$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ff1c1e88-2299-39ea-8202-af4d554b435e.roa File: ff1c1e88-2299-39ea-8202-af4d554b435e.roa (raw, json) Hash identifier: VlrJfEXY0nbt0LM8ZiFoY7OIOW+V7u3M6oTuMHBVhds= Subject key identifier: 30:4E:96:D9:5F:E0:A1:EF:D1:EA:A9:F4:BE:20:52:10:BD:A0:D9:5A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DDBBB1C04ED779F541ACD8228 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ff1c1e88-2299-39ea-8202-af4d554b435e.roa Signing time: Sun 17 May 2026 01:00:24 +0000 ROA not before: Sun 17 May 2026 01:00:24 +0000 ROA not after: Sat 15 Aug 2026 01:00:24 +0000 asID: 23470 IP address blocks: 72.244.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:db:bb:1c:04:ed:77:9f:54:1a:cd:82:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 17 01:00:24 2026 GMT Not After : Aug 15 01:00:24 2026 GMT Subject: CN=6e87812b-820e-41cd-8f36-eb6dfb74b271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fe:ee:ff:48:73:22:48:0d:b1:81:a2:e0:8a: 1e:8e:c3:78:dc:eb:18:56:49:d3:28:99:ae:04:27: ca:ee:db:07:2b:56:28:b9:8b:c7:ef:bd:eb:5a:d5: 6c:93:1e:3e:b4:74:b1:71:5f:75:0f:60:fc:83:d3: e7:0d:a3:56:f7:5f:7a:70:1a:1f:38:65:e1:b2:e5: 9d:39:67:a1:e3:d1:44:21:31:14:30:d4:ce:03:bc: f5:8f:74:54:b2:e2:0e:8c:19:ea:b7:84:7b:ec:21: 5e:0e:9c:22:b9:39:db:b6:84:93:eb:80:fd:77:58: 36:4f:68:7c:61:ad:dc:7a:9c:5d:01:14:e5:08:bd: 8c:b6:0f:a9:2c:e7:59:4b:0f:09:9f:ec:03:22:0b: 3e:eb:2e:2e:54:bd:ac:7e:fe:9e:21:d8:53:9c:21: 70:b8:d1:af:4a:76:38:36:63:a2:42:52:8a:32:67: 2f:94:d7:89:80:f5:7c:8d:f0:f3:36:ec:8f:db:2c: 41:56:c4:b5:f6:d4:0c:55:92:42:1b:b7:f4:5a:6d: ca:f4:a0:75:30:13:78:16:22:1c:33:4b:58:b7:bf: 9d:f6:6c:37:81:65:aa:a3:20:76:ab:7a:36:2d:74: 1a:88:ec:47:c7:cc:ba:f1:c5:03:7b:4e:d7:d9:95: 40:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4E:96:D9:5F:E0:A1:EF:D1:EA:A9:F4:BE:20:52:10:BD:A0:D9:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ff1c1e88-2299-39ea-8202-af4d554b435e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:e4:71:bf:13:8f:08:f1:2b:31:5d:08:d8:df:fc:dd:c5:d4: d0:26:b6:02:76:44:fc:ec:f5:bd:7f:ce:4d:9c:96:6b:64:62: 70:f7:04:92:67:08:15:de:50:5e:27:71:7a:90:fc:f0:dc:03: 7e:d7:80:83:ef:eb:46:4f:73:7b:50:6b:25:51:22:ea:ae:26: 31:b3:2f:40:be:3e:6b:1a:60:38:17:63:b4:56:86:64:d0:a5: 8d:b3:de:96:8f:f9:b7:61:7b:31:33:4a:1e:47:98:98:86:82: 74:9d:08:99:bd:e3:9d:a0:2f:84:f8:eb:52:61:3a:61:57:1f: dd:ab:6b:b8:85:65:8c:eb:29:b8:cf:36:b8:7d:27:e2:70:7c: 0e:a6:70:85:b8:17:60:b6:54:80:65:8b:9a:5f:53:46:75:41: 69:f5:b6:45:89:3a:18:aa:76:39:91:62:78:e8:6d:cb:f3:d6: 05:0d:9f:d4:6a:c0:15:e8:3c:26:ff:c0:4a:d7:4a:b7:12:81: ff:14:af:af:0d:1b:8d:4b:9e:1a:0b:0c:97:44:5b:b1:83:78: ff:da:29:e7:81:57:be:93:bf:b6:da:73:ef:cf:99:80:58:80: a1:78:b8:ec:6c:69:26:96:d4:f6:5d:31:75:40:b3:ce:ce:9e: fb:ca:d1:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3buxwE7XefVBrNgigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUxNzAxMDAyNFoXDTI2MDgxNTAxMDAyNFowLzEtMCsGA1UEAxMk NmU4NzgxMmItODIwZS00MWNkLThmMzYtZWI2ZGZiNzRiMjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/7u/0hzIkgNsYGi4IoejsN43OsYVknTKJmu BCfK7tsHK1YouYvH773rWtVskx4+tHSxcV91D2D8g9PnDaNW9196cBofOGXhsuWd OWeh49FEITEUMNTOA7z1j3RUsuIOjBnqt4R77CFeDpwiuTnbtoST64D9d1g2T2h8 Ya3cepxdARTlCL2Mtg+pLOdZSw8Jn+wDIgs+6y4uVL2sfv6eIdhTnCFwuNGvSnY4 NmOiQlKKMmcvlNeJgPV8jfDzNuyP2yxBVsS19tQMVZJCG7f0Wm3K9KB1MBN4FiIc M0tYt7+d9mw3gWWqoyB2q3o2LXQaiOxHx8y68cUDe07X2ZVAVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBOltlf4KHv0eqp9L4gUhC9oNlaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmYxYzFlODgtMjI5OS0z OWVhLTgyMDItYWY0ZDU1NGI0MzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPSZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfkcb8TjwjxKzFdCNjf/N3F1NAmtgJ2RPzs9b1/zk2clmtkYnD3BJJn CBXeUF4ncXqQ/PDcA37XgIPv60ZPc3tQayVRIuquJjGzL0C+PmsaYDgXY7RWhmTQ pY2z3paP+bdhezEzSh5HmJiGgnSdCJm9452gL4T461JhOmFXH92ra7iFZYzrKbjP Nrh9J+JwfA6mcIW4F2C2VIBli5pfU0Z1QWn1tkWJOhiqdjmRYnjobcvz1gUNn9Rq wBXoPCb/wErXSrcSgf8Ur68NG41LnhoLDJdEW7GDeP/aKeeBV76Tv7bac+/PmYBY gKF4uOxsaSaW1PZdMXVAs87OnvvK0Wg= -----END CERTIFICATE-----Generated at Sun May 24 10:37:35 2026 by rpki-client