$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f3195597-7fda-3891-850e-d9e49f860d51.roa File: f3195597-7fda-3891-850e-d9e49f860d51.roa (raw, json) Hash identifier: b2kPbTxzwxZ6J1etoaI906dWgJiTkf54Qs7sS7w5f5g= Subject key identifier: 07:F7:44:4A:E9:4C:30:40:12:EA:63:F4:33:BC:CB:39:1A:0E:D0:35 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CACF1B73F311A6C83AC836060 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f3195597-7fda-3891-850e-d9e49f860d51.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 3257 IP address blocks: 72.13.245.0/24 maxlen: 24 72.13.252.0/24 maxlen: 24 198.144.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:b7:3f:31:1a:6c:83:ac:83:60:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=bd4db24a-5c98-4873-886f-8874ef9264c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4c:f1:4c:6b:cb:90:ed:cf:6b:26:69:49:1f: 39:0c:7e:78:cb:ce:63:1f:24:cf:06:2c:2b:4b:28: 66:12:b5:a7:dc:87:ec:23:8b:e0:be:57:d2:25:62: f4:b2:c7:ad:57:2e:ed:dc:f0:82:4f:87:6a:9c:ee: 34:b0:39:66:2e:67:40:17:d4:77:d9:f0:6c:49:f0: 81:0a:40:03:6c:a4:0a:a1:71:9e:1d:bd:ed:91:1a: 1e:be:ee:78:0f:9f:01:1b:63:9e:0b:da:8d:b6:a5: 70:6d:0c:7d:72:64:c2:1a:a7:4e:28:d4:58:ea:01: 01:e1:6d:46:91:05:e5:a4:db:11:94:45:f4:0a:15: 98:0e:7d:0a:8f:c8:54:51:ce:3a:f4:3b:0a:a9:13: c5:ec:43:c3:73:cf:a6:10:63:ca:53:7a:6c:53:19: 0a:db:8e:1a:ee:fc:0c:a1:89:f6:d5:03:a1:60:6d: 0b:96:3b:3d:01:d2:bb:70:16:af:26:29:ee:60:3a: c2:27:d9:7f:03:2b:72:e6:c4:fe:00:0e:89:4d:4a: 0a:a7:e6:c7:77:5e:d8:7b:b8:e1:58:6d:9e:0d:a4: b4:47:01:20:98:94:b4:ad:7f:1d:05:64:a8:f8:05: e6:a7:f6:47:4e:fe:91:35:00:d2:20:47:20:78:1e: 10:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F7:44:4A:E9:4C:30:40:12:EA:63:F4:33:BC:CB:39:1A:0E:D0:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f3195597-7fda-3891-850e-d9e49f860d51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.13.245.0/24 72.13.252.0/24 198.144.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:70:d1:64:9b:52:f1:40:db:eb:a4:66:d3:9a:90:11:6f:41: 81:ac:5b:ba:fd:7e:cd:1e:17:20:bc:07:be:09:aa:81:b1:4c: cf:58:73:0d:84:01:66:69:7d:93:2f:22:27:4b:82:37:87:10: bc:95:4a:ce:65:ba:1a:f8:0c:a9:19:83:87:f4:6e:c9:4c:cc: 11:12:01:9b:21:33:33:1d:5a:15:a9:82:95:1f:a1:7d:4b:29: 9e:94:0c:5c:78:b3:35:35:7e:5f:65:ec:ff:9d:e8:64:7f:f8: ff:b8:f8:a3:e6:6f:c4:ec:cf:76:98:39:dc:24:57:58:bb:66: 3c:35:17:06:6a:b4:9d:ed:21:a4:9d:bd:cf:2c:d6:d5:ef:d2: 46:51:43:66:a6:f9:3c:8f:fb:e0:ca:11:7f:8e:95:3e:1d:43: 35:88:89:7c:5b:00:ae:71:05:4d:ad:d8:77:3f:0f:9a:eb:56: 86:0b:38:bf:d5:75:c7:11:2b:51:8e:8a:6c:df:b1:b3:d5:04: b4:cb:79:ed:54:d4:71:76:5d:60:d1:fc:2a:25:be:4b:c9:6c: b9:ca:c7:f9:e6:8c:d8:40:83:42:50:c0:55:04:1d:bd:0c:c8: 5a:6d:9a:be:be:a2:86:78:09:f9:c0:f8:4b:f6:4a:45:0b:ad: 27:79:9c:00 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEys8bc/MRpsg6yDYGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk YmQ0ZGIyNGEtNWM5OC00ODczLTg4NmYtODg3NGVmOTI2NGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUzxTGvLkO3PayZpSR85DH54y85jHyTPBiwr SyhmErWn3IfsI4vgvlfSJWL0ssetVy7t3PCCT4dqnO40sDlmLmdAF9R32fBsSfCB CkADbKQKoXGeHb3tkRoevu54D58BG2OeC9qNtqVwbQx9cmTCGqdOKNRY6gEB4W1G kQXlpNsRlEX0ChWYDn0Kj8hUUc469DsKqRPF7EPDc8+mEGPKU3psUxkK244a7vwM oYn21QOhYG0Lljs9AdK7cBavJinuYDrCJ9l/Ayty5sT+AA6JTUoKp+bHd17Ye7jh WG2eDaS0RwEgmJS0rX8dBWSo+AXmp/ZHTv6RNQDSIEcgeB4Q0QIDAQABo4IDYTCC A10wHQYDVR0OBBYEFAf3RErpTDBAEupj9DO8yzkaDtA1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZjMxOTU1OTctN2ZkYS0z ODkxLTg1MGUtZDllNDlmODYwZDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQASA31AwQA SA38AwQAxpB9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGhw0WSbUvFA2+ukZtOakBFvQYGsW7r9fs0eFyC8 B74JqoGxTM9Ycw2EAWZpfZMvIidLgjeHELyVSs5luhr4DKkZg4f0bslMzBESAZsh MzMdWhWpgpUfoX1LKZ6UDFx4szU1fl9l7P+d6GR/+P+4+KPmb8Tsz3aYOdwkV1i7 Zjw1FwZqtJ3tIaSdvc8s1tXv0kZRQ2am+TyP++DKEX+OlT4dQzWIiXxbAK5xBU2t 2Hc/D5rrVoYLOL/VdccRK1GOimzfsbPVBLTLee1U1HF2XWDR/ColvkvJbLnKx/nm jNhAg0JQwFUEHb0MyFptmr6+ooZ4CfnA+Ev2SkULrSd5nAA= -----END CERTIFICATE-----Generated at Sun Mar 1 21:11:34 2026 by rpki-client