$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8c72c850-8149-3da4-a4a7-a367eed3e058.roa File: 8c72c850-8149-3da4-a4a7-a367eed3e058.roa (raw, json) Hash identifier: Mw/WdOZjeXyY7BeRv74sDYkOeigssosZht8GUuM2wrU= Subject key identifier: 8D:D4:51:28:7D:44:95:B1:74:6A:C7:A1:BF:0D:BA:9E:FB:A0:D3:16 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D19B4D9F1C4C72E207B75B7A0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8c72c850-8149-3da4-a4a7-a367eed3e058.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 149978 IP address blocks: 72.244.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d9:f1:c4:c7:2e:20:7b:75:b7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=9295eff5-9491-4222-9c01-2110a99580dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:55:e0:98:91:37:28:0c:66:ac:aa:97:c2:73: 29:c1:94:c4:90:1f:15:de:61:30:ae:98:c4:86:e4: 2d:4f:8d:c9:32:ad:1e:5e:64:ca:f7:aa:b3:98:96: 4e:fa:4c:f3:6e:84:06:c0:30:74:85:5c:2b:4d:54: 15:80:47:f0:bb:ad:6b:0a:cb:04:82:13:ef:2a:75: 06:00:2d:ac:d8:79:b5:f9:1a:fe:f2:a3:6d:6d:5b: 65:cd:d8:e5:09:a4:bc:64:f6:1f:b8:77:72:13:03: e0:6b:c6:16:58:5f:18:bc:35:04:b3:64:1a:61:c3: 27:8d:52:65:5c:ed:4a:e2:a6:00:23:d7:77:42:f7: 51:78:2d:78:f8:9e:cc:27:00:73:e1:ae:82:c4:95: e4:e0:00:2f:1d:f0:5a:99:56:72:8b:99:0d:0e:42: 5a:98:ff:bf:00:4e:fd:86:12:3f:ce:66:c5:60:79: 29:0a:32:9d:ab:78:4d:aa:7b:da:a6:1e:98:1e:89: b7:ba:d5:16:e7:40:af:98:ac:a9:e1:c4:7c:f8:b7: 34:b6:ae:18:5e:14:8f:4d:9c:5b:de:a5:36:15:26: b4:7a:cc:3d:9a:32:8f:b8:54:ab:4a:10:25:91:d1: d1:f1:15:68:0f:82:ff:f3:76:f0:6b:93:75:fe:29: 26:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D4:51:28:7D:44:95:B1:74:6A:C7:A1:BF:0D:BA:9E:FB:A0:D3:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8c72c850-8149-3da4-a4a7-a367eed3e058.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:e3:f3:06:e2:b1:15:11:62:1f:87:fb:e0:0d:3f:6d:94:fd: 39:c8:69:1f:6f:48:cc:94:17:53:eb:eb:2a:9a:89:50:e0:c6: 80:58:cf:e8:c1:6d:76:5b:4d:6b:b2:c0:34:23:2f:80:c3:ab: 56:03:13:e2:59:90:63:cf:c8:21:97:c5:49:cd:b6:03:eb:3f: bd:07:a2:d3:61:4e:46:ac:75:3a:54:6f:a4:3f:74:46:5d:8a: 8a:5d:d8:47:ea:5c:d0:84:ce:66:01:b2:38:4f:58:cf:7e:52: 9e:7b:ae:f2:10:76:79:71:45:c6:5a:d6:f0:0f:fe:e6:32:16: bc:c8:d4:af:ba:74:37:75:29:56:62:24:4f:91:49:c5:9e:4a: 75:79:95:13:9d:ae:98:32:08:47:82:04:f6:95:de:f4:26:f2: 23:3c:83:89:2d:3d:0e:4a:95:c4:a7:cf:da:47:3f:59:cd:4a: df:62:80:24:da:8b:55:ef:d6:65:99:fd:52:2c:bd:1e:9c:21: d4:da:e9:94:f5:eb:4b:bd:7f:22:ac:14:bf:40:18:72:a0:73: c8:c1:d4:e0:dc:a0:69:c1:4b:62:83:e1:6f:8e:22:ce:97:a4: f3:e1:e8:4d:da:08:19:88:f4:1d:1d:8a:9d:a1:aa:da:26:de: 70:43:d9:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNnxxMcuIHt1t6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk OTI5NWVmZjUtOTQ5MS00MjIyLTljMDEtMjExMGE5OTU4MGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1XgmJE3KAxmrKqXwnMpwZTEkB8V3mEwrpjE huQtT43JMq0eXmTK96qzmJZO+kzzboQGwDB0hVwrTVQVgEfwu61rCssEghPvKnUG AC2s2Hm1+Rr+8qNtbVtlzdjlCaS8ZPYfuHdyEwPga8YWWF8YvDUEs2QaYcMnjVJl XO1K4qYAI9d3QvdReC14+J7MJwBz4a6CxJXk4AAvHfBamVZyi5kNDkJamP+/AE79 hhI/zmbFYHkpCjKdq3hNqnvaph6YHom3utUW50CvmKyp4cR8+Lc0tq4YXhSPTZxb 3qU2FSa0esw9mjKPuFSrShAlkdHR8RVoD4L/83bwa5N1/ikm/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3UUSh9RJWxdGrHob8Nup77oNMWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOGM3MmM4NTAtODE0OS0z ZGE0LWE0YTctYTM2N2VlZDNlMDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPSoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3j8wbisRURYh+H++ANP22U/TnIaR9vSMyUF1Pr6yqaiVDgxoBYz+jB bXZbTWuywDQjL4DDq1YDE+JZkGPPyCGXxUnNtgPrP70HotNhTkasdTpUb6Q/dEZd iopd2EfqXNCEzmYBsjhPWM9+Up57rvIQdnlxRcZa1vAP/uYyFrzI1K+6dDd1KVZi JE+RScWeSnV5lROdrpgyCEeCBPaV3vQm8iM8g4ktPQ5KlcSnz9pHP1nNSt9igCTa i1Xv1mWZ/VIsvR6cIdTa6ZT160u9fyKsFL9AGHKgc8jB1ODcoGnBS2KD4W+OIs6X pPPh6E3aCBmI9B0dip2hqtom3nBD2TI= -----END CERTIFICATE-----Generated at Thu Mar 26 20:41:41 2026 by rpki-client