$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21caf5b2-dad3-3b08-bf0c-8ff085123e9e.roa File: 21caf5b2-dad3-3b08-bf0c-8ff085123e9e.roa (raw, json) Hash identifier: 27XKpwqwdvOl8vMsttl0Qi9i4LVLMlKjmQKrg5eb0m4= Subject key identifier: FA:31:7D:DA:02:F4:BA:3E:38:73:AB:8C:DF:FB:42:BE:D2:69:FC:0C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DB4A5B039927DD3F284C0C380 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21caf5b2-dad3-3b08-bf0c-8ff085123e9e.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 834 IP address blocks: 72.244.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:b0:39:92:7d:d3:f2:84:c0:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=8efb91ca-477f-4e09-a263-cde2781e0b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:99:3c:6e:74:71:21:56:e5:5e:c4:d1:c6:2f: 27:cf:6a:5b:f3:31:fd:e3:59:bf:2e:95:99:9c:d6: 2c:05:ea:7b:21:2e:11:ca:48:6f:f4:3b:47:8e:93: ff:b0:6b:c8:e3:66:1d:61:8b:4d:86:85:6f:07:f2: 22:9c:c2:4a:6e:ba:fb:8e:0f:56:5f:08:15:41:3e: b7:19:de:18:01:ba:37:d6:21:89:95:61:0a:f1:9a: 77:a8:b7:c6:f8:4d:22:d0:45:64:af:42:89:04:8e: 12:f3:2c:62:7d:4b:a8:e2:c8:e6:3b:f8:51:00:24: 01:32:a1:58:c9:4a:0a:5d:13:d3:1c:4f:40:be:d3: 47:8f:9d:c9:7b:93:9a:cf:97:eb:c8:b9:7c:b5:5a: b6:77:59:3e:bf:4e:17:63:3b:00:01:c6:dc:81:9d: 71:8b:70:a6:a2:43:9d:62:f9:a6:3f:38:67:86:55: 90:ad:7a:8c:f1:e6:2e:e9:81:4f:61:0f:64:93:aa: 0f:50:b0:bb:58:51:de:73:13:a3:f6:78:e5:82:17: b6:2e:7f:3e:dd:8c:8a:e8:5a:5a:9e:6e:e4:16:25: ce:f5:f9:6b:8e:34:9d:74:a7:13:08:04:d1:11:6e: 52:bf:ea:e0:8b:48:2d:55:14:61:a1:99:09:80:08: 4b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:31:7D:DA:02:F4:BA:3E:38:73:AB:8C:DF:FB:42:BE:D2:69:FC:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21caf5b2-dad3-3b08-bf0c-8ff085123e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:2b:ad:51:dd:37:9e:e9:fb:bd:bd:b8:22:e9:bd:28:c4:5d: ce:9d:d8:b3:e7:04:00:aa:2d:94:f6:a3:28:60:b7:bb:b1:a9: d0:8f:5c:5a:e7:ee:aa:03:6d:e9:84:c0:62:5f:48:f1:09:93: d7:75:e2:a0:14:47:cc:58:fb:e7:7a:db:05:ec:b6:84:03:70: 7a:c2:d0:c5:5b:67:4f:5e:c8:a9:2a:0a:79:cb:8b:6d:aa:8e: a4:68:ad:1d:dd:b5:d6:ac:93:ef:66:5b:9e:e9:d4:ad:a0:f0: 11:f5:f7:3c:15:37:7e:0e:fb:92:c1:70:69:de:d2:21:30:e3: 1a:c6:24:2f:a5:5b:e7:aa:d1:77:70:14:b2:6a:83:6a:74:f3: 9c:e4:13:0c:cf:f1:d2:97:9c:f6:41:a3:1c:67:6f:02:ca:fc: 19:a8:e7:40:b2:28:9a:d5:20:6e:aa:92:6b:99:e9:7e:89:26: 99:c8:ab:e6:97:77:db:a0:f5:94:b4:ea:1a:aa:d8:ac:45:8d: fe:59:71:6b:cd:3b:84:db:47:f4:cd:4c:f6:93:3c:89:1f:4a: 0a:16:78:cd:ee:d3:33:5e:7c:54:4a:5f:8a:cf:5f:0f:82:20: 41:03:bf:39:90:a0:a5:ff:dc:63:7b:f6:ee:97:97:8b:64:63: a4:4c:72:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pbA5kn3T8oTAw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk OGVmYjkxY2EtNDc3Zi00ZTA5LWEyNjMtY2RlMjc4MWUwYjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJk8bnRxIVblXsTRxi8nz2pb8zH941m/LpWZ nNYsBep7IS4Rykhv9DtHjpP/sGvI42YdYYtNhoVvB/IinMJKbrr7jg9WXwgVQT63 Gd4YAbo31iGJlWEK8Zp3qLfG+E0i0EVkr0KJBI4S8yxifUuo4sjmO/hRACQBMqFY yUoKXRPTHE9AvtNHj53Je5Oaz5fryLl8tVq2d1k+v04XYzsAAcbcgZ1xi3CmokOd YvmmPzhnhlWQrXqM8eYu6YFPYQ9kk6oPULC7WFHecxOj9njlghe2Ln8+3YyK6Fpa nm7kFiXO9flrjjSddKcTCATREW5Sv+rgi0gtVRRhoZkJgAhL4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoxfdoC9Lo+OHOrjN/7Qr7SafwMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjFjYWY1YjItZGFkMy0z YjA4LWJmMGMtOGZmMDg1MTIzZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPTDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALErrVHdN57p+729uCLpvSjEXc6d2LPnBACqLZT2oyhgt7uxqdCPXFrn 7qoDbemEwGJfSPEJk9d14qAUR8xY++d62wXstoQDcHrC0MVbZ09eyKkqCnnLi22q jqRorR3dtdask+9mW57p1K2g8BH19zwVN34O+5LBcGne0iEw4xrGJC+lW+eq0Xdw FLJqg2p085zkEwzP8dKXnPZBoxxnbwLK/Bmo50CyKJrVIG6qkmuZ6X6JJpnIq+aX d9ug9ZS06hqq2KxFjf5ZcWvNO4TbR/TNTPaTPIkfSgoWeM3u0zNefFRKX4rPXw+C IEEDvzmQoKX/3GN79u6Xl4tkY6RMcig= -----END CERTIFICATE-----Generated at Wed May 13 11:43:28 2026 by rpki-client