$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/af6ac311-6007-3754-8f7d-5e0c0683affa.roa File: af6ac311-6007-3754-8f7d-5e0c0683affa.roa (raw, json) Hash identifier: +FwLymayUzDxCoVOeq3Pwg3+hfeBSdM+aA2PDG2RgqA= Subject key identifier: 9F:37:35:FC:F3:A1:65:62:AB:95:93:81:6B:EB:15:67:72:66:B5:F5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D71679581DA9803082ABD2380 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/af6ac311-6007-3754-8f7d-5e0c0683affa.roa Signing time: Wed 08 Apr 2026 22:56:38 +0000 ROA not before: Wed 08 Apr 2026 22:56:38 +0000 ROA not after: Tue 07 Jul 2026 22:56:38 +0000 asID: 7029 IP address blocks: 72.244.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:67:95:81:da:98:03:08:2a:bd:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 8 22:56:38 2026 GMT Not After : Jul 7 22:56:38 2026 GMT Subject: CN=f57fe9a6-62b9-4c15-8a04-e186e529a18b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:14:59:fc:3f:f9:9b:48:a3:50:d5:d2:ac:2c: 49:34:d6:37:29:42:10:68:14:97:8d:4f:d5:5b:bf: 4e:32:c2:f2:a4:6b:7e:ad:c6:13:6d:f2:77:2a:7f: 68:b7:79:de:80:49:a5:7c:8b:f9:ea:4c:4e:eb:d0: 87:29:98:ad:f4:25:89:5b:cc:2f:03:80:ed:85:57: fb:eb:55:85:ff:0e:56:a2:91:06:8a:ae:2e:f5:70: 7d:98:d4:3e:22:cd:37:5e:f5:10:d6:e8:8f:0d:c2: 03:e5:c8:29:b2:5b:bc:03:e7:3a:c1:7d:86:7b:75: bd:9d:62:a8:90:d0:af:87:21:1c:c8:97:2f:d8:7c: e9:72:76:00:f1:f5:be:de:b6:f5:fd:91:7a:c5:eb: 87:79:29:07:ed:91:a0:ca:29:ab:04:e3:00:5f:c3: 7b:3b:01:32:76:e6:4a:45:10:1d:8f:42:40:2b:fe: f0:f4:7a:9b:c6:f7:19:dc:d5:12:7e:9a:ea:f6:ae: 72:f7:57:99:2a:99:61:10:4f:e5:1e:41:42:d1:89: 3f:98:af:5f:4e:dc:bd:0b:42:26:a8:8b:2f:c2:8e: 69:a8:d1:9a:10:bd:3b:49:56:db:7f:0f:fa:4f:83: 8a:48:b8:ff:24:9f:3b:3a:00:62:70:f5:80:b8:35: c8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:37:35:FC:F3:A1:65:62:AB:95:93:81:6B:EB:15:67:72:66:B5:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/af6ac311-6007-3754-8f7d-5e0c0683affa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:30:6c:f4:2a:f2:ad:c4:e1:de:8e:be:64:0d:8f:d0:40:de: 97:98:8f:4f:aa:d5:20:96:e6:14:6f:f9:05:48:17:8b:b8:28: fa:e5:22:d9:11:69:e7:b6:ee:f0:94:2c:08:fa:dd:7f:c8:be: 74:d1:96:f8:4d:e1:d5:6d:1e:73:c1:7e:6c:3b:dd:5e:18:1d: 71:61:3f:7a:1c:01:12:b2:a3:35:fd:22:3a:6d:59:79:99:78: a2:87:8a:f8:55:5c:52:60:eb:bd:50:d8:e9:db:ae:e6:a6:0c: 0d:9c:1a:31:d3:00:b7:a1:85:7d:56:cd:e0:e4:9e:dd:f1:2b: 83:1c:16:06:09:45:ca:93:83:1c:76:fc:88:48:6e:7d:94:b1: ca:cb:61:a8:49:42:70:d4:34:d4:7d:09:a3:d6:7c:53:0d:d1: a2:8b:ae:d6:10:53:f7:ee:3b:54:71:13:c1:c9:df:d8:4b:88: 76:ab:c1:a5:12:86:aa:bf:5b:44:3f:0e:16:6c:9c:48:25:31: f6:6f:ec:dd:59:9c:00:cf:16:c0:b4:fb:54:ef:ff:7f:20:1a: c4:aa:2d:bf:49:b4:86:3b:6a:d8:a6:10:b6:0f:61:99:63:d2: 30:31:87:62:24:d5:85:7d:45:15:f1:9e:83:90:7b:a4:f8:f8: 22:88:9e:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xZ5WB2pgDCCq9I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQwODIyNTYzOFoXDTI2MDcwNzIyNTYzOFowLzEtMCsGA1UEAxMk ZjU3ZmU5YTYtNjJiOS00YzE1LThhMDQtZTE4NmU1MjlhMThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhRZ/D/5m0ijUNXSrCxJNNY3KUIQaBSXjU/V W79OMsLypGt+rcYTbfJ3Kn9ot3negEmlfIv56kxO69CHKZit9CWJW8wvA4DthVf7 61WF/w5WopEGiq4u9XB9mNQ+Is03XvUQ1uiPDcID5cgpslu8A+c6wX2Ge3W9nWKo kNCvhyEcyJcv2HzpcnYA8fW+3rb1/ZF6xeuHeSkH7ZGgyimrBOMAX8N7OwEyduZK RRAdj0JAK/7w9HqbxvcZ3NUSfprq9q5y91eZKplhEE/lHkFC0Yk/mK9fTty9C0Im qIsvwo5pqNGaEL07SVbbfw/6T4OKSLj/JJ87OgBicPWAuDXIAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ83NfzzoWViq5WTgWvrFWdyZrX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWY2YWMzMTEtNjAwNy0z NzU0LThmN2QtNWUwYzA2ODNhZmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMwbPQq8q3E4d6OvmQNj9BA3peYj0+q1SCW5hRv+QVIF4u4KPrlItkR aee27vCULAj63X/IvnTRlvhN4dVtHnPBfmw73V4YHXFhP3ocARKyozX9IjptWXmZ eKKHivhVXFJg671Q2OnbruamDA2cGjHTALehhX1WzeDknt3xK4McFgYJRcqTgxx2 /IhIbn2UscrLYahJQnDUNNR9CaPWfFMN0aKLrtYQU/fuO1RxE8HJ39hLiHarwaUS hqq/W0Q/DhZsnEglMfZv7N1ZnADPFsC0+1Tv/38gGsSqLb9JtIY7atimELYPYZlj 0jAxh2Ik1YV9RRXxnoOQe6T4+CKInqc= -----END CERTIFICATE-----Generated at Fri Apr 10 23:14:04 2026 by rpki-client