$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a57f7ecd-f1e7-38d0-b40e-caa108e7a139.roa File: a57f7ecd-f1e7-38d0-b40e-caa108e7a139.roa (raw, json) Hash identifier: Ik7YwTine4jsLH86Nny/VVeDXEr1jlTUCmweOc19vDk= Subject key identifier: 1B:6F:E7:78:E3:34:0C:32:53:6C:0B:E5:AC:A8:57:49:20:E7:FE:FD Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D0EA7A81CB740100E510B5240 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a57f7ecd-f1e7-38d0-b40e-caa108e7a139.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 834 IP address blocks: 72.244.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:a8:1c:b7:40:10:0e:51:0b:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=9cab9424-27af-436c-982c-31b834185e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6c:90:52:db:9f:44:f4:06:9b:78:83:93:77: 37:4e:1d:30:52:b3:fe:f9:b7:24:3d:a0:f3:9a:50: 78:29:e1:94:1b:93:27:93:12:a8:4d:ca:dd:8b:82: c6:32:ba:70:9e:73:7c:7b:32:19:b1:d3:32:4c:90: a8:5b:99:94:85:61:ea:42:b3:8b:5f:f6:0e:37:45: 94:b4:69:1e:0c:d3:b4:ac:8c:c5:b9:65:27:53:9d: 85:e3:e9:74:2e:c3:f3:4a:6a:1b:c0:42:01:f5:ab: 0e:80:51:38:13:d3:3b:71:da:8f:d6:17:4d:82:3f: f4:42:8f:9b:06:04:a9:91:83:3b:91:db:5a:0f:de: 16:a1:ac:a8:23:a6:2b:2b:65:42:c4:87:6b:aa:c2: 6f:73:4e:f8:65:73:5a:7b:ad:b9:3c:8f:3d:f5:c2: 64:24:25:99:e9:d8:12:0b:af:39:27:33:e9:7a:62: ad:eb:33:1e:15:b0:8f:f6:82:3e:a6:5f:fb:ae:d8: a9:dc:85:6b:1a:d3:05:c3:b3:11:39:6e:f1:b8:96: 40:a3:cf:6e:0d:18:9e:c1:76:d2:8b:4f:4f:fe:a8: f0:46:4a:19:2c:0e:aa:c4:c3:22:79:d0:04:5a:7d: e1:a3:55:8a:de:21:6a:a0:f3:68:7c:02:37:ea:d7: c4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6F:E7:78:E3:34:0C:32:53:6C:0B:E5:AC:A8:57:49:20:E7:FE:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a57f7ecd-f1e7-38d0-b40e-caa108e7a139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ea:8e:1a:4c:f7:9a:70:f3:40:ea:1d:ea:15:d6:83:b5:46: 0f:c3:d3:da:ef:f3:ff:b5:44:66:7f:67:02:cb:be:d2:13:51: 2e:dd:76:5f:42:c9:0b:80:f0:ac:c4:fa:54:cf:ee:7c:ef:e0: 8c:17:55:71:74:86:5d:23:c6:2f:88:e5:6f:07:86:21:33:98: 7f:a2:ef:63:01:c9:34:45:61:9e:37:b6:d7:5e:f0:2c:49:54: 6f:8a:d6:de:5c:e1:a6:f7:89:a1:0a:41:92:34:83:3a:e2:4e: 41:93:e6:e5:41:c7:a3:7e:be:f8:9b:ec:9d:55:3e:5d:63:83: e6:43:93:43:4a:42:9a:48:31:c6:de:b0:f2:f5:65:39:00:a1: 07:ad:6f:13:d1:ac:6b:2e:db:5d:17:3c:03:38:50:64:50:8d: b0:f3:5c:61:d1:7b:78:08:e1:f8:41:25:7d:c7:8e:9e:c1:f6: d3:c4:81:e8:cc:90:d3:d2:ae:21:7c:5b:1f:41:01:45:6d:ae: c4:d8:93:0d:9c:e7:a6:9e:39:cb:a8:c5:5b:98:9b:90:f0:c4: 06:8c:61:81:1f:66:4a:07:6a:c4:b3:ae:5c:2c:94:99:18:30: 66:2f:33:f6:ae:95:86:2d:12:8d:71:8e:6b:f2:a1:d8:4a:15: 39:38:98:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op6gct0AQDlELUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk OWNhYjk0MjQtMjdhZi00MzZjLTk4MmMtMzFiODM0MTg1ZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWyQUtufRPQGm3iDk3c3Th0wUrP++bckPaDz mlB4KeGUG5MnkxKoTcrdi4LGMrpwnnN8ezIZsdMyTJCoW5mUhWHqQrOLX/YON0WU tGkeDNO0rIzFuWUnU52F4+l0LsPzSmobwEIB9asOgFE4E9M7cdqP1hdNgj/0Qo+b BgSpkYM7kdtaD94WoayoI6YrK2VCxIdrqsJvc074ZXNae625PI899cJkJCWZ6dgS C685JzPpemKt6zMeFbCP9oI+pl/7rtip3IVrGtMFw7MROW7xuJZAo89uDRiewXbS i09P/qjwRkoZLA6qxMMiedAEWn3ho1WK3iFqoPNofAI36tfEGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtv53jjNAwyU2wL5ayoV0kg5/79MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTU3ZjdlY2QtZjFlNy0z OGQwLWI0MGUtY2FhMTA4ZTdhMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPTtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHqjhpM95pw80DqHeoV1oO1Rg/D09rv8/+1RGZ/ZwLLvtITUS7ddl9C yQuA8KzE+lTP7nzv4IwXVXF0hl0jxi+I5W8HhiEzmH+i72MByTRFYZ43ttde8CxJ VG+K1t5c4ab3iaEKQZI0gzriTkGT5uVBx6N+vvib7J1VPl1jg+ZDk0NKQppIMcbe sPL1ZTkAoQetbxPRrGsu210XPAM4UGRQjbDzXGHRe3gI4fhBJX3Hjp7B9tPEgejM kNPSriF8Wx9BAUVtrsTYkw2c56aeOcuoxVuYm5DwxAaMYYEfZkoHasSzrlwslJkY MGYvM/aulYYtEo1xjmvyodhKFTk4mLI= -----END CERTIFICATE-----Generated at Thu Mar 26 17:44:53 2026 by rpki-client