$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/48c8a724-84a6-3648-b5da-0498600617c2.roa File: 48c8a724-84a6-3648-b5da-0498600617c2.roa (raw, json) Hash identifier: bIPjLerqe/NxPuxUsOCOhaAnDsxLfJDQKtFBdXPnXbk= Subject key identifier: A4:8A:7E:7B:1E:7F:0A:D2:83:DA:3B:C9:8C:4E:49:D5:11:5F:64:90 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D117263C119424CD86A552680 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/48c8a724-84a6-3648-b5da-0498600617c2.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 20326 IP address blocks: 72.244.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:63:c1:19:42:4c:d8:6a:55:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=ff10e930-6b87-474a-8e0e-2467eb2378c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1f:e8:38:5d:9e:c6:5a:03:96:bb:fb:85:55: 77:94:c3:75:38:96:e0:a9:12:fc:39:03:9e:3e:35: e0:09:ec:b7:2a:0c:6e:94:91:3a:e0:d2:a4:0b:f0: 66:f9:7e:ca:0b:8f:a1:e5:03:d7:2c:8e:a7:74:be: 21:09:96:e5:a5:b3:ef:b3:33:08:ac:53:93:97:e7: 77:17:fe:01:42:e6:40:cc:db:5f:77:74:18:02:52: eb:ac:f0:eb:5e:10:cb:c3:73:29:49:d5:ee:18:b1: 30:40:65:3d:68:65:65:69:df:27:31:ec:a0:83:1a: 41:19:38:d9:cd:49:a7:90:e6:30:84:1e:9b:d2:fc: 37:57:fe:51:26:a7:81:af:7f:7a:44:2c:86:51:9e: 99:d8:0c:10:0b:bd:de:1a:d8:0b:77:cd:54:05:e2: 6c:fa:fa:3d:02:51:7a:62:57:db:9f:97:94:e9:26: 05:38:c2:85:f5:62:cf:0b:ab:f7:46:9b:92:34:5c: 13:c4:c1:05:81:d2:f9:e6:ee:71:a7:96:93:eb:b5: bd:82:0e:6d:b8:d1:c1:10:ff:3d:12:23:47:c7:c1: e0:9b:89:4c:3b:a9:3a:8d:4f:86:30:57:54:62:3a: b0:27:c6:25:06:3f:1e:6c:32:f6:d1:4b:2d:79:01: 8f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8A:7E:7B:1E:7F:0A:D2:83:DA:3B:C9:8C:4E:49:D5:11:5F:64:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/48c8a724-84a6-3648-b5da-0498600617c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:ac:8d:b0:a1:e6:34:a8:43:7d:ad:de:f0:4c:3e:6a:59:67: 9c:da:73:20:33:c3:37:50:a2:28:8b:42:89:b6:eb:5c:9a:3c: ec:a1:30:f7:98:23:1e:15:68:94:71:02:46:fe:48:e0:e4:e0: 28:fd:77:96:49:9a:f6:57:d0:12:10:fd:29:59:5d:29:cd:ba: a5:cf:0d:cb:9b:c0:c5:10:b3:f0:a7:c1:8e:b6:8e:d2:4c:73: d5:81:4d:97:e4:ea:c6:c7:ce:65:47:fb:af:55:1e:41:07:ec: 91:03:d6:9d:0e:81:84:3f:b3:00:ed:ec:9f:dd:71:20:33:b0: ec:d5:e5:08:89:4a:cb:83:f7:1b:b0:f3:68:38:90:61:05:c7: 27:42:39:d1:af:35:4f:2a:21:9a:e9:cb:2d:4f:62:c6:4e:89: 1e:41:75:5e:a2:5f:50:ff:69:cf:7c:82:68:c8:ec:41:f1:83: ce:e1:40:9e:92:6f:08:47:bd:35:e9:18:6a:53:1a:c9:45:e6: 0e:5c:89:07:24:26:f5:08:e7:98:f0:2a:dd:6a:43:8d:4b:dc: b0:dd:11:6d:55:17:8b:fc:cd:4f:f9:a1:4f:24:00:35:e5:9a: f5:fe:e6:a2:38:bd:41:cd:75:53:10:13:e1:01:b7:0a:c7:61: cf:8e:73:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcmPBGUJM2GpVJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk ZmYxMGU5MzAtNmI4Ny00NzRhLThlMGUtMjQ2N2ViMjM3OGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB/oOF2exloDlrv7hVV3lMN1OJbgqRL8OQOe PjXgCey3KgxulJE64NKkC/Bm+X7KC4+h5QPXLI6ndL4hCZblpbPvszMIrFOTl+d3 F/4BQuZAzNtfd3QYAlLrrPDrXhDLw3MpSdXuGLEwQGU9aGVlad8nMeyggxpBGTjZ zUmnkOYwhB6b0vw3V/5RJqeBr396RCyGUZ6Z2AwQC73eGtgLd81UBeJs+vo9AlF6 Ylfbn5eU6SYFOMKF9WLPC6v3RpuSNFwTxMEFgdL55u5xp5aT67W9gg5tuNHBEP89 EiNHx8Hgm4lMO6k6jU+GMFdUYjqwJ8YlBj8ebDL20UsteQGP3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSKfnsefwrSg9o7yYxOSdURX2SQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDhjOGE3MjQtODRhNi0z NjQ4LWI1ZGEtMDQ5ODYwMDYxN2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPSaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+sjbCh5jSoQ32t3vBMPmpZZ5zacyAzwzdQoiiLQom261yaPOyhMPeY Ix4VaJRxAkb+SODk4Cj9d5ZJmvZX0BIQ/SlZXSnNuqXPDcubwMUQs/CnwY62jtJM c9WBTZfk6sbHzmVH+69VHkEH7JED1p0OgYQ/swDt7J/dcSAzsOzV5QiJSsuD9xuw 82g4kGEFxydCOdGvNU8qIZrpyy1PYsZOiR5BdV6iX1D/ac98gmjI7EHxg87hQJ6S bwhHvTXpGGpTGslF5g5ciQckJvUI55jwKt1qQ41L3LDdEW1VF4v8zU/5oU8kADXl mvX+5qI4vUHNdVMQE+EBtwrHYc+Oc40= -----END CERTIFICATE-----Generated at Thu Mar 26 15:50:40 2026 by rpki-client