$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/2c89afb9-daeb-3b52-b5f1-9d4530172434.roa File: 2c89afb9-daeb-3b52-b5f1-9d4530172434.roa (raw, json) Hash identifier: GJABV5T0d3CGysHXV6+DbbvjuBsLf+QiLajb+loRhg4= Subject key identifier: 1D:31:15:09:1B:6E:F6:AB:2F:F4:34:E6:08:69:06:18:35:C0:71:BC Certificate issuer: /CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Certificate serial: 010D0C9F4328584CACF1C9FCCBC61E0CC03CC260 Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/2c89afb9-daeb-3b52-b5f1-9d4530172434.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 393238 IP address blocks: 72.50.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:c9:fc:cb:c6:1e:0c:c0:3c:c2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=2e7fcc4b-8a9f-4f13-8969-245447ea1e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ec:d9:f2:4b:7f:9c:69:cf:a7:49:43:4b:fe: 46:b7:44:23:bf:2f:18:a2:13:13:67:fa:0b:a4:41: d6:97:a2:4d:d6:ef:a2:25:cc:fe:e4:40:ed:f8:52: b5:7f:1e:4e:15:a5:c7:a5:4c:7b:e5:1c:44:db:a8: 04:65:5c:ac:f3:11:46:de:1e:25:06:48:46:5d:e4: 65:6d:37:d8:ac:98:05:bd:3f:86:ae:bc:4f:17:64: a1:27:3c:95:ad:21:34:d4:e2:b4:91:c1:af:ab:7e: 16:e7:7c:81:9f:26:d4:9b:53:be:b3:92:a4:c1:1f: 6c:fe:d0:c0:0c:46:17:97:aa:95:1a:44:f4:1e:68: 9b:6b:6b:eb:26:b1:82:47:8d:87:75:98:40:dd:60: 52:3f:74:e6:b4:47:6d:ec:f7:c0:4d:d7:ea:11:ae: 13:df:7b:51:f4:80:30:19:c5:bf:46:28:a1:3d:b6: 34:00:d0:35:6a:a2:de:d0:fa:c1:00:da:36:d3:84: 90:da:7f:be:07:f6:00:01:74:b2:78:2f:df:a0:0c: d3:1e:33:00:02:53:19:17:2d:f2:1a:52:25:25:34: 12:36:7f:58:56:d5:01:ef:55:0e:8d:3e:78:43:29: d2:a3:06:07:b7:7b:06:28:cd:84:ca:a8:bf:96:25: 83:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:31:15:09:1B:6E:F6:AB:2F:F4:34:E6:08:69:06:18:35:C0:71:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/2c89afb9-daeb-3b52-b5f1-9d4530172434.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl X509v3 Authority Key Identifier: keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer sbgp-ipAddrBlock: critical IPv4: 72.50.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:97:e0:6c:f0:1d:e9:5a:14:4c:4e:9f:59:83:51:6c:2a:4d: f2:b2:2c:e4:32:9f:55:e0:f1:47:cc:a6:30:d7:fe:07:5e:11: 14:56:52:49:fb:93:64:2d:d2:7d:3f:d1:8e:b4:d1:76:68:af: 5a:d6:d7:e4:45:0e:e0:cc:0d:40:d4:2c:8f:1b:f7:c4:12:01: 46:0f:f0:74:f3:c5:06:51:fa:51:d5:5e:68:2f:42:75:a1:50: 3b:3f:eb:31:af:4d:23:8a:5f:dc:a9:68:24:74:dd:e1:38:90: aa:1f:f1:8e:a6:b2:11:f8:a1:6f:8e:a0:5e:6d:56:87:8c:ad: 3a:b3:db:52:ef:f0:0d:e9:b7:e6:74:78:3a:78:69:4d:d4:5d: c0:b9:21:ac:3b:b8:69:fe:77:a0:38:ff:ee:3f:f7:c1:ff:13: 86:bb:85:df:a1:58:1b:56:6b:dd:59:fb:33:7f:23:9f:84:e8: ca:da:86:f7:17:7c:37:db:bd:f7:1b:d8:98:67:d7:31:89:c5: 19:30:dc:d6:52:4e:14:8b:13:cc:14:5a:12:fe:1f:54:3f:59: 67:9c:dc:3b:cf:3b:36:9c:41:19:e2:38:74:d5:c6:79:f2:1a: f7:7d:e2:e9:55:a7:87:48:2c:82:65:81:ae:45:4c:c1:be:e7: ad:e7:34:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8cn8y8YeDMA8wmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhkZjM0NmQtM2Y2Ni00NTU1LWIyYWItNjdmNDUwZWZk Y2IzMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk MmU3ZmNjNGItOGE5Zi00ZjEzLTg5NjktMjQ1NDQ3ZWExZTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuzZ8kt/nGnPp0lDS/5Gt0Qjvy8YohMTZ/oL pEHWl6JN1u+iJcz+5EDt+FK1fx5OFaXHpUx75RxE26gEZVys8xFG3h4lBkhGXeRl bTfYrJgFvT+GrrxPF2ShJzyVrSE01OK0kcGvq34W53yBnybUm1O+s5KkwR9s/tDA DEYXl6qVGkT0Hmiba2vrJrGCR42HdZhA3WBSP3TmtEdt7PfATdfqEa4T33tR9IAw GcW/RiihPbY0ANA1aqLe0PrBANo204SQ2n++B/YAAXSyeC/foAzTHjMAAlMZFy3y GlIlJTQSNn9YVtUB71UOjT54QynSowYHt3sGKM2Eyqi/liWDvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0xFQkbbvarL/Q05ghpBhg1wHG8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yOGRm MzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0NTBlZmRjYjMvMmM4OWFmYjktZGFlYi0z YjUyLWI1ZjEtOWQ0NTMwMTcyNDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjhkZjM0NmQtM2Y2Ni00NTU1LWIy YWItNjdmNDUwZWZkY2IzLzI4ZGYzNDZkLTNmNjYtNDU1NS1iMmFiLTY3ZjQ1MGVm ZGNiMy5jcmwwHwYDVR0jBBgwFoAU0TE0tLR3LAyK//WCA1AodurlHZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yOGRmMzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0 NTBlZmRjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiX4GzwHelaFExOn1mDUWwqTfKyLOQyn1Xg8UfMpjDX/gdeERRWUkn7 k2Qt0n0/0Y600XZor1rW1+RFDuDMDUDULI8b98QSAUYP8HTzxQZR+lHVXmgvQnWh UDs/6zGvTSOKX9ypaCR03eE4kKof8Y6mshH4oW+OoF5tVoeMrTqz21Lv8A3pt+Z0 eDp4aU3UXcC5Iaw7uGn+d6A4/+4/98H/E4a7hd+hWBtWa91Z+zN/I5+E6MrahvcX fDfbvfcb2Jhn1zGJxRkw3NZSThSLE8wUWhL+H1Q/WWec3DvPOzacQRniOHTVxnny Gvd94ulVp4dILIJlga5FTMG+563nNBY= -----END CERTIFICATE-----Generated at Thu Feb 26 09:30:46 2026 by rpki-client