$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0a29579f-3964-38d6-ac1b-866aad76121a.roa File: 0a29579f-3964-38d6-ac1b-866aad76121a.roa (raw, json) Hash identifier: I56XJJU0DR8DBdagyTMegGw/O8qZhwHUMJUOer5ZGGA= Subject key identifier: 8C:7D:91:6D:12:B6:A9:00:B8:DE:FE:C8:88:86:4F:EA:B5:87:2F:1D Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CFDE7908450C426F725B2A640 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0a29579f-3964-38d6-ac1b-866aad76121a.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 9304 IP address blocks: 72.244.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e7:90:84:50:c4:26:f7:25:b2:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=73b6d4a5-79cb-48b7-8576-ceee629922c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4e:12:5a:68:a4:db:4b:2d:64:f2:53:f1:09: a8:4d:92:a1:76:87:6e:ca:f0:ce:32:02:99:32:77: 70:07:09:66:67:a6:4f:e3:74:4b:21:02:dd:d4:ce: d5:2b:af:fc:2f:fc:26:5f:b6:99:cd:ec:88:59:1a: f3:62:ed:64:7e:22:97:4b:b8:20:41:f2:fa:09:77: 99:66:e9:d2:64:ed:8c:d4:df:22:07:04:af:21:46: 88:f5:05:4e:5f:5a:0a:4b:d8:16:07:ed:8e:f6:92: 40:8e:b4:32:4b:69:a4:14:e8:cd:c1:67:82:f1:30: 6c:c4:14:29:4f:e1:f4:1e:77:0c:b7:a6:9d:a8:af: 23:62:6a:9a:18:7c:c9:3a:3f:c8:94:22:95:74:95: b0:6d:49:aa:3a:59:2f:b5:fb:d3:67:66:55:26:25: 27:9e:45:a3:11:d4:8a:3f:39:19:1f:8d:42:c9:4f: 7b:f6:81:e7:79:bc:c9:07:00:b1:d8:f6:7b:f6:f9: c5:96:9e:7f:7c:79:97:a5:24:9e:93:2a:c6:db:6d: e2:2c:ec:05:c2:c3:8f:8b:c0:aa:8b:6d:53:41:90: bd:43:a2:bf:dc:36:09:53:12:91:b7:51:78:ba:e9: 39:5a:51:f4:7f:d8:d9:d1:1d:d6:b4:ac:65:b1:85: 1c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7D:91:6D:12:B6:A9:00:B8:DE:FE:C8:88:86:4F:EA:B5:87:2F:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0a29579f-3964-38d6-ac1b-866aad76121a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:9c:be:87:ca:58:fb:90:e9:0e:77:ab:d7:11:5a:13:37:29: 9a:33:f5:e3:29:8a:64:06:08:0a:a4:bd:89:b6:2e:6b:e8:46: 21:bc:c5:9d:2d:88:e7:70:49:86:00:a8:79:6f:e9:39:21:27: 20:f6:d1:01:a3:02:a6:36:19:8f:ac:9b:b1:02:29:67:e6:ee: dd:2f:ac:1d:91:45:d8:1c:54:9e:da:a5:e6:22:95:2f:66:9f: 4e:5c:ed:d0:a3:98:96:a9:99:14:c4:53:09:3a:cc:e0:02:1c: 25:e8:c0:a8:2d:aa:51:58:80:78:1e:fb:f5:7d:f9:3a:e6:91: da:b2:ec:f0:1f:76:7c:6b:59:8b:d3:8c:eb:dd:6a:10:06:94: 51:24:d6:1c:6e:6f:23:42:62:72:e5:7d:06:ba:5b:78:0e:a9: d5:90:f3:34:b8:88:1c:fa:22:48:db:bf:51:67:08:5a:0b:97: 48:3e:41:74:2a:e0:40:ef:88:d2:cb:49:11:a9:22:15:e6:87: 37:55:e8:7e:ee:e6:ec:12:e1:43:63:65:ce:72:ea:d9:cb:67: 46:c6:f5:44:eb:25:55:ea:7e:06:90:49:27:28:6a:d5:4a:4e: e3:2d:c1:c6:4d:dd:71:f0:4d:da:5d:5e:61:44:0e:54:59:a2: 52:cf:e9:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz955CEUMQm9yWypkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk NzNiNmQ0YTUtNzljYi00OGI3LTg1NzYtY2VlZTYyOTkyMmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE4SWmik20stZPJT8QmoTZKhdoduyvDOMgKZ MndwBwlmZ6ZP43RLIQLd1M7VK6/8L/wmX7aZzeyIWRrzYu1kfiKXS7ggQfL6CXeZ ZunSZO2M1N8iBwSvIUaI9QVOX1oKS9gWB+2O9pJAjrQyS2mkFOjNwWeC8TBsxBQp T+H0HncMt6adqK8jYmqaGHzJOj/IlCKVdJWwbUmqOlkvtfvTZ2ZVJiUnnkWjEdSK PzkZH41CyU979oHnebzJBwCx2PZ79vnFlp5/fHmXpSSekyrG223iLOwFwsOPi8Cq i21TQZC9Q6K/3DYJUxKRt1F4uuk5WlH0f9jZ0R3WtKxlsYUc/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIx9kW0StqkAuN7+yIiGT+q1hy8dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGEyOTU3OWYtMzk2NC0z OGQ2LWFjMWItODY2YWFkNzYxMjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALWcvofKWPuQ6Q53q9cRWhM3KZoz9eMpimQGCAqkvYm2LmvoRiG8xZ0t iOdwSYYAqHlv6TkhJyD20QGjAqY2GY+sm7ECKWfm7t0vrB2RRdgcVJ7apeYilS9m n05c7dCjmJapmRTEUwk6zOACHCXowKgtqlFYgHge+/V9+Trmkdqy7PAfdnxrWYvT jOvdahAGlFEk1hxubyNCYnLlfQa6W3gOqdWQ8zS4iBz6Ikjbv1FnCFoLl0g+QXQq 4EDviNLLSRGpIhXmhzdV6H7u5uwS4UNjZc5y6tnLZ0bG9UTrJVXqfgaQSScoatVK TuMtwcZN3XHwTdpdXmFEDlRZolLP6fc= -----END CERTIFICATE-----Generated at Mon Mar 2 14:31:47 2026 by rpki-client