$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/48c8a724-84a6-3648-b5da-0498600617c2.roa File: 48c8a724-84a6-3648-b5da-0498600617c2.roa (raw, json) Hash identifier: T9qUWEIvhQ6v3oMsEObTJDymHkB7WtlanR6Aq1x7dyA= Subject key identifier: 24:A9:0F:7E:15:66:C4:4E:00:D5:90:F6:19:EA:7A:E9:D5:20:DB:C6 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B51F4B1C9B3BBEC5207943640 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/48c8a724-84a6-3648-b5da-0498600617c2.roa Signing time: Fri 26 Sep 2025 07:01:12 +0000 ROA not before: Fri 26 Sep 2025 07:01:12 +0000 ROA not after: Thu 25 Dec 2025 08:01:12 +0000 asID: 20326 IP address blocks: 72.244.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:f4:b1:c9:b3:bb:ec:52:07:94:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 26 07:01:12 2025 GMT Not After : Dec 25 08:01:12 2025 GMT Subject: CN=df274bb9-3add-45d0-9559-3b5baa7b5c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ed:f8:89:f1:59:a6:78:19:3c:f1:4f:2d:94: af:c6:b5:f9:5a:d8:f8:72:78:e8:45:22:8d:72:67: a7:7b:7d:02:fe:ce:07:3e:ad:06:16:92:43:51:28: a1:7c:47:3c:35:f5:bc:49:a0:e2:17:1f:23:fd:98: b2:8e:16:19:7a:37:a2:de:d7:80:af:ab:09:22:2e: a0:de:8c:fe:16:d5:86:19:6d:90:f6:50:94:40:52: 84:bb:12:44:a9:d4:82:04:5d:62:ae:1c:e9:c8:4c: c5:24:bd:07:f2:dc:47:1c:86:04:3c:b2:37:a3:b4: 73:99:51:3a:ae:7a:7a:e9:9f:3f:f1:e8:c9:c4:89: c0:c3:9c:2e:50:51:93:3f:ab:f3:ca:7f:b2:b0:93: 0b:fd:22:33:86:70:cb:c9:09:4d:20:c5:8c:52:a5: d6:f1:41:55:1b:2e:d8:01:c5:87:aa:5d:c0:2c:30: 74:20:eb:b7:53:97:e6:10:fe:f7:19:ae:51:cc:dc: 86:23:7b:03:15:c1:41:de:06:bb:55:4c:e1:a7:e5: 19:6e:8d:2d:c4:cf:f3:15:00:39:8a:e1:74:cb:5c: b3:39:f3:82:a5:8f:86:62:a7:df:5a:06:67:48:27: ed:2e:20:dd:15:bf:04:90:54:e2:8e:df:8c:9b:7a: 7b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A9:0F:7E:15:66:C4:4E:00:D5:90:F6:19:EA:7A:E9:D5:20:DB:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/48c8a724-84a6-3648-b5da-0498600617c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:bc:07:e6:29:7b:00:f3:0f:88:d4:3c:00:71:84:99:ff:9f: 0c:17:48:65:e2:07:e1:a1:23:c7:59:09:da:e8:f8:0e:0b:b3: 60:d3:11:4c:0f:b4:1b:cc:89:92:04:e7:04:51:6e:8c:39:6e: 92:70:f4:5d:c4:b9:6a:bb:35:e1:22:aa:27:f0:fe:f3:1e:3b: d0:86:85:17:9e:b8:07:bf:a0:b6:ab:a2:5d:ae:1a:f9:ea:39: 21:59:6e:5a:e6:2a:71:d6:0e:27:4a:b9:50:80:e9:6a:62:ee: f2:48:40:1b:26:b5:6f:7e:86:86:e8:6e:a5:51:8f:90:cf:bc: 9e:08:60:9c:18:01:29:cd:36:4c:05:d7:0a:7f:a8:69:ad:5e: 3e:1f:4d:df:ad:70:4c:17:1c:17:92:3b:d9:dc:f3:30:d2:0e: 48:32:e1:8d:65:bf:6c:ff:f8:7f:68:b1:b7:28:0d:f2:e0:2b: 6a:ce:a3:5a:d5:61:73:85:18:70:2c:dd:ce:23:5e:a1:ae:b5: 80:f8:3b:f4:d5:44:37:d6:6c:55:1e:d7:5b:75:8f:a9:da:e0: bb:dc:da:19:3b:ae:cb:1a:57:99:6b:cd:02:48:60:40:20:e2: f5:3a:ea:c0:95:16:3e:ad:4a:33:5c:f5:f1:17:54:18:5f:6f: e0:bc:0e:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtR9LHJs7vsUgeUNkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyNjA3MDExMloXDTI1MTIyNTA4MDExMlowLzEtMCsGA1UEAxMk ZGYyNzRiYjktM2FkZC00NWQwLTk1NTktM2I1YmFhN2I1YzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+34ifFZpngZPPFPLZSvxrX5Wtj4cnjoRSKN cmene30C/s4HPq0GFpJDUSihfEc8NfW8SaDiFx8j/ZiyjhYZejei3teAr6sJIi6g 3oz+FtWGGW2Q9lCUQFKEuxJEqdSCBF1irhzpyEzFJL0H8txHHIYEPLI3o7RzmVE6 rnp66Z8/8ejJxInAw5wuUFGTP6vzyn+ysJML/SIzhnDLyQlNIMWMUqXW8UFVGy7Y AcWHql3ALDB0IOu3U5fmEP73Ga5RzNyGI3sDFcFB3ga7VUzhp+UZbo0txM/zFQA5 iuF0y1yzOfOCpY+GYqffWgZnSCftLiDdFb8EkFTijt+Mm3p7vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSpD34VZsROANWQ9hnqeunVINvGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDhjOGE3MjQtODRhNi0z NjQ4LWI1ZGEtMDQ5ODYwMDYxN2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPSaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHG8B+YpewDzD4jUPABxhJn/nwwXSGXiB+GhI8dZCdro+A4Ls2DTEUwP tBvMiZIE5wRRbow5bpJw9F3EuWq7NeEiqifw/vMeO9CGhReeuAe/oLarol2uGvnq OSFZblrmKnHWDidKuVCA6Wpi7vJIQBsmtW9+hobobqVRj5DPvJ4IYJwYASnNNkwF 1wp/qGmtXj4fTd+tcEwXHBeSO9nc8zDSDkgy4Y1lv2z/+H9osbcoDfLgK2rOo1rV YXOFGHAs3c4jXqGutYD4O/TVRDfWbFUe11t1j6na4Lvc2hk7rssaV5lrzQJIYEAg 4vU66sCVFj6tSjNc9fEXVBhfb+C8DqA= -----END CERTIFICATE-----Generated at Sat Oct 11 08:59:57 2025 by rpki-client