$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a6a5eb62-8cce-3273-81a9-74a89224eac5.roa File: a6a5eb62-8cce-3273-81a9-74a89224eac5.roa (raw, json) Hash identifier: hYsNBs5R1UhwDgamVU67MaRlO0noVk3PEsNlIL1JKO0= Subject key identifier: 66:1C:3C:55:EA:67:23:94:A8:F8:F3:D8:F8:6A:21:26:23:36:87:A5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B2049C68B30039F8683DCB3C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a6a5eb62-8cce-3273-81a9-74a89224eac5.roa Signing time: Mon 08 Sep 2025 12:02:13 +0000 ROA not before: Mon 08 Sep 2025 12:02:13 +0000 ROA not after: Sun 07 Dec 2025 13:02:13 +0000 asID: 56264 IP address blocks: 72.244.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:49:c6:8b:30:03:9f:86:83:dc:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 12:02:13 2025 GMT Not After : Dec 7 13:02:13 2025 GMT Subject: CN=b1789621-36c7-4253-893f-838391a138bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:70:7a:80:0c:1c:dc:05:a3:e4:d8:67:d8:b1: 3b:d1:ad:fe:41:15:ff:2b:fa:98:0c:5e:74:e9:f4: ec:25:ed:4c:a6:42:76:23:0a:a9:f2:e0:2b:9b:fa: 0d:01:2c:00:ad:4d:a8:40:ce:3a:08:e3:25:5e:48: 35:be:0e:bb:ed:8c:0d:05:fa:3f:f9:39:2b:c3:68: 73:05:09:a7:87:4b:cd:3e:f9:2f:5e:ad:15:6c:44: 6a:67:c3:71:28:92:81:e6:97:33:8a:a5:dd:52:97: af:75:bf:cc:a6:27:8a:2d:db:99:c0:98:a8:de:96: 3a:f9:88:df:b8:9b:3a:72:3b:67:5b:67:da:53:3e: 83:32:2b:15:10:73:3f:f2:96:70:0f:ff:f7:70:7c: 1f:83:8b:fe:68:63:ca:f6:ab:a6:25:f8:20:8b:35: 31:17:36:52:1f:26:dc:21:b1:73:a6:e3:d6:c1:99: 5c:53:a6:40:e2:f4:9e:55:ed:e6:0e:db:fa:b6:4f: f1:d7:d4:4d:f0:74:e8:cd:f7:d2:ee:48:e4:47:3c: 28:e5:2a:2f:26:66:82:70:c5:06:36:07:aa:a6:71: b4:13:c6:98:f5:77:ae:d1:42:2c:17:9e:ed:3e:4b: 2c:b7:18:72:1c:60:6d:ba:63:6f:ac:fd:cc:a3:c4: 1d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1C:3C:55:EA:67:23:94:A8:F8:F3:D8:F8:6A:21:26:23:36:87:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a6a5eb62-8cce-3273-81a9-74a89224eac5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:a9:73:eb:87:f1:11:ec:83:49:d1:f9:3a:4c:74:ac:00:1f: 0b:e1:c4:be:be:47:af:92:7e:f5:de:19:80:72:ad:7e:37:ed: 4a:1b:03:de:a4:a6:a0:e1:c2:95:8a:ed:0f:5b:7b:dc:fc:32: 80:bc:f6:22:61:d8:ba:53:dd:26:6b:1c:c7:38:3c:d7:1c:89: 80:b4:b3:08:64:73:db:29:43:9b:9f:5c:47:4b:d1:5f:de:4a: 08:f7:c4:db:77:99:4b:eb:80:7f:a6:c5:f2:fa:3e:66:8d:3d: 9d:e1:c2:10:e9:f6:24:6a:ee:81:14:2d:76:6f:29:42:f1:0a: b3:eb:21:7b:52:80:8d:36:bd:91:f4:93:63:07:cb:f7:3f:29: 85:38:21:34:6f:de:c2:2f:62:9f:90:96:ec:5d:88:52:12:92: 63:ee:b3:46:90:d1:a1:a5:cc:66:13:68:49:a6:b8:57:89:f6: fe:b5:d0:63:f7:3c:9b:09:a0:7d:b0:30:1f:d6:bf:f8:c6:e8: 82:cc:06:15:2c:1f:e5:30:45:3f:b6:fb:c5:b2:6a:d2:78:81: 2b:33:39:26:e5:4c:6f:78:55:ab:40:08:62:9f:f9:1d:80:5e: be:33:b0:23:ac:4a:0d:4a:1b:d8:9d:e3:f6:b9:3e:35:0c:2c: 44:3a:04:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgScaLMAOfhoPcs8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODEyMDIxM1oXDTI1MTIwNzEzMDIxM1owLzEtMCsGA1UEAxMk YjE3ODk2MjEtMzZjNy00MjUzLTg5M2YtODM4MzkxYTEzOGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunB6gAwc3AWj5Nhn2LE70a3+QRX/K/qYDF50 6fTsJe1MpkJ2Iwqp8uArm/oNASwArU2oQM46COMlXkg1vg677YwNBfo/+Tkrw2hz BQmnh0vNPvkvXq0VbERqZ8NxKJKB5pcziqXdUpevdb/MpieKLduZwJio3pY6+Yjf uJs6cjtnW2faUz6DMisVEHM/8pZwD//3cHwfg4v+aGPK9qumJfggizUxFzZSHybc IbFzpuPWwZlcU6ZA4vSeVe3mDtv6tk/x19RN8HTozffS7kjkRzwo5SovJmaCcMUG NgeqpnG0E8aY9Xeu0UIsF57tPksstxhyHGBtumNvrP3Mo8QdgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYcPFXqZyOUqPjz2PhqISYjNoelMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTZhNWViNjItOGNjZS0z MjczLTgxYTktNzRhODkyMjRlYWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPQcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIepc+uH8RHsg0nR+TpMdKwAHwvhxL6+R6+SfvXeGYByrX437UobA96k pqDhwpWK7Q9be9z8MoC89iJh2LpT3SZrHMc4PNcciYC0swhkc9spQ5ufXEdL0V/e Sgj3xNt3mUvrgH+mxfL6PmaNPZ3hwhDp9iRq7oEULXZvKULxCrPrIXtSgI02vZH0 k2MHy/c/KYU4ITRv3sIvYp+QluxdiFISkmPus0aQ0aGlzGYTaEmmuFeJ9v610GP3 PJsJoH2wMB/Wv/jG6ILMBhUsH+UwRT+2+8WyatJ4gSszOSblTG94VatACGKf+R2A Xr4zsCOsSg1KG9id4/a5PjUMLEQ6BJ4= -----END CERTIFICATE-----Generated at Sat Oct 11 08:59:55 2025 by rpki-client