$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5857f24f-8b55-35c3-a514-9d3f1a90d46b.roa File: 5857f24f-8b55-35c3-a514-9d3f1a90d46b.roa (raw, json) Hash identifier: MkVAiNV2sG2r/K6d6nt4CSpsEBtZxKTHkHMQ3wEsZSA= Subject key identifier: 95:A1:33:D7:DA:41:C3:66:90:20:8A:BD:8E:1C:FD:19:32:FC:BF:64 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D773A6B2315822CA1A7D88740 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5857f24f-8b55-35c3-a514-9d3f1a90d46b.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 2914 IP address blocks: 72.245.128.0/21 maxlen: 24 72.245.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:6b:23:15:82:2c:a1:a7:d8:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=344d2608-aabf-440e-b6ef-66fc191d2764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1d:1e:cd:15:bf:1d:cf:7a:8b:47:1e:11:4b: e5:91:ba:ee:46:c2:69:1c:25:06:4d:5c:47:10:fe: 35:77:8c:58:9a:29:95:a0:1f:e7:ea:6a:cb:53:b4: 6d:65:3f:45:6e:67:a3:78:8c:15:30:9d:d1:67:ec: c8:cc:02:26:1a:cd:5e:06:64:1e:8a:2f:a1:32:4b: 60:9d:14:fb:9d:8c:49:32:1c:a6:e5:4e:5c:cd:c8: 81:f2:03:41:58:91:35:1c:35:b5:09:25:c8:53:62: b9:28:aa:95:73:33:d8:89:e6:5c:89:f5:c7:06:2d: 04:16:c1:da:a5:ed:15:ab:81:bd:c3:a7:84:51:55: ac:ac:8b:b2:6b:41:1f:4b:5d:5b:aa:0c:a4:53:ba: 41:d2:a1:8a:e7:f9:90:00:fd:78:b2:03:0f:94:d6: 82:f7:5c:16:b0:01:5e:e6:4d:21:1c:2d:52:fb:39: ed:00:7b:5c:0b:1b:4d:7a:ae:68:4c:be:eb:18:f4: 61:56:4a:f6:9a:92:fe:55:73:59:28:96:3a:b3:8c: 05:b0:66:74:b1:04:c5:dd:a5:f0:6b:bc:e4:70:77: cf:68:73:90:5e:53:87:58:1e:71:80:b3:14:e9:ac: 2b:ef:76:0f:c8:de:92:42:12:05:4b:d8:ef:c7:61: d3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A1:33:D7:DA:41:C3:66:90:20:8A:BD:8E:1C:FD:19:32:FC:BF:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5857f24f-8b55-35c3-a514-9d3f1a90d46b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.245.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:06:3b:6a:bd:72:92:1c:81:44:47:7e:79:81:05:2b:33:91: f0:23:a0:f6:59:d5:a4:08:4b:7b:3f:60:c2:98:92:00:60:30: 09:a8:60:41:43:47:5f:8c:3a:5a:0e:d8:02:ed:3a:d8:e4:a2: bf:0b:9b:b2:f2:2c:c0:7f:40:7f:d9:d2:1a:48:4d:37:bc:de: 7b:e3:1d:69:60:9c:71:1f:b2:c7:7d:ba:b0:91:11:62:e4:ef: 1b:3d:5e:a5:91:cb:ec:dd:83:1b:39:c5:a7:c4:c7:fc:f0:1f: 5a:95:79:7d:ff:d4:51:27:b1:40:fa:fd:03:e5:cc:1a:f0:54: ee:77:2c:89:d6:f2:71:cc:ea:88:09:9b:7d:07:05:d0:e6:f7: 41:d8:9a:2f:28:a1:d7:15:b1:97:c1:8d:13:96:8f:88:80:fe: c8:76:68:89:6a:35:55:55:cd:ed:32:d6:a4:9f:38:6c:34:3e: c9:13:61:90:29:69:6d:3b:07:fd:f4:3a:c1:6d:38:e5:5f:2d: 3c:a7:ab:60:c0:c9:ec:4a:6a:eb:2b:ca:f0:1c:11:d2:64:1c: d4:77:ba:5d:c2:e4:19:c5:cb:3b:66:f4:c1:bb:6c:8c:82:2d: cc:1d:61:39:0f:61:50:16:e4:e2:6a:76:53:9f:a5:96:dc:a6: d0:d7:39:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OmsjFYIsoafYh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk MzQ0ZDI2MDgtYWFiZi00NDBlLWI2ZWYtNjZmYzE5MWQyNzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR0ezRW/Hc96i0ceEUvlkbruRsJpHCUGTVxH EP41d4xYmimVoB/n6mrLU7RtZT9FbmejeIwVMJ3RZ+zIzAImGs1eBmQeii+hMktg nRT7nYxJMhym5U5czciB8gNBWJE1HDW1CSXIU2K5KKqVczPYieZcifXHBi0EFsHa pe0Vq4G9w6eEUVWsrIuya0EfS11bqgykU7pB0qGK5/mQAP14sgMPlNaC91wWsAFe 5k0hHC1S+zntAHtcCxtNeq5oTL7rGPRhVkr2mpL+VXNZKJY6s4wFsGZ0sQTF3aXw a7zkcHfPaHOQXlOHWB5xgLMU6awr73YPyN6SQhIFS9jvx2HTowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWhM9faQcNmkCCKvY4c/Rky/L9kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNTg1N2YyNGYtOGI1NS0z NWMzLWE1MTQtOWQzZjFhOTBkNDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESPWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMgGO2q9cpIcgURHfnmBBSszkfAjoPZZ1aQIS3s/YMKYkgBgMAmoYEFD R1+MOloO2ALtOtjkor8Lm7LyLMB/QH/Z0hpITTe83nvjHWlgnHEfssd9urCREWLk 7xs9XqWRy+zdgxs5xafEx/zwH1qVeX3/1FEnsUD6/QPlzBrwVO53LInW8nHM6ogJ m30HBdDm90HYmi8oodcVsZfBjROWj4iA/sh2aIlqNVVVze0y1qSfOGw0PskTYZAp aW07B/30OsFtOOVfLTynq2DAyexKausryvAcEdJkHNR3ul3C5BnFyztm9MG7bIyC LcwdYTkPYVAW5OJqdlOfpZbcptDXOU0= -----END CERTIFICATE-----Generated at Fri Apr 17 19:45:19 2026 by rpki-client