$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/d3047cac-f2f4-32be-99dc-172f87e65ca7.roa File: d3047cac-f2f4-32be-99dc-172f87e65ca7.roa (raw, json) Hash identifier: pc5FWrBaSxl1liiRG0fGjn1HKc/5OkOoFkZggFFzdiM= Subject key identifier: 66:0B:2A:7C:E4:99:14:5B:96:2C:FD:3C:69:3A:D3:15:0C:5D:9B:E0 Certificate issuer: /CN=42a6a92d-cd75-4125-b537-c87919ad3f73 Certificate serial: 010D0C9F4328584CF6ECD5F347BD595768A09400 Authority key identifier: 8C:94:14:C3:3F:03:44:25:C8:60:7A:5E:08:AC:01:C6:4C:FE:C7:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/d3047cac-f2f4-32be-99dc-172f87e65ca7.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 46573 IP address blocks: 72.19.12.0/24 maxlen: 24 72.19.13.0/24 maxlen: 24 72.19.14.0/24 maxlen: 24 72.19.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/42a6a92d-cd75-4125-b537-c87919ad3f73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/42a6a92d-cd75-4125-b537-c87919ad3f73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:d5:f3:47:bd:59:57:68:a0:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42a6a92d-cd75-4125-b537-c87919ad3f73 Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=046604cd-aede-42e2-bf1d-8a12779232d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e4:d1:88:9a:a1:6c:05:bf:8c:ab:38:9f:d5: 5b:d6:cb:e6:70:ec:12:c2:a6:09:88:05:ce:aa:cc: a5:2c:fa:3a:70:a5:88:b1:82:06:20:c0:45:f3:67: 4e:c0:97:06:ad:37:1b:c2:48:a8:13:6c:a8:06:68: 45:61:a8:1e:d8:63:69:45:31:4a:f5:89:9a:f8:08: 7e:dd:1f:41:d7:77:7a:1a:a2:d3:2b:cf:35:de:18: ca:35:4d:d7:17:33:6b:57:b7:d8:16:53:63:37:a5: e2:21:34:f4:83:89:8d:9d:ad:19:10:27:fe:dd:34: 07:44:4d:58:a5:20:0a:01:d9:f6:62:1a:1b:2b:6f: bc:f6:ff:bb:c0:b1:11:d8:6c:85:21:75:86:b4:b6: 72:37:61:8a:a8:ff:94:12:64:b5:d1:49:05:e6:28: ee:12:e0:0f:d4:bb:d8:5d:fd:96:4c:ea:53:ad:31: d3:53:20:4c:d6:22:3b:6d:35:89:ec:34:89:18:ae: ca:87:a6:e8:09:8a:4d:0f:b3:21:d5:54:b8:68:ae: 33:11:d3:d7:16:5a:92:70:95:d8:2f:a1:c7:1c:3f: 93:bf:2d:07:15:e8:a7:93:2a:75:16:77:5b:00:94: a9:8d:8a:12:54:6b:15:17:e8:a3:d6:c2:ca:5f:e2: 25:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0B:2A:7C:E4:99:14:5B:96:2C:FD:3C:69:3A:D3:15:0C:5D:9B:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/d3047cac-f2f4-32be-99dc-172f87e65ca7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/42a6a92d-cd75-4125-b537-c87919ad3f73.crl X509v3 Authority Key Identifier: keyid:8C:94:14:C3:3F:03:44:25:C8:60:7A:5E:08:AC:01:C6:4C:FE:C7:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73.cer sbgp-ipAddrBlock: critical IPv4: 72.19.