$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8c578ea7-7cdf-30d1-9c88-90c16bb652af.roa File: 8c578ea7-7cdf-30d1-9c88-90c16bb652af.roa (raw, json) Hash identifier: AiBfFpcCtkI+J/Xn0I9ibX+tMwKShKaF+TMbH6eSWco= Subject key identifier: 2A:74:B0:5C:26:95:62:C9:3C:1E:60:55:4A:4E:A5:72:1B:57:41:03 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B4EA6976E61227B66CC520200 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8c578ea7-7cdf-30d1-9c88-90c16bb652af.roa Signing time: Thu 25 Sep 2025 02:36:25 +0000 ROA not before: Thu 25 Sep 2025 02:36:25 +0000 ROA not after: Wed 24 Dec 2025 03:36:25 +0000 asID: 214025 IP address blocks: 72.244.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:a6:97:6e:61:22:7b:66:cc:52:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 02:36:25 2025 GMT Not After : Dec 24 03:36:25 2025 GMT Subject: CN=5a830280-9417-42d8-8292-56f6555f975c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ac:c3:10:30:28:db:52:e0:15:d7:08:84:c7: fc:0b:cc:12:64:70:55:1d:0a:78:cb:20:c7:8d:72: b4:fb:d5:42:95:d8:68:52:45:85:ca:85:7a:e1:27: 01:fe:39:3a:ee:e5:17:15:5f:a7:ba:fb:00:d9:b8: bd:2e:34:85:c8:20:54:24:fa:4d:2f:3f:a1:f2:7a: ba:bc:c6:9a:0b:aa:2c:f4:2b:ce:ef:23:b4:7e:ed: 6d:35:77:c9:c5:81:d8:12:da:92:c0:e2:30:47:f0: e3:36:f1:dd:a3:62:1d:c7:9e:4e:b7:56:b2:7d:2c: 5a:5c:0d:99:18:11:7c:32:f6:a8:76:54:14:18:a5: be:a4:3d:8b:30:46:dd:49:c1:96:4d:ed:59:b1:45: b8:d3:71:c1:aa:df:01:ed:8a:77:a3:cc:7b:5d:6f: c5:f3:6c:27:e1:bc:82:e5:a7:16:a5:00:b3:8a:dd: fe:51:2e:79:09:0b:7d:e1:2b:77:ea:5d:de:75:a5: 50:ed:da:09:4c:fe:8d:7b:bf:67:1a:41:b0:b2:a8: 22:ee:48:d8:79:ee:4e:7f:fc:c1:05:8e:67:d7:6e: 5e:e1:64:43:b4:8c:a7:7c:60:d2:c0:ad:d3:3a:3f: cb:11:31:e7:7d:ad:00:ee:ab:7d:21:98:44:2d:d1: 2f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:74:B0:5C:26:95:62:C9:3C:1E:60:55:4A:4E:A5:72:1B:57:41:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8c578ea7-7cdf-30d1-9c88-90c16bb652af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a6:6c:0b:ae:65:cb:6a:f8:08:45:76:8f:f0:c9:85:20:45: 2f:62:ed:43:9d:f2:66:c8:c2:36:70:21:ac:d6:98:22:6a:57: e3:94:5c:b8:3e:0e:57:c8:b4:a4:c9:a2:8b:1c:73:1b:55:80: 8b:b0:e1:e3:47:ac:26:d0:0e:7b:4a:eb:cd:05:c1:b3:61:04: 31:2a:03:09:31:cd:ab:bb:a9:25:b9:b9:e7:3a:1a:68:79:ac: 31:1d:e1:28:f3:f4:be:39:ee:92:55:9c:ba:5b:3f:c5:c2:e9: bd:a6:d1:d2:03:f9:78:db:7e:6b:81:90:c3:35:51:98:1a:af: 38:ab:1f:2f:98:bc:f1:cb:78:c7:1b:d0:be:be:81:10:70:d4: 05:19:af:f7:90:39:a5:18:55:a2:4f:c0:72:f6:35:8b:77:3d: ef:4b:7a:34:9e:fd:16:e0:50:dd:23:b4:24:e7:5c:c4:08:8c: 32:67:f8:a1:12:ca:39:23:f5:31:c0:3d:56:98:68:b2:54:9e: dd:80:53:54:be:65:af:d2:8f:c9:f1:76:1a:d6:05:2b:e1:cc: 5a:08:fd:dd:11:fc:d7:37:0a:df:1f:09:f2:40:6a:14:9f:fa: 73:35:c0:5c:ee:0e:97:83:c6:f3:03:df:10:ee:bf:da:dc:2f: fe:81:00:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOppduYSJ7ZsxSAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyNTAyMzYyNVoXDTI1MTIyNDAzMzYyNVowLzEtMCsGA1UEAxMk NWE4MzAyODAtOTQxNy00MmQ4LTgyOTItNTZmNjU1NWY5NzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKzDEDAo21LgFdcIhMf8C8wSZHBVHQp4yyDH jXK0+9VCldhoUkWFyoV64ScB/jk67uUXFV+nuvsA2bi9LjSFyCBUJPpNLz+h8nq6 vMaaC6os9CvO7yO0fu1tNXfJxYHYEtqSwOIwR/DjNvHdo2Idx55Ot1ayfSxaXA2Z GBF8MvaodlQUGKW+pD2LMEbdScGWTe1ZsUW403HBqt8B7Yp3o8x7XW/F82wn4byC 5acWpQCzit3+US55CQt94St36l3edaVQ7doJTP6Ne79nGkGwsqgi7kjYee5Of/zB BY5n125e4WRDtIynfGDSwK3TOj/LETHnfa0A7qt9IZhELdEvFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCp0sFwmlWLJPB5gVUpOpXIbV0EDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOGM1NzhlYTctN2NkZi0z MGQxLTljODgtOTBjMTZiYjY1MmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPRWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEambAuuZctq+AhFdo/wyYUgRS9i7UOd8mbIwjZwIazWmCJqV+OUXLg+ DlfItKTJoosccxtVgIuw4eNHrCbQDntK680FwbNhBDEqAwkxzau7qSW5uec6Gmh5 rDEd4Sjz9L457pJVnLpbP8XC6b2m0dID+XjbfmuBkMM1UZgarzirHy+YvPHLeMcb 0L6+gRBw1AUZr/eQOaUYVaJPwHL2NYt3Pe9LejSe/RbgUN0jtCTnXMQIjDJn+KES yjkj9THAPVaYaLJUnt2AU1S+Za/Sj8nxdhrWBSvhzFoI/d0R/Nc3Ct8fCfJAahSf +nM1wFzuDpeDxvMD3xDuv9rcL/6BAAQ= -----END CERTIFICATE-----Generated at Sat Oct 11 08:59:55 2025 by rpki-client