$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d60f445f-0613-35a6-a4e8-9012a7eefde1.roa File: d60f445f-0613-35a6-a4e8-9012a7eefde1.roa (raw, json) Hash identifier: Pc6g9ZFZ92GmAUNfYxM/+67nIbMgSYeUQHmh4y/MUiE= Subject key identifier: 57:88:AA:5A:5C:A3:0F:AD:8D:A7:57:E5:85:96:DB:C4:4F:47:60:91 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D9CCB8CD5AF10FE7C9A272F00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d60f445f-0613-35a6-a4e8-9012a7eefde1.roa Signing time: Fri 24 Apr 2026 11:57:48 +0000 ROA not before: Fri 24 Apr 2026 11:57:48 +0000 ROA not after: Thu 23 Jul 2026 11:57:48 +0000 asID: 6079 IP address blocks: 72.244.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9c:cb:8c:d5:af:10:fe:7c:9a:27:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 24 11:57:48 2026 GMT Not After : Jul 23 11:57:48 2026 GMT Subject: CN=f139921f-f87a-4781-a5a4-fa698c4c4a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:ef:dc:07:df:b9:94:f2:e9:15:5b:ac:e4: cc:d6:e0:57:1a:c9:ab:c8:e5:11:ec:a8:5d:ee:41: c8:7a:8c:a6:80:4c:e0:79:17:ea:a5:1f:b2:22:b2: ae:f4:fb:c2:da:f7:d7:a5:c0:ce:74:90:d1:10:14: c3:c0:6e:a9:f0:36:7f:9c:5d:3a:4e:ca:5d:b6:ee: 07:a4:84:6d:e6:ed:4f:bd:90:65:e9:16:0a:fa:6c: a9:63:95:28:d8:f7:66:78:fd:34:74:65:f4:8c:0f: 79:4f:41:04:47:31:7f:a9:d2:27:ec:27:cb:34:7c: b4:8f:a8:32:90:2f:a9:1b:58:e8:a5:b9:71:b9:b9: 1e:4a:a1:1d:bb:30:c2:6d:55:d7:a7:e2:4a:57:4c: 92:70:e2:c9:1f:dd:bc:7b:fd:f5:73:2b:d4:34:55: ac:0c:2f:b7:28:e7:2a:39:4a:40:ac:47:c5:2d:e7: b1:cd:6e:a0:92:cb:31:d5:76:57:04:b1:80:14:82: 9b:d9:4b:82:ed:2c:1a:91:04:c5:b3:49:c8:7a:b2: d5:14:91:2a:32:de:cb:c8:a4:eb:72:64:a5:d8:f8: 28:dd:ea:9a:e2:bf:97:d8:97:08:ef:a9:44:d5:ee: 34:a2:69:99:cc:93:bc:e8:db:49:25:30:db:7c:32: 24:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:88:AA:5A:5C:A3:0F:AD:8D:A7:57:E5:85:96:DB:C4:4F:47:60:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d60f445f-0613-35a6-a4e8-9012a7eefde1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:2b:b7:6f:ee:0e:4f:33:04:61:16:49:29:bc:f0:1e:e0:93: 3b:fb:36:50:fa:85:47:34:27:83:50:a6:b5:2e:56:00:c8:b0: a1:c9:e7:1e:30:de:8a:de:d3:d9:57:c2:d4:ce:6d:0e:de:fb: 17:68:af:c3:d8:09:c2:7c:d2:ec:60:81:68:b3:5d:59:8b:00: 53:32:32:0e:79:56:24:19:77:24:b4:4d:cb:99:e4:d1:a3:03: d5:93:d1:df:44:50:74:c4:42:67:ca:9a:92:17:04:14:e2:db: 4b:27:0f:dd:02:2b:7b:ca:5a:c3:3e:99:9a:8b:ba:83:86:b6: 02:bf:e2:d1:31:31:99:1d:9a:38:fd:6a:4c:fc:58:4d:52:c5: c8:74:39:62:cd:3a:49:bb:b3:e8:73:1a:0d:83:2c:47:e0:ae: 37:38:82:04:ff:9d:7e:42:66:a4:79:91:c6:56:4a:71:3a:58: 8b:ff:2a:33:e6:6e:1b:54:92:55:9b:b4:a3:a8:3b:6f:a5:25: 81:82:e9:3d:b7:36:be:c7:74:ee:77:f2:37:af:c4:b6:28:c1: e3:02:68:35:e1:4d:14:79:05:59:b4:8c:d1:6c:00:2e:78:95: 46:fa:27:f7:88:63:f1:a6:cb:b2:ab:bf:57:70:68:17:1d:0e: 7d:6f:66:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2cy4zVrxD+fJonLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQyNDExNTc0OFoXDTI2MDcyMzExNTc0OFowLzEtMCsGA1UEAxMk ZjEzOTkyMWYtZjg3YS00NzgxLWE1YTQtZmE2OThjNGM0YThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD7v3AffuZTy6RVbrOTM1uBXGsmryOUR7Khd 7kHIeoymgEzgeRfqpR+yIrKu9PvC2vfXpcDOdJDREBTDwG6p8DZ/nF06Tspdtu4H pIRt5u1PvZBl6RYK+mypY5Uo2PdmeP00dGX0jA95T0EERzF/qdIn7CfLNHy0j6gy kC+pG1jopblxubkeSqEduzDCbVXXp+JKV0yScOLJH928e/31cyvUNFWsDC+3KOcq OUpArEfFLeexzW6gkssx1XZXBLGAFIKb2UuC7SwakQTFs0nIerLVFJEqMt7LyKTr cmSl2Pgo3eqa4r+X2JcI76lE1e40ommZzJO86NtJJTDbfDIkMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFeIqlpcow+tjadX5YWW28RPR2CRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDYwZjQ0NWYtMDYxMy0z NWE2LWE0ZTgtOTAxMmE3ZWVmZGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQrt2/uDk8zBGEWSSm88B7gkzv7NlD6hUc0J4NQprUuVgDIsKHJ5x4w 3ore09lXwtTObQ7e+xdor8PYCcJ80uxggWizXVmLAFMyMg55ViQZdyS0TcuZ5NGj A9WT0d9EUHTEQmfKmpIXBBTi20snD90CK3vKWsM+mZqLuoOGtgK/4tExMZkdmjj9 akz8WE1Sxch0OWLNOkm7s+hzGg2DLEfgrjc4ggT/nX5CZqR5kcZWSnE6WIv/KjPm bhtUklWbtKOoO2+lJYGC6T23Nr7HdO538jevxLYoweMCaDXhTRR5BVm0jNFsAC54 lUb6J/eIY/Gmy7Krv1dwaBcdDn1vZpE= -----END CERTIFICATE-----Generated at Tue May 12 21:42:27 2026 by rpki-client