$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0af87895-e5cf-31c9-853f-7b6d7c800dd2.roa File: 0af87895-e5cf-31c9-853f-7b6d7c800dd2.roa (raw, json) Hash identifier: jw6Gw0VhRCbtfX4wu60qYVgtxtptWojwHwpeoMOa+Es= Subject key identifier: C7:10:DE:CC:8B:78:EF:9B:97:FB:AC:29:0A:D8:B5:95:DB:9B:01:E5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D0BDD02347BF75F1DCC695C00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0af87895-e5cf-31c9-853f-7b6d7c800dd2.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 212238 IP address blocks: 72.244.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:02:34:7b:f7:5f:1d:cc:69:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=46a93f68-bfb1-47a4-bb0f-b8dfa72a94bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b4:ed:8d:7d:35:35:f1:a0:37:70:39:5f:5d: 4f:de:06:4c:63:80:0a:64:8a:58:dc:e6:9c:a4:a0: 35:bf:e0:07:65:34:94:23:61:d6:63:68:75:53:73: 85:44:fa:9e:21:3e:4a:0a:32:5e:b5:fa:2a:e8:d8: 0e:43:c1:bc:a0:e9:fd:e7:5c:9a:03:e7:b8:94:6d: ed:f9:12:1a:2c:69:0e:c7:26:8d:ab:5c:7c:25:eb: b3:d1:08:2f:42:d3:cc:58:9f:59:80:19:32:c4:7d: cd:3c:7d:31:4d:a7:6c:da:03:5a:10:f9:a0:fc:84: 0f:07:0e:7f:1d:7a:02:4c:95:fe:4f:8c:f8:fe:5d: 4e:5b:83:38:09:c3:d9:fc:5d:25:56:6b:2a:a1:37: fd:6b:02:c2:16:5f:32:36:39:bc:35:12:ba:13:41: c3:6a:0f:aa:02:0b:f6:78:84:36:af:47:f6:82:e2: c9:c8:10:46:02:f2:0b:5f:41:a9:c9:14:fa:b5:92: 0b:fe:44:95:bd:33:3c:9f:b9:f9:d9:e7:e9:96:f0: 7b:e2:0d:49:be:3d:30:0a:3f:45:6c:4c:e9:03:8a: 83:ef:e0:df:60:4f:da:47:91:c9:7c:c5:d2:71:2a: 2f:67:c9:bf:03:12:60:d3:60:57:54:87:08:33:99: a0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:10:DE:CC:8B:78:EF:9B:97:FB:AC:29:0A:D8:B5:95:DB:9B:01:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0af87895-e5cf-31c9-853f-7b6d7c800dd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:87:ed:1c:c5:4f:e8:90:50:b0:e0:cb:07:24:95:1e:58:1e: 95:42:fb:2f:aa:90:1b:81:05:1c:0d:3d:15:69:3c:c9:34:64: 5d:0b:e0:cd:4f:2f:20:d9:27:0d:5a:99:d4:86:bc:57:53:49: a2:b6:b2:74:11:ae:c6:6d:aa:81:bb:22:7c:73:1d:9b:55:f3: 5f:a4:dc:71:97:04:3f:54:26:f1:ba:47:25:06:d9:26:ec:ca: 28:8d:9d:c3:cb:b2:a9:1c:fd:59:c3:9d:9e:c3:7f:f5:65:ff: 9e:e1:b3:f3:74:55:c4:bf:d7:92:d0:89:ef:27:3e:ee:46:1f: 25:59:01:bb:e4:97:99:29:7e:0a:a1:e0:c6:6c:2c:36:a0:8e: 09:c1:50:c5:40:70:49:c8:05:98:4d:4d:33:69:df:41:78:b3: 07:e3:29:ca:5c:2c:cc:1d:bd:bc:83:dd:b9:be:8f:09:ac:84: 4d:31:9a:3c:cf:73:b0:2a:21:65:5f:9a:6b:0f:1a:fc:8c:8d: f7:ce:6b:50:28:92:d9:70:eb:d0:dc:2f:91:61:56:93:e6:9f: b5:16:d5:68:26:f5:6e:08:f1:d8:e9:85:2a:70:a1:33:64:d8: f6:7c:b8:5d:ad:11:e3:f5:fa:4d:a5:f5:1a:0f:0a:80:49:69: e6:16:cf:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0L3QI0e/dfHcxpXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk NDZhOTNmNjgtYmZiMS00N2E0LWJiMGYtYjhkZmE3MmE5NGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bTtjX01NfGgN3A5X11P3gZMY4AKZIpY3Oac pKA1v+AHZTSUI2HWY2h1U3OFRPqeIT5KCjJetfoq6NgOQ8G8oOn951yaA+e4lG3t +RIaLGkOxyaNq1x8Jeuz0QgvQtPMWJ9ZgBkyxH3NPH0xTads2gNaEPmg/IQPBw5/ HXoCTJX+T4z4/l1OW4M4CcPZ/F0lVmsqoTf9awLCFl8yNjm8NRK6E0HDag+qAgv2 eIQ2r0f2guLJyBBGAvILX0GpyRT6tZIL/kSVvTM8n7n52efplvB74g1Jvj0wCj9F bEzpA4qD7+DfYE/aR5HJfMXScSovZ8m/AxJg02BXVIcIM5mgawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcQ3syLeO+bl/usKQrYtZXbmwHlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGFmODc4OTUtZTVjZi0z MWM5LTg1M2YtN2I2ZDdjODAwZGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSPQuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASH7RzFT+iQULDgywcklR5YHpVC+y+qkBuBBRwNPRVpPMk0ZF0L4M1P LyDZJw1amdSGvFdTSaK2snQRrsZtqoG7InxzHZtV81+k3HGXBD9UJvG6RyUG2Sbs yiiNncPLsqkc/VnDnZ7Df/Vl/57hs/N0VcS/15LQie8nPu5GHyVZAbvkl5kpfgqh 4MZsLDagjgnBUMVAcEnIBZhNTTNp30F4swfjKcpcLMwdvbyD3bm+jwmshE0xmjzP c7AqIWVfmmsPGvyMjffOa1Aoktlw69DcL5FhVpPmn7UW1Wgm9W4I8djphSpwoTNk 2PZ8uF2tEeP1+k2l9RoPCoBJaeYWzzQ= -----END CERTIFICATE-----Generated at Tue Mar 10 03:31:00 2026 by rpki-client