$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/324774f9-216c-36bf-a6d0-ed7edf6273e3.roa File: 324774f9-216c-36bf-a6d0-ed7edf6273e3.roa (raw, json) Hash identifier: jX9iogIcSMovJJ2qqpPIPsqud0Kei7wKcQV3ZaMmXq8= Subject key identifier: 1A:1D:36:75:36:D2:50:16:5E:A5:5F:66:6B:2B:DF:75:55:80:36:13 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D4A8F86FE447198CA40F595C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/324774f9-216c-36bf-a6d0-ed7edf6273e3.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 63264 IP address blocks: 72.244.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:86:fe:44:71:98:ca:40:f5:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=49012c3e-2829-4fa7-b128-fa605a3d5b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d6:2a:8b:b1:8a:7c:07:32:17:d8:cb:4c:25: f7:4c:e1:9b:83:f8:5d:24:55:f4:38:2c:67:66:6b: 59:0b:29:28:f3:4b:7d:b5:03:29:34:fd:46:13:55: aa:e1:4c:08:3c:32:03:ff:62:2a:0e:51:09:5e:c5: ef:1b:a6:0b:6a:2e:c1:59:b8:4a:0d:80:72:fa:94: da:42:a9:2f:86:54:b2:fb:41:70:dd:e4:8f:26:46: 44:01:61:d1:4a:94:9d:fc:4f:df:96:32:3c:cc:5d: 64:e3:67:fe:d5:d8:f5:05:0b:a5:e8:8f:c1:36:e6: 80:90:5c:77:7d:14:32:90:8c:99:0d:97:95:aa:88: 3d:d1:9f:c0:98:82:97:07:9f:2c:d5:c0:5f:cb:74: a3:6f:81:72:d1:b9:6c:9c:50:08:d2:85:9f:7c:bb: 91:03:59:93:39:ad:3e:fd:99:f0:99:8f:07:e0:f3: a7:6c:ab:10:f2:9b:a8:38:c2:d7:60:dc:d8:0f:6d: 06:5e:15:1f:9e:40:0a:82:16:00:f8:4b:77:55:e9: 71:a6:41:9c:d0:13:14:fb:3b:ea:fe:43:78:c6:97: 34:f2:6d:e1:97:1e:5d:9f:54:ab:42:2a:7f:00:79: 3d:bd:e4:56:07:07:28:c5:45:70:78:e5:1d:d8:fe: a8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1D:36:75:36:D2:50:16:5E:A5:5F:66:6B:2B:DF:75:55:80:36:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/324774f9-216c-36bf-a6d0-ed7edf6273e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:c3:2d:9d:ce:01:74:1a:68:a3:58:3d:02:80:77:28:b5:48: 09:f0:c5:49:32:8f:71:21:26:17:43:22:a2:60:f4:82:59:c7: 54:3f:eb:94:e7:27:3e:c0:6d:5a:f2:39:53:39:64:bf:61:ce: 75:1c:8d:ab:cf:84:36:ee:c7:94:6a:e2:8a:ec:e4:f9:36:15: 70:68:33:47:d4:eb:34:82:84:4e:85:3c:c1:5d:c0:b3:f8:9b: 0b:67:e5:b3:84:d9:11:11:01:f1:00:00:f0:27:c2:39:a5:ee: 41:fd:ae:ac:7d:63:91:c4:02:f7:66:1d:5f:27:49:3b:44:0c: 3b:72:f3:df:f8:c2:f1:e5:7a:f1:ac:ae:c0:96:c8:e5:15:e9: ae:5a:19:aa:3d:cc:63:d1:cc:56:cb:21:87:27:60:63:09:a3: 5f:29:28:7c:b2:72:a1:d3:33:a4:50:2a:a1:0d:c9:6c:09:67: 40:0d:2d:cd:6b:96:3e:9e:51:17:18:a0:aa:0e:38:bb:36:de: 3c:34:87:4b:52:f9:45:df:aa:77:aa:b7:d2:69:f1:5f:33:48: 4f:36:c3:0c:fb:16:02:7b:7a:bb:b4:f5:98:40:e0:6e:9c:bc: 48:dd:9b:82:9f:5b:b3:04:fc:bb:e5:cb:d5:d5:4c:dc:29:f0: d2:90:3d:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj4b+RHGYykD1lcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk NDkwMTJjM2UtMjgyOS00ZmE3LWIxMjgtZmE2MDVhM2Q1YjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitYqi7GKfAcyF9jLTCX3TOGbg/hdJFX0OCxn ZmtZCyko80t9tQMpNP1GE1Wq4UwIPDID/2IqDlEJXsXvG6YLai7BWbhKDYBy+pTa QqkvhlSy+0Fw3eSPJkZEAWHRSpSd/E/fljI8zF1k42f+1dj1BQul6I/BNuaAkFx3 fRQykIyZDZeVqog90Z/AmIKXB58s1cBfy3Sjb4Fy0blsnFAI0oWffLuRA1mTOa0+ /ZnwmY8H4POnbKsQ8puoOMLXYNzYD20GXhUfnkAKghYA+Et3VelxpkGc0BMU+zvq /kN4xpc08m3hlx5dn1SrQip/AHk9veRWBwcoxUVweOUd2P6oLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBodNnU20lAWXqVfZmsr33VVgDYTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzI0Nzc0ZjktMjE2Yy0z NmJmLWE2ZDAtZWQ3ZWRmNjI3M2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPSeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPDLZ3OAXQaaKNYPQKAdyi1SAnwxUkyj3EhJhdDIqJg9IJZx1Q/65Tn Jz7AbVryOVM5ZL9hznUcjavPhDbux5Rq4ors5Pk2FXBoM0fU6zSChE6FPMFdwLP4 mwtn5bOE2RERAfEAAPAnwjml7kH9rqx9Y5HEAvdmHV8nSTtEDDty89/4wvHlevGs rsCWyOUV6a5aGao9zGPRzFbLIYcnYGMJo18pKHyycqHTM6RQKqENyWwJZ0ANLc1r lj6eURcYoKoOOLs23jw0h0tS+UXfqneqt9Jp8V8zSE82wwz7FgJ7eru09ZhA4G6c vEjdm4KfW7ME/Lvly9XVTNwp8NKQPc0= -----END CERTIFICATE-----Generated at Thu Mar 26 18:10:33 2026 by rpki-client