$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cb66ba19-bbb0-3be7-a5f7-272c420f8c5c.roa File: cb66ba19-bbb0-3be7-a5f7-272c420f8c5c.roa (raw, json) Hash identifier: Tre2nIffgXHNKG9GP3l9yt+vUd3fqoD7Gl7QBxJ1GlY= Subject key identifier: 6E:B0:2D:63:5C:89:54:D5:37:AD:E6:63:00:7D:87:E3:C3:72:A7:33 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D4A8FBB6D43210449B7F40680 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cb66ba19-bbb0-3be7-a5f7-272c420f8c5c.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 53581 IP address blocks: 72.244.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:bb:6d:43:21:04:49:b7:f4:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=7c74464f-ec1e-4a5e-858f-aee9fe98aa1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f0:88:33:f5:2f:15:50:30:2c:df:2e:49:fe: ad:0c:4d:eb:44:6a:fe:d2:1e:db:c0:86:9e:f3:8b: f4:eb:5d:11:df:74:54:d3:cb:fe:b2:8e:ba:4d:57: d4:6c:cd:4e:82:5f:26:90:59:47:0f:52:0b:85:a8: cf:95:a7:7f:fe:5a:d3:a5:0a:4e:b0:58:f5:83:9a: 88:9f:42:b7:6d:0e:8f:d3:0d:b0:82:a6:d2:4a:f8: ae:24:e7:1d:f8:d3:11:0f:12:83:7e:13:bf:78:07: 72:4b:eb:9a:5c:44:4e:80:a7:36:96:a4:de:9a:41: d9:d1:0b:83:06:72:be:ae:57:aa:2b:8a:3f:50:fe: db:c9:5f:d8:8e:a7:98:31:1b:a3:b7:23:dc:01:d7: 7f:3e:db:06:bf:25:ad:86:17:8b:f3:95:cb:fa:14: 44:65:d1:eb:60:ee:c8:86:48:0d:97:62:c5:c8:96: 82:1e:f1:01:b4:75:6a:a7:c5:d1:65:17:cc:cd:2d: 31:80:aa:2d:e0:f4:6d:52:0e:12:a7:4c:2b:07:54: fc:5a:42:cf:c2:e7:ac:92:1c:2f:d6:ea:c4:d3:aa: da:90:55:37:53:3b:a9:8b:29:23:52:ef:76:8e:d7: b4:a4:c7:6d:b7:2a:88:5f:a2:1d:79:11:c5:9c:d0: 97:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B0:2D:63:5C:89:54:D5:37:AD:E6:63:00:7D:87:E3:C3:72:A7:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cb66ba19-bbb0-3be7-a5f7-272c420f8c5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:16:36:90:46:c0:98:6b:5a:9c:40:bc:05:dd:66:e6:a7:0f: a1:ff:83:a5:a1:a1:7e:20:56:bd:1c:ea:4e:1d:8f:a4:1b:4d: 04:61:45:32:29:79:dc:07:70:b7:5b:16:e3:64:60:53:6d:8c: c6:44:e0:57:52:61:fe:24:19:ef:ec:ff:c3:62:5f:ee:60:b3: bb:80:c9:ef:f9:17:e9:58:7f:a6:58:10:67:ba:27:76:60:7c: ef:21:99:d9:2c:9e:f1:85:c5:8f:9c:b3:71:27:52:0e:e7:5c: 15:f1:fe:40:1c:a3:a0:72:3f:52:50:6a:cf:26:49:79:62:b8: f0:66:0d:3e:04:5e:34:6d:8b:2b:5f:e1:a8:21:12:d2:8c:b5: d7:2c:25:03:73:a4:c2:eb:be:14:f1:8e:9f:40:2a:c8:fe:89: e6:7e:4d:45:83:ae:91:7b:a1:7f:5b:09:6f:ee:f4:19:85:30: fb:57:e4:7f:0d:f2:15:2f:27:b2:2f:3b:2d:38:3d:62:70:a5: c6:18:44:40:b4:88:36:5d:9b:45:74:a4:4b:8f:e1:98:04:8a: 3c:72:16:c1:21:eb:78:fb:2a:7d:c2:2e:26:ae:cb:3e:39:1c: ff:bd:96:be:f9:07:b6:c2:94:55:2d:94:32:b3:18:a1:f8:df: 82:e0:4a:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj7ttQyEESbf0BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk N2M3NDQ2NGYtZWMxZS00YTVlLTg1OGYtYWVlOWZlOThhYTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvCIM/UvFVAwLN8uSf6tDE3rRGr+0h7bwIae 84v0610R33RU08v+so66TVfUbM1Ogl8mkFlHD1ILhajPlad//lrTpQpOsFj1g5qI n0K3bQ6P0w2wgqbSSviuJOcd+NMRDxKDfhO/eAdyS+uaXEROgKc2lqTemkHZ0QuD BnK+rleqK4o/UP7byV/YjqeYMRujtyPcAdd/PtsGvyWthheL85XL+hREZdHrYO7I hkgNl2LFyJaCHvEBtHVqp8XRZRfMzS0xgKot4PRtUg4Sp0wrB1T8WkLPwueskhwv 1urE06rakFU3UzupiykjUu92jte0pMdttyqIX6IdeRHFnNCXiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6wLWNciVTVN63mYwB9h+PDcqczMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2I2NmJhMTktYmJiMC0z YmU3LWE1ZjctMjcyYzQyMGY4YzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPSeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEWNpBGwJhrWpxAvAXdZuanD6H/g6WhoX4gVr0c6k4dj6QbTQRhRTIp edwHcLdbFuNkYFNtjMZE4FdSYf4kGe/s/8NiX+5gs7uAye/5F+lYf6ZYEGe6J3Zg fO8hmdksnvGFxY+cs3EnUg7nXBXx/kAco6ByP1JQas8mSXliuPBmDT4EXjRtiytf 4aghEtKMtdcsJQNzpMLrvhTxjp9AKsj+ieZ+TUWDrpF7oX9bCW/u9BmFMPtX5H8N 8hUvJ7IvOy04PWJwpcYYREC0iDZdm0V0pEuP4ZgEijxyFsEh63j7Kn3CLiauyz45 HP+9lr75B7bClFUtlDKzGKH434LgSl4= -----END CERTIFICATE-----Generated at Thu Mar 26 19:08:18 2026 by rpki-client