$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2382a434-cda8-3060-a542-ba56e0e0f17b.roa File: 2382a434-cda8-3060-a542-ba56e0e0f17b.roa (raw, json) Hash identifier: eApZSG55jcDbduIJ8JbHSAUD0hDAwKKoS8k8b/R7/rQ= Subject key identifier: 97:AA:51:C1:F1:38:38:0B:E7:D5:A7:B0:6E:84:F7:4E:60:C2:30:7A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E2809BE79495F99644E4784E0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2382a434-cda8-3060-a542-ba56e0e0f17b.roa Signing time: Sat 13 Jun 2026 09:00:12 +0000 ROA not before: Sat 13 Jun 2026 09:00:12 +0000 ROA not after: Fri 11 Sep 2026 09:00:12 +0000 asID: 6079 IP address blocks: 72.1.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:28:09:be:79:49:5f:99:64:4e:47:84:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jun 13 09:00:12 2026 GMT Not After : Sep 11 09:00:12 2026 GMT Subject: CN=e978a384-e8f8-4b54-915f-a1e86db7ea9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:de:1c:06:74:2a:1e:23:46:86:f5:60:34:f0: 23:48:fb:7e:0a:d1:e0:de:36:89:92:6c:40:a2:ec: a6:96:e2:94:c2:b5:96:0e:f6:c7:e2:3d:c6:39:82: 4a:d1:f6:43:02:73:e1:95:fd:52:3c:1c:1d:c4:be: df:ed:e9:d9:1b:1a:70:5d:0a:59:65:5b:5b:c8:cb: 73:8d:54:eb:6e:6c:4c:f9:13:87:db:d0:8a:49:e9: d2:b8:aa:00:83:2b:cb:e5:b6:da:37:ef:de:f1:48: 1a:8a:6a:86:03:e3:2f:d2:a5:39:08:02:e1:a8:3b: fe:ef:22:1c:d5:ac:84:c8:89:eb:16:f0:ea:0f:02: ef:58:22:a0:fc:1f:66:1a:e0:8f:c8:eb:30:47:60: 38:9d:2f:d1:53:a7:7b:eb:a5:bf:a1:aa:3c:88:f9: 33:4d:c0:9e:03:d6:d5:7a:be:5b:83:2c:48:1c:df: ad:7d:fb:f0:29:8b:af:10:0d:97:67:09:98:b5:a7: 44:d8:ab:20:95:11:05:58:bc:be:b5:f7:26:0c:91: ee:1d:00:f7:de:30:00:9c:8a:a5:8a:48:97:ec:89: fa:06:b7:44:24:76:d2:24:b9:aa:66:db:68:78:45: 9d:a4:89:31:19:d1:48:97:7e:83:25:3d:1b:63:d8: 30:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AA:51:C1:F1:38:38:0B:E7:D5:A7:B0:6E:84:F7:4E:60:C2:30:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2382a434-cda8-3060-a542-ba56e0e0f17b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.1.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:43:84:87:88:f7:07:9f:c1:79:5c:e1:bb:75:ec:65:72:ca: a8:4d:a0:dc:7a:be:dc:ce:0b:86:5b:90:c6:69:23:b0:99:59: e6:b2:08:7b:d7:cf:eb:db:16:19:f8:58:37:b8:07:b1:9b:f0: 0b:bc:98:de:92:d6:7d:36:44:78:4c:fc:59:84:d9:1c:d3:aa: 5f:aa:81:a8:be:ec:36:cc:cb:1a:c2:75:d3:4c:d9:39:2d:5b: f9:71:e3:5a:c4:35:a4:68:d6:e0:16:f5:3b:2d:4d:0a:7a:88: 29:7a:24:80:1d:f6:79:d5:f6:d6:45:64:64:6d:75:8e:ec:1e: ed:03:36:92:74:76:24:c1:c7:43:9f:54:cf:de:d1:ff:26:3a: 2b:a8:93:c3:83:5f:9e:42:27:36:18:4c:c0:0e:bd:77:0f:66: 51:c8:8f:77:c1:ee:a1:6a:58:60:aa:79:a9:6a:67:fb:35:26: bb:d4:d8:ee:30:06:66:81:51:68:e8:6e:3f:c3:c6:79:75:c7: 0e:14:98:1f:7b:96:86:1b:2f:b9:ad:2c:20:63:38:32:6b:fa: 28:ce:91:d2:06:b6:65:bd:f7:ee:20:c0:f4:cb:68:f2:aa:d0: ca:33:f8:fb:2f:19:85:7f:e8:48:dc:44:56:74:ad:11:35:f3: 78:65:f9:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4oCb55SV+ZZE5HhOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDYxMzA5MDAxMloXDTI2MDkxMTA5MDAxMlowLzEtMCsGA1UEAxMk ZTk3OGEzODQtZThmOC00YjU0LTkxNWYtYTFlODZkYjdlYTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN4cBnQqHiNGhvVgNPAjSPt+CtHg3jaJkmxA ouymluKUwrWWDvbH4j3GOYJK0fZDAnPhlf1SPBwdxL7f7enZGxpwXQpZZVtbyMtz jVTrbmxM+ROH29CKSenSuKoAgyvL5bbaN+/e8UgaimqGA+Mv0qU5CALhqDv+7yIc 1ayEyInrFvDqDwLvWCKg/B9mGuCPyOswR2A4nS/RU6d766W/oao8iPkzTcCeA9bV er5bgyxIHN+tffvwKYuvEA2XZwmYtadE2KsglREFWLy+tfcmDJHuHQD33jAAnIql ikiX7In6BrdEJHbSJLmqZttoeEWdpIkxGdFIl36DJT0bY9gweQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJeqUcHxODgL59WnsG6E905gwjB6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjM4MmE0MzQtY2RhOC0z MDYwLWE1NDItYmE1NmUwZTBmMTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSAGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVDhIeI9wefwXlc4bt17GVyyqhNoNx6vtzOC4ZbkMZpI7CZWeayCHvX z+vbFhn4WDe4B7Gb8Au8mN6S1n02RHhM/FmE2RzTql+qgai+7DbMyxrCddNM2Tkt W/lx41rENaRo1uAW9TstTQp6iCl6JIAd9nnV9tZFZGRtdY7sHu0DNpJ0diTBx0Of VM/e0f8mOiuok8ODX55CJzYYTMAOvXcPZlHIj3fB7qFqWGCqealqZ/s1JrvU2O4w BmaBUWjobj/Dxnl1xw4UmB97loYbL7mtLCBjODJr+ijOkdIGtmW99+4gwPTLaPKq 0Moz+PsvGYV/6EjcRFZ0rRE183hl+Z0= -----END CERTIFICATE-----Generated at Tue Jul 21 01:37:22 2026 by rpki-client