$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ff1c1e88-2299-39ea-8202-af4d554b435e.roa File: ff1c1e88-2299-39ea-8202-af4d554b435e.roa (raw, json) Hash identifier: ggf41/Eb4IoN7Pn0rTPHQBCXqcKhi3xuZlTT61W3xSE= Subject key identifier: 69:9C:36:C8:05:6F:54:D3:2F:EC:00:B4:00:E2:14:1A:2E:D9:74:E4 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EA788B6186D6A66E1EC36FE00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ff1c1e88-2299-39ea-8202-af4d554b435e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 23470 IP address blocks: 72.244.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:b6:18:6d:6a:66:e1:ec:36:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b378448f-0e9c-428e-9073-31de7578d7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fd:1d:da:e9:bb:f1:a3:43:2a:24:85:23:6f: bd:65:3e:e6:c6:1f:6c:4e:ed:40:e1:66:88:8d:88: 24:83:2f:3e:19:17:c1:d9:ec:d7:2e:ad:0a:17:fb: 18:49:ae:d0:0c:c2:47:67:8b:31:41:fe:4d:c4:95: 67:fb:67:1c:1f:60:2e:7f:60:71:6d:61:98:26:73: 45:a6:0c:65:02:d1:6c:7c:15:f6:a1:a5:9d:2f:e1: 36:93:27:38:37:31:1e:46:f6:d8:f9:8d:4c:ec:ac: 1e:78:f8:91:52:28:fe:60:97:08:e4:9c:18:de:43: 85:31:5b:c7:a4:8c:25:e3:a5:8e:8d:5f:80:90:87: 95:e6:fb:47:d9:69:0a:43:4b:c4:c3:b7:74:4b:2c: 1e:f0:e3:da:45:05:37:c0:f1:af:04:e0:8f:ca:08: 81:2b:81:fc:a1:8e:70:04:13:95:21:00:41:76:8c: 77:01:6b:b4:1e:55:8a:5e:7a:31:d5:be:8a:d2:5d: 26:06:a0:b8:ee:94:30:4d:07:3a:51:24:13:0e:5a: a8:ce:43:51:d9:44:71:24:c8:56:37:15:1f:ff:3b: 52:ce:3a:79:b7:d5:1d:d1:ce:00:16:31:42:73:4d: b6:58:60:43:21:bf:b4:7e:e0:dc:4a:f4:99:74:9d: 6a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9C:36:C8:05:6F:54:D3:2F:EC:00:B4:00:E2:14:1A:2E:D9:74:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ff1c1e88-2299-39ea-8202-af4d554b435e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:81:c9:82:18:c8:d2:17:6f:03:9b:11:bf:55:91:0e:4f:a8: f5:1f:89:1b:8f:9b:b5:4b:3c:3c:36:45:80:70:73:eb:15:9c: 08:96:d9:91:04:aa:98:71:74:fd:de:bc:1c:9c:45:77:1c:f6: 4b:94:45:5c:84:4c:9e:dd:a7:21:80:55:67:e5:23:73:f6:15: 18:9e:81:1f:fe:c4:d3:3f:58:99:30:87:4d:1c:9c:29:50:74: ca:9d:c0:be:1a:95:b1:c2:c3:65:3d:ab:06:0b:d0:fd:0f:55: d4:51:dd:0d:d1:a6:f5:5a:a6:fe:81:b6:d3:3c:1b:07:57:35: d9:68:e6:ca:4c:e3:20:e4:c7:ca:72:cd:03:ce:69:64:69:e2: 31:c8:87:8d:35:06:dd:1c:94:7f:44:9b:7a:d2:a9:ce:33:fe: a3:22:1f:5b:c9:c3:60:07:d4:cc:e6:ac:84:06:1b:b3:f9:7d: aa:56:c2:1a:d2:40:02:83:1b:a0:07:d0:51:55:10:a4:fd:ed: 71:27:48:90:06:34:d1:17:3f:30:15:aa:d5:ca:cb:fe:9c:65: c8:7c:6a:c2:07:3e:23:ff:1b:ec:a8:ad:0b:14:0c:12:20:1d: 0b:6b:87:a6:98:be:7b:18:b9:0d:92:fa:79:5e:6c:fe:fa:f3: 7b:40:b5:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niLYYbWpm4ew2/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjM3ODQ0OGYtMGU5Yy00MjhlLTkwNzMtMzFkZTc1NzhkN2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP0d2um78aNDKiSFI2+9ZT7mxh9sTu1A4WaI jYgkgy8+GRfB2ezXLq0KF/sYSa7QDMJHZ4sxQf5NxJVn+2ccH2Auf2BxbWGYJnNF pgxlAtFsfBX2oaWdL+E2kyc4NzEeRvbY+Y1M7KweePiRUij+YJcI5JwY3kOFMVvH pIwl46WOjV+AkIeV5vtH2WkKQ0vEw7d0Sywe8OPaRQU3wPGvBOCPygiBK4H8oY5w BBOVIQBBdox3AWu0HlWKXnox1b6K0l0mBqC47pQwTQc6USQTDlqozkNR2URxJMhW NxUf/ztSzjp5t9Ud0c4AFjFCc022WGBDIb+0fuDcSvSZdJ1qfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmcNsgFb1TTL+wAtADiFBou2XTkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmYxYzFlODgtMjI5OS0z OWVhLTgyMDItYWY0ZDU1NGI0MzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPSZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmByYIYyNIXbwObEb9VkQ5PqPUfiRuPm7VLPDw2RYBwc+sVnAiW2ZEE qphxdP3evBycRXcc9kuURVyETJ7dpyGAVWflI3P2FRiegR/+xNM/WJkwh00cnClQ dMqdwL4albHCw2U9qwYL0P0PVdRR3Q3RpvVapv6BttM8GwdXNdlo5spM4yDkx8py zQPOaWRp4jHIh401Bt0clH9Em3rSqc4z/qMiH1vJw2AH1MzmrIQGG7P5fapWwhrS QAKDG6AH0FFVEKT97XEnSJAGNNEXPzAVqtXKy/6cZch8asIHPiP/G+yorQsUDBIg HQtrh6aYvnsYuQ2S+nlebP7683tAtZ0= -----END CERTIFICATE-----Generated at Wed Jul 29 19:41:47 2026 by rpki-client