$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/324774f9-216c-36bf-a6d0-ed7edf6273e3.roa File: 324774f9-216c-36bf-a6d0-ed7edf6273e3.roa (raw, json) Hash identifier: CbymR/ldhB8YGbNFh3DLjJ5elAV5l3FcagC4h+Wx6xA= Subject key identifier: 0D:2F:80:04:90:F3:07:43:CC:E9:C5:4B:4A:3F:94:38:27:C2:07:63 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584ECD371659458EB58E951B7D40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/324774f9-216c-36bf-a6d0-ed7edf6273e3.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 63264 IP address blocks: 72.244.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:16:59:45:8e:b5:8e:95:1b:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=4b720f56-99fb-483a-a4a4-82fb9c630722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8c:b7:c2:77:f7:b7:56:08:94:01:8d:3d:cb: 33:f9:e9:2a:f9:f3:ed:d8:87:32:31:e9:b5:63:65: 16:71:cd:d3:bd:d7:7e:32:94:53:92:d6:a2:40:44: 2c:37:69:48:18:3b:0e:55:21:0b:d5:b5:a5:f8:70: 68:f9:42:05:73:06:1e:61:6d:10:82:9d:53:01:41: 1a:a5:63:83:af:70:cd:ab:14:cb:01:38:45:37:ec: 16:56:7b:32:05:f3:26:d7:11:5e:f8:1e:13:73:b4: 14:21:8d:cd:c5:69:0b:6b:13:74:3b:5b:8d:9a:05: 50:2a:bb:0d:fa:5b:12:a1:a2:bf:9f:48:9e:2c:81: ef:fd:ae:db:0a:16:61:87:57:94:bf:89:c7:81:9f: 23:9d:be:56:ee:ba:c8:64:19:48:96:e5:d4:ec:98: 89:62:09:ce:82:97:35:f8:d3:01:99:7f:d5:a0:3a: 19:6c:af:96:01:12:2e:90:00:fb:9f:16:86:ff:66: 50:51:55:51:4c:7b:5e:45:6f:94:23:51:e2:8a:ac: 3a:c8:a9:60:b1:34:2d:4b:a3:57:5b:7b:8e:59:a7: 1d:23:92:bc:9f:d6:1b:82:aa:70:50:e5:fa:e0:71: 47:3e:a2:2f:7f:31:f2:b0:c1:a8:20:a1:5e:e6:ed: b8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:2F:80:04:90:F3:07:43:CC:E9:C5:4B:4A:3F:94:38:27:C2:07:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/324774f9-216c-36bf-a6d0-ed7edf6273e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:5d:e0:83:be:a2:c1:92:e1:c4:f6:0b:69:d8:c1:6a:06:e9: 06:32:75:e9:fd:5b:87:fd:15:ac:61:c6:d4:73:20:8b:b7:0b: 40:06:8b:60:fc:02:ab:35:11:f9:c0:09:7a:78:38:e9:7e:3c: a1:06:dd:87:81:88:97:14:09:cb:a7:5a:27:da:3d:40:68:ed: 5f:44:0d:9e:fc:d2:6c:82:7c:35:3f:19:4f:b5:2f:34:e4:8c: 97:a9:52:b5:7c:6b:39:0a:fe:f6:28:ac:ed:b8:16:1e:02:c7: a3:fd:25:81:6f:2e:6d:d6:a4:26:db:a5:4a:4c:aa:5f:58:bc: ec:f4:b6:3e:0c:9c:9f:b0:05:2e:e3:27:67:13:a4:5c:01:47: 7b:c2:77:ab:c6:ff:64:e0:ae:d1:9a:90:60:7d:59:cb:e0:5c: 92:48:02:3f:bc:5c:28:45:43:ab:9c:cc:d9:9b:bc:3a:43:81: f8:13:c4:67:c4:88:29:f0:95:29:81:ea:a9:43:97:30:97:0d: d7:23:fe:a1:c6:7f:e3:09:d3:65:51:3d:5d:29:dd:bf:0c:86: 47:76:21:10:e3:da:d6:1d:ed:02:35:66:49:49:a2:3f:a7:b0: b4:a8:00:e6:6d:45:56:ec:45:7f:eb:71:f5:58:3c:55:a6:2e: 8b:0a:a9:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNxZZRY61jpUbfUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk NGI3MjBmNTYtOTlmYi00ODNhLWE0YTQtODJmYjljNjMwNzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Iy3wnf3t1YIlAGNPcsz+ekq+fPt2IcyMem1 Y2UWcc3Tvdd+MpRTktaiQEQsN2lIGDsOVSEL1bWl+HBo+UIFcwYeYW0Qgp1TAUEa pWODr3DNqxTLAThFN+wWVnsyBfMm1xFe+B4Tc7QUIY3NxWkLaxN0O1uNmgVQKrsN +lsSoaK/n0ieLIHv/a7bChZhh1eUv4nHgZ8jnb5W7rrIZBlIluXU7JiJYgnOgpc1 +NMBmX/VoDoZbK+WARIukAD7nxaG/2ZQUVVRTHteRW+UI1Hiiqw6yKlgsTQtS6NX W3uOWacdI5K8n9YbgqpwUOX64HFHPqIvfzHysMGoIKFe5u24sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0vgASQ8wdDzOnFS0o/lDgnwgdjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzI0Nzc0ZjktMjE2Yy0z NmJmLWE2ZDAtZWQ3ZWRmNjI3M2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPSeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANd4IO+osGS4cT2C2nYwWoG6QYyden9W4f9FaxhxtRzIIu3C0AGi2D8 Aqs1EfnACXp4OOl+PKEG3YeBiJcUCcunWifaPUBo7V9EDZ780myCfDU/GU+1LzTk jJepUrV8azkK/vYorO24Fh4Cx6P9JYFvLm3WpCbbpUpMql9YvOz0tj4MnJ+wBS7j J2cTpFwBR3vCd6vG/2TgrtGakGB9WcvgXJJIAj+8XChFQ6uczNmbvDpDgfgTxGfE iCnwlSmB6qlDlzCXDdcj/qHGf+MJ02VRPV0p3b8Mhkd2IRDj2tYd7QI1ZklJoj+n sLSoAOZtRVbsRX/rcfVYPFWmLosKqWE= -----END CERTIFICATE-----Generated at Tue Oct 6 21:38:25 2026 by rpki-client