$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c5f009d8-bdc3-3c17-a3cc-40d4ec05a796.roa File: c5f009d8-bdc3-3c17-a3cc-40d4ec05a796.roa (raw, json) Hash identifier: kJs1jaNp7njuwZUtWABC4CzKEbu+y6bBx5ba+19S6gg= Subject key identifier: 92:5E:7D:07:75:7B:74:C3:82:F0:C7:40:99:64:34:88:61:E1:D1:2E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D87FA9555D34A00D1E1361700 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c5f009d8-bdc3-3c17-a3cc-40d4ec05a796.roa Signing time: Fri 17 Apr 2026 01:00:27 +0000 ROA not before: Fri 17 Apr 2026 01:00:27 +0000 ROA not after: Thu 16 Jul 2026 01:00:27 +0000 asID: 2914 IP address blocks: 64.50.128.0/21 maxlen: 24 66.17.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:fa:95:55:d3:4a:00:d1:e1:36:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 17 01:00:27 2026 GMT Not After : Jul 16 01:00:27 2026 GMT Subject: CN=a4d5d9ae-8cbd-4021-96e1-a23f4f142317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5d:6f:eb:ad:5d:21:85:01:cb:8e:b7:26:3c: 4a:c1:5d:5c:69:9d:09:80:fa:dc:e1:86:2d:a2:21: a5:4c:61:e1:81:d0:02:b6:4c:00:02:6a:5f:cf:9d: 90:1d:c4:aa:f7:91:33:45:c0:33:65:df:12:0e:99: bf:f8:20:17:1b:c5:7d:3f:18:56:0d:b0:18:36:a4: 8c:78:55:61:76:d7:10:0a:79:0e:d2:03:33:a6:94: 4a:f7:e4:25:ba:34:a4:cc:0a:09:ab:bf:1e:e4:97: d0:3c:2d:c6:90:a5:fc:87:cd:1c:ee:92:4b:4e:b1: 5f:b0:c3:b6:0a:63:ce:61:b8:3c:a1:f6:92:5d:f3: 02:6b:0b:c2:fc:73:20:e5:09:26:f1:4d:63:55:b6: bd:39:51:0c:2d:bf:c2:20:b3:44:77:07:d9:9c:24: 04:87:05:54:7c:d1:d9:8d:16:b1:58:b4:a7:7a:7e: d5:6b:ce:3b:4e:0e:fb:76:54:b8:36:14:4b:c6:37: fe:f7:bd:da:6d:8c:a9:ab:84:b1:71:1f:1d:eb:cb: b1:1a:0b:56:53:00:b6:ad:db:5b:a4:cd:06:2a:78: d2:8a:6e:9c:95:cf:4f:da:e9:47:58:49:b6:a3:b2: 4c:9b:c8:a1:34:c1:c4:53:62:79:87:85:20:d5:3d: 50:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5E:7D:07:75:7B:74:C3:82:F0:C7:40:99:64:34:88:61:E1:D1:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c5f009d8-bdc3-3c17-a3cc-40d4ec05a796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.50.128.0/21 66.17.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:20:1e:2d:31:9b:b4:a6:c2:b3:f3:d4:85:b3:e9:2e:ee:6d: 5d:28:91:40:90:9b:51:51:71:b0:61:9b:b3:d9:d2:6c:5d:57: 7c:5e:c1:bc:2f:cc:5f:d0:8e:8e:70:6e:97:d1:33:5d:26:2f: f6:36:bc:c9:ad:98:00:ec:0b:10:f2:bc:9b:1a:c9:74:78:fe: 99:90:eb:96:55:22:68:01:3f:64:ff:ac:03:50:50:a6:0e:f8: 71:b1:96:74:e0:ee:c5:55:c6:39:af:3a:32:21:d2:b0:ed:ec: b0:88:92:80:dc:55:96:f9:14:16:9a:7d:6b:c6:c5:fd:1f:cc: 6f:c1:52:b8:a3:93:dc:3c:a1:18:ca:43:d9:5a:42:93:b7:bf: e7:14:1e:0a:b4:36:db:2d:9d:4f:d9:84:03:5d:a1:63:04:b9: a9:d3:8d:ba:df:f3:f2:8b:36:96:c4:67:9d:36:5f:cc:76:bc: e5:0f:82:84:38:1c:05:a0:78:6d:56:3c:88:cc:cb:50:60:fc: 42:c9:47:dd:bb:ca:3e:2c:9e:f4:07:6a:ec:0f:42:8e:b6:57: 90:ea:40:1b:ac:6d:0b:08:4f:93:0a:6b:d5:84:1b:47:ae:ec: e1:a0:53:6e:e4:ed:fb:b6:85:4c:56:56:2a:8d:6d:a5:af:4c: 37:9f:10:8e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2H+pVV00oA0eE2FwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQxNzAxMDAyN1oXDTI2MDcxNjAxMDAyN1owLzEtMCsGA1UEAxMk YTRkNWQ5YWUtOGNiZC00MDIxLTk2ZTEtYTIzZjRmMTQyMzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV1v661dIYUBy463JjxKwV1caZ0JgPrc4YYt oiGlTGHhgdACtkwAAmpfz52QHcSq95EzRcAzZd8SDpm/+CAXG8V9PxhWDbAYNqSM eFVhdtcQCnkO0gMzppRK9+QlujSkzAoJq78e5JfQPC3GkKX8h80c7pJLTrFfsMO2 CmPOYbg8ofaSXfMCawvC/HMg5Qkm8U1jVba9OVEMLb/CILNEdwfZnCQEhwVUfNHZ jRaxWLSnen7Va847Tg77dlS4NhRLxjf+973abYypq4SxcR8d68uxGgtWUwC2rdtb pM0GKnjSim6clc9P2ulHWEm2o7JMm8ihNMHEU2J5h4Ug1T1Q/QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJJefQd1e3TDgvDHQJlkNIhh4dEuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzVmMDA5ZDgtYmRjMy0z YzE3LWEzY2MtNDBkNGVjMDVhNzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDQDKAAwQD QhFAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABogHi0xm7SmwrPz1IWz6S7ubV0okUCQm1FRcbBhm7PZ0mxd V3xewbwvzF/Qjo5wbpfRM10mL/Y2vMmtmADsCxDyvJsayXR4/pmQ65ZVImgBP2T/ rANQUKYO+HGxlnTg7sVVxjmvOjIh0rDt7LCIkoDcVZb5FBaafWvGxf0fzG/BUrij k9w8oRjKQ9laQpO3v+cUHgq0NtstnU/ZhANdoWMEuanTjbrf8/KLNpbEZ502X8x2 vOUPgoQ4HAWgeG1WPIjMy1Bg/ELJR927yj4snvQHauwPQo62V5DqQBusbQsIT5MK a9WEG0eu7OGgU27k7fu2hUxWViqNbaWvTDefEI4= -----END CERTIFICATE-----Generated at Fri Apr 17 17:01:59 2026 by rpki-client