$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0ccd33c1-309a-30a2-b48e-4426ae4b6990.roa File: 0ccd33c1-309a-30a2-b48e-4426ae4b6990.roa (raw, json) Hash identifier: Mw1ua1zpqbhNTE2Wu+0Y/R4BNEL+vAIv3a21434JT8Y= Subject key identifier: C3:C1:FA:36:00:F6:0A:A5:C9:07:30:C1:1E:02:16:61:C7:41:FF:73 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D27AA094DB7031F2D9A33C900 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0ccd33c1-309a-30a2-b48e-4426ae4b6990.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 39521 IP address blocks: 72.244.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:09:4d:b7:03:1f:2d:9a:33:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=4199e667-9bce-4397-a2f2-c6f03e765e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:be:c5:58:56:89:19:d1:c4:3a:b4:6b:d6:81: 11:05:c5:71:74:51:69:89:a9:57:3c:65:4f:da:73: 03:f4:20:9f:63:a5:1f:13:33:cf:2e:36:0f:35:37: 31:e9:52:6e:c1:2e:ae:54:d5:ab:d6:fb:43:7d:20: 69:cc:41:cf:c6:ca:a4:20:3e:66:af:1c:e4:b0:83: 4e:62:cc:d8:56:e6:a9:63:90:d1:dc:3e:e8:85:1f: 97:c7:67:93:12:1f:01:1c:bf:a9:3b:73:03:f3:6e: 1c:b7:50:dd:06:d2:be:ba:52:35:fb:ad:ca:b1:ea: 0c:b4:b2:71:37:2c:fc:26:c4:da:5a:93:27:4c:78: a7:5d:79:fb:fa:59:27:4c:d2:d9:c4:e4:08:a9:67: 5b:6b:56:00:a3:19:b0:56:77:57:6f:f3:ae:73:0f: b1:13:82:d8:a2:b8:5a:0c:26:5b:78:d7:b8:7d:3d: ff:1c:4b:67:6e:6b:9b:9e:0c:a6:4e:17:37:72:4a: 85:1e:6a:59:bb:84:e3:c9:2e:db:86:5b:52:ba:2f: 16:1d:36:69:59:26:ba:29:18:ca:86:a7:ef:e4:f2: 0c:95:6c:f3:63:52:d3:90:29:28:f3:81:94:92:87: f6:6c:2a:ad:2e:95:33:93:7d:8e:b4:56:23:f9:93: 14:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C1:FA:36:00:F6:0A:A5:C9:07:30:C1:1E:02:16:61:C7:41:FF:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0ccd33c1-309a-30a2-b48e-4426ae4b6990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:6e:ba:7e:d4:7e:61:75:67:33:b3:60:5a:5b:8b:d1:20:64: f1:9b:b1:91:f0:db:41:df:71:e4:f3:8d:4a:b8:5e:5d:df:69: d3:b9:ee:35:ed:e8:7c:9a:e4:4b:96:5b:91:eb:dc:35:14:91: b0:8c:46:5d:ca:c2:57:67:71:91:9f:82:ae:4d:e5:83:6b:e0: 2b:0f:e5:78:f1:1c:1c:d0:cd:99:f9:81:a8:da:4c:dc:1e:16: 11:69:09:30:95:6a:4d:e6:64:2e:e8:c7:50:7b:f6:5e:0a:29: 69:10:50:23:e8:c3:60:97:6b:c4:dd:5b:59:2c:4e:5f:ba:f2: a7:09:71:c0:af:b5:cb:4f:25:a1:39:4d:b2:3b:b6:df:a4:aa: 91:53:4a:79:9d:69:36:32:92:cd:35:58:9f:17:1b:c5:db:ee: db:36:55:da:e1:e5:1a:24:27:43:ef:09:ba:e5:53:c5:b5:4e: a8:5a:ba:da:80:95:c9:5d:01:f3:16:a5:90:0e:6f:4c:23:fb: a4:46:3c:fa:b2:fa:86:32:40:70:9e:58:ef:f8:3f:d8:98:01: 8c:06:f4:d7:61:39:db:fa:4d:11:53:86:c7:51:b1:f6:db:89: 09:8a:c7:bb:7e:a5:a8:7d:9c:89:2a:9e:8a:e3:6a:8b:e9:cb: 3d:0c:ec:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqglNtwMfLZozyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NDE5OWU2NjctOWJjZS00Mzk3LWEyZjItYzZmMDNlNzY1ZTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1r7FWFaJGdHEOrRr1oERBcVxdFFpialXPGVP 2nMD9CCfY6UfEzPPLjYPNTcx6VJuwS6uVNWr1vtDfSBpzEHPxsqkID5mrxzksINO YszYVuapY5DR3D7ohR+Xx2eTEh8BHL+pO3MD824ct1DdBtK+ulI1+63KseoMtLJx Nyz8JsTaWpMnTHinXXn7+lknTNLZxOQIqWdba1YAoxmwVndXb/Oucw+xE4LYorha DCZbeNe4fT3/HEtnbmubngymThc3ckqFHmpZu4TjyS7bhltSui8WHTZpWSa6KRjK hqfv5PIMlWzzY1LTkCko84GUkof2bCqtLpUzk32OtFYj+ZMUUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPB+jYA9gqlyQcwwR4CFmHHQf9zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGNjZDMzYzEtMzA5YS0z MGEyLWI0OGUtNDQyNmFlNGI2OTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPR8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpuun7UfmF1ZzOzYFpbi9EgZPGbsZHw20HfceTzjUq4Xl3fadO57jXt 6Hya5EuWW5Hr3DUUkbCMRl3KwldncZGfgq5N5YNr4CsP5XjxHBzQzZn5gajaTNwe FhFpCTCVak3mZC7ox1B79l4KKWkQUCPow2CXa8TdW1ksTl+68qcJccCvtctPJaE5 TbI7tt+kqpFTSnmdaTYyks01WJ8XG8Xb7ts2Vdrh5RokJ0PvCbrlU8W1TqhautqA lcldAfMWpZAOb0wj+6RGPPqy+oYyQHCeWO/4P9iYAYwG9NdhOdv6TRFThsdRsfbb iQmKx7t+pah9nIkqnorjaovpyz0M7GI= -----END CERTIFICATE-----Generated at Thu Mar 26 20:42:16 2026 by rpki-client