$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aa105103-1325-3e48-9c6a-b88c8d8667ef.roa File: aa105103-1325-3e48-9c6a-b88c8d8667ef.roa (raw, json) Hash identifier: e9jzcnpYLGBsEFJKRtoJ9sQRT9FKLDn/fxdlhzlTe4Y= Subject key identifier: DE:A2:10:5E:C0:91:FD:7D:78:29:2B:03:03:95:6D:D2:1A:ED:F3:75 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D7167325965F8FDD79C933B80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aa105103-1325-3e48-9c6a-b88c8d8667ef.roa Signing time: Wed 08 Apr 2026 22:55:51 +0000 ROA not before: Wed 08 Apr 2026 22:55:51 +0000 ROA not after: Tue 07 Jul 2026 22:55:51 +0000 asID: 7029 IP address blocks: 72.244.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:67:32:59:65:f8:fd:d7:9c:93:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 8 22:55:51 2026 GMT Not After : Jul 7 22:55:51 2026 GMT Subject: CN=75bf99cd-5745-44c4-871f-e940ded8bac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:99:a2:eb:86:81:65:ae:d9:51:94:01:35:e5: 7d:9f:4a:1f:3a:2d:2d:75:2d:a1:03:b4:3f:9a:df: a7:a7:a4:b3:b6:0f:5e:3c:4c:d7:38:e4:bd:31:f6: 9c:e1:a5:55:e2:1c:da:a1:f4:ac:43:9d:3f:24:97: 7e:08:85:37:24:40:b0:89:f9:22:c5:a5:e7:56:c9: 68:38:9f:5b:0d:fa:b1:a0:0d:69:73:cb:12:24:35: 96:58:60:34:73:49:4f:8b:e3:29:ee:07:a7:ff:6f: 87:e4:f5:56:48:90:e3:fc:b8:8d:81:60:20:72:2b: ab:e3:09:d7:69:19:27:eb:98:a0:56:d9:43:21:10: f5:40:91:20:ed:a6:b7:78:d4:6f:04:00:b8:7d:b7: 5b:49:1a:8d:8d:9f:5b:31:99:d0:5e:36:d2:0c:6d: 24:35:c9:c4:d4:57:5e:08:f1:79:cf:6f:c4:48:bd: ac:a8:29:f0:83:8a:78:06:bb:71:f2:a8:63:fa:0a: 6d:b0:fc:e8:31:e3:20:50:1c:56:1a:c6:ae:41:05: c0:a3:ff:59:4c:0f:7b:c7:3e:b0:e6:34:ea:dd:01: ec:ec:d3:d5:46:da:d2:9d:66:90:77:5f:9b:92:99: 36:1c:ab:61:90:9d:d9:de:11:06:f5:0d:ab:7e:7b: 07:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A2:10:5E:C0:91:FD:7D:78:29:2B:03:03:95:6D:D2:1A:ED:F3:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aa105103-1325-3e48-9c6a-b88c8d8667ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:55:51:27:f6:7b:bd:51:f8:a8:b4:ff:86:cb:c6:87:f8:f7: 53:6e:e9:f1:91:1f:70:92:1e:ed:31:90:b8:c4:9a:64:8f:15: 26:a9:6a:1d:0c:73:bf:d2:88:14:ff:24:40:c6:8a:03:44:4c: 34:30:82:55:0f:13:03:aa:40:86:3b:8a:9a:26:0c:ea:33:b9: 96:25:f2:21:60:fd:33:6f:ed:6a:de:6a:f2:d0:99:af:0c:ba: b6:ec:c9:5e:36:7d:b9:1a:f7:04:d5:74:c6:e4:5a:36:43:b3: 0b:ee:8a:1a:c0:cb:e4:14:77:26:6f:8f:74:b8:88:f8:2f:55: 5a:38:22:84:90:c1:4a:5d:5b:9c:e4:b0:ec:55:d5:2e:60:0c: 92:69:b2:c3:8f:20:7b:71:f7:ad:ca:c6:25:25:d3:06:24:2c: b6:db:5f:02:89:32:a6:7c:17:c4:b8:a2:13:15:9d:06:d9:76: 2d:a0:7d:43:4d:4f:a4:2e:07:6d:3e:57:0d:41:a6:7d:8c:ec: 96:37:6d:07:21:18:f0:10:7a:cb:89:c0:a7:4c:66:58:3a:e7: 4c:aa:b3:f0:92:6d:6a:ff:ce:57:37:11:c1:53:ce:d1:05:c7: 8f:68:fd:fc:24:36:f0:e6:75:af:73:76:bf:0a:d1:8f:80:4f: eb:5f:93:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xZzJZZfj915yTO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQwODIyNTU1MVoXDTI2MDcwNzIyNTU1MVowLzEtMCsGA1UEAxMk NzViZjk5Y2QtNTc0NS00NGM0LTg3MWYtZTk0MGRlZDhiYWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpmi64aBZa7ZUZQBNeV9n0ofOi0tdS2hA7Q/ mt+np6Sztg9ePEzXOOS9Mfac4aVV4hzaofSsQ50/JJd+CIU3JECwifkixaXnVslo OJ9bDfqxoA1pc8sSJDWWWGA0c0lPi+Mp7gen/2+H5PVWSJDj/LiNgWAgciur4wnX aRkn65igVtlDIRD1QJEg7aa3eNRvBAC4fbdbSRqNjZ9bMZnQXjbSDG0kNcnE1Fde CPF5z2/ESL2sqCnwg4p4Brtx8qhj+gptsPzoMeMgUBxWGsauQQXAo/9ZTA97xz6w 5jTq3QHs7NPVRtrSnWaQd1+bkpk2HKthkJ3Z3hEG9Q2rfnsHCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6iEF7Akf19eCkrAwOVbdIa7fN1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWExMDUxMDMtMTMyNS0z ZTQ4LTljNmEtYjg4YzhkODY2N2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVVUSf2e71R+Ki0/4bLxof491Nu6fGRH3CSHu0xkLjEmmSPFSapah0M c7/SiBT/JEDGigNETDQwglUPEwOqQIY7ipomDOozuZYl8iFg/TNv7WreavLQma8M urbsyV42fbka9wTVdMbkWjZDswvuihrAy+QUdyZvj3S4iPgvVVo4IoSQwUpdW5zk sOxV1S5gDJJpssOPIHtx963KxiUl0wYkLLbbXwKJMqZ8F8S4ohMVnQbZdi2gfUNN T6QuB20+Vw1Bpn2M7JY3bQchGPAQesuJwKdMZlg650yqs/CSbWr/zlc3EcFTztEF x49o/fwkNvDmda9zdr8K0Y+AT+tfk8U= -----END CERTIFICATE-----Generated at Fri Apr 10 23:13:03 2026 by rpki-client