$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8425037b-4f8a-3b06-8e08-787697563f1c.roa File: 8425037b-4f8a-3b06-8e08-787697563f1c.roa (raw, json) Hash identifier: btOYcLFsdrLMI2nX24a8wC4CnamFnsQw49JUwMQRg1A= Subject key identifier: 98:25:68:03:A9:17:ED:D2:6D:38:FB:21:C8:F0:26:74:0E:BF:DF:34 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B25F0871FBD1038413BF78620 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8425037b-4f8a-3b06-8e08-787697563f1c.roa Signing time: Wed 10 Sep 2025 12:37:15 +0000 ROA not before: Wed 10 Sep 2025 12:37:15 +0000 ROA not after: Tue 09 Dec 2025 13:37:15 +0000 asID: 5650 IP address blocks: 72.244.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:f0:87:1f:bd:10:38:41:3b:f7:86:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 10 12:37:15 2025 GMT Not After : Dec 9 13:37:15 2025 GMT Subject: CN=a8491364-4e58-4bdc-bc6b-66c81a0ecb61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:84:cb:d5:50:bb:1a:15:d8:85:07:48:58:c3: f6:4a:e1:eb:94:79:4a:0a:d3:10:a0:e9:cb:30:67: 5d:93:3e:13:86:9e:9f:10:fa:0d:77:d4:e4:5d:bb: a5:e6:07:73:c0:8a:15:f7:90:cb:2a:14:f2:93:07: 48:77:f3:e0:5a:77:66:f6:56:0d:56:01:58:19:08: 21:f1:f5:3a:e3:a6:8f:4c:3a:d4:e4:1e:8e:d2:07: f8:74:f6:20:e9:70:6b:a2:ac:87:d1:73:20:11:cd: 8d:6e:06:88:9f:65:8c:f7:d5:8d:af:7b:b9:49:56: 33:ed:dd:55:c3:51:62:7c:73:25:84:a1:20:38:3e: 9e:b8:c3:60:c5:84:d4:e0:f9:ef:93:cb:b0:72:3c: d9:7b:8c:1b:6a:c1:eb:c6:00:1d:78:66:86:29:b9: e2:e2:ca:ac:96:57:36:9d:13:af:9b:44:aa:b6:dd: 56:83:3c:71:e1:a6:1f:56:f7:58:04:ad:8f:5a:37: b9:ef:75:f6:25:d2:04:21:f1:0e:88:21:fa:92:ef: ef:ce:89:8d:4d:b6:52:07:5c:8b:50:30:8b:37:29: 39:64:a7:61:f5:2a:ed:26:29:57:0c:c8:c5:51:7c: 75:b5:ab:bd:88:6f:94:7d:92:ad:f1:ed:fd:f7:61: 5f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:25:68:03:A9:17:ED:D2:6D:38:FB:21:C8:F0:26:74:0E:BF:DF:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8425037b-4f8a-3b06-8e08-787697563f1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:c7:a3:a1:e5:e2:6e:8b:27:14:d9:19:30:e6:c3:20:02:bb: eb:17:29:7a:bb:62:ec:df:9f:b2:74:4b:0a:7c:b3:44:33:21: ee:c1:1d:f7:fb:aa:01:d4:c8:ea:ab:73:a2:ac:76:78:f8:d4: 31:89:88:ff:dc:0e:43:68:d4:01:b5:b2:34:8f:c6:37:0c:d8: c5:72:2a:61:b1:cb:63:d2:69:dd:e3:06:da:01:f0:e7:c7:05: e4:ba:c7:6a:ed:76:9d:bc:29:08:64:c0:ec:87:34:fe:88:a9: 49:0d:0e:f2:52:2f:dc:9c:c6:2a:84:a3:8c:1b:69:6e:97:fa: 92:b2:f4:17:66:5f:37:c3:c3:9a:fc:4c:04:0c:16:d2:30:da: b9:4b:d8:a4:4b:04:65:47:8f:56:62:1a:55:88:c8:0e:c1:e3: 52:9a:e9:45:49:d0:8f:4d:ff:59:c9:28:e4:b6:5f:67:db:4a: 27:dd:d5:ef:08:19:30:a2:48:1e:28:30:62:e2:02:c3:9d:4a: 44:98:84:e3:95:fb:b8:40:5f:e2:aa:cb:24:a9:cf:36:f1:73: 8f:a9:68:dc:5a:29:7c:2d:19:ec:30:cf:57:c0:e4:9d:a5:41: a5:15:23:f3:64:8a:f8:e6:51:3e:7c:9c:8f:6c:2b:d9:9e:56: 2c:41:44:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl8IcfvRA4QTv3hiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxMDEyMzcxNVoXDTI1MTIwOTEzMzcxNVowLzEtMCsGA1UEAxMk YTg0OTEzNjQtNGU1OC00YmRjLWJjNmItNjZjODFhMGVjYjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYTL1VC7GhXYhQdIWMP2SuHrlHlKCtMQoOnL MGddkz4Thp6fEPoNd9TkXbul5gdzwIoV95DLKhTykwdId/PgWndm9lYNVgFYGQgh 8fU646aPTDrU5B6O0gf4dPYg6XBroqyH0XMgEc2NbgaIn2WM99WNr3u5SVYz7d1V w1FifHMlhKEgOD6euMNgxYTU4Pnvk8uwcjzZe4wbasHrxgAdeGaGKbni4sqsllc2 nROvm0Sqtt1Wgzxx4aYfVvdYBK2PWje573X2JdIEIfEOiCH6ku/vzomNTbZSB1yL UDCLNyk5ZKdh9SrtJilXDMjFUXx1tau9iG+UfZKt8e3992Ff7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJglaAOpF+3SbTj7IcjwJnQOv980MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODQyNTAzN2ItNGY4YS0z YjA2LThlMDgtNzg3Njk3NTYzZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvHo6Hl4m6LJxTZGTDmwyACu+sXKXq7Yuzfn7J0Swp8s0QzIe7BHff7 qgHUyOqrc6Ksdnj41DGJiP/cDkNo1AG1sjSPxjcM2MVyKmGxy2PSad3jBtoB8OfH BeS6x2rtdp28KQhkwOyHNP6IqUkNDvJSL9ycxiqEo4wbaW6X+pKy9BdmXzfDw5r8 TAQMFtIw2rlL2KRLBGVHj1ZiGlWIyA7B41Ka6UVJ0I9N/1nJKOS2X2fbSifd1e8I GTCiSB4oMGLiAsOdSkSYhOOV+7hAX+KqyySpzzbxc4+paNxaKXwtGewwz1fA5J2l QaUVI/NkivjmUT58nI9sK9meVixBRJ8= -----END CERTIFICATE-----Generated at Sat Oct 11 09:00:00 2025 by rpki-client