$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b97db266-9fee-346f-b732-032606f5100c.roa File: b97db266-9fee-346f-b732-032606f5100c.roa (raw, json) Hash identifier: Eqcfp6CWX1Wzbm2VyReydMTzJyNVDFZo+8lFBbf2GBU= Subject key identifier: C4:32:07:82:60:2A:6C:3A:B9:33:43:69:FA:6B:AB:57:64:DE:1A:6B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D384989E5331DECF4D1B0DF80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b97db266-9fee-346f-b732-032606f5100c.roa Signing time: Mon 09 Feb 2026 14:00:39 +0000 ROA not before: Mon 09 Feb 2026 14:00:39 +0000 ROA not after: Sun 10 May 2026 13:00:39 +0000 asID: 39618 IP address blocks: 72.245.168.0/21 maxlen: 24 72.245.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:49:89:e5:33:1d:ec:f4:d1:b0:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Feb 9 14:00:39 2026 GMT Not After : May 10 13:00:39 2026 GMT Subject: CN=bf7c6d7a-5745-4ac4-bd93-c54ad4d830c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ef:8c:78:9f:41:27:11:5e:91:25:ca:1b:d2: 11:0e:f6:02:2d:a1:8c:16:10:10:67:16:38:36:1a: 8e:a9:b0:37:10:f3:f6:89:61:dc:89:02:a1:48:d1: 4f:5f:fd:0f:db:4f:70:1d:b3:b2:bb:10:bc:c6:60: f9:1c:87:7c:83:4b:42:15:cd:ca:ab:a9:87:86:ea: 7d:43:4f:51:a4:19:b0:ce:8e:a9:e3:c2:1c:d5:ac: 05:4d:8f:54:c7:e2:e1:23:81:27:0b:6c:b6:01:60: 0d:38:0b:31:44:96:71:99:c3:b0:8a:51:bf:56:ab: fe:46:cf:f6:a4:9d:9c:75:fc:15:a4:70:1d:11:e8: 96:07:d3:06:16:2e:25:bb:33:d6:43:14:bf:03:d5: 74:fe:7e:bb:7c:23:bd:ce:f1:14:27:c6:ba:1d:28: e8:49:4c:5c:16:14:46:e4:f7:cc:fd:9e:22:12:a2: c8:aa:99:e5:95:6e:fa:4d:53:08:2f:8e:f7:f5:0e: 7c:b5:ab:42:9b:a4:73:fe:b4:b5:62:c2:a1:06:79: cf:1a:2b:83:cc:99:c1:bb:a3:93:42:1f:8e:ab:72: c4:41:e5:71:60:2c:49:08:b9:80:8f:9d:1d:e8:f6: d3:d0:9d:ff:de:a9:77:80:58:32:2c:fa:8f:af:c1: 7a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:32:07:82:60:2A:6C:3A:B9:33:43:69:FA:6B:AB:57:64:DE:1A:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b97db266-9fee-346f-b732-032606f5100c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.245.168.0/21 72.245.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:36:e1:fc:2f:28:8d:df:73:7f:f7:a6:22:24:37:dd:e6:05: 4d:33:0a:e7:b3:39:89:04:e5:a5:96:63:c1:02:49:53:4f:61: 45:8c:01:88:33:0b:cb:8b:40:37:57:4c:a6:fd:25:c7:fb:60: 7a:0d:b4:d6:71:5c:22:b8:cd:34:de:6f:f9:63:e5:52:a9:64: ce:9c:33:81:d2:52:02:9e:d6:e5:a1:c3:34:59:34:3f:c4:c3: 20:ef:d6:d3:1a:87:08:8e:4e:75:ee:3e:8e:4e:82:4c:03:c5: 82:05:c6:5f:6e:0f:02:e1:8a:e4:0a:bc:d7:02:05:7f:b0:f8: f4:cb:db:aa:22:b5:df:d6:19:d3:f7:9e:93:6c:89:59:34:97: 4a:60:1a:20:01:4d:e4:eb:92:c7:19:82:1c:f7:64:aa:ec:91: da:a0:1b:ee:37:0f:9f:c7:51:70:00:a6:c7:5b:63:1b:6c:48: 82:b6:63:13:0e:63:33:e7:45:91:bb:c1:df:11:59:56:77:e8: b9:6d:9a:8f:94:7e:43:a7:21:80:0a:d9:55:31:36:ae:e2:d1: 4a:85:9e:f3:51:8d:e4:11:11:fa:6a:17:42:be:df:2a:c0:1f: e7:44:a4:44:11:91:f6:f4:e7:77:ff:89:2f:80:e0:b4:d6:d4: 1f:53:7c:fc -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE04SYnlMx3s9NGw34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDIwOTE0MDAzOVoXDTI2MDUxMDEzMDAzOVowLzEtMCsGA1UEAxMk YmY3YzZkN2EtNTc0NS00YWM0LWJkOTMtYzU0YWQ0ZDgzMGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe+MeJ9BJxFekSXKG9IRDvYCLaGMFhAQZxY4 NhqOqbA3EPP2iWHciQKhSNFPX/0P209wHbOyuxC8xmD5HId8g0tCFc3Kq6mHhup9 Q09RpBmwzo6p48Ic1awFTY9Ux+LhI4EnC2y2AWANOAsxRJZxmcOwilG/Vqv+Rs/2 pJ2cdfwVpHAdEeiWB9MGFi4luzPWQxS/A9V0/n67fCO9zvEUJ8a6HSjoSUxcFhRG 5PfM/Z4iEqLIqpnllW76TVMIL4739Q58tatCm6Rz/rS1YsKhBnnPGiuDzJnBu6OT Qh+Oq3LEQeVxYCxJCLmAj50d6PbT0J3/3ql3gFgyLPqPr8F6gwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMQyB4JgKmw6uTNDafprq1dk3hprMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjk3ZGIyNjYtOWZlZS0z NDZmLWI3MzItMDMyNjA2ZjUxMDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDSPWoAwQC SPW8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADQ24fwvKI3fc3/3piIkN93mBU0zCuezOYkE5aWWY8ECSVNP YUWMAYgzC8uLQDdXTKb9Jcf7YHoNtNZxXCK4zTTeb/lj5VKpZM6cM4HSUgKe1uWh wzRZND/EwyDv1tMahwiOTnXuPo5OgkwDxYIFxl9uDwLhiuQKvNcCBX+w+PTL26oi td/WGdP3npNsiVk0l0pgGiABTeTrkscZghz3ZKrskdqgG+43D5/HUXAApsdbYxts SIK2YxMOYzPnRZG7wd8RWVZ36Lltmo+UfkOnIYAK2VUxNq7i0UqFnvNRjeQREfpq F0K+3yrAH+dEpEQRkfb053f/iS+A4LTW1B9TfPw= -----END CERTIFICATE-----Generated at Thu Mar 26 16:09:55 2026 by rpki-client