$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ccabaeb6-9b9c-3e30-9379-65bf7f12a164.roa File: ccabaeb6-9b9c-3e30-9379-65bf7f12a164.roa (raw, json) Hash identifier: 78b7uI2+BTGjOp+giQCM+6j5InKK0G8MEJX6R9aQj0g= Subject key identifier: 14:AA:4D:63:79:08:CE:DA:33:55:0C:6B:D9:49:F0:B4:CD:72:38:84 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D04ADF1C9247D45441BD649C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ccabaeb6-9b9c-3e30-9379-65bf7f12a164.roa Signing time: Sun 01 Mar 2026 00:15:17 +0000 ROA not before: Sun 01 Mar 2026 00:15:17 +0000 ROA not after: Fri 29 May 2026 23:15:17 +0000 asID: 834 IP address blocks: 72.244.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:ad:f1:c9:24:7d:45:44:1b:d6:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 1 00:15:17 2026 GMT Not After : May 29 23:15:17 2026 GMT Subject: CN=31da6867-7eed-4aab-8c41-44daada29c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:02:37:2c:3b:34:7d:47:f7:7f:9a:8e:71:19: 9a:63:08:e2:02:16:1c:a6:37:8f:80:06:e2:a0:4e: 72:77:1c:84:16:9c:be:2f:dd:a2:0a:f8:1f:79:1b: 90:5e:6d:4d:dc:4c:b6:ab:65:20:9a:fd:78:99:22: 96:53:98:c6:44:6c:83:c5:a8:d3:03:22:52:5e:20: da:50:de:79:c7:ed:fb:05:3e:0d:47:66:65:f5:49: 7e:2c:2a:a3:97:e0:ff:eb:cd:82:6d:54:7b:23:8d: f7:8e:75:e9:9d:9c:f1:7f:b8:69:14:fb:1f:68:4b: d3:06:29:39:b4:18:4d:1d:9e:46:f2:b6:dd:95:4f: c4:cf:37:63:9b:a0:e1:be:43:5e:03:b5:f3:0b:e7: b5:0a:68:3a:f1:85:87:e0:43:58:e2:3a:cd:59:da: 14:9b:a4:a8:86:c2:01:d3:48:a8:d2:19:78:2f:04: 75:41:f7:23:18:9f:80:91:82:31:2f:53:af:a1:92: 3a:41:2e:ff:23:4b:47:64:2c:69:d3:40:d7:0e:d1: 24:45:e6:fc:06:dd:b0:9d:b8:22:18:48:43:53:11: 27:9a:43:13:af:2b:38:84:a7:59:e9:7b:51:2a:2e: d0:5e:4c:bf:73:b3:91:61:dd:50:5f:d9:60:a7:d7: f9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AA:4D:63:79:08:CE:DA:33:55:0C:6B:D9:49:F0:B4:CD:72:38:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ccabaeb6-9b9c-3e30-9379-65bf7f12a164.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:b2:e5:0d:ea:4d:2b:6e:85:bc:7d:da:ce:9d:73:eb:3e:60: a4:8a:b5:98:10:a7:f0:02:c8:1b:2c:62:d9:f7:4c:7d:e8:72: 8c:1e:81:3f:c0:06:e6:23:5a:69:4e:03:d4:72:91:83:ef:98: 8a:c8:cf:40:7e:19:1a:eb:56:9b:71:e8:0c:45:a7:33:0f:60: e8:9a:27:8c:02:3a:2b:61:5d:1c:83:bb:89:ef:05:13:0d:98: 72:26:66:77:3c:5d:5b:e4:00:6c:26:bf:21:a7:86:64:73:86: df:f6:60:bf:1f:f8:8b:8e:7b:ec:d3:0c:28:c3:a6:13:f2:8d: af:ca:bc:b7:09:fd:59:a9:16:b5:36:ad:be:c2:21:c2:9d:0e: 7a:40:0e:e6:3a:1b:be:54:f6:73:f1:9d:d8:44:17:5f:c9:20: 7b:64:42:da:0a:0d:ec:60:40:3e:a1:d2:fa:17:37:fc:60:5b: c5:c6:ec:17:e2:1a:4f:d6:39:18:c1:e6:88:c1:dd:c1:dd:37: d5:54:c5:2b:aa:07:e5:43:48:db:1b:b3:c1:1b:1b:39:de:61: d6:89:ba:e6:66:97:85:2e:54:e6:40:2b:e7:8b:f9:8f:85:fc: 12:63:93:86:91:e0:e7:72:33:89:9d:9f:3e:4a:c6:8a:c5:43: fb:de:c9:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ErfHJJH1FRBvWScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwMTAwMTUxN1oXDTI2MDUyOTIzMTUxN1owLzEtMCsGA1UEAxMk MzFkYTY4NjctN2VlZC00YWFiLThjNDEtNDRkYWFkYTI5YzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgI3LDs0fUf3f5qOcRmaYwjiAhYcpjePgAbi oE5ydxyEFpy+L92iCvgfeRuQXm1N3Ey2q2Ugmv14mSKWU5jGRGyDxajTAyJSXiDa UN55x+37BT4NR2Zl9Ul+LCqjl+D/682CbVR7I433jnXpnZzxf7hpFPsfaEvTBik5 tBhNHZ5G8rbdlU/Ezzdjm6DhvkNeA7XzC+e1Cmg68YWH4ENY4jrNWdoUm6SohsIB 00io0hl4LwR1QfcjGJ+AkYIxL1OvoZI6QS7/I0tHZCxp00DXDtEkReb8Bt2wnbgi GEhDUxEnmkMTrys4hKdZ6XtRKi7QXky/c7ORYd1QX9lgp9f5WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSqTWN5CM7aM1UMa9lJ8LTNcjiEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2NhYmFlYjYtOWI5Yy0z ZTMwLTkzNzktNjViZjdmMTJhMTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPQFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCy5Q3qTStuhbx92s6dc+s+YKSKtZgQp/ACyBssYtn3TH3ocowegT/A BuYjWmlOA9RykYPvmIrIz0B+GRrrVptx6AxFpzMPYOiaJ4wCOithXRyDu4nvBRMN mHImZnc8XVvkAGwmvyGnhmRzht/2YL8f+IuOe+zTDCjDphPyja/KvLcJ/VmpFrU2 rb7CIcKdDnpADuY6G75U9nPxndhEF1/JIHtkQtoKDexgQD6h0voXN/xgW8XG7Bfi Gk/WORjB5ojB3cHdN9VUxSuqB+VDSNsbs8EbGzneYdaJuuZml4UuVOZAK+eL+Y+F /BJjk4aR4OdyM4mdnz5KxorFQ/veyVE= -----END CERTIFICATE-----Generated at Mon Mar 2 08:14:56 2026 by rpki-client