$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c8a6c4b8-d900-3cfd-b029-bcde3496a08b.roa File: c8a6c4b8-d900-3cfd-b029-bcde3496a08b.roa (raw, json) Hash identifier: /FSs9cQh+3Ili1osWKbrZ+ZSqNMVr7I2RmFDDCbPVaI= Subject key identifier: C7:83:56:4E:78:9F:11:2A:04:7C:7E:90:51:34:29:4D:C7:40:E5:4E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D79FDA9027D59F0B0E1493D40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c8a6c4b8-d900-3cfd-b029-bcde3496a08b.roa Signing time: Sun 12 Apr 2026 00:45:29 +0000 ROA not before: Sun 12 Apr 2026 00:45:29 +0000 ROA not after: Sat 11 Jul 2026 00:45:29 +0000 asID: 214025 IP address blocks: 64.204.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:79:fd:a9:02:7d:59:f0:b0:e1:49:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 12 00:45:29 2026 GMT Not After : Jul 11 00:45:29 2026 GMT Subject: CN=98f43b99-2e1c-45a1-86d9-736d684cb1e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:27:a6:e9:bb:ff:99:ef:ab:fa:2b:56:85:28: 30:78:fb:4c:d6:de:5b:07:29:3f:04:33:81:a2:51: 03:f0:4d:75:51:69:d7:33:d9:93:20:3d:88:e0:d6: 4f:d9:4f:ce:fd:b9:c6:32:ea:77:ec:f5:cf:40:fc: 54:44:cc:57:50:73:84:60:a6:d7:1c:e2:87:35:9a: 7c:c9:aa:88:43:b0:b2:9c:a9:aa:fe:10:c1:82:4e: c8:dc:6b:a5:a9:2c:79:e4:74:ef:0e:66:dd:1f:40: df:5c:df:6a:a9:38:08:52:6b:be:9f:a4:2f:19:b4: 70:f9:25:c4:e0:93:f8:ec:bb:cc:ff:8d:f6:98:f2: 72:d2:9d:42:2d:df:4c:47:a8:f6:e9:d4:18:83:9d: 86:52:d1:a8:24:b1:3a:39:3a:70:90:a3:52:4d:58: 5c:70:38:ba:dd:3e:19:b7:64:c7:09:bb:86:fa:d2: d4:5a:88:53:27:a5:e2:69:d3:33:8a:2f:30:e2:4a: 58:f5:23:54:88:7a:21:ea:14:3c:bc:79:b2:49:e7: 35:53:00:ff:e3:b3:86:1b:f9:3e:c9:27:8d:b0:08: 83:37:8d:45:8a:44:39:41:1d:ea:49:54:06:8d:b3: 27:b0:35:e2:a5:01:3e:e8:dd:90:85:88:63:19:e6: 03:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:83:56:4E:78:9F:11:2A:04:7C:7E:90:51:34:29:4D:C7:40:E5:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c8a6c4b8-d900-3cfd-b029-bcde3496a08b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f7:56:2a:cc:8f:ac:b7:64:22:d4:4f:0f:79:93:eb:69:4f: d4:41:d3:dd:37:59:f0:c5:3f:29:06:ec:ea:73:e0:6e:27:4e: d7:a7:a0:95:e3:ef:31:1d:99:35:3f:65:42:1c:fd:fb:1e:9e: 5f:17:e8:15:a0:41:0c:53:3a:ab:4d:20:94:44:48:c3:bb:2a: c4:10:53:f6:35:6a:70:94:7a:0b:24:28:8b:6c:4c:22:02:82: 5e:ca:4b:b0:b0:26:2d:91:ce:79:80:7e:34:ec:52:f3:2b:39: a2:c5:9c:77:3b:a9:48:0c:84:a5:64:69:a2:6d:9e:5e:a0:b3: 50:3a:02:31:0d:c2:10:3b:d7:6e:a5:c1:56:d2:95:20:c5:e6: e2:eb:7f:d1:51:c6:10:2e:34:c5:0c:02:b4:1d:56:0c:a4:f0: f7:4d:03:8c:a6:da:05:31:e5:71:86:eb:a9:7c:e6:43:a4:66: 78:e9:b8:8a:2c:f8:39:a9:16:9e:4e:cb:ec:e2:f2:84:9c:bd: e0:da:72:5f:18:fe:f2:14:27:e3:d1:bf:66:af:d3:7f:a3:84: bf:e8:a3:cc:0d:76:28:8f:b3:ef:f3:17:90:9d:5e:1c:d6:ad: a8:04:9b:13:29:ff:71:22:9d:25:74:49:7c:90:2c:74:9a:84: 05:a3:54:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE15/akCfVnwsOFJPUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQxMjAwNDUyOVoXDTI2MDcxMTAwNDUyOVowLzEtMCsGA1UEAxMk OThmNDNiOTktMmUxYy00NWExLTg2ZDktNzM2ZDY4NGNiMWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliem6bv/me+r+itWhSgwePtM1t5bByk/BDOB olED8E11UWnXM9mTID2I4NZP2U/O/bnGMup37PXPQPxURMxXUHOEYKbXHOKHNZp8 yaqIQ7CynKmq/hDBgk7I3GulqSx55HTvDmbdH0DfXN9qqTgIUmu+n6QvGbRw+SXE 4JP47LvM/432mPJy0p1CLd9MR6j26dQYg52GUtGoJLE6OTpwkKNSTVhccDi63T4Z t2THCbuG+tLUWohTJ6XiadMzii8w4kpY9SNUiHoh6hQ8vHmySec1UwD/47OGG/k+ ySeNsAiDN41FikQ5QR3qSVQGjbMnsDXipQE+6N2QhYhjGeYDEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMeDVk54nxEqBHx+kFE0KU3HQOVOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzhhNmM0YjgtZDkwMC0z Y2ZkLWIwMjktYmNkZTM0OTZhMDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMxRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX3VirMj6y3ZCLUTw95k+tpT9RB0903WfDFPykG7Opz4G4nTtenoJXj 7zEdmTU/ZUIc/fsenl8X6BWgQQxTOqtNIJRESMO7KsQQU/Y1anCUegskKItsTCIC gl7KS7CwJi2RznmAfjTsUvMrOaLFnHc7qUgMhKVkaaJtnl6gs1A6AjENwhA7126l wVbSlSDF5uLrf9FRxhAuNMUMArQdVgyk8PdNA4ym2gUx5XGG66l85kOkZnjpuIos +DmpFp5Oy+zi8oScveDacl8Y/vIUJ+PRv2av03+jhL/oo8wNdiiPs+/zF5CdXhzW ragEmxMp/3EinSV0SXyQLHSahAWjVGo= -----END CERTIFICATE-----Generated at Fri Apr 17 13:31:06 2026 by rpki-client