$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7fac98a2-3087-3869-9fe2-228437519223.roa File: 7fac98a2-3087-3869-9fe2-228437519223.roa (raw, json) Hash identifier: hkWoy/5hwPchFV4ziUgrX28yXYsGjW5M6iAFrO2W0VM= Subject key identifier: 43:58:C6:EC:EC:5C:12:6E:F4:70:4B:13:0A:53:4B:54:C2:1F:27:9D Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B235BC4960C2A0701DB6ED120 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7fac98a2-3087-3869-9fe2-228437519223.roa Signing time: Tue 09 Sep 2025 14:25:54 +0000 ROA not before: Tue 09 Sep 2025 14:25:54 +0000 ROA not after: Mon 08 Dec 2025 15:25:54 +0000 asID: 9304 IP address blocks: 72.244.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:5b:c4:96:0c:2a:07:01:db:6e:d1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 9 14:25:54 2025 GMT Not After : Dec 8 15:25:54 2025 GMT Subject: CN=a9c0ae23-81d0-4b4b-84a6-4f2c39683b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:81:af:7d:86:d1:56:e2:6d:e4:6f:52:ba:f1: 46:8f:e4:c3:3c:97:e8:12:49:37:97:7a:de:23:1b: de:dc:aa:b4:14:a0:03:47:46:e0:26:f0:4a:42:66: a5:01:26:77:09:28:6f:36:61:bb:85:60:4f:51:52: 7d:a2:b1:97:3c:00:62:b0:fe:44:ef:e6:99:b3:b0: 18:34:57:26:15:4c:31:38:79:17:73:e0:1e:05:7e: a2:1e:d4:01:fe:91:a0:9e:03:8e:f2:3e:72:35:d2: d5:01:90:1f:53:f2:4f:10:21:e3:13:95:7a:ea:9e: e9:d7:bc:18:3d:df:83:f1:8d:6e:81:bb:60:0e:31: 1e:8a:96:1a:0b:ca:59:4d:37:3a:26:06:17:44:a8: 28:5d:f9:90:f1:43:3f:78:46:1a:68:be:29:3c:2c: bd:fb:7c:9b:4c:8e:ca:58:d8:36:9b:55:fe:10:08: 5d:04:16:d8:df:3e:13:69:72:b1:6c:cb:b9:de:3b: d8:c3:bf:42:0d:8d:02:9a:e7:3c:90:b0:56:3c:63: 79:a4:06:87:fc:02:24:84:e4:e3:79:f6:44:a6:b4: 23:a9:d5:a8:7b:bf:85:1d:6f:6a:2f:cb:0c:02:6b: 18:fc:f1:c3:a3:9f:57:b9:1c:14:77:9b:d2:fd:cc: 4e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:58:C6:EC:EC:5C:12:6E:F4:70:4B:13:0A:53:4B:54:C2:1F:27:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7fac98a2-3087-3869-9fe2-228437519223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:61:e7:98:df:fe:ca:e1:f4:5e:1c:5c:4b:21:b5:2a:5c:a3: 5c:54:37:c6:08:64:c4:34:01:23:3c:7d:a3:69:2a:d6:9b:3e: 65:34:09:51:ac:f3:8b:77:f6:8f:23:ae:9c:60:1f:ec:32:e0: 3c:fd:c4:19:38:24:2e:98:dd:03:1d:b3:db:41:d0:54:ca:ed: ca:0e:c7:78:5c:64:fe:0b:7c:a8:85:b4:fe:be:7c:2c:31:55: 0d:04:4e:e7:fd:c3:c6:eb:36:ca:32:2d:c7:8e:43:de:91:b6: 8f:bb:3e:51:f3:8d:ad:d8:07:73:ce:e8:89:f9:75:d7:38:83: d2:2d:7b:4d:8a:db:01:29:39:ae:65:ec:eb:5a:40:b8:fd:c0: 04:13:f0:37:84:63:42:9b:34:1b:8e:86:ea:ff:53:5b:b0:1c: 24:d7:34:49:a0:bb:68:9c:3a:be:fd:dd:ab:c1:46:3e:90:82: 00:69:a9:73:c5:9e:16:3d:a9:5e:f0:43:7f:67:0e:06:ca:a2: 4e:14:b8:67:a9:25:31:65:93:5a:9d:3a:26:51:3b:94:90:20: a7:f2:06:45:e7:05:db:9c:12:43:41:6a:6c:79:ef:b8:34:4e: dd:27:f2:9b:96:c4:bc:98:3c:cc:bc:04:1f:17:c7:8d:29:38: ec:7b:71:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjW8SWDCoHAdtu0SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwOTE0MjU1NFoXDTI1MTIwODE1MjU1NFowLzEtMCsGA1UEAxMk YTljMGFlMjMtODFkMC00YjRiLTg0YTYtNGYyYzM5NjgzYjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIGvfYbRVuJt5G9SuvFGj+TDPJfoEkk3l3re Ixve3Kq0FKADR0bgJvBKQmalASZ3CShvNmG7hWBPUVJ9orGXPABisP5E7+aZs7AY NFcmFUwxOHkXc+AeBX6iHtQB/pGgngOO8j5yNdLVAZAfU/JPECHjE5V66p7p17wY Pd+D8Y1ugbtgDjEeipYaC8pZTTc6JgYXRKgoXfmQ8UM/eEYaaL4pPCy9+3ybTI7K WNg2m1X+EAhdBBbY3z4TaXKxbMu53jvYw79CDY0Cmuc8kLBWPGN5pAaH/AIkhOTj efZEprQjqdWoe7+FHW9qL8sMAmsY/PHDo59XuRwUd5vS/cxO2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENYxuzsXBJu9HBLEwpTS1TCHyedMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvN2ZhYzk4YTItMzA4Ny0z ODY5LTlmZTItMjI4NDM3NTE5MjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPQCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxh55jf/srh9F4cXEshtSpco1xUN8YIZMQ0ASM8faNpKtabPmU0CVGs 84t39o8jrpxgH+wy4Dz9xBk4JC6Y3QMds9tB0FTK7coOx3hcZP4LfKiFtP6+fCwx VQ0ETuf9w8brNsoyLceOQ96Rto+7PlHzja3YB3PO6In5ddc4g9Ite02K2wEpOa5l 7OtaQLj9wAQT8DeEY0KbNBuOhur/U1uwHCTXNEmgu2icOr793avBRj6QggBpqXPF nhY9qV7wQ39nDgbKok4UuGepJTFlk1qdOiZRO5SQIKfyBkXnBducEkNBamx577g0 Tt0n8puWxLyYPMy8BB8Xx40pOOx7cRM= -----END CERTIFICATE-----Generated at Sat Oct 11 08:57:32 2025 by rpki-client