$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a5ada879-bc4e-3dc9-8d7e-b12c6a2263ba.roa File: a5ada879-bc4e-3dc9-8d7e-b12c6a2263ba.roa (raw, json) Hash identifier: DXtA1NE4+XyAHhxWKY1zcd5PyHF0mPvlCkH9pTonfcA= Subject key identifier: 81:5F:82:E4:84:3B:64:2A:BA:4B:68:4F:55:73:EF:09:D0:4E:3F:87 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B4B2E5805006AB336DD9258B4 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a5ada879-bc4e-3dc9-8d7e-b12c6a2263ba.roa Signing time: Tue 23 Sep 2025 20:46:42 +0000 ROA not before: Tue 23 Sep 2025 20:46:42 +0000 ROA not after: Mon 22 Dec 2025 21:46:42 +0000 asID: 16509 IP address blocks: 72.244.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:2e:58:05:00:6a:b3:36:dd:92:58:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 23 20:46:42 2025 GMT Not After : Dec 22 21:46:42 2025 GMT Subject: CN=4eca66ba-23ec-40dc-8ce4-feba188555a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:48:43:8b:6e:0f:d9:c8:c8:de:a0:dd:2e:7e: 52:65:62:a3:a0:2b:86:dc:f2:36:ef:bf:97:84:34: 03:6a:23:8c:bb:46:ca:70:69:98:60:3d:b5:ba:cb: 06:c9:e1:40:b3:23:50:0a:a6:bc:9c:81:de:24:b7: 3a:6c:5a:ed:53:88:6f:34:36:1c:b1:b5:f1:61:1a: 03:32:12:64:a6:a8:b5:e4:4f:34:b7:8b:ad:59:b2: 38:76:02:ef:44:8c:7e:df:6f:15:4f:55:65:9b:dc: b0:3d:b8:51:36:6f:e3:4c:6c:1b:d6:7c:f1:5c:5a: 40:2e:ab:e7:d3:8b:74:8d:d4:51:7d:53:a0:e5:f7: bd:de:0c:49:5d:ff:56:7b:51:e1:51:0b:cb:34:0a: 08:57:85:68:f1:ca:9f:3f:ee:9f:be:8d:41:04:9a: 35:7e:46:7f:ef:4b:d2:0c:9c:0a:4e:f7:cb:05:a0: 90:a0:1b:b6:9a:68:ec:a1:21:16:ca:2a:d3:eb:0a: 40:ad:4d:7d:e0:60:d6:06:50:44:bc:db:78:af:9a: a9:0c:07:53:da:15:3d:a9:f5:ae:79:44:dd:58:c7: 52:77:25:72:7c:87:c0:45:8c:54:98:c4:d6:1b:7d: b1:5d:e1:fd:1b:e7:8a:4d:c5:fd:4d:8a:f1:a7:d1: 1c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:5F:82:E4:84:3B:64:2A:BA:4B:68:4F:55:73:EF:09:D0:4E:3F:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a5ada879-bc4e-3dc9-8d7e-b12c6a2263ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:9a:4e:cb:c2:8c:87:74:92:84:ac:08:9a:2e:45:c2:a1:71: 56:6a:01:c8:86:f9:c8:f2:54:28:d6:7b:7d:9c:a3:fc:fe:80: 39:20:f0:aa:39:d5:72:c9:d5:56:17:5a:d4:40:cf:08:0a:43: 5b:b8:bb:13:a9:ce:fe:4e:8f:e0:aa:4f:3c:7d:73:fe:bf:7b: 22:30:f9:92:82:06:a1:fd:f5:e2:f6:f0:42:f7:7f:a8:9e:71: ca:02:04:c9:ce:18:10:9a:89:e0:47:39:c9:57:67:67:92:35: 55:6e:13:4c:e0:40:13:2f:26:6e:ce:89:6b:ed:e7:3d:73:22: 5d:55:75:c4:5b:56:8b:10:53:e9:bc:70:7f:7b:d3:9b:72:78: 26:1c:2b:8b:07:25:51:73:e6:00:07:ea:e3:ee:59:d0:1e:35: c2:f6:1b:1d:70:f7:07:82:bb:1b:51:5a:f2:fa:d8:c8:a1:52: 17:73:72:dd:02:41:27:4f:c2:a8:bc:69:a6:65:87:e7:1a:2f: 4e:83:91:a0:42:4e:ca:7c:f6:50:93:7a:cd:62:f6:2c:16:91: 39:66:fd:d2:c8:0b:79:14:65:97:ca:0f:29:88:fb:c1:6a:8d: 82:db:b3:37:78:83:91:7f:84:3b:9c:95:c2:cd:12:f5:7f:9e: b3:0f:60:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtLLlgFAGqzNt2SWLQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyMzIwNDY0MloXDTI1MTIyMjIxNDY0MlowLzEtMCsGA1UEAxMk NGVjYTY2YmEtMjNlYy00MGRjLThjZTQtZmViYTE4ODU1NWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUhDi24P2cjI3qDdLn5SZWKjoCuG3PI277+X hDQDaiOMu0bKcGmYYD21ussGyeFAsyNQCqa8nIHeJLc6bFrtU4hvNDYcsbXxYRoD MhJkpqi15E80t4utWbI4dgLvRIx+328VT1Vlm9ywPbhRNm/jTGwb1nzxXFpALqvn 04t0jdRRfVOg5fe93gxJXf9We1HhUQvLNAoIV4Vo8cqfP+6fvo1BBJo1fkZ/70vS DJwKTvfLBaCQoBu2mmjsoSEWyirT6wpArU194GDWBlBEvNt4r5qpDAdT2hU9qfWu eUTdWMdSdyVyfIfARYxUmMTWG32xXeH9G+eKTcX9TYrxp9EcowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFfguSEO2QquktoT1Vz7wnQTj+HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTVhZGE4NzktYmM0ZS0z ZGM5LThkN2UtYjEyYzZhMjI2M2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESaTsvCjId0koSsCJouRcKhcVZqAciG+cjyVCjWe32co/z+gDkg8Ko5 1XLJ1VYXWtRAzwgKQ1u4uxOpzv5Oj+CqTzx9c/6/eyIw+ZKCBqH99eL28EL3f6ie ccoCBMnOGBCaieBHOclXZ2eSNVVuE0zgQBMvJm7OiWvt5z1zIl1VdcRbVosQU+m8 cH9705tyeCYcK4sHJVFz5gAH6uPuWdAeNcL2Gx1w9weCuxtRWvL62MihUhdzct0C QSdPwqi8aaZlh+caL06DkaBCTsp89lCTes1i9iwWkTlm/dLIC3kUZZfKDymI+8Fq jYLbszd4g5F/hDuclcLNEvV/nrMPYDU= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:51 2025 by rpki-client