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ac:54:4c:54:7f:b0:43:5d:a0:7e:e2:6e:ed:fc:c4:fb:76: e4:56:38:69:76:b9:a1:d3:4e:0a:23:b5:18:df:34:90:94:8d: 49:2b:7e:fd:ce:ad:c9:4b:f7:ac:7b:8c:18:16:f0:16:17:b5: 49:5b:ac:e9:e6:37:42:f4:72:af:d0:88:8b:c3:e0:79:4b:31: f7:dc:4d:15:41:f5:b0:36:76:5d:97:91:cb:ae:06:77:d7:5d: 6a:ab:0e:81:9a:1a:29:b7:6d:ca:d9:e7:82:11:fb:e2:0c:0e: f3:12:36:4c:c7:db:2f:29:eb:cc:55:38:4a:c6:9e:9c:48:6f: 59:f5:df:dd:4a:b1:10:64:c4:b7:cc:83:57:28:24:0f:2e:08: 84:a7:9f:09:45:b8:d1:5f:9c:85:22:85:f5:89:14:7c:7d:8f: 16:fa:f8:35:16:11:23:f9:40:8d:5f:2c:2c:d7:bf:61:4c:a4: 15:fa:69:28:72:2f:da:30:38:0d:50:fb:9a:51:11:6e:0e:9c: 31:a2:0c:0f:1a:79:3d:04:63:b4:43:0d:d4:56:bc:52:62:45: 2f:99:ca:5c:d2:af:1e:ec:fc:13:9a:ff:c6:f4:d5:b7:45:0d: bb:c2:b4:44:c6:8d:ff:f6:1b:46:2c:f2:48:80:35:ff:72:20: b0:df:91:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz27NXzR71ZV2iglAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJhNmE5MmQtY2Q3NS00MTI1LWI1MzctYzg3OTE5YWQz ZjczMB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk MDQ2NjA0Y2QtYWVkZS00MmUyLWJmMWQtOGExMjc3OTIzMmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+TRiJqhbAW/jKs4n9Vb1svmcOwSwqYJiAXO qsylLPo6cKWIsYIGIMBF82dOwJcGrTcbwkioE2yoBmhFYage2GNpRTFK9Yma+Ah+ 3R9B13d6GqLTK8813hjKNU3XFzNrV7fYFlNjN6XiITT0g4mNna0ZECf+3TQHRE1Y pSAKAdn2YhobK2+89v+7wLER2GyFIXWGtLZyN2GKqP+UEmS10UkF5ijuEuAP1LvY Xf2WTOpTrTHTUyBM1iI7bTWJ7DSJGK7Kh6boCYpND7Mh1VS4aK4zEdPXFlqScJXY L6HHHD+Tvy0HFeinkyp1FndbAJSpjYoSVGsVF+ij1sLKX+IlgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYLKnzkmRRbliz9PGk60xUMXZvgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80MmE2 YTkyZC1jZDc1LTQxMjUtYjUzNy1jODc5MTlhZDNmNzMvZDMwNDdjYWMtZjJmNC0z MmJlLTk5ZGMtMTcyZjg3ZTY1Y2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDJhNmE5MmQtY2Q3NS00MTI1LWI1 MzctYzg3OTE5YWQzZjczLzQyYTZhOTJkLWNkNzUtNDEyNS1iNTM3LWM4NzkxOWFk M2Y3My5jcmwwHwYDVR0jBBgwFoAUjJQUwz8DRCXIYHpeCKwBxkz+x+4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80MmE2YTkyZC1jZDc1LTQxMjUtYjUzNy1jODc5 MTlhZDNmNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBMMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGsVExUf7BDXaB+4m7t/MT7duRWOGl2uaHTTgojtRjfNJCUjUkrfv3O rclL96x7jBgW8BYXtUlbrOnmN0L0cq/QiIvD4HlLMffcTRVB9bA2dl2XkcuuBnfX XWqrDoGaGim3bcrZ54IR++IMDvMSNkzH2y8p68xVOErGnpxIb1n1391KsRBkxLfM g1coJA8uCISnnwlFuNFfnIUihfWJFHx9jxb6+DUWESP5QI1fLCzXv2FMpBX6aShy L9owOA1Q+5pREW4OnDGiDA8aeT0EY7RDDdRWvFJiRS+ZylzSrx7s/BOa/8b01bdF DbvCtETGjf/2G0Ys8kiANf9yILDfkbI= -----END CERTIFICATE-----Generated at Mon Mar 2 10:43:20 2026 by rpki-client