$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8425037b-4f8a-3b06-8e08-787697563f1c.roa File: 8425037b-4f8a-3b06-8e08-787697563f1c.roa (raw, json) Hash identifier: X0N7t50cNhmaMgvkEBNTx1i9iL8wekA3CSELLBSslUI= Subject key identifier: 59:15:AF:FC:C4:3B:11:ED:14:62:38:46:7B:79:69:F6:EE:5B:56:68 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EA5AA68ABAA054C92A90F1800 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8425037b-4f8a-3b06-8e08-787697563f1c.roa Signing time: Tue 28 Jul 2026 09:00:11 +0000 ROA not before: Tue 28 Jul 2026 09:00:11 +0000 ROA not after: Mon 26 Oct 2026 09:00:11 +0000 asID: 5650 IP address blocks: 72.244.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a5:aa:68:ab:aa:05:4c:92:a9:0f:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 28 09:00:11 2026 GMT Not After : Oct 26 09:00:11 2026 GMT Subject: CN=cc7db071-9dfb-4189-bb6a-9a5c9cf58310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:50:82:13:cc:aa:49:1d:f7:eb:44:87:fa:27: cd:2f:6d:a0:60:03:71:4e:38:73:a9:3c:53:95:c2: 05:cb:03:b3:ab:3f:b4:4c:9d:5b:ca:26:26:49:89: 57:18:67:2c:ef:66:f5:6d:5a:42:5b:28:72:e1:22: fa:6f:2d:07:46:1d:03:af:17:bb:e6:7c:48:75:95: 79:0b:e6:5e:d0:0b:68:cd:58:bf:51:60:15:cf:62: 44:94:b9:6b:5d:fe:54:dd:0c:e7:61:49:c7:e8:e9: 0b:49:04:f1:4f:2c:de:90:c9:11:5a:48:b7:f9:65: d8:53:e2:bb:e6:1a:a3:29:45:0a:9b:72:81:d1:0d: 82:84:51:10:60:68:3c:00:46:56:e2:73:4a:61:36: 56:ea:3d:1a:99:0b:cb:c6:b6:87:b8:58:6d:be:c5: 74:03:74:e9:0b:13:66:ee:97:63:8c:41:39:e5:ec: 71:e8:e4:35:0c:b4:bb:5e:20:2b:d3:7e:29:20:e6: df:83:df:af:58:26:b7:ab:d1:9e:8e:cd:d4:87:5b: c1:68:b4:31:be:8f:f0:d4:4d:63:7d:d4:6a:1e:f8: 55:01:9d:a8:3e:d3:15:48:ba:c7:93:35:83:40:87: 9e:14:2e:21:af:5c:af:e2:d1:dc:2b:5d:ae:d3:0b: 56:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:15:AF:FC:C4:3B:11:ED:14:62:38:46:7B:79:69:F6:EE:5B:56:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8425037b-4f8a-3b06-8e08-787697563f1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:3e:b8:d4:db:be:fa:f1:92:7d:66:91:fd:fd:5c:c9:3d:ed: 3f:2d:0b:c3:29:97:b9:16:f2:14:ce:a5:9c:e2:66:99:0e:68: ce:a8:9e:b0:b6:4f:21:a1:2a:8f:9f:87:65:a2:07:c8:af:1f: 5f:00:ce:63:a9:45:8e:52:67:ab:4f:21:5b:b5:38:8b:69:92: 0c:21:31:3c:2e:af:0e:78:c3:6d:a4:9b:10:a4:2d:10:22:75: 4f:d6:e0:c3:17:b7:93:b0:18:9d:d1:e9:1e:1c:28:58:ef:5b: 9b:06:9a:b1:c6:76:9c:63:49:ce:16:0c:99:97:b2:d9:76:20: db:a0:13:da:c7:7c:88:c1:0d:86:f2:ab:5f:75:bc:24:af:2a: 59:46:89:44:53:f1:1f:71:61:7a:49:97:f7:4b:36:cd:85:46: 40:bc:76:66:74:06:8f:1f:fc:29:77:51:9e:83:23:97:4f:d7: a8:8e:c3:1f:e3:46:f9:55:4e:cc:55:5e:da:a6:2d:74:fc:60: 22:e4:40:89:1a:ef:e9:4b:75:d7:29:fd:74:ab:d9:56:e0:1b: fe:ab:8d:74:dc:d9:30:68:8f:d3:19:1e:62:72:3a:d7:7f:13: c6:a1:b3:4a:67:06:be:bf:bf:78:25:49:91:7b:56:1d:57:e4: 02:ce:4c:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqmirqgVMkqkPGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk Y2M3ZGIwNzEtOWRmYi00MTg5LWJiNmEtOWE1YzljZjU4MzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1CCE8yqSR3360SH+ifNL22gYANxTjhzqTxT lcIFywOzqz+0TJ1byiYmSYlXGGcs72b1bVpCWyhy4SL6by0HRh0Drxe75nxIdZV5 C+Ze0AtozVi/UWAVz2JElLlrXf5U3QznYUnH6OkLSQTxTyzekMkRWki3+WXYU+K7 5hqjKUUKm3KB0Q2ChFEQYGg8AEZW4nNKYTZW6j0amQvLxraHuFhtvsV0A3TpCxNm 7pdjjEE55exx6OQ1DLS7XiAr034pIObfg9+vWCa3q9Gejs3Uh1vBaLQxvo/w1E1j fdRqHvhVAZ2oPtMVSLrHkzWDQIeeFC4hr1yv4tHcK12u0wtWtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkVr/zEOxHtFGI4Rnt5afbuW1ZoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODQyNTAzN2ItNGY4YS0z YjA2LThlMDgtNzg3Njk3NTYzZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACc+uNTbvvrxkn1mkf39XMk97T8tC8Mpl7kW8hTOpZziZpkOaM6onrC2 TyGhKo+fh2WiB8ivH18AzmOpRY5SZ6tPIVu1OItpkgwhMTwurw54w22kmxCkLRAi dU/W4MMXt5OwGJ3R6R4cKFjvW5sGmrHGdpxjSc4WDJmXstl2INugE9rHfIjBDYby q191vCSvKllGiURT8R9xYXpJl/dLNs2FRkC8dmZ0Bo8f/Cl3UZ6DI5dP16iOwx/j RvlVTsxVXtqmLXT8YCLkQIka7+lLddcp/XSr2VbgG/6rjXTc2TBoj9MZHmJyOtd/ E8ahs0pnBr6/v3glSZF7Vh1X5ALOTII= -----END CERTIFICATE-----Generated at Wed Jul 29 07:36:25 2026 by rpki-client