$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1bc0d5ba-7fd0-3e85-a802-0e6b5668aa80.roa File: 1bc0d5ba-7fd0-3e85-a802-0e6b5668aa80.roa (raw, json) Hash identifier: FW4evV92MvkdmoqxiGpQszxzGUgil7CNvi/+2uA4FzM= Subject key identifier: C6:CA:C2:0E:3D:51:72:D0:EC:19:92:F4:C2:05:AA:2A:D4:8F:15:AA Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B4B2E59C1899A5B7D2AB43260 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1bc0d5ba-7fd0-3e85-a802-0e6b5668aa80.roa Signing time: Tue 23 Sep 2025 20:46:43 +0000 ROA not before: Tue 23 Sep 2025 20:46:43 +0000 ROA not after: Mon 22 Dec 2025 21:46:43 +0000 asID: 14618 IP address blocks: 72.244.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:2e:59:c1:89:9a:5b:7d:2a:b4:32:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 23 20:46:43 2025 GMT Not After : Dec 22 21:46:43 2025 GMT Subject: CN=501b8db6-8e34-43f9-9a1c-0b652bbbfb62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bc:68:6f:ed:06:83:9b:30:90:1b:03:6b:15: b4:50:2c:10:9e:8c:c7:85:03:b9:18:eb:fe:ef:0b: 9e:70:87:84:3b:e8:03:e6:ec:ef:16:22:3a:90:8e: e2:30:37:08:80:5f:b0:2f:16:39:a3:ed:3c:a8:37: b5:a4:9f:3e:60:ec:f1:95:e7:d9:ca:b9:97:5d:d2: 31:4c:70:d3:e6:79:19:f7:00:e0:31:73:89:f8:2f: d6:26:b8:96:49:15:f6:0f:a0:c5:bf:20:2a:d6:85: 7e:66:46:b7:37:da:db:92:1b:23:55:96:3f:04:28: 7f:0d:00:15:ab:44:70:28:c6:b4:81:1d:7b:5d:dc: 83:a9:8d:57:77:66:d4:a6:e9:74:26:ec:3c:37:d6: 86:e4:e4:f3:cf:f7:1a:f3:45:9f:e0:8d:0b:77:cc: f9:22:01:b6:55:77:b8:48:59:a3:69:5d:0d:90:21: 4d:cd:f5:bc:77:52:70:59:07:df:da:ac:b1:43:b1: f0:7f:fc:f6:ad:1f:96:62:b1:db:1b:9d:0a:c7:01: b8:eb:41:5a:43:8c:9e:47:fa:b8:2c:d4:de:5d:7c: f0:03:31:0e:80:bd:5a:f9:3e:0c:b4:1d:4b:8d:0f: d8:ad:35:54:20:fe:8e:97:2e:26:8c:e5:ea:58:b3: 23:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:CA:C2:0E:3D:51:72:D0:EC:19:92:F4:C2:05:AA:2A:D4:8F:15:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1bc0d5ba-7fd0-3e85-a802-0e6b5668aa80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:c8:9f:2f:4f:93:d8:35:1b:66:04:4a:71:b9:7c:60:e5:3e: ec:b1:42:ba:8c:35:6f:4c:24:5e:a5:15:3d:d1:ac:0f:91:cf: 29:85:b2:23:ff:11:22:fa:d7:09:2f:0d:43:eb:10:4a:ac:14: 2b:0f:9f:f1:14:fe:47:8a:61:d6:5e:65:67:69:3c:4d:6b:6c: 3d:bc:8d:e2:53:c7:0f:49:54:b0:0a:76:70:73:d1:25:07:46: 3f:54:77:39:7e:07:39:2d:86:79:91:07:02:3e:22:3c:d0:ee: f1:15:6d:16:2a:e5:61:a4:f5:91:9a:b6:00:83:19:2b:22:27: e0:8f:70:1c:7f:ed:a7:69:94:27:4e:0e:7f:16:41:01:c1:c9: 35:51:f0:fc:1e:8c:ac:14:7b:ab:41:19:8f:79:ba:e5:cd:18: 9a:2c:70:d3:1b:8e:98:91:3f:b9:46:a3:40:cd:ad:22:71:72: d2:ae:90:6e:4d:c0:79:f6:68:b7:3b:08:e6:55:9e:1c:df:b8: a3:20:00:66:b6:26:b2:65:09:ac:dc:74:2f:22:14:69:97:0f: 4e:67:75:1c:46:d0:5e:ff:3d:a8:b7:6e:43:f0:9c:28:61:20: df:51:03:97:a5:53:44:9e:fa:66:54:d0:fc:3b:35:cc:64:08: cb:cd:06:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtLLlnBiZpbfSq0MmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyMzIwNDY0M1oXDTI1MTIyMjIxNDY0M1owLzEtMCsGA1UEAxMk NTAxYjhkYjYtOGUzNC00M2Y5LTlhMWMtMGI2NTJiYmJmYjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLxob+0Gg5swkBsDaxW0UCwQnozHhQO5GOv+ 7wuecIeEO+gD5uzvFiI6kI7iMDcIgF+wLxY5o+08qDe1pJ8+YOzxlefZyrmXXdIx THDT5nkZ9wDgMXOJ+C/WJriWSRX2D6DFvyAq1oV+Zka3N9rbkhsjVZY/BCh/DQAV q0RwKMa0gR17XdyDqY1Xd2bUpul0Juw8N9aG5OTzz/ca80Wf4I0Ld8z5IgG2VXe4 SFmjaV0NkCFNzfW8d1JwWQff2qyxQ7Hwf/z2rR+WYrHbG50KxwG460FaQ4yeR/q4 LNTeXXzwAzEOgL1a+T4MtB1LjQ/YrTVUIP6Oly4mjOXqWLMjkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbKwg49UXLQ7BmS9MIFqirUjxWqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMWJjMGQ1YmEtN2ZkMC0z ZTg1LWE4MDItMGU2YjU2NjhhYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzIny9Pk9g1G2YESnG5fGDlPuyxQrqMNW9MJF6lFT3RrA+RzymFsiP/ ESL61wkvDUPrEEqsFCsPn/EU/keKYdZeZWdpPE1rbD28jeJTxw9JVLAKdnBz0SUH Rj9Udzl+BzkthnmRBwI+IjzQ7vEVbRYq5WGk9ZGatgCDGSsiJ+CPcBx/7adplCdO Dn8WQQHByTVR8PwejKwUe6tBGY95uuXNGJoscNMbjpiRP7lGo0DNrSJxctKukG5N wHn2aLc7COZVnhzfuKMgAGa2JrJlCazcdC8iFGmXD05ndRxG0F7/Pai3bkPwnChh IN9RA5elU0Se+mZU0Pw7NcxkCMvNBiI= -----END CERTIFICATE-----Generated at Wed Oct 8 21:28:32 2025 by rpki-client