$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ff1c1e88-2299-39ea-8202-af4d554b435e.roa File: ff1c1e88-2299-39ea-8202-af4d554b435e.roa (raw, json) Hash identifier: kO67MqqdNZgwq96gb1GX0vFPu6FirVloafHgyEW5XGo= Subject key identifier: 3D:CA:BE:1C:15:F3:9C:3D:5D:CB:2A:03:37:2A:6E:03:A0:94:C4:66 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CFB1CFFB1CC4FA575A8914700 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ff1c1e88-2299-39ea-8202-af4d554b435e.roa Signing time: Wed 25 Feb 2026 14:00:39 +0000 ROA not before: Wed 25 Feb 2026 14:00:39 +0000 ROA not after: Tue 26 May 2026 13:00:39 +0000 asID: 23470 IP address blocks: 72.244.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fb:1c:ff:b1:cc:4f:a5:75:a8:91:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Feb 25 14:00:39 2026 GMT Not After : May 26 13:00:39 2026 GMT Subject: CN=bdd39325-09bc-4103-95c7-33b78058f6f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ba:56:47:b0:f6:c4:e3:ac:1c:cd:8e:ec:4f: ad:22:22:09:d7:0a:9f:8e:92:68:a2:19:c0:a8:65: 46:a8:ce:cd:8e:e4:09:48:ac:30:75:0d:3a:88:1d: fc:a2:92:2c:09:3b:9f:dd:6f:19:7b:8c:e4:24:82: 74:a9:b6:54:70:68:8e:fa:09:15:e2:29:3d:69:6e: ca:e6:7d:90:be:cb:bd:52:ef:92:6d:7b:42:8e:be: 06:34:19:e8:01:55:fd:08:4c:4b:df:47:7d:ec:54: 6f:4b:ca:42:d6:bd:78:27:0c:7c:55:c0:83:07:20: 95:e3:01:a8:36:6a:4b:59:64:8d:c3:e9:7b:f0:ec: 96:30:0c:bf:52:9f:f9:14:b4:7d:a1:fd:02:a5:80: 49:f8:ba:11:3c:bf:63:57:75:62:ce:14:a2:c3:83: c5:f6:4c:6e:1c:ab:0a:a2:ab:cc:96:53:90:eb:8d: f9:85:03:e9:59:f3:9f:c9:7a:80:7c:d2:c6:12:92: b0:f7:97:63:80:31:fb:e3:8e:d0:e1:cc:bc:e1:92: 2c:92:b2:5d:11:68:f2:7b:69:9b:b7:35:d2:7a:87: 60:12:2c:5c:77:ed:45:d4:a8:0f:ca:de:e8:ec:3e: bc:8f:52:21:88:d7:b3:a2:a6:b8:81:4f:af:1e:95: 59:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CA:BE:1C:15:F3:9C:3D:5D:CB:2A:03:37:2A:6E:03:A0:94:C4:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ff1c1e88-2299-39ea-8202-af4d554b435e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:f8:b4:7b:71:e0:7d:98:a2:9d:59:95:ae:0d:4f:9b:b5:0f: 41:c9:7b:f7:6d:d1:30:16:24:37:9a:39:ac:73:5b:cd:e5:24: c6:cd:03:ac:5a:2c:81:7f:d2:0a:84:47:75:6d:5c:d9:26:b4: af:7e:85:03:b6:35:15:3c:d3:13:ea:2d:61:bb:1b:5c:98:f8: 78:ac:3e:a9:15:b5:2b:fd:c6:a8:28:28:f8:27:2e:8c:18:24: a1:03:e4:f4:32:8b:4c:ef:3f:04:6e:89:33:a3:05:62:96:58: f7:3d:5f:47:5b:a9:87:ea:32:d4:1f:fe:19:2a:6e:2b:a6:d3: f4:32:40:f6:a9:e6:8d:ed:40:39:56:0d:c1:38:11:08:2d:4a: be:ad:04:b3:fe:5f:56:3c:f3:b8:51:c3:55:a5:aa:fd:2e:0e: 09:9d:7b:84:74:5a:4c:01:1c:97:2b:fe:e3:93:68:83:10:ab: fa:d9:19:ad:58:77:f7:6d:5a:1a:c3:6f:56:b9:68:6e:76:b0: d2:a6:3d:1c:95:41:fc:ec:68:98:c2:bc:90:9e:ed:af:fc:c9: bc:0b:45:3f:c8:80:f4:b9:b2:f9:08:4e:71:34:c0:ab:f9:a9: 05:3a:59:81:6c:e2:2a:a0:35:3c:53:b2:da:45:83:2e:51:c0: 8b:8c:74:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz7HP+xzE+ldaiRRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDIyNTE0MDAzOVoXDTI2MDUyNjEzMDAzOVowLzEtMCsGA1UEAxMk YmRkMzkzMjUtMDliYy00MTAzLTk1YzctMzNiNzgwNThmNmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrpWR7D2xOOsHM2O7E+tIiIJ1wqfjpJoohnA qGVGqM7NjuQJSKwwdQ06iB38opIsCTuf3W8Ze4zkJIJ0qbZUcGiO+gkV4ik9aW7K 5n2Qvsu9Uu+SbXtCjr4GNBnoAVX9CExL30d97FRvS8pC1r14Jwx8VcCDByCV4wGo NmpLWWSNw+l78OyWMAy/Up/5FLR9of0CpYBJ+LoRPL9jV3VizhSiw4PF9kxuHKsK oqvMllOQ6435hQPpWfOfyXqAfNLGEpKw95djgDH7447Q4cy84ZIskrJdEWjye2mb tzXSeodgEixcd+1F1KgPyt7o7D68j1IhiNezoqa4gU+vHpVZKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3KvhwV85w9XcsqAzcqbgOglMRmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmYxYzFlODgtMjI5OS0z OWVhLTgyMDItYWY0ZDU1NGI0MzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPSZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJr4tHtx4H2Yop1Zla4NT5u1D0HJe/dt0TAWJDeaOaxzW83lJMbNA6xa LIF/0gqER3VtXNkmtK9+hQO2NRU80xPqLWG7G1yY+HisPqkVtSv9xqgoKPgnLowY JKED5PQyi0zvPwRuiTOjBWKWWPc9X0dbqYfqMtQf/hkqbium0/QyQPap5o3tQDlW DcE4EQgtSr6tBLP+X1Y887hRw1Wlqv0uDgmde4R0WkwBHJcr/uOTaIMQq/rZGa1Y d/dtWhrDb1a5aG52sNKmPRyVQfzsaJjCvJCe7a/8ybwLRT/IgPS5svkITnE0wKv5 qQU6WYFs4iqgNTxTstpFgy5RwIuMdNQ= -----END CERTIFICATE-----Generated at Mon Mar 2 22:21:38 2026 by rpki-client