$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1945f954-b357-30ab-b285-d36434ca2f9a.roa File: 1945f954-b357-30ab-b285-d36434ca2f9a.roa (raw, json) Hash identifier: t3GUr0wMlgogPSOo62QXLRMIqJOgkPWJfBGQAIOv0cA= Subject key identifier: DC:75:9D:D2:C0:AD:97:6C:7E:37:C1:27:7F:41:4E:FE:C5:31:95:12 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B2049C21134A0C068A978EF80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1945f954-b357-30ab-b285-d36434ca2f9a.roa Signing time: Mon 08 Sep 2025 12:02:11 +0000 ROA not before: Mon 08 Sep 2025 12:02:11 +0000 ROA not after: Sun 07 Dec 2025 13:02:11 +0000 asID: 56264 IP address blocks: 72.244.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:49:c2:11:34:a0:c0:68:a9:78:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 12:02:11 2025 GMT Not After : Dec 7 13:02:11 2025 GMT Subject: CN=7b97321f-5a2d-4eca-8526-7c2e7213d02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9f:5b:02:6b:91:ae:5a:f2:5a:1a:ab:ca:3f: 47:48:0f:3a:91:fd:45:f1:7d:be:97:d3:12:af:47: a3:63:fa:6e:90:2a:0d:a8:0f:e7:77:10:c3:51:c1: f5:be:61:69:bc:e7:4f:0f:7e:fc:76:63:22:60:0b: 1e:75:1d:29:82:aa:22:c7:d1:9f:f3:e0:de:db:d0: fc:79:0e:ea:9e:d2:0c:c2:07:6e:17:ad:a6:e1:b6: e0:3a:7c:3a:39:f5:4d:59:05:f9:91:ff:68:7e:49: a6:a2:3b:36:fd:d5:10:30:53:25:4d:7a:e0:84:5c: f4:ef:4e:bd:e7:3a:67:4b:2c:ad:12:bb:fc:42:90: df:08:aa:a1:70:ed:ca:ca:fb:45:87:ae:46:84:bb: 1f:35:9c:7d:e2:de:ce:b5:28:42:3d:60:b5:95:cc: b6:9c:d7:c9:78:be:68:f1:bd:90:4b:53:09:d3:11: 8e:28:46:39:9d:23:3f:2b:49:0b:0d:4a:44:82:9c: ee:7e:4c:1d:f1:47:24:57:64:25:e8:fe:6e:53:58: ec:63:d9:5f:17:0a:ce:33:5f:09:da:8f:68:b7:d7: 8c:9e:d0:ef:f7:ee:9b:ab:d5:84:c6:c3:0e:8b:ba: 6d:19:aa:b0:3d:58:f7:b1:a4:a9:ba:a2:22:fc:f7: 0a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:75:9D:D2:C0:AD:97:6C:7E:37:C1:27:7F:41:4E:FE:C5:31:95:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1945f954-b357-30ab-b285-d36434ca2f9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:13:e8:89:c6:ef:e9:67:d0:2f:eb:b5:d7:23:fe:b9:b6:06: 5c:e4:01:ee:35:70:67:25:91:88:07:98:0b:fc:20:8e:d8:86: aa:11:48:f1:71:79:76:64:65:5a:0d:56:cb:92:bb:1b:17:b7: cf:5a:9c:c5:68:cf:07:73:78:3d:3a:ef:72:aa:7a:e7:ec:3c: de:76:9a:70:f1:19:7d:ec:48:2f:d3:8b:77:91:e4:b1:86:55: 12:17:21:3c:02:0f:05:16:39:af:e1:2a:06:03:3b:e2:da:e9: 38:f4:6a:fc:17:a1:39:14:0c:37:e4:1f:1c:ef:26:65:59:2c: ba:9a:92:79:ea:58:a9:f2:e0:dd:cb:a6:ed:19:67:df:96:f3: 48:4b:37:72:be:57:26:6f:ff:5a:93:38:e4:a4:12:63:bb:32: 14:82:ff:03:5f:49:e5:89:c1:a7:49:e7:59:27:e3:2e:30:54: 77:82:a9:df:b1:40:ad:b1:ec:fd:2a:17:cf:b0:28:d0:67:31: 9e:85:eb:e5:b6:1f:10:57:9f:e2:fe:a8:75:29:be:72:08:ab: 06:24:ec:f4:f2:8b:50:b4:ff:54:5b:ce:1c:1a:6b:da:f0:00: b5:96:7f:bc:bd:87:5f:55:44:04:7f:03:2f:32:2e:de:1d:cb: c9:1f:dd:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgScIRNKDAaKl474AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODEyMDIxMVoXDTI1MTIwNzEzMDIxMVowLzEtMCsGA1UEAxMk N2I5NzMyMWYtNWEyZC00ZWNhLTg1MjYtN2MyZTcyMTNkMDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ9bAmuRrlryWhqryj9HSA86kf1F8X2+l9MS r0ejY/pukCoNqA/ndxDDUcH1vmFpvOdPD378dmMiYAsedR0pgqoix9Gf8+De29D8 eQ7qntIMwgduF62m4bbgOnw6OfVNWQX5kf9ofkmmojs2/dUQMFMlTXrghFz07069 5zpnSyytErv8QpDfCKqhcO3KyvtFh65GhLsfNZx94t7OtShCPWC1lcy2nNfJeL5o 8b2QS1MJ0xGOKEY5nSM/K0kLDUpEgpzufkwd8UckV2Ql6P5uU1jsY9lfFwrOM18J 2o9ot9eMntDv9+6bq9WExsMOi7ptGaqwPVj3saSpuqIi/PcKpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNx1ndLArZdsfjfBJ39BTv7FMZUSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMTk0NWY5NTQtYjM1Ny0z MGFiLWIyODUtZDM2NDM0Y2EyZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYT6InG7+ln0C/rtdcj/rm2BlzkAe41cGclkYgHmAv8II7YhqoRSPFx eXZkZVoNVsuSuxsXt89anMVozwdzeD0673KqeufsPN52mnDxGX3sSC/Ti3eR5LGG VRIXITwCDwUWOa/hKgYDO+La6Tj0avwXoTkUDDfkHxzvJmVZLLqaknnqWKny4N3L pu0ZZ9+W80hLN3K+VyZv/1qTOOSkEmO7MhSC/wNfSeWJwadJ51kn4y4wVHeCqd+x QK2x7P0qF8+wKNBnMZ6F6+W2HxBXn+L+qHUpvnIIqwYk7PTyi1C0/1Rbzhwaa9rw ALWWf7y9h19VRAR/Ay8yLt4dy8kf3Wo= -----END CERTIFICATE-----Generated at Sat Oct 11 08:57:36 2025 by rpki-client