$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1641e743-5839-3d19-ae7e-1fde5eb3379e.roa File: 1641e743-5839-3d19-ae7e-1fde5eb3379e.roa (raw, json) Hash identifier: gPcmI4gsLIAx3mbmxhVjfFsS1g51Lu2oXQ+tzVAeTEE= Subject key identifier: AC:10:97:BC:5E:4E:BA:32:21:55:26:62:3D:88:A5:CA:52:4C:FA:BA Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B235BBEEB65AF1CA0CC900CC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1641e743-5839-3d19-ae7e-1fde5eb3379e.roa Signing time: Tue 09 Sep 2025 14:25:51 +0000 ROA not before: Tue 09 Sep 2025 14:25:51 +0000 ROA not after: Mon 08 Dec 2025 15:25:51 +0000 asID: 9304 IP address blocks: 72.244.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:5b:be:eb:65:af:1c:a0:cc:90:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 9 14:25:51 2025 GMT Not After : Dec 8 15:25:51 2025 GMT Subject: CN=9fdfadd4-f444-4998-8b5c-1a11b97447a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ba:d4:b8:0e:bc:c2:2d:00:28:1b:20:8b:3d: 28:4e:a6:e0:b6:06:2c:61:dc:58:5a:14:06:dc:eb: 17:c5:5a:dd:17:05:26:20:15:8e:d0:fc:2c:9a:85: 4b:bd:9a:37:62:20:b6:de:9d:55:78:68:1d:35:63: 58:84:95:39:17:5e:62:0c:67:b8:fd:ce:31:8e:07: d9:6c:68:71:cd:06:7f:c6:0b:06:cb:3c:33:38:29: 79:55:a2:21:b2:49:fe:cf:bf:cc:22:1f:9f:8b:07: 0a:2e:ee:2d:18:42:72:11:88:05:22:1c:ed:92:a4: 29:a0:55:15:63:fd:66:c7:1b:be:df:c5:57:f7:9d: 8f:3a:32:d4:c8:8d:52:22:39:66:52:7f:b4:01:8a: 7b:ba:a2:8b:a9:f9:46:ea:bd:d1:da:0c:ff:7b:80: 4f:82:db:65:9f:12:06:d2:0b:6b:77:01:d6:84:06: c7:a6:f9:b9:94:56:db:61:7b:9e:e4:97:c1:07:ae: 5b:9e:22:e8:f9:b2:38:e2:d8:41:85:63:07:72:79: 70:5e:20:81:32:3d:16:e0:6c:8d:bd:5c:bf:f3:a2: 5b:ec:2b:16:27:bc:24:89:b7:e5:c5:49:14:ed:84: 2c:8c:7c:a1:d1:f9:d0:ca:d5:fc:ee:69:e5:f0:00: 09:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:10:97:BC:5E:4E:BA:32:21:55:26:62:3D:88:A5:CA:52:4C:FA:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1641e743-5839-3d19-ae7e-1fde5eb3379e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:98:9d:70:27:a9:7e:70:6a:f0:86:52:07:01:94:2d:31:7b: 97:cd:2b:68:b7:fd:43:3a:ce:f3:9f:14:6e:e2:fc:82:77:47: 87:49:fb:b1:89:92:ad:c3:1b:09:80:90:8e:75:f9:cf:a9:bd: d6:b9:06:9d:02:91:e1:1a:1f:5b:0c:e0:6a:d2:ff:83:e9:e5: 83:64:93:a9:2c:f0:fb:fd:80:c3:48:b4:65:74:64:82:32:c2: 40:46:87:c1:c8:11:b1:de:01:f3:6d:19:75:19:36:71:b3:39: 82:18:8d:50:2c:a9:d2:2c:c4:97:d4:f0:65:db:f2:63:13:45: 05:8c:81:2a:c4:b6:bc:1d:64:1d:4c:ef:5e:7c:50:8e:03:79: 9b:15:20:3c:6f:5a:8d:5d:ea:d0:5e:20:48:b8:f4:ae:da:c3: 3c:d3:eb:c0:6c:25:e6:f8:68:7c:0b:20:62:79:c5:7d:a6:c8: 0b:88:5f:0f:52:1a:35:21:d6:6b:15:dc:59:61:c8:99:42:92: 3a:f8:1a:b9:f6:cc:c1:a1:0e:36:02:f5:b0:cb:7d:84:2f:10: 6e:0d:c1:5d:cd:35:07:76:60:28:6a:86:ca:dd:f2:05:3c:ce: 0a:f0:96:b2:27:2e:c4:64:25:b4:e5:2c:27:b8:b2:23:78:73: aa:cc:d9:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjW77rZa8coMyQDMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwOTE0MjU1MVoXDTI1MTIwODE1MjU1MVowLzEtMCsGA1UEAxMk OWZkZmFkZDQtZjQ0NC00OTk4LThiNWMtMWExMWI5NzQ0N2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7rUuA68wi0AKBsgiz0oTqbgtgYsYdxYWhQG 3OsXxVrdFwUmIBWO0PwsmoVLvZo3YiC23p1VeGgdNWNYhJU5F15iDGe4/c4xjgfZ bGhxzQZ/xgsGyzwzOCl5VaIhskn+z7/MIh+fiwcKLu4tGEJyEYgFIhztkqQpoFUV Y/1mxxu+38VX952POjLUyI1SIjlmUn+0AYp7uqKLqflG6r3R2gz/e4BPgttlnxIG 0gtrdwHWhAbHpvm5lFbbYXue5JfBB65bniLo+bI44thBhWMHcnlwXiCBMj0W4GyN vVy/86Jb7CsWJ7wkibflxUkU7YQsjHyh0fnQytX87mnl8AAJqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwQl7xeTroyIVUmYj2IpcpSTPq6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMTY0MWU3NDMtNTgzOS0z ZDE5LWFlN2UtMWZkZTVlYjMzNzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPQDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGYnXAnqX5wavCGUgcBlC0xe5fNK2i3/UM6zvOfFG7i/IJ3R4dJ+7GJ kq3DGwmAkI51+c+pvda5Bp0CkeEaH1sM4GrS/4Pp5YNkk6ks8Pv9gMNItGV0ZIIy wkBGh8HIEbHeAfNtGXUZNnGzOYIYjVAsqdIsxJfU8GXb8mMTRQWMgSrEtrwdZB1M 7158UI4DeZsVIDxvWo1d6tBeIEi49K7awzzT68BsJeb4aHwLIGJ5xX2myAuIXw9S GjUh1msV3FlhyJlCkjr4Grn2zMGhDjYC9bDLfYQvEG4NwV3NNQd2YChqhsrd8gU8 zgrwlrInLsRkJbTlLCe4siN4c6rM2as= -----END CERTIFICATE-----Generated at Sat Oct 11 09:01:14 2025 by rpki-client