$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b2ecd7f0-152f-3812-b894-f9035b4de6e9.roa File: b2ecd7f0-152f-3812-b894-f9035b4de6e9.roa (raw, json) Hash identifier: GQJQUNhAzxNHr2elmffCM+b4ld2yQMKp06JD7CaM3yU= Subject key identifier: 50:7F:0B:6F:43:39:1F:35:DB:50:5A:A7:16:67:47:95:C3:83:E3:E5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D359F72B40EBDE710D2DD7900 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b2ecd7f0-152f-3812-b894-f9035b4de6e9.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 400175 IP address blocks: 72.244.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:72:b4:0e:bd:e7:10:d2:dd:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=f95fb022-63f6-4b73-aa66-812579debfe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c0:31:fe:26:de:60:80:a5:3f:4f:8d:3e:33: 2e:1d:b8:dd:b7:a3:4b:2a:e5:32:9d:12:d9:10:4c: 0c:4b:bf:ad:d2:c8:05:5a:3d:16:ac:2f:5d:34:c4: d1:20:2b:ab:db:bc:32:a5:0f:90:77:64:b7:78:1d: 97:76:e3:f3:08:98:a0:31:1b:35:7e:15:98:00:ec: 49:c5:79:b3:e3:ec:60:58:b7:5f:c3:6c:2d:15:c0: 4f:14:24:8d:1c:3b:4a:06:50:ef:75:98:5f:e0:fc: 26:a3:62:82:1d:0b:2d:98:33:fd:99:10:e6:3f:e4: ae:ab:56:ff:ae:04:08:40:35:dd:d8:65:e9:eb:84: 57:44:e3:30:f2:82:5b:b7:f7:55:89:08:f8:a5:87: 61:88:56:ee:8d:d7:f5:75:45:d9:17:bc:2e:e6:1d: 90:2c:54:b2:81:d2:62:36:40:2a:57:6a:96:4d:92: 16:20:94:03:0f:46:7c:f9:9e:29:2e:16:b6:4e:8f: 5f:a1:0b:85:6c:23:33:cd:80:0c:72:b3:ef:ba:20: ce:e3:ce:b5:2b:87:a7:97:41:ce:b3:7d:b6:34:10: f6:f2:8c:4c:f9:2c:4d:1f:4a:90:02:7c:c8:00:a4: ac:1e:9f:d5:5e:92:38:7e:e5:b3:a0:0b:c9:47:6c: 47:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:7F:0B:6F:43:39:1F:35:DB:50:5A:A7:16:67:47:95:C3:83:E3:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b2ecd7f0-152f-3812-b894-f9035b4de6e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:e0:6d:f4:22:34:95:36:ec:6f:5a:e3:16:8f:56:13:9c:51: 45:a1:b1:2e:25:bd:47:9c:39:ff:ac:de:5c:8e:16:b2:9f:e7: d9:0c:b8:bc:53:83:12:8f:e1:dc:d5:27:fa:48:60:bd:b5:8b: 1d:30:40:9b:47:e4:2a:1a:c6:0f:6f:bf:60:34:be:a6:d5:01: 83:15:37:97:08:42:ab:31:32:6c:ef:c2:1d:c3:73:82:1a:63: 22:f1:e7:da:0b:d7:db:a0:a6:83:30:4c:0f:17:92:13:db:00: 50:2d:06:86:9e:9d:25:41:62:50:19:a7:38:cc:ea:2a:f8:07: 2d:57:79:83:95:43:7c:c3:c7:50:2f:d7:3b:34:ce:71:19:8c: 32:85:67:20:c5:d7:5a:aa:3d:3d:d6:32:07:7b:df:84:e8:a2: 92:2f:52:08:86:75:a6:1f:70:fc:d2:d1:80:3e:29:9f:e2:5f: 24:03:e1:b0:46:87:b3:84:92:fa:14:b1:98:a5:fd:02:26:87: 9b:67:f6:30:cc:03:98:b6:4e:28:52:f1:b8:62:99:89:35:28: 98:59:49:49:60:f6:24:50:b1:f3:85:64:63:f6:00:31:d6:b4: 0c:07:c2:fb:be:3b:9b:4c:43:a3:f5:a4:7f:4c:ff:eb:cd:36: 7b:31:16:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n3K0Dr3nENLdeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk Zjk1ZmIwMjItNjNmNi00YjczLWFhNjYtODEyNTc5ZGViZmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMAx/ibeYIClP0+NPjMuHbjdt6NLKuUynRLZ EEwMS7+t0sgFWj0WrC9dNMTRICur27wypQ+Qd2S3eB2XduPzCJigMRs1fhWYAOxJ xXmz4+xgWLdfw2wtFcBPFCSNHDtKBlDvdZhf4Pwmo2KCHQstmDP9mRDmP+Suq1b/ rgQIQDXd2GXp64RXROMw8oJbt/dViQj4pYdhiFbujdf1dUXZF7wu5h2QLFSygdJi NkAqV2qWTZIWIJQDD0Z8+Z4pLha2To9foQuFbCMzzYAMcrPvuiDO4861K4enl0HO s322NBD28oxM+SxNH0qQAnzIAKSsHp/VXpI4fuWzoAvJR2xHLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFB/C29DOR8121BapxZnR5XDg+PlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjJlY2Q3ZjAtMTUyZi0z ODEyLWI4OTQtZjkwMzViNGRlNmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/gbfQiNJU27G9a4xaPVhOcUUWhsS4lvUecOf+s3lyOFrKf59kMuLxT gxKP4dzVJ/pIYL21ix0wQJtH5Coaxg9vv2A0vqbVAYMVN5cIQqsxMmzvwh3Dc4Ia YyLx59oL19ugpoMwTA8XkhPbAFAtBoaenSVBYlAZpzjM6ir4By1XeYOVQ3zDx1Av 1zs0znEZjDKFZyDF11qqPT3WMgd734ToopIvUgiGdaYfcPzS0YA+KZ/iXyQD4bBG h7OEkvoUsZil/QImh5tn9jDMA5i2TihS8bhimYk1KJhZSUlg9iRQsfOFZGP2ADHW tAwHwvu+O5tMQ6P1pH9M/+vNNnsxFno= -----END CERTIFICATE-----Generated at Sat Mar 21 07:06:58 2026 by rpki-client