$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d97cbb7-101c-3256-b1df-d5eae6da338b.roa File: 4d97cbb7-101c-3256-b1df-d5eae6da338b.roa (raw, json) Hash identifier: AZrspwZLXfuzyj883nBu/Sc9UJin3EgS19DZSB4UvBM= Subject key identifier: 8F:DF:BE:A6:56:B4:63:89:85:7A:06:C1:FA:60:D6:3F:20:64:98:D4 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D0EA7AAD66AB3682E292A3C00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d97cbb7-101c-3256-b1df-d5eae6da338b.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 9304 IP address blocks: 72.244.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:aa:d6:6a:b3:68:2e:29:2a:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=1770c21c-7007-42c0-b61f-442e7c9a9a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e3:14:82:85:db:cc:15:ea:68:fb:70:d3:5a: ef:be:3a:d9:c5:1e:c1:b9:05:5e:a5:c7:7d:13:e9: cf:fd:25:9e:b4:cb:f6:65:8c:3b:a2:16:10:6f:b6: 90:e6:23:c1:59:62:dc:2f:e4:df:fd:19:5a:bc:2d: 51:44:44:db:04:4e:4c:7b:58:33:3b:ff:ab:fd:04: f5:30:32:d8:81:8e:20:f8:95:b4:3f:af:0c:56:16: 29:88:11:cd:74:5d:5e:80:38:ea:37:a9:f0:09:b6: 5a:e8:1b:14:cb:86:92:50:17:fb:04:46:af:b3:30: ba:df:f8:3b:77:28:96:91:5f:76:c8:f4:a5:38:1a: e3:a4:0b:c4:80:19:dc:8c:e6:3b:3b:4d:72:46:79: 92:67:b3:4a:08:23:69:98:e7:99:03:75:db:77:82: 3b:c6:e8:3b:18:de:16:58:f3:de:d3:d5:93:15:37: 91:12:91:35:9a:58:7e:78:e4:73:c4:d2:f5:3c:d0: f2:de:5c:b7:de:c6:9c:ea:a7:82:96:87:18:44:68: b5:e5:65:a4:74:8c:7e:42:82:a7:5f:97:3b:46:61: 03:25:35:f2:af:c7:4a:2e:39:9c:cd:0e:df:7f:80: 9f:30:e4:ff:62:49:95:c1:58:db:6f:6b:b7:35:f2: 52:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DF:BE:A6:56:B4:63:89:85:7A:06:C1:FA:60:D6:3F:20:64:98:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d97cbb7-101c-3256-b1df-d5eae6da338b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:c7:9b:02:0b:2c:17:05:8d:e8:64:eb:c0:15:8d:f6:09:eb: 10:e2:86:10:c4:6e:93:43:1b:ba:ff:d5:89:ca:af:8b:32:34: 4b:7d:d9:61:ee:d9:e4:b0:cd:5f:4a:c2:57:0f:ba:69:8a:4f: b3:e1:4c:3c:89:40:69:8e:b8:59:27:7d:a1:43:bb:3f:b2:20: 66:1e:21:62:0e:f4:3c:dd:37:10:31:17:90:16:85:61:2b:e1: 71:0a:ea:02:a4:67:27:b3:8e:75:cc:c8:d5:4b:f6:db:bb:3e: 38:b0:0b:d5:c2:98:79:cb:1d:63:a1:d7:c0:2c:49:7d:8b:a8: e2:44:dc:7c:75:5d:dc:e3:d4:b0:c0:23:97:b6:8c:a9:84:b8: 4b:7e:75:1f:79:df:d8:27:f3:ad:d5:63:bb:e5:db:c0:ba:2a: a0:1e:b1:84:81:a7:6a:5e:ce:57:e8:f8:6f:7c:03:3e:14:04: 89:8e:35:61:d5:88:94:ea:ca:ef:a8:f2:8b:37:5b:70:54:7e: c2:c0:24:7d:0f:46:4a:68:a2:6e:4e:19:5a:44:01:31:65:f7: b1:8f:9f:3d:a7:32:3f:d7:05:47:18:96:10:eb:20:fa:3f:00: 08:5e:50:da:77:ce:50:4d:a0:0f:55:f8:1c:64:8f:e8:b4:87: 4b:22:63:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op6rWarNoLikqPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk MTc3MGMyMWMtNzAwNy00MmMwLWI2MWYtNDQyZTdjOWE5YTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOMUgoXbzBXqaPtw01rvvjrZxR7BuQVepcd9 E+nP/SWetMv2ZYw7ohYQb7aQ5iPBWWLcL+Tf/RlavC1RRETbBE5Me1gzO/+r/QT1 MDLYgY4g+JW0P68MVhYpiBHNdF1egDjqN6nwCbZa6BsUy4aSUBf7BEavszC63/g7 dyiWkV92yPSlOBrjpAvEgBncjOY7O01yRnmSZ7NKCCNpmOeZA3Xbd4I7xug7GN4W WPPe09WTFTeREpE1mlh+eORzxNL1PNDy3ly33sac6qeClocYRGi15WWkdIx+QoKn X5c7RmEDJTXyr8dKLjmczQ7ff4CfMOT/YkmVwVjbb2u3NfJSgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/fvqZWtGOJhXoGwfpg1j8gZJjUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGQ5N2NiYjctMTAxYy0z MjU2LWIxZGYtZDVlYWU2ZGEzMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPRtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3HmwILLBcFjehk68AVjfYJ6xDihhDEbpNDG7r/1YnKr4syNEt92WHu 2eSwzV9KwlcPummKT7PhTDyJQGmOuFknfaFDuz+yIGYeIWIO9DzdNxAxF5AWhWEr 4XEK6gKkZyezjnXMyNVL9tu7PjiwC9XCmHnLHWOh18AsSX2LqOJE3Hx1Xdzj1LDA I5e2jKmEuEt+dR9539gn863VY7vl28C6KqAesYSBp2pezlfo+G98Az4UBImONWHV iJTqyu+o8os3W3BUfsLAJH0PRkpoom5OGVpEATFl97GPnz2nMj/XBUcYlhDrIPo/ AAheUNp3zlBNoA9V+Bxkj+i0h0siY/I= -----END CERTIFICATE-----Generated at Thu Mar 26 19:05:00 2026 by rpki-client