$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d6e20fb1-a74b-3c39-82ff-428522767ed7.roa File: d6e20fb1-a74b-3c39-82ff-428522767ed7.roa (raw, json) Hash identifier: Kbla8E4RTR9vn4Isf1woM5rdKoFsx7/m87Fx+dSHaW4= Subject key identifier: D1:B0:FA:1E:75:DC:D0:25:AF:0B:D9:66:DD:9C:C6:31:96:A6:73:EC Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E51E9DD47FF87E63262A29D00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d6e20fb1-a74b-3c39-82ff-428522767ed7.roa Signing time: Sun 28 Jun 2026 09:00:11 +0000 ROA not before: Sun 28 Jun 2026 09:00:11 +0000 ROA not after: Sat 26 Sep 2026 09:00:11 +0000 asID: 7029 IP address blocks: 72.244.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:51:e9:dd:47:ff:87:e6:32:62:a2:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jun 28 09:00:11 2026 GMT Not After : Sep 26 09:00:11 2026 GMT Subject: CN=ae2b2ede-4982-49fe-a28a-82ae1ea4c98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:99:fd:a1:6a:69:28:dd:1a:c1:89:e5:5b:79: 6b:f2:88:96:ec:0b:c6:50:e9:84:cf:1a:e3:48:a1: 06:18:f8:d5:32:0f:41:17:c5:d4:b5:ac:1c:28:4e: d6:0c:db:6b:aa:d2:24:71:db:7f:69:46:4b:68:54: dd:84:0c:6d:78:67:7d:1b:03:0c:d4:4e:07:ea:74: 94:69:c4:87:fb:5e:88:fc:d3:be:20:55:0f:b9:d7: f7:fd:7e:17:27:09:e9:bc:74:64:1e:0d:27:f8:65: 73:17:02:cb:26:b2:f9:87:b1:11:77:70:2d:65:4a: c5:21:30:5a:55:1c:6b:05:c5:17:d0:8e:fa:55:b2: 51:b9:a2:90:1f:d0:8f:3c:63:e0:5e:bb:f2:86:d9: ea:f5:c5:15:db:bd:2a:7d:4e:c4:f0:1f:ac:61:66: 4d:89:cb:a1:51:ea:db:98:9a:f0:31:28:b7:aa:31: 7d:07:f5:fa:7e:09:ca:5d:28:b4:46:df:78:1e:ae: 75:e5:19:0b:4f:82:39:3d:e1:6f:2e:43:9a:3d:33: 76:22:7e:d0:18:1e:64:c2:db:f5:f9:39:63:3d:4d: 80:b5:73:06:9b:0e:bc:55:b8:8f:44:8e:fe:b8:b8: fd:20:c0:36:68:99:15:90:07:a9:42:66:4d:6e:5a: d7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B0:FA:1E:75:DC:D0:25:AF:0B:D9:66:DD:9C:C6:31:96:A6:73:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d6e20fb1-a74b-3c39-82ff-428522767ed7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:9b:c4:17:c1:c4:cb:60:e9:d5:c7:0a:5d:fe:ef:d1:e4:40: 3a:c7:c1:73:f3:0e:45:e1:13:2a:f6:bc:16:b6:9b:9b:d6:f9: 75:2c:ec:11:9c:50:b0:5c:3b:97:8a:de:97:ed:97:98:26:26: 38:d6:1b:c1:85:c2:fa:d0:4d:8b:d0:e4:b0:89:19:ad:77:ee: b8:c4:98:39:94:e2:3b:85:85:a3:03:4f:00:6c:e5:0f:c7:cf: 46:76:28:51:be:5d:46:ea:4a:d6:17:9d:6f:6b:e4:1c:fd:04: d6:1e:72:78:64:66:fb:f6:de:38:07:28:c8:68:31:d1:77:70: f4:5f:33:ae:e9:17:00:ac:35:3b:5c:84:5e:ca:62:97:4a:0b: 2d:46:6c:e6:06:b4:4f:fb:b1:78:d3:f9:b3:a6:73:ec:60:6b: 17:be:2c:f3:09:de:89:c3:d7:a7:da:f1:8e:16:37:f9:81:a0: 7a:34:53:f1:11:31:aa:d3:50:62:c1:52:0e:5a:f9:88:fa:78: 50:de:cb:64:dc:fa:93:16:3f:83:d6:6d:22:94:21:c2:89:91: 24:19:78:39:bc:4a:c0:71:cc:1a:f7:4a:d3:78:de:b1:96:c1: dc:53:e8:f2:15:62:81:7a:27:03:c8:a7:f1:25:33:fd:9e:41: 04:53:24:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5R6d1H/4fmMmKinQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDYyODA5MDAxMVoXDTI2MDkyNjA5MDAxMVowLzEtMCsGA1UEAxMk YWUyYjJlZGUtNDk4Mi00OWZlLWEyOGEtODJhZTFlYTRjOThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5n9oWppKN0awYnlW3lr8oiW7AvGUOmEzxrj SKEGGPjVMg9BF8XUtawcKE7WDNtrqtIkcdt/aUZLaFTdhAxteGd9GwMM1E4H6nSU acSH+16I/NO+IFUPudf3/X4XJwnpvHRkHg0n+GVzFwLLJrL5h7ERd3AtZUrFITBa VRxrBcUX0I76VbJRuaKQH9CPPGPgXrvyhtnq9cUV270qfU7E8B+sYWZNicuhUerb mJrwMSi3qjF9B/X6fgnKXSi0Rt94Hq515RkLT4I5PeFvLkOaPTN2In7QGB5kwtv1 +TljPU2AtXMGmw68VbiPRI7+uLj9IMA2aJkVkAepQmZNblrXbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGw+h513NAlrwvZZt2cxjGWpnPsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDZlMjBmYjEtYTc0Yi0z YzM5LTgyZmYtNDI4NTIyNzY3ZWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPQYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWbxBfBxMtg6dXHCl3+79HkQDrHwXPzDkXhEyr2vBa2m5vW+XUs7BGc ULBcO5eK3pftl5gmJjjWG8GFwvrQTYvQ5LCJGa137rjEmDmU4juFhaMDTwBs5Q/H z0Z2KFG+XUbqStYXnW9r5Bz9BNYecnhkZvv23jgHKMhoMdF3cPRfM67pFwCsNTtc hF7KYpdKCy1GbOYGtE/7sXjT+bOmc+xgaxe+LPMJ3onD16fa8Y4WN/mBoHo0U/ER MarTUGLBUg5a+Yj6eFDey2Tc+pMWP4PWbSKUIcKJkSQZeDm8SsBxzBr3StN43rGW wdxT6PIVYoF6JwPIp/ElM/2eQQRTJBw= -----END CERTIFICATE-----Generated at Fri Jul 10 13:52:42 2026 by rpki-client