$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/af6ac311-6007-3754-8f7d-5e0c0683affa.roa File: af6ac311-6007-3754-8f7d-5e0c0683affa.roa (raw, json) Hash identifier: tqD0nAZ0LZD9lMgUXTqIxhE7l6r+gu9P6LHPxC+zSDw= Subject key identifier: FB:4E:88:15:16:C2:2D:61:56:A2:0C:96:35:6D:F7:AB:CB:1E:3A:C3 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EF44CAAB633D70E5C20521928 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/af6ac311-6007-3754-8f7d-5e0c0683affa.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 7029 IP address blocks: 72.244.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:aa:b6:33:d7:0e:5c:20:52:19:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=806d6510-a1ae-4006-999d-0def030de64f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:79:b0:b6:03:0a:1b:bb:6e:41:46:c0:62:7b: b5:3d:ff:a3:7d:43:f5:c8:f3:da:9c:24:a8:0e:60: 67:e0:4c:00:5f:fc:ee:e6:49:55:89:77:a1:72:cf: ae:33:2c:8d:d1:48:3a:35:09:15:a9:48:e0:3a:32: d9:1c:0b:b8:96:84:38:32:23:f7:ce:31:81:66:50: 8f:e0:86:40:53:b9:a1:72:30:74:f0:55:27:4a:86: fa:2b:9a:37:83:b7:5d:f3:fa:f6:3a:ac:14:51:57: 8d:a3:e3:2f:1e:65:f1:d5:c5:06:bd:89:6c:27:91: d1:df:e2:c6:8d:93:19:c5:a6:d8:e7:b0:69:ff:3e: 53:2a:55:95:09:1e:51:5d:7a:a2:d4:a7:c7:c4:70: 36:ec:0a:c0:33:34:09:e0:df:f8:a5:6f:fe:4c:a0: 90:f4:a3:de:52:f7:12:60:60:30:35:a8:89:fb:c2: 63:ec:60:be:3c:53:cc:75:2c:4f:2f:2b:73:54:7c: 85:eb:8a:6f:03:ca:1e:7d:1a:06:94:a2:0a:31:6d: 64:f5:30:08:9b:e9:8e:6c:0e:85:1d:77:b4:46:4d: e0:37:8b:11:ea:13:f1:6f:ac:85:6f:3f:ba:3d:6f: ec:66:dc:9f:a6:5f:3f:ef:64:48:be:df:fd:29:22: 13:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4E:88:15:16:C2:2D:61:56:A2:0C:96:35:6D:F7:AB:CB:1E:3A:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/af6ac311-6007-3754-8f7d-5e0c0683affa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:d9:16:b7:20:35:2b:41:4f:47:ea:c3:d3:17:a0:5c:49:8d: 08:d5:93:3a:a6:99:60:2f:ae:7a:5c:07:c8:b8:08:58:34:7c: f6:8a:35:6a:f2:a9:f6:fa:da:08:67:81:ed:1e:ef:3c:da:e8: b3:fd:e3:10:64:0b:bf:4e:64:8e:42:0f:9c:2f:2a:97:87:01: 3f:b9:6c:ee:54:29:07:e4:9c:8c:97:01:62:f8:c3:4f:ee:63: 38:93:da:d7:c9:02:7f:37:14:ad:c4:88:9f:4a:fe:aa:c3:bf: 43:cf:13:00:56:f0:53:40:c6:bd:e7:3d:4c:04:ef:ec:bc:79: 3e:53:f9:66:96:af:ca:24:cb:b9:1b:14:b0:7e:e5:60:b8:67: 2a:58:2d:d7:c4:51:b9:27:df:e4:95:84:78:ab:25:4a:d4:ba: ea:de:35:ea:8d:c0:7e:d4:f4:21:32:dc:36:bb:c5:12:42:70: ac:0a:be:6e:91:16:55:b5:40:9d:c8:7d:dc:09:33:73:3b:4e: 8f:02:2c:fe:bf:a1:de:67:95:f5:aa:ab:7b:0c:15:47:fa:08: 35:32:fe:28:c5:9d:fb:30:a0:61:dd:ed:4e:83:37:d5:cd:f9: c3:ef:60:f8:6a:fb:aa:9c:b0:8f:d1:1b:92:42:d9:fc:d4:7b: 6c:4c:63:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TKq2M9cOXCBSGSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk ODA2ZDY1MTAtYTFhZS00MDA2LTk5OWQtMGRlZjAzMGRlNjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnmwtgMKG7tuQUbAYnu1Pf+jfUP1yPPanCSo DmBn4EwAX/zu5klViXehcs+uMyyN0Ug6NQkVqUjgOjLZHAu4loQ4MiP3zjGBZlCP 4IZAU7mhcjB08FUnSob6K5o3g7dd8/r2OqwUUVeNo+MvHmXx1cUGvYlsJ5HR3+LG jZMZxabY57Bp/z5TKlWVCR5RXXqi1KfHxHA27ArAMzQJ4N/4pW/+TKCQ9KPeUvcS YGAwNaiJ+8Jj7GC+PFPMdSxPLytzVHyF64pvA8oefRoGlKIKMW1k9TAIm+mObA6F HXe0Rk3gN4sR6hPxb6yFbz+6PW/sZtyfpl8/72RIvt/9KSITuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtOiBUWwi1hVqIMljVt96vLHjrDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWY2YWMzMTEtNjAwNy0z NzU0LThmN2QtNWUwYzA2ODNhZmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjZFrcgNStBT0fqw9MXoFxJjQjVkzqmmWAvrnpcB8i4CFg0fPaKNWry qfb62ghnge0e7zza6LP94xBkC79OZI5CD5wvKpeHAT+5bO5UKQfknIyXAWL4w0/u YziT2tfJAn83FK3EiJ9K/qrDv0PPEwBW8FNAxr3nPUwE7+y8eT5T+WaWr8oky7kb FLB+5WC4ZypYLdfEUbkn3+SVhHirJUrUuureNeqNwH7U9CEy3Da7xRJCcKwKvm6R FlW1QJ3IfdwJM3M7To8CLP6/od5nlfWqq3sMFUf6CDUy/ijFnfswoGHd7U6DN9XN +cPvYPhq+6qcsI/RG5JC2fzUe2xMYw4= -----END CERTIFICATE-----Generated at Wed Aug 26 10:47:48 2026 by rpki-client