$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/214f7ee0-33da-39c1-9954-7107492ec033.roa File: 214f7ee0-33da-39c1-9954-7107492ec033.roa (raw, json) Hash identifier: icXgrKSAI9n5ECnDqYX/OfcZbjmipGnK2tagMnFsN5k= Subject key identifier: 73:F7:F2:BA:5C:10:30:90:E9:30:2E:C6:09:86:ED:78:E2:8C:CF:A0 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B235BD0C20DAF1767A3418D80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/214f7ee0-33da-39c1-9954-7107492ec033.roa Signing time: Tue 09 Sep 2025 14:25:59 +0000 ROA not before: Tue 09 Sep 2025 14:25:59 +0000 ROA not after: Mon 08 Dec 2025 15:25:59 +0000 asID: 9304 IP address blocks: 72.244.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:5b:d0:c2:0d:af:17:67:a3:41:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 9 14:25:59 2025 GMT Not After : Dec 8 15:25:59 2025 GMT Subject: CN=71d93b56-3c52-4d11-b00b-12164061d74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b9:c9:1d:f8:44:d3:92:e4:10:36:07:c9:d0: fb:b1:63:76:e3:79:4c:23:83:11:05:74:dd:db:b0: 5d:58:b6:da:4b:5c:85:5b:89:ce:2c:07:f6:5c:72: 3c:45:ff:79:3b:b7:3d:06:21:b0:c3:e8:ac:53:62: 17:dc:ed:d4:8d:2f:ef:4d:ee:ee:cd:4e:7d:35:d7: 41:8a:29:1f:f3:9c:dd:40:fe:2c:20:24:d4:a8:78: 01:18:52:f5:36:9a:20:f3:89:98:c6:10:7a:db:c2: 48:03:44:f7:e4:05:95:1f:b7:dc:e6:fb:9c:4a:70: 9a:d3:ac:75:a3:6f:a8:ee:67:8f:3c:22:80:d0:86: 2b:a7:c8:b8:9a:e6:23:e5:ef:ee:0a:ab:ab:4c:53: b2:b7:91:68:63:aa:f3:3f:62:4b:2e:91:0c:db:e6: 4e:81:5a:32:3f:c6:a9:95:b3:87:3f:e7:0b:e3:f2: 0d:09:54:3d:0b:3a:da:27:82:c9:a8:2a:6d:b6:bc: 8f:87:f3:b7:35:86:3f:16:c1:d5:9e:ac:cd:17:53: 8c:ec:b5:e6:e1:e4:bd:31:d5:f7:83:21:b9:84:f3: f2:30:d5:d0:1c:55:3b:fe:c6:9e:52:79:f1:6e:0c: 1d:4a:7c:c5:b3:9c:57:61:29:8d:65:23:87:b2:37: 0f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F7:F2:BA:5C:10:30:90:E9:30:2E:C6:09:86:ED:78:E2:8C:CF:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/214f7ee0-33da-39c1-9954-7107492ec033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:cd:a1:41:7f:da:88:c9:a7:71:2e:97:7f:f4:ff:7f:0f:35: b4:d6:8c:3f:42:10:c2:5f:5d:28:aa:7d:1b:46:c4:ff:6e:6e: 3a:a3:71:81:df:aa:b8:ac:f4:33:d2:4d:3c:11:a4:45:56:9c: 84:c1:60:88:b6:f5:e6:71:72:10:c7:d0:a0:61:ce:d4:e5:e6: 50:56:8a:b9:13:91:65:80:7d:61:23:2f:fa:88:db:51:cf:42: 45:fe:6f:f9:93:29:4c:94:67:96:b2:a5:b4:12:12:bd:3b:27: 89:2a:c0:40:fb:f1:eb:5b:d6:99:d2:6d:42:7a:b2:77:e8:e5: c8:52:53:25:3e:5b:9d:fb:55:eb:33:48:8d:84:71:ad:9b:56: 65:d6:cb:78:03:1f:dc:fc:01:63:3c:ae:3e:d4:f0:0b:03:59: 4c:21:45:cb:b7:fa:cf:52:4a:fd:63:f7:cc:e7:38:95:97:e4: 11:b3:c8:e1:33:7c:ec:54:57:bf:99:dc:bb:91:d1:14:c1:41: b7:2a:6e:11:30:8b:cf:ee:c9:e3:97:91:c0:89:07:40:76:64: ac:f7:0c:59:58:f1:c6:34:82:42:fe:c6:29:97:c8:cb:e9:08: f5:4c:40:ba:bf:6a:e4:0c:e9:0e:3a:3e:dd:31:d4:ef:e2:05: 11:a9:85:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjW9DCDa8XZ6NBjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwOTE0MjU1OVoXDTI1MTIwODE1MjU1OVowLzEtMCsGA1UEAxMk NzFkOTNiNTYtM2M1Mi00ZDExLWIwMGItMTIxNjQwNjFkNzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LnJHfhE05LkEDYHydD7sWN243lMI4MRBXTd 27BdWLbaS1yFW4nOLAf2XHI8Rf95O7c9BiGww+isU2IX3O3UjS/vTe7uzU59NddB iikf85zdQP4sICTUqHgBGFL1Npog84mYxhB628JIA0T35AWVH7fc5vucSnCa06x1 o2+o7mePPCKA0IYrp8i4muYj5e/uCqurTFOyt5FoY6rzP2JLLpEM2+ZOgVoyP8ap lbOHP+cL4/INCVQ9CzraJ4LJqCpttryPh/O3NYY/FsHVnqzNF1OM7LXm4eS9MdX3 gyG5hPPyMNXQHFU7/saeUnnxbgwdSnzFs5xXYSmNZSOHsjcP1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHP38rpcEDCQ6TAuxgmG7XjijM+gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjE0ZjdlZTAtMzNkYS0z OWMxLTk5NTQtNzEwNzQ5MmVjMDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPT3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrNoUF/2ojJp3Eul3/0/38PNbTWjD9CEMJfXSiqfRtGxP9ubjqjcYHf qris9DPSTTwRpEVWnITBYIi29eZxchDH0KBhztTl5lBWirkTkWWAfWEjL/qI21HP QkX+b/mTKUyUZ5aypbQSEr07J4kqwED78etb1pnSbUJ6snfo5chSUyU+W537Vesz SI2Eca2bVmXWy3gDH9z8AWM8rj7U8AsDWUwhRcu3+s9SSv1j98znOJWX5BGzyOEz fOxUV7+Z3LuR0RTBQbcqbhEwi8/uyeOXkcCJB0B2ZKz3DFlY8cY0gkL+ximXyMvp CPVMQLq/auQM6Q46Pt0x1O/iBRGpheg= -----END CERTIFICATE-----Generated at Sat Oct 11 08:57:31 2025 by rpki-client