$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0c9dc54a-a489-3470-9dcb-d8734fe4f3f9.roa File: 0c9dc54a-a489-3470-9dcb-d8734fe4f3f9.roa (raw, json) Hash identifier: hZ1+cPAFW/FTnn7fvujzS22UsIzd8N+M9/ZsNEfj50E= Subject key identifier: 3A:84:F0:BE:62:27:40:79:15:8C:D6:5D:72:B2:9F:F6:5D:F1:89:CE Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D4C0A1A141A04C050737DE780 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0c9dc54a-a489-3470-9dcb-d8734fe4f3f9.roa Signing time: Thu 26 Mar 2026 13:43:22 +0000 ROA not before: Thu 26 Mar 2026 13:43:22 +0000 ROA not after: Wed 24 Jun 2026 13:43:22 +0000 asID: 834 IP address blocks: 72.244.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 01 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:0a:1a:14:1a:04:c0:50:73:7d:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 26 13:43:22 2026 GMT Not After : Jun 24 13:43:22 2026 GMT Subject: CN=28c138a6-1dcd-4406-9dab-88309fe0d7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:44:d0:0b:38:86:a2:09:8e:f2:b8:26:8e:36: 31:45:ae:02:39:5d:f6:ca:45:0b:05:a8:df:12:82: 3a:41:06:f4:d2:32:e4:1b:54:4f:1c:85:ad:94:af: 25:cd:ad:0a:42:e8:19:2b:46:40:ce:1f:e6:04:af: 30:56:fe:cd:c5:79:c6:8e:7c:37:e5:82:ff:1f:68: 42:d0:2d:13:c0:e3:00:57:e0:cd:18:3f:1b:43:f2: 37:7a:05:dc:10:b5:c5:71:b3:d4:27:fb:c7:34:ca: c8:a5:bc:fc:fe:f0:c0:03:78:da:b7:01:fd:a0:a7: 06:fd:23:76:32:3b:65:3a:a8:dd:20:1d:b9:79:6b: c9:f3:39:ed:2a:6a:db:e5:86:26:36:f2:33:13:5c: 29:6a:c6:56:f2:ad:53:e3:95:1d:88:ec:4f:47:ea: cb:62:9a:d3:f3:36:53:0f:81:99:c2:38:76:5d:36: 5c:7b:17:16:17:98:24:28:65:41:db:78:68:40:1a: 39:46:52:3b:94:51:78:76:bd:da:8e:03:e2:f7:6d: 92:21:99:f9:21:a7:c8:01:14:4b:60:2e:a8:af:e6: 51:ed:9b:c4:c1:45:33:1b:5b:c0:14:a2:68:aa:dd: c3:6c:e0:32:40:40:07:3d:68:6f:1c:e1:fa:97:00: 59:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:84:F0:BE:62:27:40:79:15:8C:D6:5D:72:B2:9F:F6:5D:F1:89:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0c9dc54a-a489-3470-9dcb-d8734fe4f3f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:78:97:b5:08:21:2f:15:04:72:62:d3:09:ae:95:58:67:37: bb:29:4c:34:ba:d2:30:06:fc:41:25:10:f0:9c:ed:6a:27:a9: b1:83:23:48:79:dd:86:87:0a:da:fa:ca:a6:07:ab:fd:ef:68: b5:2d:61:eb:09:af:94:92:3d:26:c0:bf:32:eb:29:10:71:aa: 04:cd:98:4b:56:28:de:56:f6:fc:f1:36:a8:40:0c:7c:86:b8: 0e:3b:18:f1:35:f4:fb:24:49:84:0b:40:e1:37:56:13:d4:59: ea:f2:2b:3e:36:1c:67:57:9a:b5:bb:2c:1c:b5:c8:17:46:f4: 3d:6d:46:62:fa:2b:50:4e:71:a3:ea:10:0c:9a:c4:44:51:e4: 01:20:73:3c:5c:a8:0c:94:5d:e8:82:7e:48:43:c9:0d:f0:c6: 1f:80:05:56:9a:4d:c8:18:84:ef:08:e5:c8:21:6a:b1:fb:43: 96:d5:35:e8:d1:d6:a2:03:b6:40:22:54:55:f8:75:1e:6a:0c: 68:da:f1:dd:d9:5f:5a:a8:1c:fa:3c:53:98:39:98:25:e7:6a: 23:14:6a:ff:1b:0f:68:75:e7:0f:34:d4:0d:ac:2b:a6:3a:94: dc:e7:61:71:d2:1f:97:31:86:f9:d5:b4:6a:55:a4:60:cb:08: 82:ba:55:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1MChoUGgTAUHN954AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyNjEzNDMyMloXDTI2MDYyNDEzNDMyMlowLzEtMCsGA1UEAxMk MjhjMTM4YTYtMWRjZC00NDA2LTlkYWItODgzMDlmZTBkN2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtETQCziGogmO8rgmjjYxRa4COV32ykULBajf EoI6QQb00jLkG1RPHIWtlK8lza0KQugZK0ZAzh/mBK8wVv7NxXnGjnw35YL/H2hC 0C0TwOMAV+DNGD8bQ/I3egXcELXFcbPUJ/vHNMrIpbz8/vDAA3jatwH9oKcG/SN2 MjtlOqjdIB25eWvJ8zntKmrb5YYmNvIzE1wpasZW8q1T45UdiOxPR+rLYprT8zZT D4GZwjh2XTZcexcWF5gkKGVB23hoQBo5RlI7lFF4dr3ajgPi922SIZn5IafIARRL YC6or+ZR7ZvEwUUzG1vAFKJoqt3DbOAyQEAHPWhvHOH6lwBZrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqE8L5iJ0B5FYzWXXKyn/Zd8YnOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGM5ZGM1NGEtYTQ4OS0z NDcwLTlkY2ItZDg3MzRmZTRmM2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPRuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGV4l7UIIS8VBHJi0wmulVhnN7spTDS60jAG/EElEPCc7WonqbGDI0h5 3YaHCtr6yqYHq/3vaLUtYesJr5SSPSbAvzLrKRBxqgTNmEtWKN5W9vzxNqhADHyG uA47GPE19PskSYQLQOE3VhPUWeryKz42HGdXmrW7LBy1yBdG9D1tRmL6K1BOcaPq EAyaxERR5AEgczxcqAyUXeiCfkhDyQ3wxh+ABVaaTcgYhO8I5cgharH7Q5bVNejR 1qIDtkAiVFX4dR5qDGja8d3ZX1qoHPo8U5g5mCXnaiMUav8bD2h15w801A2sK6Y6 lNznYXHSH5cxhvnVtGpVpGDLCIK6VaM= -----END CERTIFICATE-----Generated at Mon Mar 30 23:23:21 2026 by rpki-client