$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/655c64f4-94ec-38b6-b594-526e83ac5093.roa File: 655c64f4-94ec-38b6-b594-526e83ac5093.roa (raw, json) Hash identifier: RpT+n95LmVqfHL+w0c5R9VMipUFVSlJzZ/w4HHfMx+Y= Subject key identifier: 5B:70:4B:54:05:E6:BA:FF:68:81:F8:BF:60:BC:8C:E0:EA:C9:40:85 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DAC459387F3EA8D9C360A3580 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/655c64f4-94ec-38b6-b594-526e83ac5093.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 40605 IP address blocks: 72.244.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:93:87:f3:ea:8d:9c:36:0a:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=0ed705d2-99fc-44f4-9cbc-998c21677a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1f:00:74:dc:f9:d6:05:22:f7:70:c0:36:d9: 1e:f6:9f:20:a7:f0:4e:9c:65:26:2f:2f:27:d4:79: 39:91:fc:a6:72:e6:e8:53:b0:96:83:7f:52:43:0c: ac:5a:7a:c7:72:43:93:1b:53:58:96:f1:0d:b7:ec: aa:89:dc:3b:7c:ac:df:2c:aa:d3:d7:e7:11:76:58: cc:be:91:59:22:1b:47:d2:74:9b:5d:2c:e3:c6:6a: ef:88:e5:e5:96:bc:92:5b:32:9e:30:b3:2b:2c:fb: d2:9a:10:29:bf:fc:07:a0:2c:11:e3:a2:7d:5f:a6: 84:c3:10:fb:80:9c:ac:0b:86:20:f8:98:09:74:f1: 53:7c:1a:7d:a9:0d:74:ce:13:0b:39:35:18:63:cd: b0:92:42:57:6f:75:47:2a:c0:79:2b:3b:6e:82:5d: 96:95:65:de:88:3a:1f:c5:10:6f:83:5a:c9:04:5a: 89:4d:6a:31:23:8e:f3:ae:c1:b4:2f:4b:f5:83:6c: 72:13:65:b0:04:d7:2b:78:af:b6:7c:c1:21:d6:57: d3:68:22:f0:da:1d:24:3a:e4:b9:2f:a6:a6:14:c2: f4:b9:fe:15:a8:26:ab:d3:79:86:e1:e7:7a:92:41: 52:2c:02:49:90:41:76:c7:21:cd:c5:e8:cb:15:31: 90:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:70:4B:54:05:E6:BA:FF:68:81:F8:BF:60:BC:8C:E0:EA:C9:40:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/655c64f4-94ec-38b6-b594-526e83ac5093.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:50:e5:ae:8c:e9:26:b3:e1:45:88:c8:3c:0c:e4:eb:2c:35: 59:4e:d8:c5:f5:df:a2:5b:4f:d2:c5:a7:2a:54:9d:4c:fb:18: 94:7e:4d:2e:d1:bd:73:89:ad:95:5d:a5:0e:af:54:00:ca:f9: b5:35:c0:c1:11:34:59:32:79:0c:ce:f8:de:38:5e:ed:43:de: 16:3a:29:32:05:88:e3:88:85:ce:0a:1e:4c:1b:53:1b:eb:f3: fb:48:16:58:f3:c2:1d:40:aa:87:b1:54:0d:f3:68:da:df:c9: a4:76:66:47:73:4a:b4:c4:12:c0:78:c5:44:0e:82:42:be:4b: 0c:ce:08:a6:0c:31:d7:04:b2:c5:20:a1:ad:7d:e2:17:c0:65: dd:68:23:a8:90:74:59:16:04:e9:05:0b:e1:0f:43:e7:9d:d3: 7d:a6:7d:ec:c7:8c:b3:b8:ec:aa:ca:a7:c5:60:14:89:31:13: 70:b8:38:ef:1b:f6:59:23:72:f2:22:0e:42:22:55:01:00:56: 7b:8b:a2:90:34:60:cd:77:0b:9d:42:4e:ab:34:59:1c:9a:d4: 2d:9f:39:76:36:52:36:c8:1f:35:2a:c6:8f:a9:a8:ad:0f:1a: b3:ee:6f:de:1f:eb:45:9a:cc:c5:26:b0:2e:e1:a8:de:05:a9: c2:40:5c:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRZOH8+qNnDYKNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk MGVkNzA1ZDItOTlmYy00NGY0LTljYmMtOTk4YzIxNjc3YTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB8AdNz51gUi93DANtke9p8gp/BOnGUmLy8n 1Hk5kfymcuboU7CWg39SQwysWnrHckOTG1NYlvENt+yqidw7fKzfLKrT1+cRdljM vpFZIhtH0nSbXSzjxmrviOXllrySWzKeMLMrLPvSmhApv/wHoCwR46J9X6aEwxD7 gJysC4Yg+JgJdPFTfBp9qQ10zhMLOTUYY82wkkJXb3VHKsB5Kztugl2WlWXeiDof xRBvg1rJBFqJTWoxI47zrsG0L0v1g2xyE2WwBNcreK+2fMEh1lfTaCLw2h0kOuS5 L6amFML0uf4VqCar03mG4ed6kkFSLAJJkEF2xyHNxejLFTGQ8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtwS1QF5rr/aIH4v2C8jODqyUCFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjU1YzY0ZjQtOTRlYy0z OGI2LWI1OTQtNTI2ZTgzYWM1MDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL1Q5a6M6Saz4UWIyDwM5OssNVlO2MX136JbT9LFpypUnUz7GJR+TS7R vXOJrZVdpQ6vVADK+bU1wMERNFkyeQzO+N44Xu1D3hY6KTIFiOOIhc4KHkwbUxvr 8/tIFljzwh1AqoexVA3zaNrfyaR2ZkdzSrTEEsB4xUQOgkK+SwzOCKYMMdcEssUg oa194hfAZd1oI6iQdFkWBOkFC+EPQ+ed032mfezHjLO47KrKp8VgFIkxE3C4OO8b 9lkjcvIiDkIiVQEAVnuLopA0YM13C51CTqs0WRya1C2fOXY2UjbIHzUqxo+pqK0P GrPub94f60WazMUmsC7hqN4FqcJAXLE= -----END CERTIFICATE-----Generated at Wed May 13 18:11:25 2026 by rpki-client