$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1210c942-ff80-39f2-852f-998503f4466d.roa File: 1210c942-ff80-39f2-852f-998503f4466d.roa (raw, json) Hash identifier: zZmimW49Vv17TczrNayaje0368daZTZflpTZs1u1iZA= Subject key identifier: C3:E8:5F:AE:0C:BB:68:6B:EE:95:B8:F5:D4:B0:4D:11:18:13:52:96 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BD85C9DBA4B7BB47E673ED700 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1210c942-ff80-39f2-852f-998503f4466d.roa Signing time: Thu 13 Nov 2025 10:28:55 +0000 ROA not before: Thu 13 Nov 2025 10:28:55 +0000 ROA not after: Wed 11 Feb 2026 10:28:55 +0000 asID: 29802 IP address blocks: 72.244.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d8:5c:9d:ba:4b:7b:b4:7e:67:3e:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 13 10:28:55 2025 GMT Not After : Feb 11 10:28:55 2026 GMT Subject: CN=59fd878c-168c-4375-9763-2cbc25289c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:87:2a:0b:56:d6:0d:61:a4:65:c0:61:de:55: f9:e8:3e:df:c9:83:5f:ff:6c:72:f7:93:81:a7:1d: 24:3b:b3:71:75:c8:44:40:e9:5c:80:04:a7:d3:3e: cb:9b:1e:5c:d9:63:82:d0:bb:2c:62:6f:84:87:0a: 35:71:74:41:5e:13:43:85:bb:64:cb:2d:81:88:70: 97:4b:c6:ce:b7:05:91:f1:b5:cb:72:7d:18:10:42: 5f:7f:71:b9:31:4c:1e:50:c4:87:b6:d3:19:8a:cd: ad:db:e3:85:96:e3:1f:ba:b8:bf:1c:fe:7f:1e:3d: fe:e8:ce:5e:30:11:50:a8:2a:ac:b4:02:b3:7d:6c: fd:4b:fc:3e:23:6e:fd:5b:90:33:33:27:b2:22:72: 8b:e4:b7:16:47:45:c2:9a:4f:3a:e4:8f:98:a7:df: 44:7f:ae:11:07:4c:e7:b7:dd:59:55:18:87:5e:2c: 82:a6:61:5b:93:9e:31:27:8b:0d:05:c4:50:cf:f6: b3:9e:92:33:66:2d:3b:3a:bc:22:e0:f1:e7:3d:7d: f1:21:ae:67:e2:0d:ff:09:7f:3f:91:a3:24:9f:a5: a4:a2:15:fc:6f:8f:b5:f7:bf:70:e1:6a:00:de:b5: 11:ff:24:14:6d:f2:30:37:3e:fe:7e:ee:79:a7:d5: c4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E8:5F:AE:0C:BB:68:6B:EE:95:B8:F5:D4:B0:4D:11:18:13:52:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1210c942-ff80-39f2-852f-998503f4466d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:77:bf:05:6e:8f:c8:17:d2:ee:15:56:08:f6:17:73:7d:cf: 27:b3:e4:bf:4a:0f:4c:dd:17:65:91:99:7e:fd:ba:20:70:8c: b7:6a:08:90:4c:d5:bc:6b:91:9f:92:c1:5d:9d:1b:3a:48:5e: 8c:1a:9c:55:21:04:ad:8d:8e:c2:3f:67:8e:63:c4:ee:63:1f: 74:fa:5b:ca:4b:01:f2:ce:e1:a0:08:cc:41:9f:05:1b:e9:f4: 6a:ec:4d:eb:7f:be:32:01:20:a5:13:81:ab:5a:a5:28:f8:79: 5f:58:69:6d:32:bb:84:2c:19:fd:ef:03:9e:a7:89:6b:e7:29: 35:f8:93:f7:9c:ac:df:09:7a:9c:86:be:92:40:38:26:a0:11: f0:56:13:c2:5b:a9:32:0b:50:ec:bf:bf:77:3a:9d:09:4e:28: 8f:b7:80:b2:ad:03:78:e9:92:37:5c:ee:97:d9:06:42:8e:82: 7c:04:b2:db:7a:2c:d9:48:3b:e8:6a:2c:d8:4c:c9:25:d3:67: b3:0e:75:91:fe:07:95:87:fd:a7:be:42:8a:5f:03:d2:79:8e: 12:9f:ad:99:85:8a:1b:e1:d9:05:0d:94:65:24:d2:c2:31:77: d8:3a:48:d8:a0:4f:97:95:73:5c:42:a4:24:a9:08:ec:83:ce: f6:42:2c:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvYXJ26S3u0fmc+1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTExMzEwMjg1NVoXDTI2MDIxMTEwMjg1NVowLzEtMCsGA1UEAxMk NTlmZDg3OGMtMTY4Yy00Mzc1LTk3NjMtMmNiYzI1Mjg5YzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYcqC1bWDWGkZcBh3lX56D7fyYNf/2xy95OB px0kO7NxdchEQOlcgASn0z7Lmx5c2WOC0LssYm+Ehwo1cXRBXhNDhbtkyy2BiHCX S8bOtwWR8bXLcn0YEEJff3G5MUweUMSHttMZis2t2+OFluMfuri/HP5/Hj3+6M5e MBFQqCqstAKzfWz9S/w+I279W5AzMyeyInKL5LcWR0XCmk865I+Yp99Ef64RB0zn t91ZVRiHXiyCpmFbk54xJ4sNBcRQz/aznpIzZi07Orwi4PHnPX3xIa5n4g3/CX8/ kaMkn6WkohX8b4+1979w4WoA3rUR/yQUbfIwNz7+fu55p9XEzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPoX64Mu2hr7pW49dSwTREYE1KWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMTIxMGM5NDItZmY4MC0z OWYyLTg1MmYtOTk4NTAzZjQ0NjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPTNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFp3vwVuj8gX0u4VVgj2F3N9zyez5L9KD0zdF2WRmX79uiBwjLdqCJBM 1bxrkZ+SwV2dGzpIXowanFUhBK2NjsI/Z45jxO5jH3T6W8pLAfLO4aAIzEGfBRvp 9GrsTet/vjIBIKUTgatapSj4eV9YaW0yu4QsGf3vA56niWvnKTX4k/ecrN8JepyG vpJAOCagEfBWE8JbqTILUOy/v3c6nQlOKI+3gLKtA3jpkjdc7pfZBkKOgnwEstt6 LNlIO+hqLNhMySXTZ7MOdZH+B5WH/ae+QopfA9J5jhKfrZmFihvh2QUNlGUk0sIx d9g6SNigT5eVc1xCpCSpCOyDzvZCLJk= -----END CERTIFICATE-----Generated at Tue Nov 18 06:24:13 2025 by rpki-client