$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1c9f0465-12ea-3bdf-a20c-e859be4f438c.roa File: 1c9f0465-12ea-3bdf-a20c-e859be4f438c.roa (raw, json) Hash identifier: 6orxR97TH0NI/SzxA0uoRm3E3QnoOsKNzL8GMxD3Pq4= Subject key identifier: 8F:52:D4:95:6F:BC:3D:06:7C:04:F9:7C:9A:56:DE:BA:7A:25:7D:BC Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D7DBB8026E841AF561DD97580 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1c9f0465-12ea-3bdf-a20c-e859be4f438c.roa Signing time: Mon 13 Apr 2026 08:55:25 +0000 ROA not before: Mon 13 Apr 2026 08:55:25 +0000 ROA not after: Sun 12 Jul 2026 08:55:25 +0000 asID: 198250 IP address blocks: 72.244.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7d:bb:80:26:e8:41:af:56:1d:d9:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 13 08:55:25 2026 GMT Not After : Jul 12 08:55:25 2026 GMT Subject: CN=cdd2a6dd-2586-4a1e-89db-276410facda0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ca:91:12:00:24:eb:18:ef:a0:d3:15:a4:c8: b7:a9:20:80:0a:52:23:38:8d:e8:f5:c7:71:de:6d: ad:2c:f9:2e:77:c5:93:6a:54:f0:cd:80:cb:b5:ed: dc:3b:09:19:f6:59:ba:94:ee:74:9d:43:fe:19:80: de:41:01:ac:50:7f:62:56:54:a4:41:de:0b:2e:59: 34:0f:d5:4e:bc:aa:0f:3c:9a:8f:9d:d1:26:63:33: ee:63:56:90:5f:2c:5a:2e:59:77:bf:7d:86:de:42: 61:42:72:73:cb:68:94:cb:98:c0:89:26:5a:f4:38: 9c:12:d1:55:35:ae:01:0e:a4:8a:58:d4:a7:eb:51: 4e:d7:6a:6e:dd:5c:f4:42:8d:9b:39:70:1e:d1:4c: f8:60:41:d6:6f:ff:be:17:23:a9:99:56:26:4d:0b: 1c:a0:57:1f:10:e3:f4:9d:18:ae:c7:d8:f7:a1:18: f9:70:22:e3:00:22:14:12:b2:b0:1f:51:a5:57:77: 60:6a:4c:6b:8d:f1:96:99:b0:01:37:19:a5:0b:fd: a2:d0:e0:9e:97:48:53:a5:19:8f:fd:fb:45:8e:88: f7:a0:b3:4d:cf:d7:fb:ec:56:56:84:fe:b0:38:d0: 88:81:79:3d:69:63:c7:a7:8a:96:a1:d2:1a:ea:b8: 72:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:52:D4:95:6F:BC:3D:06:7C:04:F9:7C:9A:56:DE:BA:7A:25:7D:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1c9f0465-12ea-3bdf-a20c-e859be4f438c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:81:7f:7c:3b:22:ef:4a:f5:76:b1:f0:cf:7d:7e:dc:d0:19: 08:41:61:1c:72:fc:43:0e:57:93:60:f2:77:9f:ea:7e:b5:ba: 10:bd:d6:d2:09:32:c3:3a:61:ff:70:b7:a1:46:33:5d:41:75: 6c:f1:e3:f7:30:5b:af:a8:b1:92:17:56:7b:99:7a:69:13:60: 92:d3:eb:4f:10:e0:40:db:d6:88:75:da:3f:9b:77:c1:50:c2: f9:0a:94:f2:da:86:63:57:3c:83:07:11:b4:b8:e0:ad:6f:3d: 5e:b9:94:6c:80:0b:b5:df:cc:ed:b3:4f:af:30:78:4d:1a:80: 95:e3:0a:be:88:51:04:de:ed:47:2b:86:c1:81:8a:76:79:6a: f9:00:5c:5c:f5:3a:de:f0:a9:53:c0:e4:35:8f:f1:09:28:66: 86:f4:26:a7:ba:2c:15:d5:14:9a:38:60:4a:48:3d:c6:34:93: 47:d3:ee:7f:23:d5:fb:61:51:09:f7:c3:d1:69:ea:3e:18:73: 5e:59:a1:64:8b:a6:2d:41:c3:fe:e1:17:52:d5:1e:38:9e:a6: 0c:84:8a:d3:95:1e:cd:fb:97:31:7e:25:85:b4:9d:6a:6d:bb: 62:d7:43:33:8e:34:69:d8:74:29:02:56:d4:0c:51:ef:ac:72: da:88:31:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE19u4Am6EGvVh3ZdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQxMzA4NTUyNVoXDTI2MDcxMjA4NTUyNVowLzEtMCsGA1UEAxMk Y2RkMmE2ZGQtMjU4Ni00YTFlLTg5ZGItMjc2NDEwZmFjZGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMqREgAk6xjvoNMVpMi3qSCAClIjOI3o9cdx 3m2tLPkud8WTalTwzYDLte3cOwkZ9lm6lO50nUP+GYDeQQGsUH9iVlSkQd4LLlk0 D9VOvKoPPJqPndEmYzPuY1aQXyxaLll3v32G3kJhQnJzy2iUy5jAiSZa9DicEtFV Na4BDqSKWNSn61FO12pu3Vz0Qo2bOXAe0Uz4YEHWb/++FyOpmVYmTQscoFcfEOP0 nRiux9j3oRj5cCLjACIUErKwH1GlV3dgakxrjfGWmbABNxmlC/2i0OCel0hTpRmP /ftFjoj3oLNNz9f77FZWhP6wONCIgXk9aWPHp4qWodIa6rhyjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9S1JVvvD0GfAT5fJpW3rp6JX28MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMWM5ZjA0NjUtMTJlYS0z YmRmLWEyMGMtZTg1OWJlNGY0MzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPSdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICBf3w7Iu9K9Xax8M99ftzQGQhBYRxy/EMOV5Ng8nef6n61uhC91tIJ MsM6Yf9wt6FGM11BdWzx4/cwW6+osZIXVnuZemkTYJLT608Q4EDb1oh12j+bd8FQ wvkKlPLahmNXPIMHEbS44K1vPV65lGyAC7XfzO2zT68weE0agJXjCr6IUQTe7Ucr hsGBinZ5avkAXFz1Ot7wqVPA5DWP8QkoZob0Jqe6LBXVFJo4YEpIPcY0k0fT7n8j 1fthUQn3w9Fp6j4Yc15ZoWSLpi1Bw/7hF1LVHjiepgyEitOVHs37lzF+JYW0nWpt u2LXQzOONGnYdCkCVtQMUe+sctqIMS4= -----END CERTIFICATE-----Generated at Fri Apr 17 23:55:16 2026 by rpki-client