$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/05c8b2dc-96d8-3b27-a823-6af8d6fd19f8.roa File: 05c8b2dc-96d8-3b27-a823-6af8d6fd19f8.roa (raw, json) Hash identifier: +vnCnPupNOmOrPI8Vy9KkYSWDuqIOwUNFywdn1zT07M= Subject key identifier: 03:AA:45:E5:E2:8F:A1:D8:1C:2E:33:A9:C5:48:63:ED:2A:DA:17:93 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D386A5BDDFB5ADA5E4A831700 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/05c8b2dc-96d8-3b27-a823-6af8d6fd19f8.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 397630 IP address blocks: 72.244.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:5b:dd:fb:5a:da:5e:4a:83:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=63a15106-1fb1-496c-b32b-ea22e0c49f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:af:3d:4a:0f:01:ae:e8:05:c1:44:e2:0b:02: f0:54:37:4e:b8:05:fe:c4:ea:c1:7b:6e:fe:4b:17: dd:35:67:3a:a7:5b:4f:12:d8:45:ff:8d:c5:e2:87: 91:6a:ce:ff:3d:76:f9:38:ec:b4:c6:06:1f:dd:7b: 76:ca:f1:02:31:f5:5d:22:94:6c:19:28:91:6c:0c: 88:08:be:de:83:96:b0:42:57:a8:c3:90:3d:c0:d4: 1f:bd:55:b8:5c:3b:9f:7b:bc:31:b0:d0:5b:d3:0b: 7b:15:d9:62:a5:82:8f:5a:af:48:fc:e4:2e:bc:6d: 99:e8:45:4d:95:26:70:cd:a3:10:54:12:c5:a1:ee: 88:2a:a3:97:b0:19:4b:4f:c3:ec:ea:08:82:bc:cc: 09:aa:30:aa:73:01:c3:63:be:46:8c:10:0e:09:49: d8:d0:57:10:31:bc:5c:37:1f:91:54:c9:cc:c8:00: a7:82:e5:c8:d8:e2:1e:f8:2e:d0:c3:c3:00:cf:24: 07:13:57:b7:ef:11:a4:c6:a0:0b:7f:6e:ba:cb:4e: 25:42:73:8c:fe:06:64:f1:75:90:8f:e2:b0:19:b3: 78:07:7c:f5:5d:e9:68:74:14:e9:3a:c2:bc:88:82: 81:83:c3:10:e2:88:a4:ff:8f:82:1d:2f:f5:34:d0: e9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AA:45:E5:E2:8F:A1:D8:1C:2E:33:A9:C5:48:63:ED:2A:DA:17:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/05c8b2dc-96d8-3b27-a823-6af8d6fd19f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:75:36:c4:11:46:0b:a4:8c:aa:11:35:e8:25:77:67:e4:99: a4:fa:b5:89:2e:c4:71:55:e3:db:28:af:0a:04:84:20:c8:de: 66:d5:e7:4d:62:75:c7:1c:0a:c5:28:a9:ab:61:f7:4a:60:03: 56:ea:47:95:4a:8e:bd:dd:cd:96:76:1c:78:e1:d0:c9:58:41: bc:5a:37:7b:69:3c:f6:95:50:92:9e:08:9a:37:61:b7:7b:24: 18:8b:fd:b5:6c:01:83:84:1a:06:58:3e:75:6a:65:51:bd:58: 38:f1:47:f8:d3:1d:b4:5e:1b:b1:d4:15:ae:d0:e5:b9:9c:ed: 9d:7b:c5:25:13:68:57:b3:6d:7c:48:2e:58:b6:37:fd:71:e8: 72:ff:8f:8d:c6:eb:70:2b:e3:e4:72:c6:73:44:d5:74:66:7e: 90:2e:20:8d:f1:42:75:6e:a3:36:00:e9:a5:7a:47:24:15:b6: 28:76:e5:7a:12:db:a9:be:e4:6c:e0:56:50:70:7b:f7:9e:4f: c9:95:a1:3a:b9:ba:5c:13:03:13:a9:03:2a:50:13:5f:88:07: 63:e9:b1:bb:e8:c3:08:b5:f9:4f:4d:39:9b:62:5c:d7:e0:37: a3:1d:37:4a:8b:a2:08:8f:91:e4:80:0c:19:81:fb:9c:72:b4: b1:21:63:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alvd+1raXkqDFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NjNhMTUxMDYtMWZiMS00OTZjLWIzMmItZWEyMmUwYzQ5ZjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0689Sg8BrugFwUTiCwLwVDdOuAX+xOrBe27+ SxfdNWc6p1tPEthF/43F4oeRas7/PXb5OOy0xgYf3Xt2yvECMfVdIpRsGSiRbAyI CL7eg5awQleow5A9wNQfvVW4XDufe7wxsNBb0wt7FdlipYKPWq9I/OQuvG2Z6EVN lSZwzaMQVBLFoe6IKqOXsBlLT8Ps6giCvMwJqjCqcwHDY75GjBAOCUnY0FcQMbxc Nx+RVMnMyACnguXI2OIe+C7Qw8MAzyQHE1e37xGkxqALf266y04lQnOM/gZk8XWQ j+KwGbN4B3z1XelodBTpOsK8iIKBg8MQ4oik/4+CHS/1NNDpbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOqReXij6HYHC4zqcVIY+0q2heTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDVjOGIyZGMtOTZkOC0z YjI3LWE4MjMtNmFmOGQ2ZmQxOWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPT7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACV1NsQRRgukjKoRNegld2fkmaT6tYkuxHFV49sorwoEhCDI3mbV501i dcccCsUoqath90pgA1bqR5VKjr3dzZZ2HHjh0MlYQbxaN3tpPPaVUJKeCJo3Ybd7 JBiL/bVsAYOEGgZYPnVqZVG9WDjxR/jTHbReG7HUFa7Q5bmc7Z17xSUTaFezbXxI Lli2N/1x6HL/j43G63Ar4+RyxnNE1XRmfpAuII3xQnVuozYA6aV6RyQVtih25XoS 26m+5GzgVlBwe/eeT8mVoTq5ulwTAxOpAypQE1+IB2Ppsbvowwi1+U9NOZtiXNfg N6MdN0qLogiPkeSADBmB+5xytLEhY3c= -----END CERTIFICATE-----Generated at Thu Mar 26 16:08:54 2026 by rpki-client