$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f7f7b312-99e3-39e4-9b3e-b27a4b59b3c9.roa File: f7f7b312-99e3-39e4-9b3e-b27a4b59b3c9.roa (raw, json) Hash identifier: hGuSh+3HhIJODwWcqKN9RYFaF16AZ6SaPlb+rWO2VoM= Subject key identifier: 98:01:2A:E0:AC:9C:AB:B3:B3:45:BF:EC:7B:71:07:75:FC:24:CD:45 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D01DEFB2091D0E1710E27E500 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f7f7b312-99e3-39e4-9b3e-b27a4b59b3c9.roa Signing time: Sat 28 Feb 2026 00:06:40 +0000 ROA not before: Sat 28 Feb 2026 00:06:40 +0000 ROA not after: Thu 28 May 2026 23:06:40 +0000 asID: 834 IP address blocks: 72.244.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:01:de:fb:20:91:d0:e1:71:0e:27:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Feb 28 00:06:40 2026 GMT Not After : May 28 23:06:40 2026 GMT Subject: CN=db095c41-8e9d-4aaf-a08a-a5487b7daac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:13:7b:06:65:f6:24:e8:f4:87:e2:9b:69:db: 95:9e:e3:1f:b8:15:34:81:b3:50:a6:e7:10:33:14: 83:63:8d:3c:24:af:3d:c4:4f:19:d7:6b:3f:77:81: 3e:4d:7e:7d:81:e4:a7:62:d6:f0:c3:b8:f2:d7:b5: 2f:fd:7f:64:6a:0c:5e:ca:08:ac:0a:d7:1a:6e:81: 33:ed:ec:1c:c5:dc:95:05:d5:a8:41:82:96:d7:e6: d2:8a:67:d8:76:cf:ee:5b:88:52:92:aa:87:ea:76: bd:5f:18:8e:54:c2:90:9a:13:3f:0d:a9:3e:f9:36: d9:e2:af:44:70:2f:4c:51:70:0b:d8:a3:f7:1b:4a: f3:13:b9:e1:e9:e4:42:21:46:05:0b:5b:f5:04:6c: 45:62:84:67:25:7c:df:e8:15:8b:ea:81:5d:0a:f8: 51:68:05:5b:c1:4a:99:00:95:7c:ff:a1:91:06:c1: 01:e8:f0:1e:96:e8:c2:58:80:d3:ae:c9:16:b2:db: 0d:46:4c:05:11:5c:e6:09:4f:fc:84:6c:fb:d0:ab: 9a:dd:dc:ae:30:62:02:00:58:8b:f4:79:2a:2e:65: 98:d1:ed:44:07:c6:ea:f7:16:16:1f:0c:33:19:69: ec:50:77:71:ad:7f:bc:6e:f1:50:ce:a8:af:e3:27: 9f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:01:2A:E0:AC:9C:AB:B3:B3:45:BF:EC:7B:71:07:75:FC:24:CD:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f7f7b312-99e3-39e4-9b3e-b27a4b59b3c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:9d:06:01:32:f4:02:b9:ff:07:18:e5:05:3e:a6:52:9e:28: b3:11:9f:6b:50:81:c6:09:fd:d9:d8:cd:d3:1e:eb:aa:9d:44: 6f:14:0b:7f:e3:64:d2:a6:66:dc:9e:9f:9d:7a:17:95:3b:ba: 06:fd:16:07:7b:b3:2b:f2:34:0b:54:30:09:e5:f1:f5:2a:00: 62:ca:bb:d8:a4:53:13:69:79:5a:a3:2a:61:fb:a2:66:79:d0: d3:28:1c:b9:a5:e9:a7:ce:9a:b7:f3:ef:63:a4:16:6a:87:56: cf:fd:8c:98:a9:c3:e8:5d:e6:42:8d:5c:32:67:30:ba:08:d6: de:0a:ab:ad:08:4a:ce:72:68:01:e1:35:45:e5:4a:b4:14:ab: 33:8f:e8:03:07:95:0e:48:69:21:e4:7f:80:76:74:98:21:18: 7d:1d:04:76:fd:87:d6:88:41:77:bb:6d:85:70:e5:cb:37:1f: a8:5d:ac:03:96:04:4a:c1:4a:23:58:be:d6:13:80:b9:7d:35: a1:46:a8:0f:eb:ec:75:b2:60:aa:9f:2c:c7:3f:18:64:3c:b6: 7a:58:03:24:78:94:77:d7:b5:e1:8b:34:98:85:b5:f2:67:3f: 64:23:dd:43:eb:bd:97:cd:71:8b:c4:c0:2b:0b:07:83:98:ed: 01:9b:e8:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0B3vsgkdDhcQ4n5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDIyODAwMDY0MFoXDTI2MDUyODIzMDY0MFowLzEtMCsGA1UEAxMk ZGIwOTVjNDEtOGU5ZC00YWFmLWEwOGEtYTU0ODdiN2RhYWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRN7BmX2JOj0h+KbaduVnuMfuBU0gbNQpucQ MxSDY408JK89xE8Z12s/d4E+TX59geSnYtbww7jy17Uv/X9kagxeygisCtcaboEz 7ewcxdyVBdWoQYKW1+bSimfYds/uW4hSkqqH6na9XxiOVMKQmhM/Dak++TbZ4q9E cC9MUXAL2KP3G0rzE7nh6eRCIUYFC1v1BGxFYoRnJXzf6BWL6oFdCvhRaAVbwUqZ AJV8/6GRBsEB6PAelujCWIDTrskWstsNRkwFEVzmCU/8hGz70Kua3dyuMGICAFiL 9HkqLmWY0e1EB8bq9xYWHwwzGWnsUHdxrX+8bvFQzqiv4yefcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgBKuCsnKuzs0W/7HtxB3X8JM1FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZjdmN2IzMTItOTllMy0z OWU0LTliM2UtYjI3YTRiNTliM2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPSkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOdBgEy9AK5/wcY5QU+plKeKLMRn2tQgcYJ/dnYzdMe66qdRG8UC3/j ZNKmZtyen516F5U7ugb9Fgd7syvyNAtUMAnl8fUqAGLKu9ikUxNpeVqjKmH7omZ5 0NMoHLml6afOmrfz72OkFmqHVs/9jJipw+hd5kKNXDJnMLoI1t4Kq60ISs5yaAHh NUXlSrQUqzOP6AMHlQ5IaSHkf4B2dJghGH0dBHb9h9aIQXe7bYVw5cs3H6hdrAOW BErBSiNYvtYTgLl9NaFGqA/r7HWyYKqfLMc/GGQ8tnpYAyR4lHfXteGLNJiFtfJn P2Qj3UPrvZfNcYvEwCsLB4OY7QGb6FY= -----END CERTIFICATE-----Generated at Mon Mar 2 18:42:58 2026 by rpki-client