$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/38856c74-1d72-3666-8789-806fb6332e41.roa File: 38856c74-1d72-3666-8789-806fb6332e41.roa (raw, json) Hash identifier: 2KGC2QVzZ3B+XAoMonCkudu5iq3S32D3sIXArllzAVI= Subject key identifier: B4:F5:85:C5:74:72:C0:AE:10:BE:17:6F:51:E7:E9:F5:1F:AB:FC:C6 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D1C7F4F2384FAC34619D4E1DF Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/38856c74-1d72-3666-8789-806fb6332e41.roa Signing time: Mon 09 Mar 2026 13:00:40 +0000 ROA not before: Mon 09 Mar 2026 13:00:40 +0000 ROA not after: Sun 07 Jun 2026 13:00:40 +0000 asID: 152672 IP address blocks: 72.244.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1c:7f:4f:23:84:fa:c3:46:19:d4:e1:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 9 13:00:40 2026 GMT Not After : Jun 7 13:00:40 2026 GMT Subject: CN=5251c364-675d-4572-affc-15f3718ce302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6b:54:d7:bf:e6:ea:91:45:1e:0b:87:f0:82: 26:59:f1:73:93:00:43:a1:17:de:7b:b2:aa:ac:7c: 64:b4:11:52:12:3a:0c:38:23:2b:78:60:43:79:17: 3f:30:40:19:90:fd:7a:68:d2:ee:29:94:c9:0f:7c: 44:61:b4:c3:16:eb:d4:87:16:d7:94:06:b9:04:f9: 2a:eb:90:de:d9:5e:24:40:b0:0f:18:ee:2a:be:dd: 49:e0:26:f8:4c:17:6a:fa:f3:02:9a:37:6d:e8:24: 7f:64:4f:58:89:a8:b2:da:39:3f:39:3c:d8:7c:d0: 70:9d:f2:ab:f4:19:79:0b:cf:23:a2:6c:16:1d:63: 8b:71:01:29:57:02:5d:67:83:58:07:cf:d3:7f:2b: d0:a4:e9:4e:0b:08:da:85:a0:24:34:3f:c3:24:a6: 59:01:d4:23:7b:4b:2f:d7:c8:85:11:86:1f:81:71: 41:6b:d9:b3:7b:c2:5c:2d:43:e6:ab:3d:96:42:16: 12:b4:82:bf:fb:80:54:a8:e1:ee:7f:bd:d1:b2:a0: 39:27:e2:42:c7:d9:3c:7e:ab:fe:5a:c6:da:cd:d0: 9f:c1:3b:8b:8d:65:6a:66:79:1a:1d:62:1c:e4:7a: cf:80:3b:b8:bc:44:8c:34:9a:15:30:63:33:51:3d: a1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F5:85:C5:74:72:C0:AE:10:BE:17:6F:51:E7:E9:F5:1F:AB:FC:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/38856c74-1d72-3666-8789-806fb6332e41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:c8:39:1a:7f:37:d5:7c:d0:b2:a5:d4:bb:96:57:8e:cf:0a: 9f:b5:f2:b5:0b:16:1f:c7:93:3e:ae:a3:5c:7f:c6:cd:27:3a: 70:85:ae:34:61:84:f9:b4:36:88:eb:f9:7a:51:0b:9d:a6:d6: 4e:01:e5:12:9a:fe:dc:e5:b0:55:f5:1a:98:91:49:5e:4b:a1: c2:65:5e:61:8c:53:4c:48:40:f4:e5:d0:a3:5a:8e:81:c0:4e: a1:9f:6c:d9:50:36:bd:8f:b0:69:3c:c0:a6:fc:54:ac:1e:01: 9c:68:ed:dd:5b:fd:e1:0a:a0:04:09:3a:91:cd:65:2e:f2:b2: 24:68:f4:d0:17:2c:21:80:12:33:bc:ce:17:fb:96:f0:bd:0b: e3:3f:31:91:89:7c:9c:ca:eb:38:1b:af:bb:60:9f:b6:a5:42: a9:35:b0:a6:4b:c7:51:c2:d6:bd:14:bd:0d:84:6d:ab:03:fd: e8:69:f0:33:ef:0b:d8:b3:e8:70:d6:d1:2e:4f:8e:7d:bc:ac: f1:c2:f5:00:d5:8e:3a:c2:32:94:a4:6e:a2:19:91:db:13:bc: 20:65:7f:7a:b7:11:ea:8e:80:64:97:55:c9:fc:35:a6:e5:2d: 7a:3a:25:9a:f1:54:b3:1c:95:17:12:da:ca:59:1c:01:a3:1c: 22:6e:e0:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0cf08jhPrDRhnU4d8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwOTEzMDA0MFoXDTI2MDYwNzEzMDA0MFowLzEtMCsGA1UEAxMk NTI1MWMzNjQtNjc1ZC00NTcyLWFmZmMtMTVmMzcxOGNlMzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWtU17/m6pFFHguH8IImWfFzkwBDoRfee7Kq rHxktBFSEjoMOCMreGBDeRc/MEAZkP16aNLuKZTJD3xEYbTDFuvUhxbXlAa5BPkq 65De2V4kQLAPGO4qvt1J4Cb4TBdq+vMCmjdt6CR/ZE9Yiaiy2jk/OTzYfNBwnfKr 9Bl5C88jomwWHWOLcQEpVwJdZ4NYB8/TfyvQpOlOCwjahaAkND/DJKZZAdQje0sv 18iFEYYfgXFBa9mze8JcLUPmqz2WQhYStIK/+4BUqOHuf73RsqA5J+JCx9k8fqv+ WsbazdCfwTuLjWVqZnkaHWIc5HrPgDu4vESMNJoVMGMzUT2h4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLT1hcV0csCuEL4Xb1Hn6fUfq/zGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzg4NTZjNzQtMWQ3Mi0z NjY2LTg3ODktODA2ZmI2MzMyZTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPSfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzIORp/N9V80LKl1LuWV47PCp+18rULFh/Hkz6uo1x/xs0nOnCFrjRh hPm0Nojr+XpRC52m1k4B5RKa/tzlsFX1GpiRSV5LocJlXmGMU0xIQPTl0KNajoHA TqGfbNlQNr2PsGk8wKb8VKweAZxo7d1b/eEKoAQJOpHNZS7ysiRo9NAXLCGAEjO8 zhf7lvC9C+M/MZGJfJzK6zgbr7tgn7alQqk1sKZLx1HC1r0UvQ2EbasD/ehp8DPv C9iz6HDW0S5Pjn28rPHC9QDVjjrCMpSkbqIZkdsTvCBlf3q3EeqOgGSXVcn8Nabl LXo6JZrxVLMclRcS2spZHAGjHCJu4PA= -----END CERTIFICATE-----Generated at Thu Mar 26 20:45:47 2026 by rpki-client