$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/408a6acd-1034-3480-8492-5e81e3981b2d.roa File: 408a6acd-1034-3480-8492-5e81e3981b2d.roa (raw, json) Hash identifier: E60nxkcnMVEZ0+YroAEEGu1kxPtrilQYISfobcDpkzU= Subject key identifier: 6D:D2:DD:E8:89:AB:AB:1A:F8:FE:1E:07:B7:47:62:57:D4:17:C5:F8 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EA84F27200312C568C46E0240 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/408a6acd-1034-3480-8492-5e81e3981b2d.roa Signing time: Wed 29 Jul 2026 07:43:48 +0000 ROA not before: Wed 29 Jul 2026 07:43:48 +0000 ROA not after: Tue 27 Oct 2026 07:43:48 +0000 asID: 40244 IP address blocks: 72.244.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a8:4f:27:20:03:12:c5:68:c4:6e:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 29 07:43:48 2026 GMT Not After : Oct 27 07:43:48 2026 GMT Subject: CN=ffb3157c-87e1-4efa-8150-6028305f96cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4a:b4:d7:2e:64:c9:96:28:c1:9c:98:ea:81: 15:16:20:7d:64:2d:9a:01:5f:41:f0:cc:32:7a:da: 21:34:27:a3:86:37:48:11:c6:87:70:41:c8:e5:b8: fc:d5:cc:c1:e5:88:1b:be:e6:d7:73:c4:fb:cf:c8: f1:2a:46:ef:5f:0b:8b:6b:9e:12:93:0c:8d:b8:1c: b0:3d:df:e1:91:a1:7d:7d:4e:db:c1:7c:d1:23:43: 4f:3e:62:a9:06:67:f0:93:57:0d:f4:a7:67:cf:45: 59:88:28:9c:16:f9:d6:cd:0c:1f:e2:09:72:7d:4e: 83:6d:65:4f:57:06:bd:58:37:0c:60:e3:f7:85:e9: 99:f9:11:ed:1a:50:fb:d7:35:6a:f7:a2:00:4b:6a: e5:57:aa:23:cb:c8:10:ab:99:e6:0c:7c:48:1d:12: 17:82:93:dd:69:ce:58:3f:df:8a:6a:11:b1:42:b2: 12:a9:43:96:f7:a6:a4:29:7e:d2:a0:7e:4d:2c:4a: f3:d3:62:08:33:fc:76:b2:4b:bd:77:7a:91:e7:93: 0d:5f:1e:69:9a:89:de:dc:a3:3b:93:99:6a:28:26: e6:f3:4a:1c:43:6f:11:b6:ab:dc:58:6d:65:7d:00: 4d:64:22:bf:b7:1d:7c:ed:7b:6f:e3:8d:ee:72:90: cc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D2:DD:E8:89:AB:AB:1A:F8:FE:1E:07:B7:47:62:57:D4:17:C5:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/408a6acd-1034-3480-8492-5e81e3981b2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:f7:72:47:df:a9:7e:22:a7:42:62:4c:a1:9d:8d:e2:3e:cb: 85:d1:5a:95:a0:90:33:1a:8b:16:f9:76:05:ef:0e:7c:30:1e: a9:b9:d1:07:df:0b:19:2c:04:87:95:56:6b:04:fb:70:22:27: 12:26:a4:8e:ca:d2:09:a2:2d:31:bf:97:36:e9:87:34:49:1d: 2f:7d:d9:04:1c:0c:fa:d4:df:b6:3f:ec:60:14:9f:da:13:75: fb:23:ff:78:0d:c2:e7:a0:6e:83:be:2e:e2:46:c8:44:51:50: ff:d4:0f:4e:41:ba:64:e7:8d:95:89:6b:e5:03:6f:b0:83:d1: 0e:d4:d2:d5:b1:96:9c:47:d1:9e:ae:e6:e5:d2:3f:80:16:6e: bd:70:c2:43:00:6e:e9:21:7a:97:63:dd:6a:d7:bf:7d:2e:3b: ef:f5:33:cd:3a:4b:c1:fe:7f:6a:a5:6b:15:8f:7e:b8:96:9f: 2c:fa:c8:dc:58:02:72:85:f5:e4:ba:e5:08:64:c3:32:4e:34: 0a:b0:6d:bd:1a:f5:72:26:c1:90:cd:b7:a9:a5:81:1e:11:ce: 79:62:19:95:0c:49:6a:6d:4c:32:7a:c8:ac:68:e9:d1:0d:c9: c1:83:ca:6a:e0:fa:d0:87:aa:05:ce:5f:3c:4a:ad:de:1c:0f: cc:82:61:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6oTycgAxLFaMRuAkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyOTA3NDM0OFoXDTI2MTAyNzA3NDM0OFowLzEtMCsGA1UEAxMk ZmZiMzE1N2MtODdlMS00ZWZhLTgxNTAtNjAyODMwNWY5NmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Eq01y5kyZYowZyY6oEVFiB9ZC2aAV9B8Mwy etohNCejhjdIEcaHcEHI5bj81czB5YgbvubXc8T7z8jxKkbvXwuLa54SkwyNuByw Pd/hkaF9fU7bwXzRI0NPPmKpBmfwk1cN9Kdnz0VZiCicFvnWzQwf4glyfU6DbWVP Vwa9WDcMYOP3hemZ+RHtGlD71zVq96IAS2rlV6ojy8gQq5nmDHxIHRIXgpPdac5Y P9+KahGxQrISqUOW96akKX7SoH5NLErz02IIM/x2sku9d3qR55MNXx5pmone3KM7 k5lqKCbm80ocQ28RtqvcWG1lfQBNZCK/tx187Xtv443ucpDM5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3S3eiJq6sa+P4eB7dHYlfUF8X4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDA4YTZhY2QtMTAzNC0z NDgwLTg0OTItNWU4MWUzOTgxYjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPQBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFD3ckffqX4ip0JiTKGdjeI+y4XRWpWgkDMaixb5dgXvDnwwHqm50Qff CxksBIeVVmsE+3AiJxImpI7K0gmiLTG/lzbphzRJHS992QQcDPrU37Y/7GAUn9oT dfsj/3gNwuegboO+LuJGyERRUP/UD05BumTnjZWJa+UDb7CD0Q7U0tWxlpxH0Z6u 5uXSP4AWbr1wwkMAbukhepdj3WrXv30uO+/1M806S8H+f2qlaxWPfriWnyz6yNxY AnKF9eS65QhkwzJONAqwbb0a9XImwZDNt6mlgR4RznliGZUMSWptTDJ6yKxo6dEN ycGDymrg+tCHqgXOXzxKrd4cD8yCYZ4= -----END CERTIFICATE-----Generated at Wed Jul 29 19:36:39 2026 by rpki-client