2rBnQVmyt+rqTPelTrejxhkrY jISWeEapL7z+St/E3g1o1M95QglX4dDU5NzywN4Azk7KFsK0jsRY4lJYnHzl+yZq c9GKCNH4smGLHfB+cDwwExbIhS1bvKP5H61WCoC37WrrudBI6E7ZGGJveDy4Mma1 mp91bjCVtfkz/T30aNDRwXr+mEKF70k= -----END CERTIFICATE-----Generated at Wed Jul 29 02:25:14 2026 by rpki-client