$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5f9ea20a-2bb8-33b0-a4e6-11228afc7358.roa File: 5f9ea20a-2bb8-33b0-a4e6-11228afc7358.roa (raw, json) Hash identifier: QkvKjSKyRgPkkMCTMcIu9eXXlQIdAFY/DaHV3FQSziY= Subject key identifier: E7:22:93:28:F9:DA:71:AA:F3:71:D0:45:8A:F3:CF:E0:6F:83:6D:C6 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D1C7F4F3B644142349EA921C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5f9ea20a-2bb8-33b0-a4e6-11228afc7358.roa Signing time: Mon 09 Mar 2026 13:00:40 +0000 ROA not before: Mon 09 Mar 2026 13:00:40 +0000 ROA not after: Sun 07 Jun 2026 13:00:40 +0000 asID: 142111 IP address blocks: 72.244.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1c:7f:4f:3b:64:41:42:34:9e:a9:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 9 13:00:40 2026 GMT Not After : Jun 7 13:00:40 2026 GMT Subject: CN=1d7d3244-c5c3-4932-82c3-cacba3f5e9b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:49:28:89:06:03:18:f7:05:f2:88:9b:21: 77:8a:6d:ab:79:9d:a7:e5:da:6d:b5:72:bd:a7:c0: 14:73:36:6f:32:f2:74:f6:e3:0a:0e:e4:41:0b:e5: bd:53:17:3a:90:34:18:eb:5f:37:ec:5c:50:0e:14: 11:75:85:6c:74:aa:60:8b:ce:fe:e5:64:51:29:74: c6:2e:b1:1b:42:83:10:8c:f2:0e:74:4f:40:33:5e: a3:fb:70:db:41:75:b5:f5:1b:5d:84:f5:8f:e6:ef: 2f:73:92:04:f6:55:6e:82:a2:e8:e4:9b:f0:8f:f7: ae:a1:28:16:85:7c:11:1f:11:08:7a:ef:5b:92:07: 11:d5:cc:eb:2b:3d:54:b6:75:9c:88:23:1b:6b:c4: a7:9f:1f:8f:84:49:24:5d:70:f9:0d:d0:db:42:cb: 74:dd:e1:ba:86:ee:d6:00:24:37:f1:9a:ab:57:07: 85:6b:cf:65:6e:0d:61:b2:30:c8:f1:a2:df:d3:ce: 1b:da:7d:f9:29:48:85:09:07:bf:3d:e8:ce:7c:c7: e5:7e:74:26:48:56:ef:bc:61:d5:74:d3:5a:01:14: b6:4f:7c:ba:f1:06:a4:31:58:ba:5e:65:a5:28:bf: 20:37:e7:fe:cd:fe:c5:cc:3d:8a:8d:b3:65:4c:e4: b3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:22:93:28:F9:DA:71:AA:F3:71:D0:45:8A:F3:CF:E0:6F:83:6D:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5f9ea20a-2bb8-33b0-a4e6-11228afc7358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:12:36:94:b5:a3:24:43:e8:21:14:71:ca:05:f8:d3:13:be: 49:db:0c:cd:11:41:04:f4:09:6a:e3:f0:b3:12:b0:af:a5:98: 7a:c4:af:82:ef:61:fd:db:bb:ab:ae:db:9e:ff:f3:2b:a3:2f: 27:0d:e1:c5:49:a7:14:89:8e:55:90:8b:eb:20:29:23:20:6c: 79:c2:e7:6d:f6:c9:26:34:56:1f:f4:bd:c7:44:1c:2e:e3:8c: 8d:ab:2a:6e:02:05:c8:54:6d:ab:79:d7:6a:b8:a3:c5:15:e3: d7:2f:eb:b7:9f:a1:19:2f:4c:5f:3b:af:ed:ea:8f:20:65:6f: 9e:91:6f:9a:88:c6:2d:15:cd:6d:30:97:13:3d:8f:3a:23:77: ad:9b:6e:62:a2:49:ee:73:40:c8:89:9d:c5:1e:46:65:55:46: bd:bf:a9:eb:cd:66:96:b1:b0:3e:22:38:5c:da:34:41:ae:21: 88:04:91:c5:ff:7c:48:7b:d5:c1:67:4b:b6:87:4f:ba:51:72: 36:49:ca:d1:c2:ab:bd:b4:01:47:91:d4:bb:e2:ed:c9:1e:8b: dd:39:8d:f7:35:07:d8:82:a6:86:3f:15:ab:6e:f6:8d:f3:08: 4d:d6:81:ea:ca:0c:28:d3:9a:c1:cb:84:d6:37:71:3c:76:18: 57:68:e4:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0cf087ZEFCNJ6pIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwOTEzMDA0MFoXDTI2MDYwNzEzMDA0MFowLzEtMCsGA1UEAxMk MWQ3ZDMyNDQtYzVjMy00OTMyLTgyYzMtY2FjYmEzZjVlOWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB5JKIkGAxj3BfKImyF3im2reZ2n5dpttXK9 p8AUczZvMvJ09uMKDuRBC+W9Uxc6kDQY61837FxQDhQRdYVsdKpgi87+5WRRKXTG LrEbQoMQjPIOdE9AM16j+3DbQXW19RtdhPWP5u8vc5IE9lVugqLo5Jvwj/euoSgW hXwRHxEIeu9bkgcR1czrKz1UtnWciCMba8Snnx+PhEkkXXD5DdDbQst03eG6hu7W ACQ38ZqrVweFa89lbg1hsjDI8aLf084b2n35KUiFCQe/PejOfMflfnQmSFbvvGHV dNNaARS2T3y68QakMVi6XmWlKL8gN+f+zf7FzD2KjbNlTOSzhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcikyj52nGq83HQRYrzz+Bvg23GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNWY5ZWEyMGEtMmJiOC0z M2IwLWE0ZTYtMTEyMjhhZmM3MzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPSfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwSNpS1oyRD6CEUccoF+NMTvknbDM0RQQT0CWrj8LMSsK+lmHrEr4Lv Yf3bu6uu257/8yujLycN4cVJpxSJjlWQi+sgKSMgbHnC5232ySY0Vh/0vcdEHC7j jI2rKm4CBchUbat512q4o8UV49cv67efoRkvTF87r+3qjyBlb56Rb5qIxi0VzW0w lxM9jzojd62bbmKiSe5zQMiJncUeRmVVRr2/qevNZpaxsD4iOFzaNEGuIYgEkcX/ fEh71cFnS7aHT7pRcjZJytHCq720AUeR1Lvi7ckei905jfc1B9iCpoY/Fatu9o3z CE3WgerKDCjTmsHLhNY3cTx2GFdo5DM= -----END CERTIFICATE-----Generated at Wed Mar 18 14:43:01 2026 by rpki-client