$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d97cbb7-101c-3256-b1df-d5eae6da338b.roa File: 4d97cbb7-101c-3256-b1df-d5eae6da338b.roa (raw, json) Hash identifier: oQujFX0jdakNm6s+NkDFyaW58IYdFAc2A4bmHccsc6c= Subject key identifier: EA:C5:DF:DB:A3:79:F2:D1:25:23:9A:F4:28:F8:8E:EF:CB:22:7A:76 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B4F56826EA772323E5686DF00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d97cbb7-101c-3256-b1df-d5eae6da338b.roa Signing time: Thu 25 Sep 2025 08:30:52 +0000 ROA not before: Thu 25 Sep 2025 08:30:52 +0000 ROA not after: Wed 24 Dec 2025 09:30:52 +0000 asID: 9304 IP address blocks: 72.244.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:56:82:6e:a7:72:32:3e:56:86:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 08:30:52 2025 GMT Not After : Dec 24 09:30:52 2025 GMT Subject: CN=0e29417e-4208-4039-899b-a6379d04e72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:74:99:a1:c7:73:a1:d1:80:e7:b8:69:9d:e4: e7:d4:d2:1e:01:ca:61:8b:24:25:e3:56:2f:8e:b6: 9d:8d:d3:61:30:62:59:32:a9:71:2a:16:a3:dd:cf: 78:6d:af:f7:0e:a5:13:9e:57:af:d7:89:a8:98:2a: 97:54:ed:99:b7:8d:ae:af:c6:1f:2e:6e:1c:19:cf: 20:d1:1e:65:51:e4:da:1a:d1:2b:65:c2:57:1f:25: 61:59:cc:ec:55:49:04:71:4c:80:0d:e3:81:84:87: a8:c9:9d:13:ce:44:27:6d:2b:fa:88:c4:89:7c:fa: b5:07:e2:a4:bb:7e:f6:f0:27:79:7e:2f:7a:36:4c: cb:ab:35:c4:f8:76:46:73:b6:06:09:b6:da:5e:0e: 97:53:b7:7b:fb:3f:f9:19:97:b7:db:c7:7f:07:a4: 21:53:05:8c:0d:b7:4a:f1:4c:39:71:36:61:49:c0: 17:2a:20:2a:73:ae:e4:e2:e5:9e:13:17:d9:4e:82: 98:9d:13:51:19:56:1d:e0:91:de:27:9d:74:62:ce: 03:a6:d7:bc:11:7f:15:0c:6a:6e:1b:56:bd:a6:99: 61:54:cf:81:82:ca:ec:56:7b:b9:01:43:c6:11:f3: bd:d4:58:01:2f:13:78:d4:df:39:f0:0d:aa:b9:50: c2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C5:DF:DB:A3:79:F2:D1:25:23:9A:F4:28:F8:8E:EF:CB:22:7A:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d97cbb7-101c-3256-b1df-d5eae6da338b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:d2:c3:92:91:04:8c:25:93:aa:0b:72:85:8e:a3:c4:86:69: 82:3b:32:69:33:f3:a6:3d:66:65:b0:18:a3:a5:a8:6c:8a:c2: c2:7e:52:b0:b8:b9:72:76:51:03:81:dc:6b:7f:de:f0:0f:0f: 6f:7b:db:22:e3:fd:f3:5b:eb:83:97:78:4c:ba:8f:53:08:7e: d5:d0:98:e7:90:1f:6e:61:2e:70:a4:ea:ec:cd:04:f1:d5:2d: 21:96:a1:61:ba:60:da:e1:11:36:a3:c6:24:66:d0:a9:53:48: fd:dc:49:3b:b1:13:96:2d:aa:ec:31:27:ec:bb:53:50:37:47: 9a:f0:e6:b5:e5:d2:a4:f4:5b:86:bc:7f:09:7d:b6:b2:67:66: e0:78:64:a7:a4:47:a3:a5:ea:d5:18:c7:71:89:ae:82:32:bd: 9e:d9:c2:86:72:f7:a7:11:9b:68:2d:1f:f5:07:a1:bb:4b:1d: e7:31:a0:0f:4e:b4:5b:de:ac:25:4d:86:fe:ca:76:43:35:00: 5b:4a:7b:d7:4e:46:cd:6d:7e:12:51:b2:92:19:c9:89:ac:ae: a6:6b:52:b2:0f:37:ec:67:27:db:11:eb:0f:17:09:bb:07:17: b2:fd:97:01:7a:34:ce:ad:b5:e2:32:bf:1e:be:04:c2:57:26: c8:12:07:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtPVoJup3IyPlaG3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyNTA4MzA1MloXDTI1MTIyNDA5MzA1MlowLzEtMCsGA1UEAxMk MGUyOTQxN2UtNDIwOC00MDM5LTg5OWItYTYzNzlkMDRlNzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3SZocdzodGA57hpneTn1NIeAcphiyQl41Yv jradjdNhMGJZMqlxKhaj3c94ba/3DqUTnlev14momCqXVO2Zt42ur8YfLm4cGc8g 0R5lUeTaGtErZcJXHyVhWczsVUkEcUyADeOBhIeoyZ0TzkQnbSv6iMSJfPq1B+Kk u3728Cd5fi96NkzLqzXE+HZGc7YGCbbaXg6XU7d7+z/5GZe328d/B6QhUwWMDbdK 8Uw5cTZhScAXKiAqc67k4uWeExfZToKYnRNRGVYd4JHeJ510Ys4Dpte8EX8VDGpu G1a9pplhVM+BgsrsVnu5AUPGEfO91FgBLxN41N858A2quVDCowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrF39ujefLRJSOa9Cj4ju/LInp2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGQ5N2NiYjctMTAxYy0z MjU2LWIxZGYtZDVlYWU2ZGEzMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPRtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3Sw5KRBIwlk6oLcoWOo8SGaYI7Mmkz86Y9ZmWwGKOlqGyKwsJ+UrC4 uXJ2UQOB3Gt/3vAPD2972yLj/fNb64OXeEy6j1MIftXQmOeQH25hLnCk6uzNBPHV LSGWoWG6YNrhETajxiRm0KlTSP3cSTuxE5YtquwxJ+y7U1A3R5rw5rXl0qT0W4a8 fwl9trJnZuB4ZKekR6Ol6tUYx3GJroIyvZ7ZwoZy96cRm2gtH/UHobtLHecxoA9O tFverCVNhv7KdkM1AFtKe9dORs1tfhJRspIZyYmsrqZrUrIPN+xnJ9sR6w8XCbsH F7L9lwF6NM6tteIyvx6+BMJXJsgSB1k= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:52 2025 by rpki-client