$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db560844-774d-3c8a-841d-8c681ed6023b.roa File: db560844-774d-3c8a-841d-8c681ed6023b.roa (raw, json) Hash identifier: sY0EY2Gz+cZKxaj6GSxf3CA0gV4cl4qFajDxGJsYekc= Subject key identifier: 38:2B:DF:7B:31:92:64:70:23:17:24:78:BB:CB:60:53:9E:03:C2:26 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DE150AC0D3DFD5F00925287C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db560844-774d-3c8a-841d-8c681ed6023b.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 834 IP address blocks: 64.204.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:ac:0d:3d:fd:5f:00:92:52:87:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=78be2858-52af-4d6f-bc05-d73b84fb8d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:21:58:ce:59:14:35:81:97:10:b1:e3:88:ce: 59:43:07:8b:0f:ed:ef:42:90:7a:b0:ff:cb:a4:87: 6d:42:82:da:bb:b1:fc:84:d6:7c:22:05:cc:a1:a8: f7:57:a7:17:03:6a:22:9e:8e:5a:c4:95:c3:b4:44: 64:0f:09:b2:50:61:8b:38:6a:c4:99:0c:cf:ce:0a: 93:3d:6c:59:c4:97:4c:97:da:bb:94:bc:a3:20:49: c6:7e:0c:35:df:62:96:82:57:d4:fe:dd:28:a0:61: ac:b6:3a:b7:b0:95:e5:41:ec:b7:3f:9b:e6:10:e2: 3e:18:30:eb:f4:a1:9b:b3:7f:36:47:86:d4:e0:ce: 26:21:4d:0f:79:c9:22:5d:41:16:b8:90:d0:11:d2: 1f:ed:8a:ec:c7:33:2d:85:83:d9:83:a6:9f:bc:a3: cb:e8:d4:48:f0:a4:23:3d:cc:f4:a4:e9:4d:c8:39: 53:c1:e2:b5:fe:ab:ce:d8:0e:cb:62:f5:bc:3f:bd: 67:e4:27:d2:a1:a4:85:86:56:f6:89:c4:80:0c:5c: 1c:3b:52:34:e4:46:d8:5c:75:65:4a:8e:85:82:03: e0:95:1a:43:ee:16:30:60:cc:bf:0a:de:7a:23:71: cb:1b:4a:e6:24:cf:db:3d:07:fb:de:ac:fa:8c:00: cc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2B:DF:7B:31:92:64:70:23:17:24:78:BB:CB:60:53:9E:03:C2:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db560844-774d-3c8a-841d-8c681ed6023b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:1a:15:29:f7:91:a0:18:76:8b:e3:47:a9:62:05:14:b7:37: 19:11:28:c3:2c:31:be:c4:c6:f4:82:4d:91:6a:a9:5f:aa:c1: ed:34:8c:dd:88:2f:d3:01:d8:1d:29:01:f5:3a:94:7c:67:6f: f3:11:c2:6a:02:a2:54:a0:a6:d7:d1:c8:7b:8e:c7:c3:df:56: fb:6e:77:f4:75:f4:fd:7a:76:3e:49:0f:bd:79:23:30:74:93: 1d:3e:cc:59:2c:eb:39:07:88:be:cf:b3:db:90:21:98:8a:c3: 98:06:b7:6c:e0:1a:ed:88:12:74:5f:d5:79:c9:18:f4:2c:c8: f5:75:01:77:52:99:24:03:6f:d1:01:bd:55:a0:76:ba:b0:8a: 86:e6:1b:cc:c2:e4:8f:2f:22:4c:43:ed:6a:a4:59:93:eb:cc: 3d:a9:9c:bb:37:10:3a:bf:29:8a:aa:b1:2f:95:e3:95:89:ac: a9:4e:f3:7a:b2:a7:ff:8f:5b:f2:0a:76:1b:fa:e5:b8:47:ff: b0:96:94:10:0b:9b:4b:57:0c:19:f8:46:29:62:a3:92:69:2c: c9:69:be:0c:85:ae:82:19:8a:57:68:50:96:1d:5c:31:a3:ea: e7:e1:8d:11:c3:66:80:ce:e3:46:d3:17:0a:fd:cf:a7:8c:4b: 21:f4:74:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUKwNPf1fAJJSh8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk NzhiZTI4NTgtNTJhZi00ZDZmLWJjMDUtZDczYjg0ZmI4ZDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyFYzlkUNYGXELHjiM5ZQweLD+3vQpB6sP/L pIdtQoLau7H8hNZ8IgXMoaj3V6cXA2oino5axJXDtERkDwmyUGGLOGrEmQzPzgqT PWxZxJdMl9q7lLyjIEnGfgw132KWglfU/t0ooGGstjq3sJXlQey3P5vmEOI+GDDr 9KGbs382R4bU4M4mIU0PeckiXUEWuJDQEdIf7YrsxzMthYPZg6afvKPL6NRI8KQj Pcz0pOlNyDlTweK1/qvO2A7LYvW8P71n5CfSoaSFhlb2icSADFwcO1I05EbYXHVl So6FggPglRpD7hYwYMy/Ct56I3HLG0rmJM/bPQf73qz6jADM1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgr33sxkmRwIxckeLvLYFOeA8ImMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGI1NjA4NDQtNzc0ZC0z YzhhLTg0MWQtOGM2ODFlZDYwMjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQMwsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkaFSn3kaAYdovjR6liBRS3NxkRKMMsMb7ExvSCTZFqqV+qwe00jN2I L9MB2B0pAfU6lHxnb/MRwmoColSgptfRyHuOx8PfVvtud/R19P16dj5JD715IzB0 kx0+zFks6zkHiL7Ps9uQIZiKw5gGt2zgGu2IEnRf1XnJGPQsyPV1AXdSmSQDb9EB vVWgdrqwiobmG8zC5I8vIkxD7WqkWZPrzD2pnLs3EDq/KYqqsS+V45WJrKlO83qy p/+PW/IKdhv65bhH/7CWlBALm0tXDBn4Rilio5JpLMlpvgyFroIZildoUJYdXDGj 6ufhjRHDZoDO40bTFwr9z6eMSyH0dMg= -----END CERTIFICATE-----Generated at Sat Jun 13 06:07:11 2026 by rpki-client