$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/88bed2c4-da6a-3d6f-8dc5-f6e8968a69d8.roa File: 88bed2c4-da6a-3d6f-8dc5-f6e8968a69d8.roa (raw, json) Hash identifier: EN+X8ypzOHKghBE89bAJkUQNCCLhtj+6LNMmKrvwrqE= Subject key identifier: 2E:25:34:D0:60:78:37:FC:7E:0B:F7:0E:D5:E9:7C:B3:B9:53:51:51 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D96FA713EEE64BEB460FCBAE0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/88bed2c4-da6a-3d6f-8dc5-f6e8968a69d8.roa Signing time: Wed 22 Apr 2026 09:57:26 +0000 ROA not before: Wed 22 Apr 2026 09:57:26 +0000 ROA not after: Tue 21 Jul 2026 09:57:26 +0000 asID: 153671 IP address blocks: 72.244.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:96:fa:71:3e:ee:64:be:b4:60:fc:ba:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 22 09:57:26 2026 GMT Not After : Jul 21 09:57:26 2026 GMT Subject: CN=baa2d45c-f411-4bdf-8f9e-087de80f60c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6c:35:60:77:ad:4c:d2:98:90:7b:b3:b4:4d: 5f:af:eb:bd:06:63:42:39:5c:13:bf:69:65:17:57: 20:c2:d6:7c:b9:35:9e:67:39:39:93:2e:80:dd:8e: ce:8d:97:9d:46:e4:4c:35:db:2d:32:fb:6f:64:75: 77:1b:c4:5c:b9:4a:31:4a:53:64:df:8f:d5:76:77: 1f:da:09:50:b4:56:6a:d5:34:14:67:87:21:34:58: b5:3a:af:f2:69:1c:32:04:fa:bc:1e:81:c7:47:85: 63:81:22:19:07:72:ad:f0:c8:ff:d7:ac:44:1c:84: c9:13:6b:83:dd:03:0e:21:0b:26:40:90:64:e5:e2: 2d:0c:f1:a1:5a:66:64:a9:0c:ea:f4:33:7b:d9:62: 74:e6:b5:0a:82:28:12:71:89:66:17:1b:a1:a4:91: 31:07:0b:f8:f1:50:42:aa:31:0f:61:f7:e3:11:04: 0b:39:30:20:f9:c3:30:4f:02:02:4a:16:52:b2:f6: a3:ba:fb:8a:bc:90:26:dd:07:d9:28:7a:c9:45:41: 54:07:2f:55:61:28:93:f7:ac:41:be:c3:87:15:8b: 86:ee:a9:3a:81:c8:f5:e0:f0:19:68:e7:d2:51:3f: 18:e8:61:6e:59:31:c2:e6:c9:d0:84:d0:62:ee:9f: e7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:25:34:D0:60:78:37:FC:7E:0B:F7:0E:D5:E9:7C:B3:B9:53:51:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/88bed2c4-da6a-3d6f-8dc5-f6e8968a69d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:8e:e2:6b:8a:c6:59:e0:6f:eb:60:ac:95:42:3a:7e:08:24: 12:b6:2d:38:ae:49:a6:c1:04:91:d0:c1:ad:8b:54:3b:7c:9b: 98:b8:7c:ad:69:08:59:d8:3b:50:5e:e3:e6:59:82:73:53:9c: ae:13:82:32:01:e7:6e:77:1b:e0:47:dc:e4:94:1b:6f:77:3e: 53:dd:66:fa:0f:19:52:e7:a7:30:27:08:99:ec:f0:cb:37:5d: b0:f7:f7:69:db:d7:e9:d1:b5:33:ce:ad:6d:ee:64:c6:cd:8a: eb:3b:37:80:5f:cb:39:45:bf:44:44:19:cd:50:d5:be:05:90: 36:69:95:96:05:b8:e3:2e:a8:10:5f:ee:4f:8d:93:4c:77:a3: a9:a9:76:93:51:54:14:48:c0:45:ad:9d:c7:e9:40:62:e5:54: bb:64:ba:10:d1:64:59:66:8d:2b:ca:b5:c6:8a:2b:5a:f1:3e: 43:7f:c6:2f:19:6c:e1:ef:dd:b1:31:8b:82:dd:8e:78:75:5f: cc:d9:6f:23:f4:86:6d:b8:d5:9f:37:39:f0:e8:c8:2f:2d:17: 7d:4e:81:c8:ae:5c:a2:97:cb:30:e9:e9:46:f8:2f:8b:d1:07: 32:6e:3e:ed:9c:a1:9d:53:87:66:c0:e2:51:6d:3a:d5:95:3e: 42:76:a4:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2W+nE+7mS+tGD8uuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQyMjA5NTcyNloXDTI2MDcyMTA5NTcyNlowLzEtMCsGA1UEAxMk YmFhMmQ0NWMtZjQxMS00YmRmLThmOWUtMDg3ZGU4MGY2MGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWw1YHetTNKYkHuztE1fr+u9BmNCOVwTv2ll F1cgwtZ8uTWeZzk5ky6A3Y7OjZedRuRMNdstMvtvZHV3G8RcuUoxSlNk34/Vdncf 2glQtFZq1TQUZ4chNFi1Oq/yaRwyBPq8HoHHR4VjgSIZB3Kt8Mj/16xEHITJE2uD 3QMOIQsmQJBk5eItDPGhWmZkqQzq9DN72WJ05rUKgigScYlmFxuhpJExBwv48VBC qjEPYffjEQQLOTAg+cMwTwICShZSsvajuvuKvJAm3QfZKHrJRUFUBy9VYSiT96xB vsOHFYuG7qk6gcj14PAZaOfSUT8Y6GFuWTHC5snQhNBi7p/nVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4lNNBgeDf8fgv3DtXpfLO5U1FRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODhiZWQyYzQtZGE2YS0z ZDZmLThkYzUtZjZlODk2OGE2OWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPSdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6O4muKxlngb+tgrJVCOn4IJBK2LTiuSabBBJHQwa2LVDt8m5i4fK1p CFnYO1Be4+ZZgnNTnK4TgjIB5253G+BH3OSUG293PlPdZvoPGVLnpzAnCJns8Ms3 XbD392nb1+nRtTPOrW3uZMbNius7N4BfyzlFv0REGc1Q1b4FkDZplZYFuOMuqBBf 7k+Nk0x3o6mpdpNRVBRIwEWtncfpQGLlVLtkuhDRZFlmjSvKtcaKK1rxPkN/xi8Z bOHv3bExi4Ldjnh1X8zZbyP0hm241Z83OfDoyC8tF31OgciuXKKXyzDp6Ub4L4vR BzJuPu2coZ1Th2bA4lFtOtWVPkJ2pKc= -----END CERTIFICATE-----Generated at Mon Apr 27 11:16:21 2026 by rpki-client