$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/686f4096-e6b7-36f7-b123-b3365385e804.roa File: 686f4096-e6b7-36f7-b123-b3365385e804.roa (raw, json) Hash identifier: ZK6ONPLpCI7p4+R3WaKHmIDPmV7gigUgeo913QHqVpc= Subject key identifier: C8:17:B6:0A:4C:7C:C0:84:9C:E1:14:BD:F0:00:D4:29:9B:02:05:EE Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D8695817C9C22985BE3698F80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/686f4096-e6b7-36f7-b123-b3365385e804.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 395839 IP address blocks: 72.244.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:81:7c:9c:22:98:5b:e3:69:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=e8eef4b1-f81e-4dfe-913d-b76187d0d534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:67:57:e7:4d:8d:c1:d5:10:07:54:54:60:6c: 4e:d1:58:78:c2:f0:b1:aa:0e:41:b3:6f:8a:ae:fb: f6:1e:2d:b1:c1:85:6c:b2:c4:46:80:ea:95:99:dd: 02:c4:68:de:9b:c2:f2:25:53:d7:9a:d0:d5:26:43: ab:28:13:73:0f:5f:7b:f4:60:4f:15:7a:44:a8:c3: e6:07:32:38:4b:ed:a4:27:d9:9b:9e:83:02:00:80: 26:da:37:b5:3b:04:84:33:76:74:4c:c5:21:d0:60: 91:be:c3:5a:68:a9:06:28:2a:e0:be:80:e8:d0:c2: 49:fb:be:bf:40:15:06:79:a2:87:5c:ef:a2:0b:81: a8:dc:be:d9:df:b5:f1:88:dd:e8:48:1b:f1:4a:f5: fa:0a:de:b8:ec:3c:0d:0c:6a:a6:cd:89:37:35:e4: 44:b6:16:e1:56:5f:82:66:ed:e2:10:e8:50:12:39: 7f:9c:4c:17:95:4e:8f:4a:b4:8a:79:57:28:bc:6e: 84:2a:40:d9:06:29:a2:49:3c:fe:d3:48:7b:76:56: cd:48:f3:8d:d0:f8:3c:9e:6b:79:29:27:2b:f6:2f: 71:98:8b:f2:41:d2:32:a5:39:1e:ae:e1:93:b9:c5: 88:9b:f5:cc:df:7c:f5:98:f7:f9:cc:88:09:0f:cd: d3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:17:B6:0A:4C:7C:C0:84:9C:E1:14:BD:F0:00:D4:29:9B:02:05:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/686f4096-e6b7-36f7-b123-b3365385e804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:b2:19:db:d7:2c:28:9a:18:c2:69:07:af:57:3f:be:31:1a: 75:ea:36:8f:9a:2d:0f:44:48:fa:23:8c:ac:51:ee:76:86:ab: d9:ef:ae:48:5e:72:7c:e2:e2:19:e6:ef:12:98:b6:99:1f:fe: 8e:ef:e2:27:88:26:ea:a5:a4:96:21:53:e1:54:2c:95:b1:05: bb:52:f1:3f:07:4b:f5:9c:3d:ea:5c:4c:4c:09:89:e5:cd:c9: 6b:dd:2f:b4:a5:0f:96:c4:98:d0:0d:e0:f2:08:e7:53:83:dd: 26:4c:56:c0:d2:ac:7b:2b:7b:49:66:f7:a7:78:13:2f:72:62: 64:36:7f:2b:a2:07:bf:cb:16:4a:f5:33:90:00:cb:19:51:68: 8d:93:ff:ff:b0:ef:89:e2:7e:ab:a1:48:3b:b4:67:0f:15:aa: df:5d:d2:b0:38:76:48:d1:fe:4e:64:5e:51:2b:e1:88:e9:13: 06:93:54:0f:c0:cd:de:39:3b:fb:e7:b3:32:a2:c4:2e:33:11: 24:07:96:b1:14:a8:5b:30:86:1a:76:d1:ef:fc:9f:d8:68:84: f0:bb:c0:41:cb:ce:b7:31:fa:c8:d5:26:86:0a:f6:a1:52:54: 8b:ba:15:e6:04:9e:3c:6b:0e:6d:56:01:24:d7:f1:5d:98:08: 66:3f:b0:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlYF8nCKYW+Npj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk ZThlZWY0YjEtZjgxZS00ZGZlLTkxM2QtYjc2MTg3ZDBkNTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2dX502NwdUQB1RUYGxO0Vh4wvCxqg5Bs2+K rvv2Hi2xwYVsssRGgOqVmd0CxGjem8LyJVPXmtDVJkOrKBNzD1979GBPFXpEqMPm BzI4S+2kJ9mbnoMCAIAm2je1OwSEM3Z0TMUh0GCRvsNaaKkGKCrgvoDo0MJJ+76/ QBUGeaKHXO+iC4Go3L7Z37XxiN3oSBvxSvX6Ct647DwNDGqmzYk3NeREthbhVl+C Zu3iEOhQEjl/nEwXlU6PSrSKeVcovG6EKkDZBimiSTz+00h7dlbNSPON0Pg8nmt5 KScr9i9xmIvyQdIypTkeruGTucWIm/XM33z1mPf5zIgJD83T0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgXtgpMfMCEnOEUvfAA1CmbAgXuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjg2ZjQwOTYtZTZiNy0z NmY3LWIxMjMtYjMzNjUzODVlODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPSDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOyGdvXLCiaGMJpB69XP74xGnXqNo+aLQ9ESPojjKxR7naGq9nvrkhe cnzi4hnm7xKYtpkf/o7v4ieIJuqlpJYhU+FULJWxBbtS8T8HS/WcPepcTEwJieXN yWvdL7SlD5bEmNAN4PII51OD3SZMVsDSrHsre0lm96d4Ey9yYmQ2fyuiB7/LFkr1 M5AAyxlRaI2T//+w74nifquhSDu0Zw8Vqt9d0rA4dkjR/k5kXlEr4YjpEwaTVA/A zd45O/vnszKixC4zESQHlrEUqFswhhp20e/8n9hohPC7wEHLzrcx+sjVJoYK9qFS VIu6FeYEnjxrDm1WASTX8V2YCGY/sAw= -----END CERTIFICATE-----Generated at Sat Apr 18 04:40:42 2026 by rpki-client