$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/570f2a2c-6dc0-31eb-8296-b41ff6be429b.roa File: 570f2a2c-6dc0-31eb-8296-b41ff6be429b.roa (raw, json) Hash identifier: O8pPbjSNZhHhpy1RK8mWyHhqNDT/nqwTeFkpBE9fL8I= Subject key identifier: EF:EC:22:8E:89:74:8A:A7:99:14:63:DD:14:EF:87:3F:62:41:0F:21 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CF422130B75764439DC3A5E20 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/570f2a2c-6dc0-31eb-8296-b41ff6be429b.roa Signing time: Mon 23 Feb 2026 02:00:31 +0000 ROA not before: Mon 23 Feb 2026 02:00:31 +0000 ROA not after: Sun 24 May 2026 01:00:31 +0000 asID: 834 IP address blocks: 72.244.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f4:22:13:0b:75:76:44:39:dc:3a:5e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Feb 23 02:00:31 2026 GMT Not After : May 24 01:00:31 2026 GMT Subject: CN=cba2a91b-b928-489a-b9cb-e3329e2475e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2d:25:3a:99:20:2e:b0:4f:0a:3c:a4:9c:d9: 0c:de:99:ba:be:f9:3c:55:dc:ee:c9:d9:44:76:28: 59:66:49:bd:96:58:d8:3e:d3:a3:f4:17:3a:4f:3b: c9:99:0c:de:6c:04:4e:05:36:54:a8:af:d3:ae:c3: 4e:e7:35:6d:96:33:f7:75:02:be:c5:98:ac:85:27: 36:b7:40:a3:af:f5:a2:fa:21:bd:7b:a4:08:d7:78: f8:32:06:c0:af:ed:b2:ad:94:1a:c4:d3:67:e2:93: ae:58:ae:0d:6a:08:25:16:05:73:ac:c6:bd:8a:fd: 1b:3f:77:31:48:32:d7:12:73:ac:37:bc:01:d5:54: 68:0b:71:84:21:76:95:72:75:70:27:d7:04:c4:d7: 9f:1f:c8:25:07:d4:bc:aa:46:9d:c2:9d:93:1b:7f: 1a:5e:09:61:3f:bd:53:0a:71:a4:dc:7c:52:cf:59: ec:20:d6:c3:12:5d:fc:b1:2f:fc:6b:81:da:16:eb: 44:9a:fa:10:d5:f5:43:22:2a:a4:19:20:33:fa:31: 98:47:ec:8e:dd:38:af:ec:c1:27:8f:30:f4:f1:fa: 5b:68:ef:b1:e9:ee:bc:e8:33:98:54:12:a7:1d:10: 1d:63:e2:27:6f:ba:98:23:21:ef:3b:0a:29:3c:65: 7f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:EC:22:8E:89:74:8A:A7:99:14:63:DD:14:EF:87:3F:62:41:0F:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/570f2a2c-6dc0-31eb-8296-b41ff6be429b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:b2:98:94:a2:75:22:31:f6:9c:23:da:52:4b:9f:d4:fc:d7: 78:b9:ee:9f:89:09:f0:f6:77:9e:14:ff:06:64:e2:31:d3:e2: 61:a6:b3:bc:4d:53:f8:01:66:3c:a3:d9:cc:a4:c3:e9:1e:1d: b8:df:d1:1c:e3:ad:90:0c:61:d2:de:d9:8c:95:17:bd:3b:9f: 64:11:34:75:a0:4f:43:a8:d1:85:fd:ec:57:b5:c7:04:77:47: b6:0b:3b:11:ce:54:a4:12:03:3d:7a:0c:33:88:ef:12:da:fd: 9d:1d:35:1b:eb:e3:2b:f2:06:6b:45:07:58:34:4a:63:f6:20: ac:11:2a:83:17:fc:c6:06:45:12:a4:65:da:eb:44:2c:2e:24: 0f:81:dd:aa:54:4d:81:c8:74:81:9e:77:7f:08:57:ef:86:c5: 73:ce:39:1d:46:e4:88:e1:06:5c:64:05:c6:6e:75:77:86:ba: 1b:f4:ea:f5:39:82:9a:d5:a5:df:04:f9:0b:c8:fa:ee:30:ce: 5a:be:d5:e4:0d:7d:67:77:9c:5f:8b:dd:c2:ab:37:4f:03:7f: 69:b4:23:10:c6:3e:b6:dd:9a:8d:af:9c:ad:d2:d5:3e:f7:d2: 28:2f:6e:f3:d2:d2:ec:de:fd:d3:aa:c6:17:39:78:7d:6e:fd: d2:2c:83:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz0IhMLdXZEOdw6XiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk Y2JhMmE5MWItYjkyOC00ODlhLWI5Y2ItZTMzMjllMjQ3NWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS0lOpkgLrBPCjyknNkM3pm6vvk8VdzuydlE dihZZkm9lljYPtOj9Bc6TzvJmQzebAROBTZUqK/TrsNO5zVtljP3dQK+xZishSc2 t0Cjr/Wi+iG9e6QI13j4MgbAr+2yrZQaxNNn4pOuWK4NagglFgVzrMa9iv0bP3cx SDLXEnOsN7wB1VRoC3GEIXaVcnVwJ9cExNefH8glB9S8qkadwp2TG38aXglhP71T CnGk3HxSz1nsINbDEl38sS/8a4HaFutEmvoQ1fVDIiqkGSAz+jGYR+yO3Tiv7MEn jzD08fpbaO+x6e686DOYVBKnHRAdY+Inb7qYIyHvOwopPGV/7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/sIo6JdIqnmRRj3RTvhz9iQQ8hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNTcwZjJhMmMtNmRjMC0z MWViLTgyOTYtYjQxZmY2YmU0MjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSPR8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqymJSidSIx9pwj2lJLn9T813i57p+JCfD2d54U/wZk4jHT4mGms7xN U/gBZjyj2cykw+keHbjf0RzjrZAMYdLe2YyVF707n2QRNHWgT0Oo0YX97Fe1xwR3 R7YLOxHOVKQSAz16DDOI7xLa/Z0dNRvr4yvyBmtFB1g0SmP2IKwRKoMX/MYGRRKk ZdrrRCwuJA+B3apUTYHIdIGed38IV++GxXPOOR1G5IjhBlxkBcZudXeGuhv06vU5 gprVpd8E+QvI+u4wzlq+1eQNfWd3nF+L3cKrN08Df2m0IxDGPrbdmo2vnK3S1T73 0igvbvPS0uze/dOqxhc5eH1u/dIsg2Y= -----END CERTIFICATE-----Generated at Mon Mar 2 22:21:35 2026 by rpki-client