$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d97cbb7-101c-3256-b1df-d5eae6da338b.roa File: 4d97cbb7-101c-3256-b1df-d5eae6da338b.roa (raw, json) Hash identifier: yzp+/GIC+XVHdY6Ol1KNxEr8jxAvS/Davjok31Hl40A= Subject key identifier: 77:F4:5F:27:20:0B:51:EF:6A:72:E4:36:D6:69:DA:AC:F5:BF:0C:49 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DEF45D573A7700097818F65F0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d97cbb7-101c-3256-b1df-d5eae6da338b.roa Signing time: Sun 24 May 2026 01:00:27 +0000 ROA not before: Sun 24 May 2026 01:00:27 +0000 ROA not after: Sat 22 Aug 2026 01:00:27 +0000 asID: 9304 IP address blocks: 72.244.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ef:45:d5:73:a7:70:00:97:81:8f:65:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 24 01:00:27 2026 GMT Not After : Aug 22 01:00:27 2026 GMT Subject: CN=fb9f28f4-5843-4033-910b-e0ec8a43e342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a3:8f:f2:a5:ca:f8:27:df:09:c7:4d:20:e8: 87:ac:d3:e1:d4:37:03:33:3c:0b:ba:d9:3a:94:15: 31:54:f9:5c:19:89:d5:1f:fa:a9:98:58:f8:d5:f9: a5:0f:f9:4d:01:54:cd:8f:a3:fa:94:76:2e:49:7a: cc:df:bd:4e:25:e1:97:29:1c:75:37:2d:85:f0:94: b0:bf:cf:5b:1f:5b:a4:1f:81:57:16:99:4e:77:78: 80:b0:cd:cd:69:c3:76:9e:69:86:5b:3a:c8:8e:02: d9:9c:5d:cd:5f:65:f7:b1:19:dc:df:d8:f5:a7:08: 8a:3c:f5:e0:f5:40:c5:30:a0:10:5f:27:ea:57:df: e6:5e:db:f3:9b:cf:3f:0b:a3:78:a0:b2:ec:05:b4: 99:c2:48:b0:68:63:5d:18:bd:7b:8b:e9:49:29:20: 01:c2:a1:f9:79:39:32:10:cb:f9:f8:e9:f2:71:19: 77:31:6e:a5:c1:47:76:1f:c5:f1:0a:83:bc:db:af: 10:a3:8f:f4:32:b6:28:d1:14:df:66:03:71:df:fe: f9:f4:39:5a:cf:8e:c7:a9:f8:92:36:d2:cf:48:9e: 17:cd:6e:39:b8:8a:0a:92:17:ce:e8:99:49:65:7e: cd:e1:87:c1:f8:05:a6:b3:64:e8:53:06:5f:92:66: ad:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F4:5F:27:20:0B:51:EF:6A:72:E4:36:D6:69:DA:AC:F5:BF:0C:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d97cbb7-101c-3256-b1df-d5eae6da338b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:18:bf:20:01:02:8c:ea:bb:75:2d:18:f3:a6:49:95:39:b6: b6:45:37:62:fd:4f:8c:8c:e8:69:f7:78:5f:0f:83:44:f9:ff: 68:9d:67:53:32:19:82:55:0b:fc:7c:00:ff:23:a3:15:2f:a8: 87:22:e5:b2:f8:47:72:72:04:2f:fd:6b:d9:da:bf:25:b3:90: 18:9b:3c:f3:d6:90:4e:24:ee:d3:18:7d:14:cf:97:ae:fe:19: aa:9b:90:d0:a2:ca:fc:8b:d9:d3:9c:54:c1:49:cc:76:75:6e: b7:e4:31:01:09:5d:e3:a8:4d:b9:04:0e:c8:fd:89:fc:e4:a6: da:48:94:7b:92:26:71:5c:01:27:fe:43:db:32:91:19:a1:f6: d8:e6:98:5b:82:99:e5:24:e7:aa:d7:ca:e8:da:eb:23:b1:6b: 36:e0:77:2d:84:d7:6c:6e:b6:52:b0:12:dc:30:bb:dd:d1:3d: 68:12:4e:96:cf:37:10:9d:fd:13:49:4f:48:31:b1:fb:20:21: 37:23:8d:28:8a:4d:b5:2d:4e:08:9d:35:71:54:c5:ab:7a:64: 20:69:10:65:02:98:e4:8a:5d:4b:6f:4e:87:32:98:d3:3c:4d: 62:db:6d:90:ba:40:75:1e:b9:f3:3e:e1:ed:d1:43:62:f6:b9: 50:d9:b2:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3vRdVzp3AAl4GPZfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUyNDAxMDAyN1oXDTI2MDgyMjAxMDAyN1owLzEtMCsGA1UEAxMk ZmI5ZjI4ZjQtNTg0My00MDMzLTkxMGItZTBlYzhhNDNlMzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaOP8qXK+CffCcdNIOiHrNPh1DcDMzwLutk6 lBUxVPlcGYnVH/qpmFj41fmlD/lNAVTNj6P6lHYuSXrM371OJeGXKRx1Ny2F8JSw v89bH1ukH4FXFplOd3iAsM3NacN2nmmGWzrIjgLZnF3NX2X3sRnc39j1pwiKPPXg 9UDFMKAQXyfqV9/mXtvzm88/C6N4oLLsBbSZwkiwaGNdGL17i+lJKSABwqH5eTky EMv5+OnycRl3MW6lwUd2H8XxCoO8268Qo4/0MrYo0RTfZgNx3/759Dlaz47HqfiS NtLPSJ4XzW45uIoKkhfO6JlJZX7N4YfB+AWms2ToUwZfkmatkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHf0XycgC1HvanLkNtZp2qz1vwxJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGQ5N2NiYjctMTAxYy0z MjU2LWIxZGYtZDVlYWU2ZGEzMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPRtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALEYvyABAozqu3UtGPOmSZU5trZFN2L9T4yM6Gn3eF8Pg0T5/2idZ1My GYJVC/x8AP8joxUvqIci5bL4R3JyBC/9a9navyWzkBibPPPWkE4k7tMYfRTPl67+ GaqbkNCiyvyL2dOcVMFJzHZ1brfkMQEJXeOoTbkEDsj9ifzkptpIlHuSJnFcASf+ Q9sykRmh9tjmmFuCmeUk56rXyuja6yOxazbgdy2E12xutlKwEtwwu93RPWgSTpbP NxCd/RNJT0gxsfsgITcjjSiKTbUtTgidNXFUxat6ZCBpEGUCmOSKXUtvTocymNM8 TWLbbZC6QHUeufM+4e3RQ2L2uVDZspw= -----END CERTIFICATE-----Generated at Tue Jun 2 20:52:14 2026 by rpki-client