$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/faa9d4ae-5fe0-38d8-b825-eae87a98afef.roa File: faa9d4ae-5fe0-38d8-b825-eae87a98afef.roa (raw, json) Hash identifier: NkbMa+nK9wdyano15o8ATDftPQTjddrunhmkuVtkr1o= Subject key identifier: 32:AB:C8:FE:7C:48:F2:58:D2:C6:8D:2E:DC:1D:B9:A6:B8:46:23:E3 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CEFF2233E813F542DA9031800 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/faa9d4ae-5fe0-38d8-b825-eae87a98afef.roa Signing time: Sat 21 Feb 2026 14:00:41 +0000 ROA not before: Sat 21 Feb 2026 14:00:41 +0000 ROA not after: Fri 22 May 2026 13:00:41 +0000 asID: 6079 IP address blocks: 74.82.104.0/22 maxlen: 24 206.217.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ef:f2:23:3e:81:3f:54:2d:a9:03:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Feb 21 14:00:41 2026 GMT Not After : May 22 13:00:41 2026 GMT Subject: CN=d6419d19-b354-4309-b325-3547b36b953a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a3:a4:5c:4a:27:09:66:9e:08:cd:90:4f:5f: cb:24:e4:04:ea:1a:a9:ee:da:27:d4:52:95:c3:83: 83:c7:ef:dd:ac:19:bf:58:b0:8e:5d:c2:8b:09:c8: 5b:59:a4:1e:8f:09:e0:15:8e:50:3f:e0:32:be:8d: b2:c0:25:09:a1:04:6e:85:05:47:9a:9d:28:c4:10: c9:63:df:2a:8e:d2:50:a5:d5:51:ba:24:c1:6e:c6: d0:27:59:aa:fa:5c:c4:a1:50:ef:41:e7:e1:9d:e7: 60:88:b5:f0:f5:00:db:6d:a6:9a:b4:71:36:c8:27: 42:03:85:da:c3:f2:87:01:6d:19:2d:9b:a3:2c:0f: 79:d9:9a:90:fd:78:59:0e:a3:88:71:ea:cc:e7:68: 5f:c3:2c:00:b2:40:9a:08:54:12:5c:71:ba:a6:7f: 01:91:60:28:d8:11:19:d3:72:13:54:fe:97:b6:47: f5:93:e9:e8:74:3a:55:c9:27:82:ae:0a:aa:ee:8d: bc:81:02:8f:2a:79:19:6a:9d:e2:91:d5:40:09:63: db:b6:46:14:1e:0c:61:89:81:ac:08:ce:93:18:e7: 84:02:ee:24:30:38:9d:98:a7:96:44:58:16:6b:12: 29:7d:8f:a7:3e:5c:bd:2e:c4:9a:03:dd:db:2d:ca: 78:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AB:C8:FE:7C:48:F2:58:D2:C6:8D:2E:DC:1D:B9:A6:B8:46:23:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/faa9d4ae-5fe0-38d8-b825-eae87a98afef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.82.104.0/22 206.217.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:48:d7:47:b6:ca:df:84:01:36:bb:e4:f5:8d:a4:35:3a:52: 36:73:a6:d0:1c:d3:20:67:cc:2a:cf:47:e4:86:d4:88:ac:49: 0d:1e:8f:ae:02:70:b7:f5:67:ea:ec:1a:e3:15:79:bd:87:d5: 6a:6f:45:20:c3:a9:b0:da:4d:b7:01:12:57:17:1e:50:5a:5f: 9c:cd:7d:8d:e4:cf:fa:c3:42:60:a2:56:b3:5a:0e:1d:cc:cc: a6:25:fb:e1:5b:97:57:d9:d5:f2:aa:a2:a9:c6:21:a7:77:65: 89:80:8e:56:26:69:9f:3b:17:43:14:d8:bf:0e:cd:57:ed:35: 40:22:95:39:a5:21:63:68:67:70:0e:94:bf:2a:6f:18:7f:2d: 58:e6:db:88:41:ee:42:6a:8f:fa:2f:ef:ab:ef:fb:6b:dc:3e: e7:62:c4:2e:8d:4c:49:bf:f7:25:b5:84:1c:2c:ed:99:bf:47: 20:0f:f8:54:a1:c1:a0:c6:34:7d:30:51:7d:99:b4:28:2a:25: 49:ab:ff:14:f2:ef:a1:f2:4e:d7:ec:21:a9:52:7c:43:58:7e: 40:9d:9d:c0:d7:a2:19:06:eb:12:25:b6:65:2e:a4:a4:9f:b8: 35:27:f1:27:f7:74:24:66:bd:c1:09:c7:e2:06:a9:c7:19:ed: 45:ca:e9:91 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEzv8iM+gT9ULakDGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk ZDY0MTlkMTktYjM1NC00MzA5LWIzMjUtMzU0N2IzNmI5NTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqOkXEonCWaeCM2QT1/LJOQE6hqp7ton1FKV w4ODx+/drBm/WLCOXcKLCchbWaQejwngFY5QP+Ayvo2ywCUJoQRuhQVHmp0oxBDJ Y98qjtJQpdVRuiTBbsbQJ1mq+lzEoVDvQefhnedgiLXw9QDbbaaatHE2yCdCA4Xa w/KHAW0ZLZujLA952ZqQ/XhZDqOIcerM52hfwywAskCaCFQSXHG6pn8BkWAo2BEZ 03ITVP6Xtkf1k+nodDpVySeCrgqq7o28gQKPKnkZap3ikdVACWPbtkYUHgxhiYGs CM6TGOeEAu4kMDidmKeWRFgWaxIpfY+nPly9LsSaA93bLcp4yQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDKryP58SPJY0saNLtwduaa4RiPjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmFhOWQ0YWUtNWZlMC0z OGQ4LWI4MjUtZWFlODdhOThhZmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCSlJoAwQC ztlUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKJI10e2yt+EATa75PWNpDU6UjZzptAc0yBnzCrPR+SG1Iis SQ0ej64CcLf1Z+rsGuMVeb2H1WpvRSDDqbDaTbcBElcXHlBaX5zNfY3kz/rDQmCi VrNaDh3MzKYl++Fbl1fZ1fKqoqnGIad3ZYmAjlYmaZ87F0MU2L8OzVftNUAilTml IWNoZ3AOlL8qbxh/LVjm24hB7kJqj/ov76vv+2vcPudixC6NTEm/9yW1hBws7Zm/ RyAP+FShwaDGNH0wUX2ZtCgqJUmr/xTy76HyTtfsIalSfENYfkCdncDXohkG6xIl tmUupKSfuDUn8Sf3dCRmvcEJx+IGqccZ7UXK6ZE= -----END CERTIFICATE-----Generated at Sun Mar 1 20:57:22 2026 by rpki-client