$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/61f34322-2b0b-386f-a9a3-bea70ff871ba.roa File: 61f34322-2b0b-386f-a9a3-bea70ff871ba.roa (raw, json) Hash identifier: zw1dp3avw9HpHKuEXhDX/GStjZ/i8wsflgmeVc2uZMA= Subject key identifier: 7F:B0:37:BF:3A:71:AA:87:64:0E:76:B7:D8:2B:5D:9C:E4:38:86:8C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B4C41B79F3999C60D823AAC80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/61f34322-2b0b-386f-a9a3-bea70ff871ba.roa Signing time: Wed 24 Sep 2025 06:01:33 +0000 ROA not before: Wed 24 Sep 2025 06:01:33 +0000 ROA not after: Tue 23 Dec 2025 07:01:33 +0000 asID: 9304 IP address blocks: 72.244.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4c:41:b7:9f:39:99:c6:0d:82:3a:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 24 06:01:33 2025 GMT Not After : Dec 23 07:01:33 2025 GMT Subject: CN=74a5d21f-b709-4a2c-b7fa-746144cd0655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:af:ab:1f:c1:9a:4e:9e:22:88:70:b7:ff:ff: c3:de:bf:0c:4b:db:b8:f9:5d:88:ff:12:2d:47:82: 17:63:d4:c1:1c:33:35:2b:e6:1b:35:5d:27:b4:d6: 64:73:5e:8c:d1:a3:b5:fd:89:bb:c0:f7:15:4a:24: 94:ef:d2:1b:3d:5c:fe:72:99:dc:fe:43:c0:c0:d7: 5b:2e:0e:b9:90:32:10:b3:50:07:57:4b:84:d3:d3: 4f:e9:10:5f:6a:08:15:c1:70:57:37:cb:bd:ad:66: 89:63:3c:1c:c3:10:ce:6f:7e:11:7f:7f:42:3a:84: 7e:fd:85:34:b2:75:17:f0:63:65:54:e2:c8:33:0c: e8:06:f3:de:ae:14:5d:c9:e3:99:4c:be:d5:57:9f: 51:d5:26:6c:cb:25:ae:14:e2:18:8c:5e:e2:1d:60: bf:b1:a0:7e:27:9f:ca:1f:8f:dd:47:de:14:88:2e: bc:3a:08:25:e3:61:03:8d:f0:70:3d:06:b9:9c:bf: 82:97:95:79:19:6c:37:eb:47:a7:4e:aa:07:f6:37: 8f:7d:5c:ef:ff:b3:1e:a6:52:92:0c:17:7f:ab:53: 26:65:c8:ad:77:36:c2:dc:e2:87:c3:ca:84:55:e8: bc:9a:77:69:15:6d:b5:cd:09:b1:8a:e0:0a:68:65: 6e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B0:37:BF:3A:71:AA:87:64:0E:76:B7:D8:2B:5D:9C:E4:38:86:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/61f34322-2b0b-386f-a9a3-bea70ff871ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:0f:4a:e2:2a:b4:66:f6:e4:ea:99:0c:2e:ac:4d:52:95:ac: cf:bf:0b:9c:bf:6d:0f:b0:35:42:a6:27:71:46:e0:6b:6e:bd: fe:02:3d:b1:a4:8c:00:f8:ca:88:3b:23:88:00:02:27:6e:85: 5b:13:7e:ca:c0:b4:ef:e4:c6:e5:aa:58:ca:98:69:82:df:ed: 13:22:f0:47:97:6e:a6:a5:55:ee:b4:c9:e3:76:c6:e8:8c:33: 77:29:8e:e5:26:57:48:8e:67:53:52:cd:fd:7a:c9:0c:62:75: 1d:aa:aa:fe:98:c7:ff:92:ab:16:40:4e:21:e2:fb:98:0c:53: 35:61:f8:a7:41:4f:ae:3e:2a:1d:69:2b:6c:28:86:05:6b:f0: d3:65:48:91:38:90:8f:ea:45:c4:37:5d:52:a5:68:48:a4:17: 93:a8:45:19:9d:d6:62:c9:da:b1:a4:5a:19:44:0c:2e:cf:04: b6:1e:8f:c6:0a:8b:df:ba:47:2c:d4:e6:f4:af:e4:7c:1f:8e: 2e:32:f1:0f:01:ae:be:b2:51:73:b4:be:4c:20:bf:6d:4b:98: 0b:2a:55:d3:40:ed:aa:73:6b:75:77:e5:5d:03:5b:d6:1f:9f: e0:5b:f3:67:6f:d0:79:68:f9:07:c3:7e:be:fb:65:0f:7a:b7: 92:e9:95:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtMQbefOZnGDYI6rIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyNDA2MDEzM1oXDTI1MTIyMzA3MDEzM1owLzEtMCsGA1UEAxMk NzRhNWQyMWYtYjcwOS00YTJjLWI3ZmEtNzQ2MTQ0Y2QwNjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK+rH8GaTp4iiHC3///D3r8MS9u4+V2I/xIt R4IXY9TBHDM1K+YbNV0ntNZkc16M0aO1/Ym7wPcVSiSU79IbPVz+cpnc/kPAwNdb Lg65kDIQs1AHV0uE09NP6RBfaggVwXBXN8u9rWaJYzwcwxDOb34Rf39COoR+/YU0 snUX8GNlVOLIMwzoBvPerhRdyeOZTL7VV59R1SZsyyWuFOIYjF7iHWC/saB+J5/K H4/dR94UiC68Oggl42EDjfBwPQa5nL+Cl5V5GWw360enTqoH9jePfVzv/7MeplKS DBd/q1MmZcitdzbC3OKHw8qEVei8mndpFW21zQmxiuAKaGVuhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+wN786caqHZA52t9grXZzkOIaMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjFmMzQzMjItMmIwYi0z ODZmLWE5YTMtYmVhNzBmZjg3MWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPSoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoPSuIqtGb25OqZDC6sTVKVrM+/C5y/bQ+wNUKmJ3FG4Gtuvf4CPbGk jAD4yog7I4gAAiduhVsTfsrAtO/kxuWqWMqYaYLf7RMi8EeXbqalVe60yeN2xuiM M3cpjuUmV0iOZ1NSzf16yQxidR2qqv6Yx/+SqxZATiHi+5gMUzVh+KdBT64+Kh1p K2wohgVr8NNlSJE4kI/qRcQ3XVKlaEikF5OoRRmd1mLJ2rGkWhlEDC7PBLYej8YK i9+6RyzU5vSv5Hwfji4y8Q8Brr6yUXO0vkwgv21LmAsqVdNA7apza3V35V0DW9Yf n+Bb82dv0Hlo+QfDfr77ZQ96t5LplTk= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:46 2025 by rpki-client