$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3baade23-aead-3816-ae33-71c2a39ec990.roa File: 3baade23-aead-3816-ae33-71c2a39ec990.roa (raw, json) Hash identifier: TnZC1ctYWQaMoRy+G84RxPregT2SaNFiP+gKW0S3gmk= Subject key identifier: DE:0F:DF:ED:C0:6F:6F:8E:6F:D5:2B:7F:15:7B:A6:54:99:3B:AB:61 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D2214A87C9F4AE5BAD1F79F80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3baade23-aead-3816-ae33-71c2a39ec990.roa Signing time: Wed 11 Mar 2026 13:00:39 +0000 ROA not before: Wed 11 Mar 2026 13:00:39 +0000 ROA not after: Tue 09 Jun 2026 13:00:39 +0000 asID: 834 IP address blocks: 72.244.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:22:14:a8:7c:9f:4a:e5:ba:d1:f7:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 11 13:00:39 2026 GMT Not After : Jun 9 13:00:39 2026 GMT Subject: CN=ab520b3e-d532-49a8-9463-70a673e0b2f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e1:50:a6:37:06:af:15:dc:b3:f1:ea:92:d0: e0:c7:34:df:e9:06:41:86:3e:f7:6d:42:f6:ff:a4: 4c:69:25:fd:05:d2:2a:a0:ce:12:cb:d9:43:cf:49: 29:6f:5b:bf:fa:d1:cc:5f:e5:3f:8d:a0:da:49:f9: 4d:6a:d5:90:7f:14:2a:80:d9:ad:8e:36:2e:32:bb: 5f:66:96:f7:53:b8:a7:41:24:f8:5c:3f:7f:2c:8e: 28:a1:cd:22:10:ff:3d:17:5e:ac:b5:3d:b7:c4:c0: ed:c0:4e:61:6a:da:a4:09:6c:cd:8f:8c:db:a6:41: e7:53:a6:ac:c9:97:25:d9:0e:3d:d2:b1:de:9b:8f: 48:4c:4f:77:b7:53:2a:8f:66:e5:f5:8a:d0:f0:d2: e5:4e:70:e2:b1:49:ec:c2:84:76:f1:dc:fa:87:d8: 52:13:89:32:81:ae:e8:c0:aa:8a:8f:e9:65:64:92: 08:57:15:1c:48:b3:da:c8:bd:61:f2:cb:fb:f9:0a: d2:3b:6c:10:de:85:c5:af:cb:08:68:97:50:c5:af: 93:ec:81:1f:86:93:6a:63:ec:97:ed:bb:7e:bd:b7: f5:b0:af:1a:fc:38:bd:57:c0:87:cf:bf:18:bf:fa: 57:c5:c0:fb:00:c1:ab:3f:28:63:9f:eb:b4:d1:21: 42:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:0F:DF:ED:C0:6F:6F:8E:6F:D5:2B:7F:15:7B:A6:54:99:3B:AB:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3baade23-aead-3816-ae33-71c2a39ec990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:eb:b7:fa:21:ee:7a:3a:8e:57:cc:61:0c:d9:fe:ca:2a:9c: aa:df:af:37:4a:a0:e5:5e:82:ff:38:5c:85:91:c7:ee:b0:69: 06:eb:be:ca:7e:63:25:aa:5c:d8:84:3d:86:3f:28:03:16:e7: c4:59:0f:cb:f2:74:da:ad:a8:87:93:b9:d8:e2:24:4e:a3:a8: 02:76:31:2b:69:e5:f2:0f:9c:7e:a7:cb:f7:d0:d7:6d:4d:31: 0d:0b:5d:ae:a0:f9:07:0c:6b:b0:e6:98:d8:58:4d:96:e1:9c: f8:8b:59:7d:07:8d:27:ac:1b:22:e9:e5:17:20:8a:62:81:48: d3:c7:8a:5c:0d:ef:4f:ef:38:b3:d0:8d:4c:45:37:51:c0:41: 25:1d:4f:40:19:25:bf:d6:a6:1d:ef:85:60:60:a0:92:cb:bf: 9b:59:c5:52:e2:99:2a:42:61:1d:6e:a0:31:ba:43:95:5b:78: 44:c0:6a:d5:cf:57:7b:ad:07:d5:87:dc:fe:f7:0e:9c:e7:f3: e0:a5:28:13:17:ff:b1:b4:c5:e2:7e:92:4f:9e:45:ab:7c:d7: c4:a6:77:27:09:0a:96:ee:67:53:24:38:1b:ef:57:f9:b0:33: e4:34:dd:2b:07:c6:0c:33:9b:45:74:e8:86:e5:f3:06:87:54: e9:93:73:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0iFKh8n0rlutH3n4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxMTEzMDAzOVoXDTI2MDYwOTEzMDAzOVowLzEtMCsGA1UEAxMk YWI1MjBiM2UtZDUzMi00OWE4LTk0NjMtNzBhNjczZTBiMmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+FQpjcGrxXcs/HqktDgxzTf6QZBhj73bUL2 /6RMaSX9BdIqoM4Sy9lDz0kpb1u/+tHMX+U/jaDaSflNatWQfxQqgNmtjjYuMrtf Zpb3U7inQST4XD9/LI4ooc0iEP89F16stT23xMDtwE5hatqkCWzNj4zbpkHnU6as yZcl2Q490rHem49ITE93t1Mqj2bl9YrQ8NLlTnDisUnswoR28dz6h9hSE4kyga7o wKqKj+llZJIIVxUcSLPayL1h8sv7+QrSO2wQ3oXFr8sIaJdQxa+T7IEfhpNqY+yX 7bt+vbf1sK8a/Di9V8CHz78Yv/pXxcD7AMGrPyhjn+u00SFCwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4P3+3Ab2+Ob9UrfxV7plSZO6thMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2JhYWRlMjMtYWVhZC0z ODE2LWFlMzMtNzFjMmEzOWVjOTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPSIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjrt/oh7no6jlfMYQzZ/soqnKrfrzdKoOVegv84XIWRx+6waQbrvsp+ YyWqXNiEPYY/KAMW58RZD8vydNqtqIeTudjiJE6jqAJ2MStp5fIPnH6ny/fQ121N MQ0LXa6g+QcMa7DmmNhYTZbhnPiLWX0HjSesGyLp5RcgimKBSNPHilwN70/vOLPQ jUxFN1HAQSUdT0AZJb/Wph3vhWBgoJLLv5tZxVLimSpCYR1uoDG6Q5VbeETAatXP V3utB9WH3P73Dpzn8+ClKBMX/7G0xeJ+kk+eRat818SmdycJCpbuZ1MkOBvvV/mw M+Q03SsHxgwzm0V06Ibl8waHVOmTcys= -----END CERTIFICATE-----Generated at Thu Mar 26 19:09:40 2026 by rpki-client