$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ddab96b1-3820-3ae1-b599-3515d924b711.roa File: ddab96b1-3820-3ae1-b599-3515d924b711.roa (raw, json) Hash identifier: ZLJyR7IBQbGwJ0tiq1UaEwyCBnTzOixM1uQj7f6pdJU= Subject key identifier: 14:E4:4E:CA:92:06:12:21:68:84:2D:92:54:D9:81:26:F2:1D:4B:09 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D8AC55D6B10055709DE477780 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ddab96b1-3820-3ae1-b599-3515d924b711.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 834 IP address blocks: 72.244.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:5d:6b:10:05:57:09:de:47:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=1057781c-0ae3-426b-9d5d-2499823164c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4d:ae:ef:ba:d8:0d:69:e2:ec:f8:3b:4a:91: b3:3f:62:57:00:50:02:70:5e:33:16:ad:6e:99:1c: c0:12:8e:28:dd:1c:bc:48:4e:df:21:fa:c4:10:f0: 66:0c:02:2b:6d:82:67:98:09:a4:a2:5d:e4:ca:62: ea:43:30:05:16:29:19:b5:69:cb:8b:59:01:60:1e: cd:ee:68:b9:0d:a0:b6:07:ee:34:46:bc:6e:83:b4: d7:55:45:1b:92:2f:03:dc:69:e7:dc:72:df:97:38: 61:68:92:20:71:dc:aa:9e:a8:38:a3:66:17:78:cb: 96:ff:28:ef:cd:00:ce:a7:9e:42:02:67:bd:26:f3: 67:ac:5d:81:88:10:6b:04:fd:6d:54:cd:a1:f6:0d: d2:ff:4b:56:a9:21:31:07:3a:7a:a8:24:7f:a6:33: 6b:c8:cf:b2:75:3e:ed:54:89:75:01:33:b6:5c:1e: ac:52:77:2c:43:81:7f:85:b2:23:bc:8e:85:af:23: 5c:8f:74:8e:fa:aa:f2:8f:04:06:37:72:b3:82:09: 39:9e:89:58:b1:28:49:85:f5:8a:5d:9f:50:30:1b: d8:b9:7f:46:6d:b4:d8:02:da:4f:4b:26:0e:69:87: f1:ad:84:b4:ef:34:5d:c4:e2:3c:06:2d:5a:27:34: 27:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E4:4E:CA:92:06:12:21:68:84:2D:92:54:D9:81:26:F2:1D:4B:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ddab96b1-3820-3ae1-b599-3515d924b711.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:2c:c3:cd:c8:93:77:44:81:56:09:63:62:ee:84:d2:b6:91: c7:4f:8f:09:99:74:93:6d:d6:8e:33:d4:50:53:57:ae:5c:06: b2:43:00:eb:c4:d4:67:12:4e:7b:66:da:1a:b0:d1:0a:d5:92: 2a:d1:d3:b6:21:6d:d8:37:8c:40:be:01:24:72:53:f1:0c:27: ce:a4:8e:bd:81:5a:0e:7d:ed:a8:09:59:30:6f:8a:1b:7d:d2: 44:0b:49:14:e4:06:d8:e7:aa:5c:29:37:a9:f5:2c:bc:43:69: 73:60:33:90:ec:4f:f2:85:25:64:60:12:b6:6a:a8:4d:8f:d4: 70:ec:3f:be:b6:c7:82:e7:be:1a:f0:03:54:0f:10:2b:ce:d9: 1b:1b:73:c5:84:b4:5f:de:04:ea:72:df:3a:2c:f0:70:d1:d9: 0b:72:18:44:ba:73:96:c0:3d:2c:e8:96:f2:9b:ba:fc:b5:31: d0:ae:7e:0f:20:18:e6:00:b5:98:b3:5c:8c:0b:07:a9:fa:5f: ab:bc:9b:ef:56:d0:c1:78:43:9f:19:dd:e7:2b:74:be:e4:61: ca:ed:bc:f5:91:7e:27:0e:e2:7a:27:a8:84:1c:c4:11:16:2d: 51:0f:0f:64:45:f7:93:68:a7:3c:b3:ab:38:df:1f:f9:3e:db: 21:a4:5f:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxV1rEAVXCd5Hd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk MTA1Nzc4MWMtMGFlMy00MjZiLTlkNWQtMjQ5OTgyMzE2NGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU2u77rYDWni7Pg7SpGzP2JXAFACcF4zFq1u mRzAEo4o3Ry8SE7fIfrEEPBmDAIrbYJnmAmkol3kymLqQzAFFikZtWnLi1kBYB7N 7mi5DaC2B+40Rrxug7TXVUUbki8D3Gnn3HLflzhhaJIgcdyqnqg4o2YXeMuW/yjv zQDOp55CAme9JvNnrF2BiBBrBP1tVM2h9g3S/0tWqSExBzp6qCR/pjNryM+ydT7t VIl1ATO2XB6sUncsQ4F/hbIjvI6FryNcj3SO+qryjwQGN3Kzggk5nolYsShJhfWK XZ9QMBvYuX9GbbTYAtpPSyYOaYfxrYS07zRdxOI8Bi1aJzQnXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTkTsqSBhIhaIQtklTZgSbyHUsJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGRhYjk2YjEtMzgyMC0z YWUxLWI1OTktMzUxNWQ5MjRiNzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPTEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQsw83Ik3dEgVYJY2LuhNK2kcdPjwmZdJNt1o4z1FBTV65cBrJDAOvE 1GcSTntm2hqw0QrVkirR07Yhbdg3jEC+ASRyU/EMJ86kjr2BWg597agJWTBviht9 0kQLSRTkBtjnqlwpN6n1LLxDaXNgM5DsT/KFJWRgErZqqE2P1HDsP762x4Lnvhrw A1QPECvO2Rsbc8WEtF/eBOpy3zos8HDR2QtyGES6c5bAPSzolvKbuvy1MdCufg8g GOYAtZizXIwLB6n6X6u8m+9W0MF4Q58Z3ecrdL7kYcrtvPWRficO4nonqIQcxBEW LVEPD2RF95NopzyzqzjfH/k+2yGkXyk= -----END CERTIFICATE-----Generated at Wed May 13 15:45:46 2026 by rpki-client