$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aaacd4a8-4daf-3b20-bacf-6eba324ab86a.roa File: aaacd4a8-4daf-3b20-bacf-6eba324ab86a.roa (raw, json) Hash identifier: Qn81GMYyjBeTghpXzBB8gru4TkC1IMFiQrepRdNymRg= Subject key identifier: 5A:C1:BA:E1:B5:63:F0:89:A8:99:90:EE:00:2C:0D:A6:FE:6F:F2:F2 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D5234F3A58EA6FDD046F0E600 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aaacd4a8-4daf-3b20-bacf-6eba324ab86a.roa Signing time: Sat 28 Mar 2026 18:44:33 +0000 ROA not before: Sat 28 Mar 2026 18:44:33 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 199527 IP address blocks: 216.132.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:34:f3:a5:8e:a6:fd:d0:46:f0:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 28 18:44:33 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=5d110950-3a37-4861-b742-48a1fb18696f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d2:2f:fb:7a:89:9a:10:65:71:0c:e8:d0:8b: a2:24:40:79:81:70:fa:32:ac:c1:e2:11:66:00:50: 03:5d:39:84:16:5d:47:23:29:ab:5e:c1:39:a3:ea: 0a:0e:af:80:94:5d:64:f8:5a:2d:e0:e7:8a:76:ab: 14:a3:0c:31:0a:c1:78:e4:72:d7:08:13:69:3b:1c: 88:30:30:5c:f5:32:d2:53:9a:96:73:bc:86:4a:99: 17:4d:69:20:12:71:db:98:3b:ad:23:4b:5c:2d:e5: ed:da:f7:91:15:e0:dd:a2:68:a5:97:1d:37:50:94: 84:0b:04:45:57:07:69:4e:a3:21:68:1d:b5:a5:ff: 9a:c4:64:b6:18:22:32:38:eb:1a:a2:3c:b8:a0:da: 19:e3:16:75:dc:8b:dd:81:85:38:d3:ff:8e:c0:f1: 7f:2f:9d:79:b4:75:90:0b:5b:7b:8f:0e:e6:fa:e7: 10:3c:a8:3c:69:58:69:a0:a5:97:76:d8:1f:43:e7: 52:4c:fe:ad:ae:ae:a7:c7:b3:11:ca:2c:cb:35:f7: 7e:87:71:51:30:75:ca:41:5e:70:2b:f1:22:b2:01: 44:0a:1a:91:49:5e:64:d9:cc:ba:1b:33:57:f3:56: 1b:45:08:23:cb:e6:2d:ee:94:a7:39:33:b5:41:4d: 4c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C1:BA:E1:B5:63:F0:89:A8:99:90:EE:00:2C:0D:A6:FE:6F:F2:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aaacd4a8-4daf-3b20-bacf-6eba324ab86a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:ac:00:06:f2:74:4f:89:93:be:af:8e:df:c4:8a:fe:71:c7: 82:1b:6f:43:58:97:2f:e1:5e:27:ca:57:fb:b3:d3:e5:97:9e: 1e:d4:49:ee:48:bb:37:bc:b6:55:0a:34:87:14:20:56:7e:83: 43:83:76:97:a1:b4:34:e2:23:9d:f9:b7:9f:35:25:8f:b6:24: 9b:be:f3:47:15:ab:42:47:be:8a:1b:6f:8f:2d:cc:19:6a:2a: 03:ca:ff:7e:bb:f9:be:c9:93:9b:33:94:74:c5:95:cf:10:b3: 8a:0d:aa:b8:6c:e5:04:d6:6c:dd:dc:6c:79:03:1c:40:97:64: 9b:71:91:1c:69:c4:9f:aa:13:08:3a:e7:56:23:5b:a6:a2:56: 5d:54:c2:8d:a1:11:e0:97:d0:f5:8d:b0:b1:1c:0c:28:61:f6: 09:b2:cc:33:41:32:21:54:d9:ce:85:1b:44:c2:31:06:03:23: 32:6a:fd:d0:9a:c2:e1:79:d4:27:df:16:72:49:a7:41:4e:f0: bd:a3:a8:5b:6a:09:d1:3f:58:98:a3:da:76:c8:26:de:af:47: dd:d0:a9:fb:15:89:c5:18:85:b1:ee:03:37:ba:de:8d:5f:a8: bb:91:18:6d:99:ab:65:a9:1b:ca:0f:53:89:30:c0:90:69:bd: 05:fc:7c:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SNPOljqb90Ebw5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyODE4NDQzM1oXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk NWQxMTA5NTAtM2EzNy00ODYxLWI3NDItNDhhMWZiMTg2OTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidIv+3qJmhBlcQzo0IuiJEB5gXD6MqzB4hFm AFADXTmEFl1HIymrXsE5o+oKDq+AlF1k+Fot4OeKdqsUowwxCsF45HLXCBNpOxyI MDBc9TLSU5qWc7yGSpkXTWkgEnHbmDutI0tcLeXt2veRFeDdomillx03UJSECwRF VwdpTqMhaB21pf+axGS2GCIyOOsaojy4oNoZ4xZ13IvdgYU40/+OwPF/L515tHWQ C1t7jw7m+ucQPKg8aVhpoKWXdtgfQ+dSTP6trq6nx7MRyizLNfd+h3FRMHXKQV5w K/EisgFEChqRSV5k2cy6GzNX81YbRQgjy+Yt7pSnOTO1QU1MKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrBuuG1Y/CJqJmQ7gAsDab+b/LyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWFhY2Q0YTgtNGRhZi0z YjIwLWJhY2YtNmViYTMyNGFiODZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2IQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWsAAbydE+Jk76vjt/Eiv5xx4Ibb0NYly/hXifKV/uz0+WXnh7USe5I uze8tlUKNIcUIFZ+g0ODdpehtDTiI535t581JY+2JJu+80cVq0JHvoobb48tzBlq KgPK/367+b7Jk5szlHTFlc8Qs4oNqrhs5QTWbN3cbHkDHECXZJtxkRxpxJ+qEwg6 51YjW6aiVl1Uwo2hEeCX0PWNsLEcDChh9gmyzDNBMiFU2c6FG0TCMQYDIzJq/dCa wuF51CffFnJJp0FO8L2jqFtqCdE/WJij2nbIJt6vR93QqfsVicUYhbHuAze63o1f qLuRGG2Zq2WpG8oPU4kwwJBpvQX8fJk= -----END CERTIFICATE-----Generated at Fri Apr 17 14:37:38 2026 by rpki-client