$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cd95c989-1e52-38e3-8b33-f2c35dc119f5.roa File: cd95c989-1e52-38e3-8b33-f2c35dc119f5.roa (raw, json) Hash identifier: BE3ghAxt43cZ+aXLnzbePZycrkweotXOcCIRUBF+iek= Subject key identifier: 08:3C:80:93:2C:89:66:4F:67:58:1F:C9:D8:D8:1A:5D:27:01:A3:A7 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E147ED9A80439DA2DB8C27800 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cd95c989-1e52-38e3-8b33-f2c35dc119f5.roa Signing time: Sat 06 Jun 2026 09:00:12 +0000 ROA not before: Sat 06 Jun 2026 09:00:12 +0000 ROA not after: Fri 04 Sep 2026 09:00:12 +0000 asID: 834 IP address blocks: 64.7.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:14:7e:d9:a8:04:39:da:2d:b8:c2:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jun 6 09:00:12 2026 GMT Not After : Sep 4 09:00:12 2026 GMT Subject: CN=9cc33190-7a61-4cac-a678-e01e27fdf553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c5:c8:b7:89:e5:15:3f:24:42:e1:eb:eb:d2: c7:14:95:b2:f4:cb:09:9e:e3:f1:6c:90:56:88:cb: 00:56:ba:66:00:23:f2:15:30:51:8b:89:10:3e:49: 3a:09:11:aa:a6:f0:0c:5e:0f:f5:0d:f7:ab:3c:56: 58:d3:fa:a2:c2:a1:4f:dc:f1:af:de:50:e6:a5:d9: e0:d1:82:77:2d:db:99:07:a2:e6:9f:4c:29:f8:32: be:93:b2:40:40:4f:cf:72:5a:e8:f6:ee:0a:fa:da: fd:db:2e:e7:77:f7:12:bc:84:91:db:51:49:9c:a6: ab:9d:84:1a:91:d1:84:dc:f0:61:59:d2:8a:c3:c5: 82:a9:10:47:b6:5e:ab:dc:cb:b5:ab:e6:4a:38:58: a9:0a:43:85:42:55:a8:ff:a1:24:3e:8e:5d:f0:13: e3:85:b0:31:5d:c9:b9:31:fa:20:d7:65:7f:1f:6a: 54:dd:09:c1:2f:75:a1:05:53:80:94:55:e0:c4:ad: c1:d4:66:5a:42:47:51:85:17:7b:7b:7c:58:6e:52: 10:45:f9:cd:a2:2a:f8:77:9f:08:bb:46:c0:4b:8e: 0e:ed:79:70:d9:6f:db:ee:e1:9e:fc:27:04:48:96: bf:f2:8a:bf:d8:c5:09:25:d6:a5:20:77:e6:cc:31: 28:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3C:80:93:2C:89:66:4F:67:58:1F:C9:D8:D8:1A:5D:27:01:A3:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cd95c989-1e52-38e3-8b33-f2c35dc119f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.7.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:6c:32:59:4f:16:23:e0:aa:04:99:e9:f6:3a:b2:68:26:be: 80:11:3a:b9:0a:7c:a7:b2:af:16:66:32:f1:08:70:35:d7:28: 98:15:15:65:66:b8:3d:82:ba:8a:9e:a2:cc:24:81:70:d4:56: 86:53:3f:07:54:2a:83:5b:c5:f8:6e:6e:64:b1:c7:01:19:b3: 28:da:be:d4:f9:33:ae:3e:d8:bb:c3:ec:11:e3:40:9e:11:ab: ae:6d:a7:18:d4:a9:b3:e4:9b:53:10:90:5e:61:da:ba:1a:9f: dc:42:e8:fa:86:3b:64:6d:c7:ee:ea:d0:06:69:ac:23:90:36: f5:d6:fd:e3:b2:5e:6f:17:57:8a:89:43:81:45:a0:d2:29:f0: 33:17:df:9a:62:c5:8f:20:ef:b1:e5:09:38:04:f3:54:7d:97: 48:13:30:6b:eb:05:72:63:bc:a2:59:26:e5:02:32:55:cf:0c: f2:cc:5e:45:1e:02:09:e1:af:a4:d8:48:65:78:bc:5a:2d:90: 2a:fc:6e:d6:e1:49:8d:fe:04:8f:a3:88:f4:30:bd:20:15:2a: e3:da:75:66:fc:21:94:31:98:49:5c:26:4c:d1:96:c3:24:e8: c3:86:30:ff:8f:f4:8e:f0:32:93:a0:f0:40:47:91:39:ad:99: 07:49:70:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4UftmoBDnaLbjCeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDYwNjA5MDAxMloXDTI2MDkwNDA5MDAxMlowLzEtMCsGA1UEAxMk OWNjMzMxOTAtN2E2MS00Y2FjLWE2NzgtZTAxZTI3ZmRmNTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8XIt4nlFT8kQuHr69LHFJWy9MsJnuPxbJBW iMsAVrpmACPyFTBRi4kQPkk6CRGqpvAMXg/1DferPFZY0/qiwqFP3PGv3lDmpdng 0YJ3LduZB6Lmn0wp+DK+k7JAQE/Pclro9u4K+tr92y7nd/cSvISR21FJnKarnYQa kdGE3PBhWdKKw8WCqRBHtl6r3Mu1q+ZKOFipCkOFQlWo/6EkPo5d8BPjhbAxXcm5 Mfog12V/H2pU3QnBL3WhBVOAlFXgxK3B1GZaQkdRhRd7e3xYblIQRfnNoir4d58I u0bAS44O7Xlw2W/b7uGe/CcESJa/8oq/2MUJJdalIHfmzDEoowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAg8gJMsiWZPZ1gfydjYGl0nAaOnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2Q5NWM5ODktMWU1Mi0z OGUzLThiMzMtZjJjMzVkYzExOWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQAcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpsMllPFiPgqgSZ6fY6smgmvoAROrkKfKeyrxZmMvEIcDXXKJgVFWVm uD2CuoqeoswkgXDUVoZTPwdUKoNbxfhubmSxxwEZsyjavtT5M64+2LvD7BHjQJ4R q65tpxjUqbPkm1MQkF5h2roan9xC6PqGO2Rtx+7q0AZprCOQNvXW/eOyXm8XV4qJ Q4FFoNIp8DMX35pixY8g77HlCTgE81R9l0gTMGvrBXJjvKJZJuUCMlXPDPLMXkUe Agnhr6TYSGV4vFotkCr8btbhSY3+BI+jiPQwvSAVKuPadWb8IZQxmElcJkzRlsMk 6MOGMP+P9I7wMpOg8EBHkTmtmQdJcCk= -----END CERTIFICATE-----Generated at Sat Jun 13 06:11:09 2026 by rpki-client