$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/95c29f8e-7a40-371e-aae8-e53b810193d0.roa File: 95c29f8e-7a40-371e-aae8-e53b810193d0.roa (raw, json) Hash identifier: MOOR3kLsOIF2EDjFUVPKYQVX5Qa7xbqrUo6s/1v+h6A= Subject key identifier: 71:9B:17:6B:5D:15:58:F8:FD:3C:41:56:03:3F:B3:18:86:C0:70:8D Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D6DA80EE9F69F3ABB7A636400 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/95c29f8e-7a40-371e-aae8-e53b810193d0.roa Signing time: Tue 07 Apr 2026 14:43:18 +0000 ROA not before: Tue 07 Apr 2026 14:43:18 +0000 ROA not after: Mon 06 Jul 2026 14:43:18 +0000 asID: 19211 IP address blocks: 72.245.168.0/21 maxlen: 21 72.245.188.0/22 maxlen: 22 216.132.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a8:0e:e9:f6:9f:3a:bb:7a:63:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 7 14:43:18 2026 GMT Not After : Jul 6 14:43:18 2026 GMT Subject: CN=9abc2006-1742-4556-8c96-fd52dddf12b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:25:88:8f:3b:98:0a:35:10:be:54:68:ce:f7: a0:a2:64:03:9b:d2:e4:94:a9:5a:c6:60:f4:79:65: 1e:fe:ad:37:a4:8e:ea:96:39:20:d3:ee:05:53:55: 95:2c:95:f2:0c:bb:87:f0:06:52:3b:ad:65:15:e2: 1d:cc:2d:30:b9:c2:d0:c9:b1:26:b2:dc:05:8f:fb: fa:70:52:a0:7a:67:11:7b:79:3b:66:9d:6e:d0:45: 99:dc:c1:2a:50:a7:b5:85:aa:7f:94:c5:a1:60:2b: b9:58:f6:c5:89:0f:1a:c6:83:86:f3:8c:cf:b6:5b: 58:13:35:a4:ef:62:16:be:e1:f0:9a:f4:a7:86:38: 0e:d7:fd:0c:6c:d3:8c:84:bb:18:4c:a7:25:af:e5: 08:4d:22:07:fd:05:30:2c:ca:d5:98:a6:df:2b:a1: 94:9a:c6:b6:96:0b:ec:ec:92:29:0e:a9:f6:41:81: 7b:f2:79:95:88:13:17:97:f6:ed:7b:82:c9:a7:be: 96:27:8f:c1:26:5f:ee:0e:23:23:e1:0c:04:02:94: 79:e8:49:7c:52:b5:0a:3f:ef:2e:43:56:eb:4a:12: e3:70:b6:8a:6c:bb:ee:35:53:60:d4:de:e8:65:3a: 79:eb:94:9c:c4:94:cb:aa:d1:34:ce:e6:ca:af:45: 11:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9B:17:6B:5D:15:58:F8:FD:3C:41:56:03:3F:B3:18:86:C0:70:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/95c29f8e-7a40-371e-aae8-e53b810193d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.245.168.0/21 72.245.188.0/22 216.132.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:93:5a:17:b4:0a:76:68:e5:56:94:87:5c:c6:fc:23:c1:e5: 4f:26:03:5f:0e:4b:9c:29:82:5d:57:0d:f8:1c:08:85:21:77: 3c:43:3d:04:0e:a3:bf:f6:bc:58:b3:67:e6:4c:f0:04:36:67: 28:dc:50:49:ea:0f:28:76:d9:f3:cc:d9:1e:e4:84:f6:4a:14: 67:91:ed:72:99:a5:3b:01:6c:90:f1:c2:0c:bd:d7:e3:2e:48: a3:11:0d:96:b7:05:05:c7:40:83:ac:b8:01:b3:b4:ac:2d:bf: 58:0e:1c:66:79:a9:43:07:79:9d:ba:d4:1e:c6:28:b7:f9:bf: e8:8f:d5:ab:88:0b:fa:c3:6f:dd:81:04:20:97:55:db:e3:1a: e6:30:35:d2:80:9a:70:70:62:ec:50:27:76:57:0d:a9:2a:c2: 21:33:8a:52:27:db:00:fc:7a:fe:f0:0e:3e:b2:80:cb:aa:2c: 7d:d2:0e:88:ae:58:b7:4b:bd:69:3f:82:97:b1:1c:4d:56:6b: 2c:72:c1:78:cc:b6:20:2f:6f:ab:a0:9b:20:37:ca:59:11:b3: 39:1a:58:a5:ae:a2:ac:49:4d:c0:a9:b2:90:4f:34:b1:aa:df: 22:2d:b2:d1:c7:db:bb:b1:0c:76:e5:d0:78:1f:bd:b3:64:99: eb:66:b4:68 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE1tqA7p9p86u3pjZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQwNzE0NDMxOFoXDTI2MDcwNjE0NDMxOFowLzEtMCsGA1UEAxMk OWFiYzIwMDYtMTc0Mi00NTU2LThjOTYtZmQ1MmRkZGYxMmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSWIjzuYCjUQvlRozvegomQDm9LklKlaxmD0 eWUe/q03pI7qljkg0+4FU1WVLJXyDLuH8AZSO61lFeIdzC0wucLQybEmstwFj/v6 cFKgemcRe3k7Zp1u0EWZ3MEqUKe1hap/lMWhYCu5WPbFiQ8axoOG84zPtltYEzWk 72IWvuHwmvSnhjgO1/0MbNOMhLsYTKclr+UITSIH/QUwLMrVmKbfK6GUmsa2lgvs 7JIpDqn2QYF78nmViBMXl/bte4LJp76WJ4/BJl/uDiMj4QwEApR56El8UrUKP+8u Q1brShLjcLaKbLvuNVNg1N7oZTp565ScxJTLqtE0zubKr0UR0QIDAQABo4IDYTCC A10wHQYDVR0OBBYEFHGbF2tdFVj4/TxBVgM/sxiGwHCNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTVjMjlmOGUtN2E0MC0z NzFlLWFhZTgtZTUzYjgxMDE5M2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDSPWoAwQC SPW8AwQC2IToMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEOTWhe0CnZo5VaUh1zG/CPB5U8mA18OS5wpgl1X DfgcCIUhdzxDPQQOo7/2vFizZ+ZM8AQ2ZyjcUEnqDyh22fPM2R7khPZKFGeR7XKZ pTsBbJDxwgy91+MuSKMRDZa3BQXHQIOsuAGztKwtv1gOHGZ5qUMHeZ261B7GKLf5 v+iP1auIC/rDb92BBCCXVdvjGuYwNdKAmnBwYuxQJ3ZXDakqwiEzilIn2wD8ev7w Dj6ygMuqLH3SDoiuWLdLvWk/gpexHE1WayxywXjMtiAvb6ugmyA3ylkRszkaWKWu oqxJTcCpspBPNLGq3yItstHH27uxDHbl0HgfvbNkmetmtGg= -----END CERTIFICATE-----Generated at Fri Apr 10 23:13:02 2026 by rpki-client