$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/48c8a724-84a6-3648-b5da-0498600617c2.roa File: 48c8a724-84a6-3648-b5da-0498600617c2.roa (raw, json) Hash identifier: NSXn7A3nU2KOe6WfmlwTiyYjhyeOXfCwZTBnN2Ib2IQ= Subject key identifier: F3:A3:A3:F9:74:FF:CE:5D:4C:B7:31:E9:9C:BD:46:7C:C8:24:FC:7C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EA7952824EB05D9A4C76D4080 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/48c8a724-84a6-3648-b5da-0498600617c2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20326 IP address blocks: 72.244.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:28:24:eb:05:d9:a4:c7:6d:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=21a8f754-1b37-401c-b465-d9af4f54d6aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:79:99:9a:e9:84:b6:c1:ac:b0:4d:4b:40:ee: b7:cd:51:9e:3b:73:14:88:19:01:f1:28:aa:02:69: 57:3e:9e:db:2c:d7:8e:1b:95:29:a3:19:3f:21:87: 46:99:6c:01:b1:f2:f1:d1:38:52:05:4d:60:37:e0: ac:8f:56:bd:66:92:cb:a6:41:4b:79:01:2f:68:8b: 0f:0e:5a:b6:6e:71:d6:f8:4f:cd:7f:02:d3:45:9d: 3b:d2:2d:a2:ab:e7:58:0f:17:9f:e8:00:be:96:af: 6e:08:31:af:aa:d3:ba:84:a8:ba:c8:07:b0:c9:a0: 8e:3d:98:de:d0:2a:e9:f5:a9:7e:c0:32:a5:fd:17: fd:4f:f9:eb:54:0a:65:fc:55:01:23:6a:5d:5d:92: e1:8f:86:6c:51:e7:d9:50:e7:bb:d7:16:5d:22:b0: e0:c7:8f:5f:59:4d:55:0b:c1:4a:12:73:f9:eb:0a: 80:12:fd:be:6a:54:e2:cc:b5:a7:ae:74:02:ca:30: 00:77:f9:f0:cc:6a:7f:7b:b5:05:21:f2:85:90:15: 6a:86:e9:6c:b1:91:c6:33:94:3b:f2:b3:32:99:c1: 55:49:4a:a8:b4:06:8c:75:8f:86:c7:8f:cf:d4:d3: e4:33:6d:c4:ed:ea:b6:0e:7f:fe:52:cb:01:d9:a9: 66:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A3:A3:F9:74:FF:CE:5D:4C:B7:31:E9:9C:BD:46:7C:C8:24:FC:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/48c8a724-84a6-3648-b5da-0498600617c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:47:13:9c:51:3d:34:8a:e8:3d:a6:c0:d8:5d:c6:1f:d5:5e: d5:92:32:7e:2f:80:1f:55:65:95:16:02:91:7f:d3:98:55:15: 3b:74:b7:89:2b:03:04:fc:c0:b2:c6:73:ec:1e:43:2a:43:0f: 75:45:ac:02:7f:81:74:ab:47:50:f2:c7:ce:e7:fb:3a:4f:12: 93:b6:a4:20:1a:be:e7:73:41:5e:f2:66:e4:40:bd:31:cb:3a: 36:e7:88:7d:44:41:7a:75:ea:74:0a:e5:0a:67:1d:62:0f:53: 60:5d:98:08:22:91:df:29:5d:99:b0:2d:33:0f:8f:60:cc:70: 80:2a:d3:e8:8e:e0:3b:33:95:40:0d:9f:10:57:76:c4:47:10: 9c:dc:e9:b7:2d:01:05:61:37:15:b5:2e:ae:87:3d:1f:76:19: 8b:a6:be:8e:c7:ed:62:bd:de:2e:cc:a4:85:ea:dc:b9:73:a2: aa:b6:20:35:9d:af:86:7d:30:8b:8d:83:4c:6f:9b:44:75:87: b3:2d:93:5b:7a:b7:d5:43:2e:61:9e:c3:9d:cc:7b:38:8e:ec: f9:4d:65:8b:a3:f9:ad:43:6f:cd:35:d3:1f:de:e8:bd:f8:8b: 99:65:2b:8e:3b:93:2f:04:04:29:e3:12:8e:0f:e1:72:54:4c: 8a:13:d3:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlSgk6wXZpMdtQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjFhOGY3NTQtMWIzNy00MDFjLWI0NjUtZDlhZjRmNTRkNmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XmZmumEtsGssE1LQO63zVGeO3MUiBkB8Siq AmlXPp7bLNeOG5Upoxk/IYdGmWwBsfLx0ThSBU1gN+Csj1a9ZpLLpkFLeQEvaIsP Dlq2bnHW+E/NfwLTRZ070i2iq+dYDxef6AC+lq9uCDGvqtO6hKi6yAewyaCOPZje 0Crp9al+wDKl/Rf9T/nrVApl/FUBI2pdXZLhj4ZsUefZUOe71xZdIrDgx49fWU1V C8FKEnP56wqAEv2+alTizLWnrnQCyjAAd/nwzGp/e7UFIfKFkBVqhulssZHGM5Q7 8rMymcFVSUqotAaMdY+Gx4/P1NPkM23E7eq2Dn/+UssB2almEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOjo/l0/85dTLcx6Zy9RnzIJPx8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDhjOGE3MjQtODRhNi0z NjQ4LWI1ZGEtMDQ5ODYwMDYxN2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPSaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxHE5xRPTSK6D2mwNhdxh/VXtWSMn4vgB9VZZUWApF/05hVFTt0t4kr AwT8wLLGc+weQypDD3VFrAJ/gXSrR1Dyx87n+zpPEpO2pCAavudzQV7yZuRAvTHL OjbniH1EQXp16nQK5QpnHWIPU2BdmAgikd8pXZmwLTMPj2DMcIAq0+iO4DszlUAN nxBXdsRHEJzc6bctAQVhNxW1Lq6HPR92GYumvo7H7WK93i7MpIXq3Llzoqq2IDWd r4Z9MIuNg0xvm0R1h7Mtk1t6t9VDLmGew53MeziO7PlNZYuj+a1Db8010x/e6L34 i5llK447ky8EBCnjEo4P4XJUTIoT00M= -----END CERTIFICATE-----Generated at Wed Jul 29 19:40:34 2026 by rpki-client