$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ddefb3fb-dba4-3cd1-a926-bebbd5e61361.roa File: ddefb3fb-dba4-3cd1-a926-bebbd5e61361.roa (raw, json) Hash identifier: s9+f+O6pKnPutmOOUJIMtDCzsGyk/kiQRKaDNWO0uWw= Subject key identifier: 38:CF:8A:F3:A9:02:EA:1F:D4:7D:A7:1C:36:8A:B7:6F:58:3F:E0:3B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EB6E1B71430E0D1069FB3C640 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ddefb3fb-dba4-3cd1-a926-bebbd5e61361.roa Signing time: Mon 03 Aug 2026 13:00:12 +0000 ROA not before: Mon 03 Aug 2026 13:00:12 +0000 ROA not after: Sun 01 Nov 2026 14:00:12 +0000 asID: 29802 IP address blocks: 72.244.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b6:e1:b7:14:30:e0:d1:06:9f:b3:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 3 13:00:12 2026 GMT Not After : Nov 1 14:00:12 2026 GMT Subject: CN=1ddac428-c010-4ed5-a36f-684e8ae85d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d6:26:ac:d7:ce:53:59:9e:f5:04:a7:e1:ce: 8a:71:80:9c:3d:bb:f1:a6:50:62:93:4f:5e:aa:62: 39:6f:1b:d8:06:3c:49:7f:ee:1d:b8:25:a5:43:48: b9:4b:a6:95:58:e2:07:4c:49:f3:4a:81:ef:50:6c: 06:2b:35:03:e4:93:e2:ba:0d:07:8a:93:49:53:6c: fc:f1:90:be:84:84:2d:cc:14:7e:ae:77:27:9a:c9: 5d:47:f2:60:a1:35:f4:87:b8:89:ab:5a:41:8b:3a: fa:1c:14:2d:41:15:41:b0:b1:98:39:d0:69:68:c2: f9:0f:24:11:83:1e:3d:97:84:f6:be:1a:08:8c:4b: bc:f8:45:ee:6b:58:8a:d7:89:46:33:ff:b3:03:67: 32:e7:1c:c3:2d:01:92:bc:96:58:24:b4:35:27:2d: 31:11:81:3e:f1:cc:d3:f6:2d:41:f6:cd:2e:1d:cd: 3b:fb:79:86:ac:a5:d3:61:01:ec:24:4f:b9:e1:49: 8a:41:73:eb:dd:4c:57:72:39:74:e5:33:7b:19:c4: c8:3d:91:a3:c0:ec:1b:f7:8a:26:ed:72:e5:d4:c0: 17:64:9f:df:0b:89:f0:60:f7:22:cf:c3:c8:d1:93: b5:d5:50:51:80:c1:a4:36:85:38:f1:ca:9d:f6:74: 1a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CF:8A:F3:A9:02:EA:1F:D4:7D:A7:1C:36:8A:B7:6F:58:3F:E0:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ddefb3fb-dba4-3cd1-a926-bebbd5e61361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:09:8b:c7:32:40:57:de:f2:46:9c:26:fb:39:74:54:c9:68: 31:d1:15:26:ca:42:c7:08:d1:8e:0c:9b:35:67:ec:72:e5:e3: 87:64:2f:f2:60:b8:a7:e1:2b:7c:d7:ed:47:54:94:39:e5:aa: 43:cf:de:0b:66:04:72:63:23:3e:e4:ab:16:1a:a9:d2:09:e7: 2b:17:58:b5:a8:3a:5b:84:7a:26:a6:4c:9a:e8:5b:14:70:c1: 5a:8d:e2:b6:a9:c4:12:24:e5:8c:4d:ac:dc:62:e1:92:d4:80: 5d:f9:a2:97:5d:3d:11:62:7a:f6:0b:fb:96:30:48:db:5d:af: 0a:50:4b:f9:96:21:23:d3:a2:09:26:85:74:9f:78:e6:c6:24: b1:f1:e0:5e:90:eb:0d:e2:dd:ce:87:ad:4f:0f:ce:14:63:c1: 0f:6c:1f:00:a6:bf:17:d1:6a:e4:df:f1:cd:1b:3e:2c:e5:88: f1:c8:9f:3b:d9:c1:a7:66:f3:5f:09:de:d2:cd:d3:7f:c3:28: 5d:e2:79:b8:9c:5c:1b:d9:c7:93:15:ab:b8:ff:fb:50:53:ca: af:a4:4f:95:6f:93:34:42:97:8e:5c:5d:0c:fa:c6:96:fb:3b: 1e:bf:6b:a7:75:5d:b1:6c:75:b2:90:98:1b:40:cd:92:41:42: 2e:64:72:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE624bcUMODRBp+zxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgwMzEzMDAxMloXDTI2MTEwMTE0MDAxMlowLzEtMCsGA1UEAxMk MWRkYWM0MjgtYzAxMC00ZWQ1LWEzNmYtNjg0ZThhZTg1ZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNYmrNfOU1me9QSn4c6KcYCcPbvxplBik09e qmI5bxvYBjxJf+4duCWlQ0i5S6aVWOIHTEnzSoHvUGwGKzUD5JPiug0HipNJU2z8 8ZC+hIQtzBR+rncnmsldR/JgoTX0h7iJq1pBizr6HBQtQRVBsLGYOdBpaML5DyQR gx49l4T2vhoIjEu8+EXua1iK14lGM/+zA2cy5xzDLQGSvJZYJLQ1Jy0xEYE+8czT 9i1B9s0uHc07+3mGrKXTYQHsJE+54UmKQXPr3UxXcjl05TN7GcTIPZGjwOwb94om 7XLl1MAXZJ/fC4nwYPciz8PI0ZO11VBRgMGkNoU48cqd9nQaXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjPivOpAuof1H2nHDaKt29YP+A7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGRlZmIzZmItZGJhNC0z Y2QxLWE5MjYtYmViYmQ1ZTYxMzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPRsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsJi8cyQFfe8kacJvs5dFTJaDHRFSbKQscI0Y4MmzVn7HLl44dkL/Jg uKfhK3zX7UdUlDnlqkPP3gtmBHJjIz7kqxYaqdIJ5ysXWLWoOluEeiamTJroWxRw wVqN4rapxBIk5YxNrNxi4ZLUgF35opddPRFievYL+5YwSNtdrwpQS/mWISPTogkm hXSfeObGJLHx4F6Q6w3i3c6HrU8PzhRjwQ9sHwCmvxfRauTf8c0bPizliPHInzvZ wadm818J3tLN03/DKF3iebicXBvZx5MVq7j/+1BTyq+kT5VvkzRCl45cXQz6xpb7 Ox6/a6d1XbFsdbKQmBtAzZJBQi5kcsE= -----END CERTIFICATE-----Generated at Mon Aug 24 08:24:39 2026 by rpki-client