$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3485d667-130f-3a5f-9b09-44a4f645ab8e.roa File: 3485d667-130f-3a5f-9b09-44a4f645ab8e.roa (raw, json) Hash identifier: zFdYOYWaW2JVNgoY5bmReQIskykK4Ec/bapCwsCRa5M= Subject key identifier: FD:C4:2A:10:23:6D:39:9C:21:1A:2C:09:60:51:26:DF:18:56:CA:22 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B20A64D15D07155270D50B0A0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3485d667-130f-3a5f-9b09-44a4f645ab8e.roa Signing time: Mon 08 Sep 2025 15:08:39 +0000 ROA not before: Mon 08 Sep 2025 15:08:39 +0000 ROA not after: Sun 07 Dec 2025 16:08:39 +0000 asID: 40676 IP address blocks: 72.244.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:a6:4d:15:d0:71:55:27:0d:50:b0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 15:08:39 2025 GMT Not After : Dec 7 16:08:39 2025 GMT Subject: CN=d36b56a7-2b4a-4dba-b498-02eb5b1047a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b2:fb:cc:87:95:f4:4a:b3:b4:b2:6d:a2:45: 99:00:08:b8:4d:e7:3a:75:84:0b:7d:ef:ee:10:16: 18:e8:ae:4f:65:5f:08:e4:a0:41:ff:ba:54:5d:88: f2:57:7f:5d:e6:a2:45:91:1f:4c:1e:fd:d2:a0:d7: f6:23:36:f0:6b:a4:74:81:32:81:53:60:64:3a:94: b2:1c:bc:26:fe:3b:a0:0b:ef:93:5c:d1:d1:73:cc: 6a:8e:4e:99:14:3b:94:59:9b:d9:ce:9f:62:6a:0d: dc:1c:74:42:3c:63:a2:45:f2:46:a9:90:32:d3:e8: a8:18:60:4e:c7:3d:6f:90:bf:1d:bc:f5:28:d7:42: 6e:bc:34:8e:07:b2:af:35:73:ea:fa:f5:5e:c5:fd: 78:17:3c:93:61:26:79:fe:fe:a4:38:a5:fe:2a:d4: e6:b7:7c:ef:e8:44:5f:0d:cb:e6:47:cd:7e:68:96: 31:9c:2f:9c:5b:44:a7:92:c2:97:ad:f3:94:e0:77: 11:4a:50:3a:23:e4:af:c3:47:0e:cb:58:72:6e:d6: 72:b1:82:af:f7:9a:fc:37:a8:82:5e:4b:58:84:df: d1:80:74:6d:b2:8f:04:32:93:bb:62:d6:01:42:c5: 10:ba:c6:1d:13:47:f7:f9:50:b0:dd:29:b2:39:20: 50:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C4:2A:10:23:6D:39:9C:21:1A:2C:09:60:51:26:DF:18:56:CA:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3485d667-130f-3a5f-9b09-44a4f645ab8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:21:68:78:07:4a:0e:3d:5a:7e:e3:7b:f2:62:d9:b3:0b:53: 1d:12:47:4d:a2:c2:a1:44:72:b4:96:bc:59:4c:2a:ed:1d:51: ac:6c:cb:f9:47:85:17:90:c3:bf:7a:f1:c6:cd:7a:30:69:d3: fb:7f:0b:2a:47:86:04:c0:29:24:dd:60:67:d7:ee:7d:80:e2: d4:ba:c8:af:50:74:0f:99:9d:44:fe:34:63:dd:fd:7d:ee:60: d4:45:45:2a:40:a3:e2:37:a6:05:e9:40:68:7c:de:3e:03:d3: 60:27:19:f8:12:f0:72:af:04:2a:a5:9b:c3:ac:df:86:35:28: 3c:75:03:87:d4:e2:f5:8d:05:97:15:a5:5d:7d:3a:5e:f5:ec: c5:1f:33:f3:2c:09:3a:67:b9:68:32:af:dd:5b:77:33:09:40: 75:7c:57:53:63:15:35:61:56:be:b9:cc:42:23:be:a6:0c:a1: 05:22:b2:48:f1:c0:4a:e4:d8:61:5d:0d:b9:59:ab:e5:46:f3: 85:81:80:ad:2c:63:85:42:ef:43:97:50:ea:51:15:a3:7d:f5: 59:ff:63:3f:61:50:be:58:32:81:57:87:d9:fa:02:d3:ca:8c: cb:51:71:95:0b:cb:fc:70:81:6b:52:ee:11:64:bd:6c:55:cd: ae:ac:90:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgpk0V0HFVJw1QsKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODE1MDgzOVoXDTI1MTIwNzE2MDgzOVowLzEtMCsGA1UEAxMk ZDM2YjU2YTctMmI0YS00ZGJhLWI0OTgtMDJlYjViMTA0N2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLL7zIeV9EqztLJtokWZAAi4Tec6dYQLfe/u EBYY6K5PZV8I5KBB/7pUXYjyV39d5qJFkR9MHv3SoNf2Izbwa6R0gTKBU2BkOpSy HLwm/jugC++TXNHRc8xqjk6ZFDuUWZvZzp9iag3cHHRCPGOiRfJGqZAy0+ioGGBO xz1vkL8dvPUo10JuvDSOB7KvNXPq+vVexf14FzyTYSZ5/v6kOKX+KtTmt3zv6ERf DcvmR81+aJYxnC+cW0SnksKXrfOU4HcRSlA6I+Svw0cOy1hybtZysYKv95r8N6iC XktYhN/RgHRtso8EMpO7YtYBQsUQusYdE0f3+VCw3SmyOSBQQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3EKhAjbTmcIRosCWBRJt8YVsoiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzQ4NWQ2NjctMTMwZi0z YTVmLTliMDktNDRhNGY2NDVhYjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUhaHgHSg49Wn7je/Ji2bMLUx0SR02iwqFEcrSWvFlMKu0dUaxsy/lH hReQw7968cbNejBp0/t/CypHhgTAKSTdYGfX7n2A4tS6yK9QdA+ZnUT+NGPd/X3u YNRFRSpAo+I3pgXpQGh83j4D02AnGfgS8HKvBCqlm8Os34Y1KDx1A4fU4vWNBZcV pV19Ol717MUfM/MsCTpnuWgyr91bdzMJQHV8V1NjFTVhVr65zEIjvqYMoQUiskjx wErk2GFdDblZq+VG84WBgK0sY4VC70OXUOpRFaN99Vn/Yz9hUL5YMoFXh9n6AtPK jMtRcZULy/xwgWtS7hFkvWxVza6skIo= -----END CERTIFICATE-----Generated at Wed Sep 17 17:35:39 2025 by rpki-client