$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2382a434-cda8-3060-a542-ba56e0e0f17b.roa File: 2382a434-cda8-3060-a542-ba56e0e0f17b.roa (raw, json) Hash identifier: wm9oHCeETyatW4RV27FwFIVvjnKVWysuYs3Q7e39iyg= Subject key identifier: F6:68:36:82:89:99:83:48:E9:15:16:CA:57:CB:7F:1A:E5:CB:32:1E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D47C50B1E2A88E234A48CD01C Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2382a434-cda8-3060-a542-ba56e0e0f17b.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 6079 IP address blocks: 72.1.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c5:0b:1e:2a:88:e2:34:a4:8c:d0:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=c90e68cf-abf9-42ad-808c-1a7585b3ec0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:39:a1:fe:5e:5f:c0:07:e9:63:66:16:73:fd: c7:26:40:8c:70:64:52:5d:6c:06:19:4f:9b:70:64: 81:b9:b8:af:cc:42:d2:86:7e:76:0f:db:45:1b:90: 8d:8f:44:ba:12:b3:21:21:43:3c:7b:23:67:17:94: 65:86:79:15:ef:26:f8:07:87:11:62:cf:54:06:02: b6:64:47:8a:3e:7d:9e:c2:25:de:f7:68:f0:13:41: 3a:75:f7:97:e4:0d:0c:b5:d1:9a:f6:b9:01:0b:37: 18:92:89:81:63:51:cd:6d:ca:ed:39:a2:a3:21:5c: 9d:7c:01:75:f0:55:21:26:bd:c5:d1:07:ca:58:07: ed:b5:7b:b2:bc:32:27:64:a4:ff:0e:36:1f:d8:47: 3b:0f:4b:ee:95:21:bd:d2:4f:6c:8b:1c:7b:48:55: fe:14:b6:be:00:0a:cf:21:ed:ac:0d:b5:c3:6c:79: 48:51:77:2c:82:f5:76:a3:d9:62:dd:e5:63:dc:06: 37:f2:c3:37:54:20:75:02:2b:23:63:ec:fd:ae:8d: b6:a7:67:7a:85:d3:e7:a8:75:02:21:91:06:31:32: 56:8c:eb:2c:e1:1e:2c:2e:38:a3:e5:51:0b:77:59: 08:60:ca:9f:4b:76:a1:51:93:e7:4f:cd:82:ef:fb: 7a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:68:36:82:89:99:83:48:E9:15:16:CA:57:CB:7F:1A:E5:CB:32:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2382a434-cda8-3060-a542-ba56e0e0f17b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.1.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:97:2b:2c:7a:ea:d7:85:b6:b1:e2:fb:6d:cf:ac:f9:41:e2: a6:60:dc:fa:23:b4:40:74:47:21:47:7f:10:e0:21:07:ec:38: e5:5d:17:3d:d9:c6:26:e4:83:d0:7a:9e:80:43:c3:d9:58:ed: 68:8b:0b:65:bb:a4:bd:ee:77:3c:50:3a:87:cf:4a:69:a3:b3: 9e:4a:18:6a:50:18:7c:a0:91:7e:fd:34:e2:f7:a1:05:a6:ff: f4:e6:f4:3f:3e:f9:79:8e:0d:2c:6c:9e:fc:e3:a2:85:d0:6e: ea:95:89:be:c5:d3:ad:a1:c1:f2:d5:f1:4e:51:59:46:32:3b: 7e:aa:e9:72:bb:ca:6f:2d:0a:f1:00:30:32:0e:9c:32:bd:3f: 38:45:c6:07:ab:7c:38:62:94:9a:03:5d:af:d9:40:c8:60:66: c3:61:e6:73:9c:80:42:ad:24:9a:fa:06:83:b5:84:77:82:cf: b1:1a:b3:d3:06:fd:45:55:43:84:17:10:76:02:1c:da:b9:73: 1a:1c:c9:bf:a4:a0:92:4f:be:a4:25:a5:7f:c5:5b:14:35:2d: 26:b6:b7:cc:8c:d6:a9:3b:b5:a6:31:53:35:4c:07:3e:af:95: ed:c6:e4:9f:53:61:db:e3:fe:e0:72:0d:33:2a:bb:3b:82:fa: e0:fe:70:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxQseKojiNKSM0BwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk YzkwZTY4Y2YtYWJmOS00MmFkLTgwOGMtMWE3NTg1YjNlYzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjmh/l5fwAfpY2YWc/3HJkCMcGRSXWwGGU+b cGSBubivzELShn52D9tFG5CNj0S6ErMhIUM8eyNnF5RlhnkV7yb4B4cRYs9UBgK2 ZEeKPn2ewiXe92jwE0E6dfeX5A0MtdGa9rkBCzcYkomBY1HNbcrtOaKjIVydfAF1 8FUhJr3F0QfKWAfttXuyvDInZKT/DjYf2Ec7D0vulSG90k9sixx7SFX+FLa+AArP Ie2sDbXDbHlIUXcsgvV2o9li3eVj3AY38sM3VCB1AisjY+z9ro22p2d6hdPnqHUC IZEGMTJWjOss4R4sLjij5VELd1kIYMqfS3ahUZPnT82C7/t6qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZoNoKJmYNI6RUWylfLfxrlyzIeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjM4MmE0MzQtY2RhOC0z MDYwLWE1NDItYmE1NmUwZTBmMTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSAGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImXKyx66teFtrHi+23PrPlB4qZg3PojtEB0RyFHfxDgIQfsOOVdFz3Z xibkg9B6noBDw9lY7WiLC2W7pL3udzxQOofPSmmjs55KGGpQGHygkX79NOL3oQWm //Tm9D8++XmODSxsnvzjooXQbuqVib7F062hwfLV8U5RWUYyO36q6XK7ym8tCvEA MDIOnDK9PzhFxgerfDhilJoDXa/ZQMhgZsNh5nOcgEKtJJr6BoO1hHeCz7Eas9MG /UVVQ4QXEHYCHNq5cxocyb+koJJPvqQlpX/FWxQ1LSa2t8yM1qk7taYxUzVMBz6v le3G5J9TYdvj/uByDTMquzuC+uD+cOc= -----END CERTIFICATE-----Generated at Thu Mar 26 21:05:19 2026 by rpki-client