$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5f9ea20a-2bb8-33b0-a4e6-11228afc7358.roa File: 5f9ea20a-2bb8-33b0-a4e6-11228afc7358.roa (raw, json) Hash identifier: Ycokv+eE54aZCUCBKzoCA6nb9EZdVbSz0HaDTYH1o1Q= Subject key identifier: 3E:34:05:E7:1B:B2:57:F8:07:25:12:F7:25:9D:DF:51:F0:A4:4E:44 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B5DB8CB256C0C43A53C843580 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5f9ea20a-2bb8-33b0-a4e6-11228afc7358.roa Signing time: Tue 30 Sep 2025 12:10:13 +0000 ROA not before: Tue 30 Sep 2025 12:10:13 +0000 ROA not after: Mon 29 Dec 2025 13:10:13 +0000 asID: 142111 IP address blocks: 72.244.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:b8:cb:25:6c:0c:43:a5:3c:84:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 30 12:10:13 2025 GMT Not After : Dec 29 13:10:13 2025 GMT Subject: CN=7a961b90-84fb-4a7a-8d43-28d6c8b303fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:68:8b:8d:8b:73:cb:b6:79:a0:c7:28:1d:e8: 72:b6:f9:6e:4a:c2:1b:f9:8d:5f:47:d3:97:21:00: 64:d0:f4:66:e2:73:9a:55:cf:9a:9b:ca:72:bf:7c: a5:bc:f3:db:48:bd:ed:78:43:9a:55:06:37:04:a7: ea:ae:0f:df:78:af:8a:16:69:47:91:57:e9:5c:16: c8:c5:32:47:d0:ba:53:9c:14:97:66:d6:e7:1c:c7: 01:ee:56:36:ad:03:1a:33:24:a8:5a:91:f0:bb:b7: ae:0f:7b:54:b2:48:a1:c9:5e:b9:fa:0c:93:b2:a8: 25:75:b3:3a:a8:dc:59:d9:cc:b6:12:5e:a0:ea:81: e3:ec:de:ef:0d:00:32:21:fb:5d:f0:a0:b0:45:65: a4:ab:a7:9e:78:b0:eb:3d:6a:a0:75:9f:e6:37:80: 10:29:76:d7:03:8d:7c:5e:91:8c:3c:e8:1e:96:c2: 3a:74:aa:b9:59:de:dd:f1:c8:e9:70:4d:25:97:56: 91:16:c1:19:ec:fc:d0:0c:8e:c8:88:d7:1b:ed:c3: de:dd:fb:74:4a:55:d1:a1:24:ef:6b:d2:4b:5b:15: 3a:ca:b6:05:32:01:85:bc:38:ea:cc:b0:b9:cc:f9: 6c:df:a3:1b:66:72:0a:d7:5d:a5:87:4a:c8:cb:39: be:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:34:05:E7:1B:B2:57:F8:07:25:12:F7:25:9D:DF:51:F0:A4:4E:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5f9ea20a-2bb8-33b0-a4e6-11228afc7358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:e3:af:cb:b6:7e:e7:fb:e2:fd:c1:5e:83:cb:d6:7c:6f:d8: eb:c7:69:9b:dc:fa:ec:e1:b2:f3:d1:60:f2:45:dc:a4:21:f1: d3:1e:4a:bc:68:ef:68:09:38:dc:03:ed:b6:23:62:8b:d1:4d: d1:c9:ae:78:ba:de:ca:69:5d:25:01:d0:2b:6d:93:71:dc:db: a2:bb:f5:4d:b5:75:bb:1c:93:66:7f:9e:8f:20:d4:44:ae:87: 21:c2:2d:d2:5f:63:1f:63:1c:cc:1f:25:74:1f:69:28:6a:8f: b9:97:26:80:42:39:73:b8:58:5d:27:f4:0b:b8:4e:83:29:26: 38:dd:eb:96:b7:24:41:7b:d7:dd:d6:30:b9:bf:94:ef:12:e2: 3a:34:f3:f5:d0:fd:50:aa:ba:27:4b:97:01:ba:40:f6:8a:5d: 3c:ad:ee:80:3e:9b:ac:70:ac:e7:9b:cf:39:56:0d:ae:fa:4f: 99:ac:9f:eb:da:02:80:8b:49:c6:e6:59:98:5c:b8:e6:c7:c4: e1:74:4e:b1:81:f1:ef:8f:a7:1e:57:f7:c3:8e:17:7e:14:2f: c2:97:aa:77:5b:ad:f9:25:91:0d:97:2f:0c:a3:a4:53:0b:df: 93:86:44:15:a4:ee:85:9e:47:d7:36:66:c1:a4:01:df:d7:72: 53:dd:98:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtduMslbAxDpTyENYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkzMDEyMTAxM1oXDTI1MTIyOTEzMTAxM1owLzEtMCsGA1UEAxMk N2E5NjFiOTAtODRmYi00YTdhLThkNDMtMjhkNmM4YjMwM2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGiLjYtzy7Z5oMcoHehytvluSsIb+Y1fR9OX IQBk0PRm4nOaVc+am8pyv3ylvPPbSL3teEOaVQY3BKfqrg/feK+KFmlHkVfpXBbI xTJH0LpTnBSXZtbnHMcB7lY2rQMaMySoWpHwu7euD3tUskihyV65+gyTsqgldbM6 qNxZ2cy2El6g6oHj7N7vDQAyIftd8KCwRWWkq6eeeLDrPWqgdZ/mN4AQKXbXA418 XpGMPOgelsI6dKq5Wd7d8cjpcE0ll1aRFsEZ7PzQDI7IiNcb7cPe3ft0SlXRoSTv a9JLWxU6yrYFMgGFvDjqzLC5zPls36MbZnIK112lh0rIyzm++QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD40Becbslf4ByUS9yWd31HwpE5EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNWY5ZWEyMGEtMmJiOC0z M2IwLWE0ZTYtMTEyMjhhZmM3MzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPSfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfjr8u2fuf74v3BXoPL1nxv2OvHaZvc+uzhsvPRYPJF3KQh8dMeSrxo 72gJONwD7bYjYovRTdHJrni63sppXSUB0Cttk3Hc26K79U21dbsck2Z/no8g1ESu hyHCLdJfYx9jHMwfJXQfaShqj7mXJoBCOXO4WF0n9Au4ToMpJjjd65a3JEF7193W MLm/lO8S4jo08/XQ/VCquidLlwG6QPaKXTyt7oA+m6xwrOebzzlWDa76T5msn+va AoCLScbmWZhcuObHxOF0TrGB8e+Ppx5X98OOF34UL8KXqndbrfklkQ2XLwyjpFML 35OGRBWk7oWeR9c2ZsGkAd/XclPdmEo= -----END CERTIFICATE-----Generated at Sat Oct 11 09:01:09 2025 by rpki-client