$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4527c060-253a-34a8-a503-801eb9d74a05.roa File: 4527c060-253a-34a8-a503-801eb9d74a05.roa (raw, json) Hash identifier: qDJeTrQCO+CJnSuzp9RFhw2ATAWTU2n8q5xfDLn5NF0= Subject key identifier: 4B:80:71:00:D5:92:EE:E6:16:2A:9A:82:3F:19:6C:3D:3B:4F:E6:39 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D3C9A13F0825C2D98235D5080 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4527c060-253a-34a8-a503-801eb9d74a05.roa Signing time: Sat 21 Mar 2026 01:00:30 +0000 ROA not before: Sat 21 Mar 2026 01:00:30 +0000 ROA not after: Fri 19 Jun 2026 01:00:30 +0000 asID: 49791 IP address blocks: 72.244.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3c:9a:13:f0:82:5c:2d:98:23:5d:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 21 01:00:30 2026 GMT Not After : Jun 19 01:00:30 2026 GMT Subject: CN=1d2ab912-0c3f-48a1-8582-ccec191e6a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:12:ca:30:67:a1:b7:a7:5f:b6:04:c5:b2:61: da:7d:ff:34:2e:41:be:4e:92:cc:1c:39:ac:d8:01: 6c:59:ef:25:bc:25:fd:6b:7b:30:20:df:fa:da:b6: e8:00:d7:84:c9:e0:ff:47:52:bc:89:8c:ee:fd:e6: 3b:cc:3d:68:4a:ec:15:6e:a7:fd:15:c9:bd:2a:d8: d7:2d:c1:19:56:1c:ae:ce:71:ac:81:e4:26:ae:d7: 0d:32:f4:cd:2d:94:76:6f:50:53:71:ea:b5:86:04: fa:d7:ac:31:33:2d:60:55:26:dd:cf:96:87:02:55: b8:69:26:d5:b9:99:f2:a2:40:fc:10:ff:e5:43:39: d2:32:b2:88:13:e6:47:12:24:64:36:eb:79:00:a7: 25:f7:ed:49:1e:ee:b0:82:01:fb:4f:b2:6a:dc:14: 8d:fe:7c:b0:e3:e8:53:5d:43:8b:af:e0:eb:10:41: 72:60:e3:6b:f9:a4:63:e7:8e:59:3e:f9:12:6e:3a: ab:97:41:58:80:81:fe:77:8a:c2:45:76:3c:c8:8a: a3:71:2b:5e:a6:28:d6:27:be:02:72:28:06:f0:e6: 6e:d7:5c:37:f4:c0:a7:f2:9e:b2:ca:93:7a:88:3e: c8:d3:79:aa:f7:a2:4b:06:bb:0f:e8:73:4f:50:44: e3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:80:71:00:D5:92:EE:E6:16:2A:9A:82:3F:19:6C:3D:3B:4F:E6:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4527c060-253a-34a8-a503-801eb9d74a05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:54:ff:51:e6:1a:b6:50:f6:a3:24:c4:54:46:0f:4f:5b:18: 14:6a:d2:80:87:fd:1e:c9:f9:00:c6:54:da:40:e0:62:b1:47: b9:10:3c:2e:0a:cf:f6:af:49:e1:ed:b0:aa:7b:35:0d:55:92: f9:00:1c:f3:b9:00:e0:f4:5d:8d:cb:ee:18:06:6b:f4:3d:6d: da:ee:f3:cb:36:0d:42:a2:44:11:02:f3:82:0c:a9:da:42:3d: a3:7a:93:ab:08:37:7d:c6:26:10:37:7a:d2:93:14:d5:43:af: ab:4f:8c:7d:31:2d:d8:df:d9:95:3e:cc:ba:c8:61:5b:59:25: 9a:e0:c6:4a:c7:4f:03:08:d0:a7:f2:a6:99:40:eb:87:70:9a: 77:a8:99:bd:d2:99:09:f6:1f:6f:51:12:f5:71:94:2a:cd:7f: ba:8a:4b:89:01:dc:ad:3a:c5:ae:33:fe:6b:7d:54:b6:76:f6: f0:82:ce:1b:66:d2:a7:8c:54:d2:ec:35:0b:92:0e:37:f3:2b: 60:0f:fa:45:7c:9f:de:58:4e:25:4f:fa:a9:02:cc:5d:97:b4: 4b:a4:6e:73:5d:e3:3a:b8:9c:cc:67:13:52:8c:e5:89:4e:86: 2a:2c:21:65:32:4d:d7:b1:68:ec:2f:d1:d1:fc:39:b3:0d:0d: 20:5c:83:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE08mhPwglwtmCNdUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyMTAxMDAzMFoXDTI2MDYxOTAxMDAzMFowLzEtMCsGA1UEAxMk MWQyYWI5MTItMGMzZi00OGExLTg1ODItY2NlYzE5MWU2YTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphLKMGeht6dftgTFsmHaff80LkG+TpLMHDms 2AFsWe8lvCX9a3swIN/62rboANeEyeD/R1K8iYzu/eY7zD1oSuwVbqf9Fcm9KtjX LcEZVhyuznGsgeQmrtcNMvTNLZR2b1BTceq1hgT616wxMy1gVSbdz5aHAlW4aSbV uZnyokD8EP/lQznSMrKIE+ZHEiRkNut5AKcl9+1JHu6wggH7T7Jq3BSN/nyw4+hT XUOLr+DrEEFyYONr+aRj545ZPvkSbjqrl0FYgIH+d4rCRXY8yIqjcStepijWJ74C cigG8OZu11w39MCn8p6yypN6iD7I03mq96JLBrsP6HNPUETjwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuAcQDVku7mFiqagj8ZbD07T+Y5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDUyN2MwNjAtMjUzYS0z NGE4LWE1MDMtODAxZWI5ZDc0YTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPQlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5U/1HmGrZQ9qMkxFRGD09bGBRq0oCH/R7J+QDGVNpA4GKxR7kQPC4K z/avSeHtsKp7NQ1VkvkAHPO5AOD0XY3L7hgGa/Q9bdru88s2DUKiRBEC84IMqdpC PaN6k6sIN33GJhA3etKTFNVDr6tPjH0xLdjf2ZU+zLrIYVtZJZrgxkrHTwMI0Kfy pplA64dwmneomb3SmQn2H29REvVxlCrNf7qKS4kB3K06xa4z/mt9VLZ29vCCzhtm 0qeMVNLsNQuSDjfzK2AP+kV8n95YTiVP+qkCzF2XtEukbnNd4zq4nMxnE1KM5YlO hiosIWUyTdexaOwv0dH8ObMNDSBcgzA= -----END CERTIFICATE-----Generated at Thu Mar 26 18:30:19 2026 by rpki-client