$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3d69a67-4bf5-3a51-b405-183518d0ebb8.roa File: a3d69a67-4bf5-3a51-b405-183518d0ebb8.roa (raw, json) Hash identifier: 81k786a7bS7fUB+vTGkhOCHiRSJr3ry6+Be0AIVIztA= Subject key identifier: 91:38:5A:F4:AC:3F:BB:E9:4D:C5:41:61:8A:A0:BF:05:2A:05:BE:F4 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B3F12D87DCCA370640D833C80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3d69a67-4bf5-3a51-b405-183518d0ebb8.roa Signing time: Fri 19 Sep 2025 12:41:36 +0000 ROA not before: Fri 19 Sep 2025 12:41:36 +0000 ROA not after: Thu 18 Dec 2025 13:41:36 +0000 asID: 25198 IP address blocks: 72.244.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:12:d8:7d:cc:a3:70:64:0d:83:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 19 12:41:36 2025 GMT Not After : Dec 18 13:41:36 2025 GMT Subject: CN=2ac305c6-9240-47c3-9e83-3fb64129b802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fc:7f:37:50:4b:61:cc:4b:27:f6:8d:83:b0: 61:4f:c5:7c:a8:72:e8:65:df:fd:6f:50:9e:62:f8: b9:01:73:0e:f7:16:06:54:c5:e3:85:f6:dc:c2:ba: e7:cd:8c:82:dc:b6:b2:de:b6:3e:ea:d6:ff:54:f6: 25:17:5a:cc:a9:f6:87:3b:ed:5d:33:c3:e5:76:a0: cf:9d:ae:83:24:24:52:f6:f6:ac:88:29:57:95:20: 3d:b7:9c:34:4c:30:ff:0e:b9:67:ec:69:c3:c2:3a: 49:12:70:d2:6c:33:fe:4b:b9:ec:5d:67:3b:74:f0: 4e:ad:e0:2c:c6:c1:3d:f9:ce:3c:81:e6:ba:99:13: 6d:d8:4e:2d:a4:d2:d4:2f:1f:29:4a:14:e5:94:69: 74:94:b3:f1:9d:91:32:52:5c:b7:32:1b:37:a5:e2: 53:c2:cd:b7:04:99:53:1c:32:d9:43:6c:fc:30:28: b1:43:f0:ef:31:53:3f:10:dd:f5:f3:74:4f:bf:56: 56:0d:1a:91:49:62:ab:e0:ae:d3:c7:93:19:ea:ea: 3e:f8:17:a3:94:7c:1e:48:e7:ae:2a:80:3e:a7:b2: 88:f2:3d:a8:9e:ce:d4:f3:e4:4a:8b:2b:47:bf:d1: 03:32:fc:ef:7a:98:67:f7:f6:4a:12:02:50:7e:8f: 5a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:38:5A:F4:AC:3F:BB:E9:4D:C5:41:61:8A:A0:BF:05:2A:05:BE:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3d69a67-4bf5-3a51-b405-183518d0ebb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:86:46:f2:69:3a:61:e4:ee:15:2e:7e:f8:f0:73:11:16:1f: d6:56:f2:26:21:21:5a:a0:31:21:61:d5:79:10:7f:30:b0:d8: 3e:76:10:d8:14:77:c0:45:75:de:72:bd:92:40:bc:ea:3c:05: c2:9d:58:19:c2:2a:f6:4e:99:02:f4:9a:b6:47:a8:d9:7a:ae: ca:33:fa:ec:b8:84:1d:59:4c:ce:bb:96:8b:39:bc:a2:39:86: 38:d3:2d:7a:12:6d:10:3c:4c:60:fd:a0:3f:0c:21:6b:a4:c1: a8:60:ff:46:06:85:bc:ef:26:da:fd:00:fa:48:72:67:0b:c9: 3c:0a:6f:a0:cd:e8:28:4c:03:2b:5a:d5:0e:cf:08:0d:c0:56: a6:ca:b5:02:88:b9:43:48:d4:36:d8:bf:8f:56:61:20:7a:a7: f2:ed:27:60:06:75:aa:f6:18:52:76:8f:2d:cc:01:ee:f0:b4: 44:06:1d:4a:4c:96:63:d8:b7:11:cf:01:59:0c:03:41:5a:05: 35:f1:ac:06:5a:bb:03:1c:39:67:56:b7:92:71:08:9b:b4:1d: b8:f7:96:fb:44:cc:f2:99:8c:bc:e7:4a:e1:a6:dc:d0:e6:de: bc:ce:f1:d7:d7:b5:ee:0b:02:f7:bd:0b:18:c9:5f:e7:24:b0: 16:35:31:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/Eth9zKNwZA2DPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxOTEyNDEzNloXDTI1MTIxODEzNDEzNlowLzEtMCsGA1UEAxMk MmFjMzA1YzYtOTI0MC00N2MzLTllODMtM2ZiNjQxMjliODAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvx/N1BLYcxLJ/aNg7BhT8V8qHLoZd/9b1Ce Yvi5AXMO9xYGVMXjhfbcwrrnzYyC3Lay3rY+6tb/VPYlF1rMqfaHO+1dM8PldqDP na6DJCRS9vasiClXlSA9t5w0TDD/Drln7GnDwjpJEnDSbDP+S7nsXWc7dPBOreAs xsE9+c48gea6mRNt2E4tpNLULx8pShTllGl0lLPxnZEyUly3Mhs3peJTws23BJlT HDLZQ2z8MCixQ/DvMVM/EN3183RPv1ZWDRqRSWKr4K7Tx5MZ6uo++BejlHweSOeu KoA+p7KI8j2ons7U8+RKiytHv9EDMvzvephn9/ZKEgJQfo9afwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJE4WvSsP7vpTcVBYYqgvwUqBb70MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTNkNjlhNjctNGJmNS0z YTUxLWI0MDUtMTgzNTE4ZDBlYmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPSbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmGRvJpOmHk7hUufvjwcxEWH9ZW8iYhIVqgMSFh1XkQfzCw2D52ENgU d8BFdd5yvZJAvOo8BcKdWBnCKvZOmQL0mrZHqNl6rsoz+uy4hB1ZTM67los5vKI5 hjjTLXoSbRA8TGD9oD8MIWukwahg/0YGhbzvJtr9APpIcmcLyTwKb6DN6ChMAyta 1Q7PCA3AVqbKtQKIuUNI1DbYv49WYSB6p/LtJ2AGdar2GFJ2jy3MAe7wtEQGHUpM lmPYtxHPAVkMA0FaBTXxrAZauwMcOWdWt5JxCJu0Hbj3lvtEzPKZjLznSuGm3NDm 3rzO8dfXte4LAve9CxjJX+cksBY1MTE= -----END CERTIFICATE-----Generated at Sat Oct 11 08:52:29 2025 by rpki-client