$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0af87895-e5cf-31c9-853f-7b6d7c800dd2.roa File: 0af87895-e5cf-31c9-853f-7b6d7c800dd2.roa (raw, json) Hash identifier: 8SYGM6ka3RKRaKhvYFAmeSQ1kCTy5rqEIvtbrceAY7g= Subject key identifier: DD:9B:BE:2F:29:FD:0C:3B:BB:C2:5C:FF:B5:4E:B8:26:B3:4A:57:12 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B4D06B17C6F58ED7DB0CA0300 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0af87895-e5cf-31c9-853f-7b6d7c800dd2.roa Signing time: Wed 24 Sep 2025 12:38:26 +0000 ROA not before: Wed 24 Sep 2025 12:38:26 +0000 ROA not after: Tue 23 Dec 2025 13:38:26 +0000 asID: 212238 IP address blocks: 72.244.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:06:b1:7c:6f:58:ed:7d:b0:ca:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 24 12:38:26 2025 GMT Not After : Dec 23 13:38:26 2025 GMT Subject: CN=484f4e11-8df6-4aeb-8de3-4b47b371fd5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:26:ba:71:d2:33:61:fc:7a:74:a3:73:81:bc: 38:2d:e2:3c:4e:39:f6:8b:33:a8:bf:bd:a8:dc:cc: 77:de:0b:6a:c9:e6:b4:99:da:c8:2e:4a:57:bf:79: 3e:39:a5:71:95:45:58:29:c4:3e:5d:1d:6e:7f:07: e2:91:61:e4:fb:a3:98:e3:0f:9c:d1:7f:5e:1c:cc: 9c:3e:a9:19:7c:65:c8:8c:c9:71:4c:88:a0:11:38: c6:67:f0:1c:73:b1:c3:cd:d8:35:09:0d:38:e0:b8: c7:9c:2f:ab:9c:a9:13:23:7e:c0:0f:9d:9a:66:46: 5b:e0:15:77:20:5e:e3:12:3f:d5:ee:56:38:fe:ab: be:c5:fd:ff:0c:90:73:90:8b:43:56:52:d7:f2:d9: 4e:f3:eb:99:6d:2a:41:ef:87:f1:20:e6:87:98:e2: c2:d7:d7:67:25:8c:7b:00:b3:58:04:02:d0:84:e4: a0:98:a3:45:39:e7:5b:a1:22:88:71:a4:cd:4b:be: 74:b4:c2:7e:ca:48:03:c4:b2:08:d4:b3:4a:c6:03: c3:41:87:01:21:39:b9:e9:da:b5:0f:cb:0d:ab:90: 2a:77:9d:f0:1b:3a:1c:2c:a0:51:eb:62:22:f8:65: 3c:15:33:56:ee:8f:e4:ed:4a:e7:30:9e:68:b2:fb: 8e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9B:BE:2F:29:FD:0C:3B:BB:C2:5C:FF:B5:4E:B8:26:B3:4A:57:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0af87895-e5cf-31c9-853f-7b6d7c800dd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:da:6a:57:44:b2:e0:18:b1:8c:fe:64:67:ee:5a:07:63:c7: 7c:6d:46:80:7d:4e:06:1c:3e:45:b1:01:ac:72:5a:c7:2e:43: ee:c9:54:bc:61:87:30:a2:67:e4:e0:8c:d6:51:76:08:f9:a3: 55:ad:2c:f8:9c:fa:d9:93:63:fe:44:8f:03:3f:36:2d:f7:5b: 61:e1:8b:c1:56:a8:e4:27:74:e5:d2:72:bb:ef:23:9a:d0:99: 13:44:3e:4b:ee:8c:ed:21:86:d9:96:fe:0a:2d:89:2f:e5:8a: 5a:70:4a:4f:ef:ed:47:e9:eb:37:c0:7f:36:89:cc:83:3f:ea: 83:3d:53:31:a1:e6:44:b8:7e:c3:21:db:be:bd:94:6a:74:c0: 38:db:34:a9:09:c4:3e:d1:d6:69:fc:15:de:f6:c9:c7:6c:af: 44:d3:0f:0f:8f:2d:20:4d:d5:2c:78:69:cb:d9:18:71:c6:df: 3e:40:14:95:98:6f:66:30:11:fb:f7:66:20:14:41:4e:c2:b5: 9a:52:9a:07:ef:25:a7:b8:78:54:85:3e:2a:c4:22:18:c6:54: ea:2e:e7:1c:fb:1e:4e:24:26:9a:99:75:71:52:08:45:3e:00: e4:9c:3a:90:3a:77:84:1b:b3:b1:af:cc:98:84:b9:dd:00:ec: db:6b:0a:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNBrF8b1jtfbDKAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyNDEyMzgyNloXDTI1MTIyMzEzMzgyNlowLzEtMCsGA1UEAxMk NDg0ZjRlMTEtOGRmNi00YWViLThkZTMtNGI0N2IzNzFmZDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSa6cdIzYfx6dKNzgbw4LeI8Tjn2izOov72o 3Mx33gtqyea0mdrILkpXv3k+OaVxlUVYKcQ+XR1ufwfikWHk+6OY4w+c0X9eHMyc PqkZfGXIjMlxTIigETjGZ/Acc7HDzdg1CQ044LjHnC+rnKkTI37AD52aZkZb4BV3 IF7jEj/V7lY4/qu+xf3/DJBzkItDVlLX8tlO8+uZbSpB74fxIOaHmOLC19dnJYx7 ALNYBALQhOSgmKNFOedboSKIcaTNS750tMJ+ykgDxLII1LNKxgPDQYcBITm56dq1 D8sNq5Aqd53wGzocLKBR62Ii+GU8FTNW7o/k7UrnMJ5osvuOWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2bvi8p/Qw7u8Jc/7VOuCazSlcSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGFmODc4OTUtZTVjZi0z MWM5LTg1M2YtN2I2ZDdjODAwZGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSPQuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfaaldEsuAYsYz+ZGfuWgdjx3xtRoB9TgYcPkWxAaxyWscuQ+7JVLxh hzCiZ+TgjNZRdgj5o1WtLPic+tmTY/5EjwM/Ni33W2Hhi8FWqOQndOXScrvvI5rQ mRNEPkvujO0hhtmW/gotiS/lilpwSk/v7Ufp6zfAfzaJzIM/6oM9UzGh5kS4fsMh 2769lGp0wDjbNKkJxD7R1mn8Fd72ycdsr0TTDw+PLSBN1Sx4acvZGHHG3z5AFJWY b2YwEfv3ZiAUQU7CtZpSmgfvJae4eFSFPirEIhjGVOou5xz7Hk4kJpqZdXFSCEU+ AOScOpA6d4Qbs7GvzJiEud0A7NtrCg0= -----END CERTIFICATE-----Generated at Sat Oct 11 09:01:10 2025 by rpki-client