$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/320c5114-a97d-32fd-8f9f-9ea818a40471.roa File: 320c5114-a97d-32fd-8f9f-9ea818a40471.roa (raw, json) Hash identifier: 5h/s5Ip5l9ZzGZnpM/sO9zBiKS17vcMUC65K0imtSFE= Subject key identifier: D5:37:AA:44:94:2B:1E:A6:38:E6:D8:32:C3:22:FD:49:98:53:A9:20 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D44FA26D5481308747F3B3080 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/320c5114-a97d-32fd-8f9f-9ea818a40471.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 142111 IP address blocks: 72.244.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:26:d5:48:13:08:74:7f:3b:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=2188f602-9ab7-4928-955a-50e4488cce05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e0:78:e5:b3:66:93:0e:47:36:1a:1d:b5:b6: f2:5b:e1:f4:0d:c6:1b:ea:4a:32:7a:d8:6a:8a:bd: 04:32:90:87:11:d4:d7:cc:68:00:28:2c:01:b0:09: ec:21:3d:e0:7c:3a:f4:1f:5a:60:ae:aa:75:8e:f0: ae:79:e2:b3:5a:e0:12:48:16:ad:a3:ef:7a:29:6f: 57:34:01:36:b4:58:91:27:ac:66:f3:9b:08:6f:b0: c0:30:c2:89:1c:2f:32:22:28:f8:e3:ce:57:39:27: ea:5d:82:87:02:d3:18:fd:2c:96:5b:94:e3:91:bc: 16:d6:49:fd:ea:23:51:44:9b:00:e1:da:56:17:54: cf:74:7d:de:2d:f3:96:ae:ad:ee:70:44:9e:de:a0: d3:ae:05:c2:06:cc:1f:56:05:45:20:88:48:e9:ce: ac:72:73:b7:6f:26:e7:c0:3b:2a:95:ee:d5:2e:28: 2a:6f:d2:44:3a:42:5e:51:b6:60:3e:cb:51:1c:aa: 32:40:96:d1:db:d9:16:e7:b0:16:38:7d:de:95:e6: ab:5b:66:18:64:0a:ba:90:69:40:5b:57:af:0b:50: 7b:22:3e:58:af:64:ca:85:aa:e5:07:0a:c1:a6:1e: e7:ba:23:4a:63:dc:d7:90:3d:2e:ed:c0:83:7c:1f: 74:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:37:AA:44:94:2B:1E:A6:38:E6:D8:32:C3:22:FD:49:98:53:A9:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/320c5114-a97d-32fd-8f9f-9ea818a40471.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:f0:37:00:d5:fb:d9:a4:3c:6c:4d:61:8b:03:67:14:88:74: bb:7d:3d:47:19:3f:7d:d4:a2:89:79:f8:fc:c2:08:25:29:63: cc:1a:ce:80:a9:33:2f:12:60:ad:79:9f:83:4b:43:71:16:4c: a2:c1:aa:cd:1e:cb:93:34:04:ae:5b:7d:67:6f:35:33:3e:03: ee:2c:16:af:dc:71:06:60:2f:63:af:2e:96:2c:c5:d4:4a:5c: ce:85:9a:e6:fc:b6:40:69:a8:b5:ac:d1:59:f6:a1:dc:7b:c4: 34:f7:ca:3a:02:b2:de:a1:ce:40:fa:d1:dd:94:ad:75:a4:50: 0f:c2:43:1f:ea:c1:32:96:23:1a:2c:37:f4:91:b3:df:6d:b3: fb:5b:34:27:ce:8e:e6:90:37:04:75:79:40:39:f0:17:63:4d: e4:cd:28:0c:78:7c:25:bc:0b:25:b5:c4:cd:0a:20:5e:aa:0f: 81:7e:f6:93:8c:0a:e1:f5:c4:a9:86:18:8e:14:03:84:3b:69: e8:8c:e8:df:88:10:61:42:73:aa:b2:2f:66:03:2e:54:74:67: 45:7b:0e:93:5f:3a:d2:1c:a8:71:d9:cd:16:68:5f:cd:ba:9a: ba:08:98:a8:13:d7:03:59:90:21:26:5e:0c:bd:1d:b2:80:be: 45:25:da:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+ibVSBMIdH87MIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MjE4OGY2MDItOWFiNy00OTI4LTk1NWEtNTBlNDQ4OGNjZTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+B45bNmkw5HNhodtbbyW+H0DcYb6koyethq ir0EMpCHEdTXzGgAKCwBsAnsIT3gfDr0H1pgrqp1jvCueeKzWuASSBato+96KW9X NAE2tFiRJ6xm85sIb7DAMMKJHC8yIij4485XOSfqXYKHAtMY/SyWW5TjkbwW1kn9 6iNRRJsA4dpWF1TPdH3eLfOWrq3ucESe3qDTrgXCBswfVgVFIIhI6c6scnO3bybn wDsqle7VLigqb9JEOkJeUbZgPstRHKoyQJbR29kW57AWOH3elearW2YYZAq6kGlA W1evC1B7Ij5Yr2TKharlBwrBph7nuiNKY9zXkD0u7cCDfB905wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNU3qkSUKx6mOObYMsMi/UmYU6kgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzIwYzUxMTQtYTk3ZC0z MmZkLThmOWYtOWVhODE4YTQwNDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPQBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbwNwDV+9mkPGxNYYsDZxSIdLt9PUcZP33Uool5+PzCCCUpY8wazoCp My8SYK15n4NLQ3EWTKLBqs0ey5M0BK5bfWdvNTM+A+4sFq/ccQZgL2OvLpYsxdRK XM6Fmub8tkBpqLWs0Vn2odx7xDT3yjoCst6hzkD60d2UrXWkUA/CQx/qwTKWIxos N/SRs99ts/tbNCfOjuaQNwR1eUA58BdjTeTNKAx4fCW8CyW1xM0KIF6qD4F+9pOM CuH1xKmGGI4UA4Q7aeiM6N+IEGFCc6qyL2YDLlR0Z0V7DpNfOtIcqHHZzRZoX826 mroImKgT1wNZkCEmXgy9HbKAvkUl2hY= -----END CERTIFICATE-----Generated at Thu Mar 26 18:35:02 2026 by rpki-client