$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2a99ff51-b0e7-377f-85e8-e30c11d9cda2.roa File: 2a99ff51-b0e7-377f-85e8-e30c11d9cda2.roa (raw, json) Hash identifier: iPQQ1oT7FEf9uS+a0waH4QbFCCbv8k+OxAAxAr5k0NI= Subject key identifier: 76:D4:5E:CD:E5:A5:BE:92:58:CC:4D:24:E4:08:76:E3:78:1C:FE:5B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584ED55CD74535DC2720014EAA00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2a99ff51-b0e7-377f-85e8-e30c11d9cda2.roa Signing time: Fri 14 Aug 2026 11:02:45 +0000 ROA not before: Fri 14 Aug 2026 11:02:45 +0000 ROA not after: Thu 12 Nov 2026 12:02:45 +0000 asID: 395954 IP address blocks: 72.244.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d5:5c:d7:45:35:dc:27:20:01:4e:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 14 11:02:45 2026 GMT Not After : Nov 12 12:02:45 2026 GMT Subject: CN=8aaef157-3dfd-4ccd-960e-825c92176f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6c:6c:a3:f8:41:29:22:32:24:ba:02:c9:8f: ff:b0:7c:fc:be:27:27:4d:90:26:8c:6f:1f:ed:a6: b4:7b:f1:ef:c1:7c:f1:1f:77:a0:25:28:e7:ae:d8: 94:80:1e:ed:1e:05:ef:51:27:b9:89:38:72:34:54: b0:76:1e:d7:55:28:d7:a2:4b:ed:12:f1:7b:fb:17: fd:e5:8d:51:74:1a:2f:f9:c7:27:47:47:d5:54:62: 6a:ac:89:bc:ea:3d:cf:2e:e6:c4:f3:d3:f6:57:9f: c7:07:eb:37:d5:90:46:20:2a:16:bb:8e:4a:4a:5a: ff:8d:d6:f3:43:6f:97:55:c5:ff:49:64:92:87:60: f9:c1:e1:cf:a6:1b:00:7d:15:fa:f4:9d:97:cd:17: b6:eb:be:50:a0:c0:86:12:eb:dc:ab:21:22:05:39: 7d:ea:71:43:27:33:60:a1:42:f4:b7:42:ef:56:fe: 1f:fa:35:d5:f6:ee:d8:f8:ff:b3:48:43:3c:a1:72: f7:3e:be:c6:15:87:26:5b:4b:77:f2:e0:93:6c:9f: 38:61:6b:01:8b:7e:27:48:e6:b0:f7:a6:89:72:b8: 23:fe:7f:e3:f4:86:d0:af:2c:ae:6c:a8:e5:2f:d5: 0e:14:3c:b0:71:ad:7f:5c:7f:6a:33:a5:0f:db:40: 0e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D4:5E:CD:E5:A5:BE:92:58:CC:4D:24:E4:08:76:E3:78:1C:FE:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2a99ff51-b0e7-377f-85e8-e30c11d9cda2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:55:28:70:33:2a:6e:2a:ad:fc:c9:2a:07:9c:e2:8d:87:7b: b6:fe:27:91:2f:21:b1:11:f6:9c:69:05:55:37:0f:f7:5b:b4: d0:4f:38:10:af:bb:6c:e2:7c:62:14:2f:72:10:5a:78:e3:3c: 17:e2:d3:50:d0:32:87:f0:4b:32:69:94:8e:0a:ba:64:f5:1b: 3b:eb:53:64:f1:3f:b2:9b:83:16:58:7e:be:2a:a5:c3:64:69: d7:8f:d6:d7:81:02:1f:48:77:ee:89:24:22:15:91:c1:41:21: d7:a7:f8:e0:a5:55:77:c7:c7:69:5c:59:5a:0c:7b:1d:c2:52: aa:fc:da:2c:0d:e6:51:86:89:f9:bc:e2:f9:4d:38:8b:dc:7e: e0:2e:02:d7:5e:9c:e0:e3:63:74:63:ef:ec:bb:24:be:5b:69: b9:73:7e:54:6b:93:11:b9:36:de:33:89:a0:6b:a5:d3:09:85: d7:76:24:9b:a2:59:1e:e4:ee:5c:c7:e9:55:89:f5:c9:a2:2a: 9e:64:9c:47:e0:3d:8c:59:fb:29:07:c1:f0:d6:cb:b8:e1:d2: c2:44:5a:d4:3d:39:16:78:25:2f:d2:ee:7c:1b:9a:6d:79:1c: ab:59:6c:f4:e1:eb:24:03:db:c3:62:47:9f:76:23:6d:b8:c1: 09:68:4e:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7VXNdFNdwnIAFOqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgxNDExMDI0NVoXDTI2MTExMjEyMDI0NVowLzEtMCsGA1UEAxMk OGFhZWYxNTctM2RmZC00Y2NkLTk2MGUtODI1YzkyMTc2ZjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWxso/hBKSIyJLoCyY//sHz8vicnTZAmjG8f 7aa0e/HvwXzxH3egJSjnrtiUgB7tHgXvUSe5iThyNFSwdh7XVSjXokvtEvF7+xf9 5Y1RdBov+ccnR0fVVGJqrIm86j3PLubE89P2V5/HB+s31ZBGICoWu45KSlr/jdbz Q2+XVcX/SWSSh2D5weHPphsAfRX69J2XzRe2675QoMCGEuvcqyEiBTl96nFDJzNg oUL0t0LvVv4f+jXV9u7Y+P+zSEM8oXL3Pr7GFYcmW0t38uCTbJ84YWsBi34nSOaw 96aJcrgj/n/j9IbQryyubKjlL9UOFDywca1/XH9qM6UP20AOPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbUXs3lpb6SWMxNJOQIduN4HP5bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmE5OWZmNTEtYjBlNy0z NzdmLTg1ZTgtZTMwYzExZDljZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPQBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBVKHAzKm4qrfzJKgec4o2He7b+J5EvIbER9pxpBVU3D/dbtNBPOBCv u2zifGIUL3IQWnjjPBfi01DQMofwSzJplI4KumT1GzvrU2TxP7KbgxZYfr4qpcNk adeP1teBAh9Id+6JJCIVkcFBIden+OClVXfHx2lcWVoMex3CUqr82iwN5lGGifm8 4vlNOIvcfuAuAtdenODjY3Rj7+y7JL5bablzflRrkxG5Nt4ziaBrpdMJhdd2JJui WR7k7lzH6VWJ9cmiKp5knEfgPYxZ+ykHwfDWy7jh0sJEWtQ9ORZ4JS/S7nwbmm15 HKtZbPTh6yQD28NiR592I224wQloThs= -----END CERTIFICATE-----Generated at Wed Aug 26 13:52:40 2026 by rpki-client