$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9ded18be-1aa1-3992-8d45-fc366627f4ae.roa File: 9ded18be-1aa1-3992-8d45-fc366627f4ae.roa (raw, json) Hash identifier: fG/phSeVeg98rsy+L6u0zo8bervYykTk1nQec3nrrb0= Subject key identifier: 24:7A:73:52:15:82:36:98:EE:11:4E:83:21:FF:D4:36:F9:88:CA:B2 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B4F5691BE9BD12BA5AB950380 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9ded18be-1aa1-3992-8d45-fc366627f4ae.roa Signing time: Thu 25 Sep 2025 08:30:59 +0000 ROA not before: Thu 25 Sep 2025 08:30:59 +0000 ROA not after: Wed 24 Dec 2025 09:30:59 +0000 asID: 9304 IP address blocks: 72.244.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:56:91:be:9b:d1:2b:a5:ab:95:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 08:30:59 2025 GMT Not After : Dec 24 09:30:59 2025 GMT Subject: CN=25ca6646-d884-417d-9f0c-fb578c3dafe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a0:f4:79:54:73:98:c9:02:54:d6:d3:a9:cc: f8:d7:99:e9:56:b9:99:15:51:d4:2b:a1:fc:d8:96: e4:88:86:1b:9b:7d:5a:a7:c6:67:b2:3a:de:e8:01: d2:62:ba:6f:5b:45:cb:af:68:45:89:8b:53:c1:b1: 4f:e2:e2:a9:75:ab:a7:1a:ba:3d:fe:00:6d:ae:ab: 45:ab:8f:b7:39:ee:ac:5a:5b:40:4a:4f:3d:2b:57: d6:b1:7c:b5:8d:72:78:64:fb:cb:fa:cc:4f:27:90: 4f:17:03:24:86:58:b5:26:64:08:aa:30:74:12:86: 03:c4:c7:fd:89:f3:c0:48:2b:5c:d9:82:39:68:c3: 56:e3:e0:88:a0:32:4a:eb:68:53:4f:1f:ac:bc:8b: 08:83:92:03:87:95:f1:76:09:e4:74:91:32:8c:d6: bb:d5:41:f0:69:0e:41:3f:81:c0:c5:33:64:bb:dc: de:46:d3:4e:3e:62:46:f0:89:a1:bf:d1:41:4b:24: b9:3b:80:f0:47:d6:09:5c:8d:be:1e:01:0b:1f:6f: 26:6a:82:95:88:a4:5f:e0:ad:00:36:6c:12:0b:9b: 46:2b:d2:94:a9:34:ea:2a:aa:b4:16:32:b3:1e:51: 89:3d:a2:d5:9b:29:ca:61:79:18:d1:7a:06:51:39: 40:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7A:73:52:15:82:36:98:EE:11:4E:83:21:FF:D4:36:F9:88:CA:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9ded18be-1aa1-3992-8d45-fc366627f4ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:bd:05:7f:e8:f8:3c:69:79:39:48:9e:1e:b7:c4:2c:80:32: 2f:4a:18:b0:e8:56:3d:e7:c5:6d:d5:83:73:ca:1e:e0:d4:65: 69:7c:86:b5:f4:1c:70:2a:17:a4:d3:04:91:7a:36:35:15:5c: 06:b8:37:e0:9f:58:16:a1:c9:87:5b:61:d5:96:5c:8d:39:83: 9e:b4:93:08:9d:bd:70:f7:71:fd:f8:27:7a:30:16:bb:41:89: 70:95:04:26:ee:3f:82:c9:99:39:b9:02:9d:a6:24:b5:28:61: f1:0e:03:e4:30:16:20:74:5f:f0:55:d5:78:1f:20:c8:39:b7: 16:4f:27:8c:49:d2:c3:f2:45:d2:ed:02:64:61:3d:ea:ab:bd: 0d:58:9d:5b:ad:6c:6a:21:3b:53:95:49:08:4d:1c:6c:ae:9f: 21:b8:63:f8:de:89:e8:78:91:8b:a2:df:cf:0e:80:d4:82:a4: 84:29:df:b1:6a:bf:65:c2:7b:24:a3:22:81:3b:42:2f:70:e3: c0:eb:34:71:78:46:6d:1e:90:1d:f8:fe:b1:18:28:5f:51:54: af:6b:93:3e:d8:b2:cd:48:62:8f:52:f5:5b:c5:49:28:e1:1c: 12:90:18:46:19:ce:b2:44:6f:45:4c:ad:29:be:96:ad:e3:d2: a8:d2:78:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtPVpG+m9ErpauVA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyNTA4MzA1OVoXDTI1MTIyNDA5MzA1OVowLzEtMCsGA1UEAxMk MjVjYTY2NDYtZDg4NC00MTdkLTlmMGMtZmI1NzhjM2RhZmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36D0eVRzmMkCVNbTqcz415npVrmZFVHUK6H8 2JbkiIYbm31ap8Znsjre6AHSYrpvW0XLr2hFiYtTwbFP4uKpdaunGro9/gBtrqtF q4+3Oe6sWltASk89K1fWsXy1jXJ4ZPvL+sxPJ5BPFwMkhli1JmQIqjB0EoYDxMf9 ifPASCtc2YI5aMNW4+CIoDJK62hTTx+svIsIg5IDh5XxdgnkdJEyjNa71UHwaQ5B P4HAxTNku9zeRtNOPmJG8Imhv9FBSyS5O4DwR9YJXI2+HgELH28maoKViKRf4K0A NmwSC5tGK9KUqTTqKqq0FjKzHlGJPaLVmynKYXkY0XoGUTlAuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCR6c1IVgjaY7hFOgyH/1Db5iMqyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWRlZDE4YmUtMWFhMS0z OTkyLThkNDUtZmMzNjY2MjdmNGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPRvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADm9BX/o+DxpeTlInh63xCyAMi9KGLDoVj3nxW3Vg3PKHuDUZWl8hrX0 HHAqF6TTBJF6NjUVXAa4N+CfWBahyYdbYdWWXI05g560kwidvXD3cf34J3owFrtB iXCVBCbuP4LJmTm5Ap2mJLUoYfEOA+QwFiB0X/BV1XgfIMg5txZPJ4xJ0sPyRdLt AmRhPeqrvQ1YnVutbGohO1OVSQhNHGyunyG4Y/jeieh4kYui388OgNSCpIQp37Fq v2XCeySjIoE7Qi9w48DrNHF4Rm0ekB34/rEYKF9RVK9rkz7Yss1IYo9S9VvFSSjh HBKQGEYZzrJEb0VMrSm+lq3j0qjSeIQ= -----END CERTIFICATE-----Generated at Sat Oct 11 08:57:35 2025 by rpki-client