$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5ac17ad6-a22b-33b4-a5da-8c2304ca14af.roa File: 5ac17ad6-a22b-33b4-a5da-8c2304ca14af.roa (raw, json) Hash identifier: SOB3Ond8l/Q0CI7OuC4KZ3qnRXUCkPfm+x60Qjy4wZk= Subject key identifier: A4:5A:EA:AE:FD:9A:05:FB:99:D6:A3:59:82:FE:AF:8E:16:26:F1:CB Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E232DDE4005FCEA9CF514B5D8 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5ac17ad6-a22b-33b4-a5da-8c2304ca14af.roa Signing time: Thu 11 Jun 2026 15:14:13 +0000 ROA not before: Thu 11 Jun 2026 15:14:13 +0000 ROA not after: Wed 09 Sep 2026 15:14:13 +0000 asID: 2856 IP address blocks: 64.205.136.0/22 maxlen: 22 64.205.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:23:2d:de:40:05:fc:ea:9c:f5:14:b5:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jun 11 15:14:13 2026 GMT Not After : Sep 9 15:14:13 2026 GMT Subject: CN=3ca9ac1d-f842-43fe-a634-f978ad0fdbbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:50:f8:79:a8:da:66:2b:0a:d8:6d:9e:55:bb: 89:b3:59:a1:b7:a8:10:06:be:47:b2:7b:6f:e5:ac: df:85:77:a3:38:8e:a4:db:ec:33:f0:0f:b9:b2:c5: 94:8d:51:34:39:04:63:92:2d:0e:1a:93:66:90:8a: 5e:20:fa:46:b6:26:2a:bb:e8:4d:4d:6d:82:fc:6a: 13:b9:c0:2e:6b:0f:a0:d8:6a:b9:10:fa:ef:91:b2: 93:5b:15:dc:99:af:8f:96:e5:bd:0b:06:7a:3b:0c: ca:53:5c:09:b6:5a:cd:47:0a:9b:1a:6c:87:56:e5: 70:b4:2c:07:56:22:02:20:f3:76:db:cd:31:4f:a2: 9b:28:24:2c:3d:89:15:11:ba:fe:45:69:af:56:88: c1:a5:bd:3c:6f:e9:6d:9d:76:02:fe:bf:28:bd:fc: 4f:4a:2a:2c:59:6d:20:d2:cc:96:8b:4e:4e:3b:76: 1a:f9:5d:6c:fa:07:06:48:2c:c7:34:5c:f7:d9:ec: 3a:33:6b:e1:bd:f3:87:1e:ae:f1:2a:08:2c:34:35: 49:6c:d1:e9:48:dc:47:fe:85:6b:e8:ea:08:be:f6: 3a:d8:4b:07:6b:87:b9:9d:45:64:63:0d:2e:31:06: 7e:30:f1:a6:9f:d9:24:bc:38:2d:1e:fe:d3:c1:b3: b9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:5A:EA:AE:FD:9A:05:FB:99:D6:A3:59:82:FE:AF:8E:16:26:F1:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5ac17ad6-a22b-33b4-a5da-8c2304ca14af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.205.136.0/22 64.205.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:3c:da:e1:e9:dd:8f:ff:ec:5f:7b:32:bc:51:5f:f2:d4:c6: 3f:34:89:7a:b4:52:8b:47:f5:fa:63:21:b7:19:7d:29:83:ed: cb:12:53:39:e0:e0:cd:c0:68:90:a1:74:5c:30:5b:84:46:92: 0b:b6:1f:44:b8:1d:1d:a9:0a:89:84:87:60:7e:a4:65:de:d4: 38:5b:4c:43:4d:1a:c9:27:57:08:e5:2d:ae:b1:24:8e:33:c6: 18:08:59:c3:6c:57:dd:a0:89:bf:23:e8:13:76:31:97:ea:21: 20:4b:15:43:ed:31:1e:89:26:04:6c:b8:25:e8:a8:9a:37:dc: 75:d6:f9:f3:1d:d1:99:ce:e3:de:7a:b3:11:c0:b4:65:04:fb: 73:9f:e2:10:35:8c:00:9d:e4:f3:97:f8:f0:ea:11:3b:df:82: 6b:e2:9e:93:54:c9:f7:a5:20:6f:da:8f:d2:7e:da:b2:cb:30: df:5a:fc:3b:44:4d:ed:fa:93:9d:31:42:db:15:b4:06:b6:ec: 92:3f:bb:64:0d:70:5e:6b:a5:5d:a6:15:c9:5d:41:52:64:78: da:4f:d8:a8:a6:27:7d:d6:2f:fe:5c:64:04:0f:00:4a:39:e9: 18:3b:73:ca:58:7d:66:8b:eb:ed:2c:2a:20:46:d6:71:b7:e2: af:7d:4b:92 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE4jLd5ABfzqnPUUtdgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDYxMTE1MTQxM1oXDTI2MDkwOTE1MTQxM1owLzEtMCsGA1UEAxMk M2NhOWFjMWQtZjg0Mi00M2ZlLWE2MzQtZjk3OGFkMGZkYmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllD4eajaZisK2G2eVbuJs1mht6gQBr5Hsntv 5azfhXejOI6k2+wz8A+5ssWUjVE0OQRjki0OGpNmkIpeIPpGtiYqu+hNTW2C/GoT ucAuaw+g2Gq5EPrvkbKTWxXcma+PluW9CwZ6OwzKU1wJtlrNRwqbGmyHVuVwtCwH ViICIPN2280xT6KbKCQsPYkVEbr+RWmvVojBpb08b+ltnXYC/r8ovfxPSiosWW0g 0syWi05OO3Ya+V1s+gcGSCzHNFz32ew6M2vhvfOHHq7xKggsNDVJbNHpSNxH/oVr 6OoIvvY62EsHa4e5nUVkYw0uMQZ+MPGmn9kkvDgtHv7TwbO5+QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKRa6q79mgX7mdajWYL+r44WJvHLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNWFjMTdhZDYtYTIyYi0z M2I0LWE1ZGEtOGMyMzA0Y2ExNGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCQM2IAwQC QM2QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFo82uHp3Y//7F97MrxRX/LUxj80iXq0UotH9fpjIbcZfSmD 7csSUzng4M3AaJChdFwwW4RGkgu2H0S4HR2pComEh2B+pGXe1DhbTENNGsknVwjl La6xJI4zxhgIWcNsV92gib8j6BN2MZfqISBLFUPtMR6JJgRsuCXoqJo33HXW+fMd 0ZnO4956sxHAtGUE+3Of4hA1jACd5POX+PDqETvfgmvinpNUyfelIG/aj9J+2rLL MN9a/DtETe36k50xQtsVtAa27JI/u2QNcF5rpV2mFcldQVJkeNpP2KimJ33WL/5c ZAQPAEo56Rg7c8pYfWaL6+0sKiBG1nG34q99S5I= -----END CERTIFICATE-----Generated at Sat Jun 13 23:02:28 2026 by rpki-client