$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2a30c72e-fa49-3b15-9519-da04aeedea8b.roa File: 2a30c72e-fa49-3b15-9519-da04aeedea8b.roa (raw, json) Hash identifier: MZohbVdNG9VdR2WXqJEe+Vi+G5FaEiI70TxX9+FtWnI= Subject key identifier: 80:5D:E2:2F:7D:8D:01:FA:C6:95:C1:57:52:6F:36:F2:9F:A5:79:30 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B497C3CBFA085CB7331A39780 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2a30c72e-fa49-3b15-9519-da04aeedea8b.roa Signing time: Tue 23 Sep 2025 06:12:02 +0000 ROA not before: Tue 23 Sep 2025 06:12:02 +0000 ROA not after: Mon 22 Dec 2025 07:12:02 +0000 asID: 834 IP address blocks: 72.244.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:49:7c:3c:bf:a0:85:cb:73:31:a3:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 23 06:12:02 2025 GMT Not After : Dec 22 07:12:02 2025 GMT Subject: CN=445f306e-64ae-42bd-962e-a34e86662169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:33:40:d8:7a:13:8b:5b:76:11:96:89:9d:d4: e0:c6:ae:ec:4b:1f:fa:1c:65:d9:84:c9:47:68:73: 10:6b:1d:5e:17:4b:53:18:32:af:b2:26:6b:c7:99: 3f:cb:91:b8:13:fd:d4:01:0e:69:ed:9f:71:03:31: 51:4c:9a:d2:3b:65:29:13:56:3f:f2:06:8e:ed:90: ac:80:f5:f8:46:2f:fd:70:1a:ae:ac:96:ee:8c:bf: bb:a7:bc:1a:41:6e:6a:69:50:15:2c:2a:7d:27:22: 1c:55:ca:59:c2:11:7b:85:55:fb:6a:b4:5e:2b:00: 3a:dc:ec:eb:d5:f5:88:b3:da:61:ee:c1:29:2f:1c: 4e:bc:7b:aa:34:ba:22:9f:57:4e:78:1f:25:47:29: b6:58:6e:34:c6:94:87:5e:f1:df:35:61:a1:0c:f0: c5:a1:a9:bc:4b:b2:b3:46:6f:0a:3e:7e:72:0b:85: ae:b4:ac:d3:9c:6a:6d:c5:0e:7c:c9:84:90:9a:ed: 67:e1:62:a4:ac:bc:97:57:91:8f:8c:41:69:a5:ce: ff:d0:da:cf:6c:eb:fd:93:e8:98:41:7b:86:b1:c4: f1:03:3e:f4:28:87:d9:65:7b:f9:b2:3c:3a:d8:9b: 94:72:60:e0:39:11:f3:f6:62:20:6a:61:5a:2c:b9: 31:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5D:E2:2F:7D:8D:01:FA:C6:95:C1:57:52:6F:36:F2:9F:A5:79:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2a30c72e-fa49-3b15-9519-da04aeedea8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:05:7d:0f:7f:00:b7:88:52:73:20:c5:03:76:08:a1:43:18: 6a:d1:76:f2:c4:7a:40:f7:77:62:6c:f3:f2:48:9d:ae:de:61: a1:a5:b7:60:ec:12:4f:62:7f:90:37:f7:e0:20:54:0f:92:c0: 9d:2e:c1:ac:d0:37:25:cf:a8:9c:f2:f1:28:0d:2e:0f:b6:8a: b1:c1:e2:16:39:4e:e5:07:d9:1f:49:9c:06:a5:47:93:b9:a5: 98:da:cf:47:d4:04:7a:7d:9e:36:9b:f0:26:cd:21:a1:01:cd: 0e:82:58:67:9b:a6:94:0c:84:a9:16:b0:97:09:63:2e:d0:36: 33:c2:83:33:e2:8e:e5:68:47:d0:87:a0:be:43:a9:a9:bc:62: 98:13:27:d0:d5:e9:90:ea:a6:e9:39:90:ad:41:8f:63:19:ea: d2:32:d2:b3:4f:b7:8f:51:a6:c5:63:9e:29:54:19:24:1d:52: 2f:f8:20:cf:a7:84:27:b3:68:f8:0a:9c:57:30:e4:35:6e:af: f7:54:dc:80:e6:3c:45:ed:fa:20:5a:60:40:87:3e:b6:90:16: ae:39:d4:65:10:73:a6:5f:17:17:b8:a5:e2:50:da:d5:7b:d5: 91:e0:15:7f:6e:56:4b:99:b1:cf:c4:cf:f3:38:47:67:f5:06: d1:6c:00:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtJfDy/oIXLczGjl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyMzA2MTIwMloXDTI1MTIyMjA3MTIwMlowLzEtMCsGA1UEAxMk NDQ1ZjMwNmUtNjRhZS00MmJkLTk2MmUtYTM0ZTg2NjYyMTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDNA2HoTi1t2EZaJndTgxq7sSx/6HGXZhMlH aHMQax1eF0tTGDKvsiZrx5k/y5G4E/3UAQ5p7Z9xAzFRTJrSO2UpE1Y/8gaO7ZCs gPX4Ri/9cBqurJbujL+7p7waQW5qaVAVLCp9JyIcVcpZwhF7hVX7arReKwA63Ozr 1fWIs9ph7sEpLxxOvHuqNLoin1dOeB8lRym2WG40xpSHXvHfNWGhDPDFoam8S7Kz Rm8KPn5yC4WutKzTnGptxQ58yYSQmu1n4WKkrLyXV5GPjEFppc7/0NrPbOv9k+iY QXuGscTxAz70KIfZZXv5sjw62JuUcmDgORHz9mIgamFaLLkxbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBd4i99jQH6xpXBV1JvNvKfpXkwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmEzMGM3MmUtZmE0OS0z YjE1LTk1MTktZGEwNGFlZWRlYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPTfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcFfQ9/ALeIUnMgxQN2CKFDGGrRdvLEekD3d2Js8/JIna7eYaGlt2Ds Ek9if5A39+AgVA+SwJ0uwazQNyXPqJzy8SgNLg+2irHB4hY5TuUH2R9JnAalR5O5 pZjaz0fUBHp9njab8CbNIaEBzQ6CWGebppQMhKkWsJcJYy7QNjPCgzPijuVoR9CH oL5Dqam8YpgTJ9DV6ZDqpuk5kK1Bj2MZ6tIy0rNPt49RpsVjnilUGSQdUi/4IM+n hCezaPgKnFcw5DVur/dU3IDmPEXt+iBaYECHPraQFq451GUQc6ZfFxe4peJQ2tV7 1ZHgFX9uVkuZsc/Ez/M4R2f1BtFsAIo= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:45 2025 by rpki-client