$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a86c86f0-e885-3ee1-8520-1bb1ca210643.roa File: a86c86f0-e885-3ee1-8520-1bb1ca210643.roa (raw, json) Hash identifier: 6xuRuswObnAZx0pao0WgYkT7OlMr5BSas99KmQnCFLc= Subject key identifier: ED:CA:D3:5E:4F:08:F3:40:32:42:A1:3F:BC:7D:76:A5:10:B8:05:A4 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B306A3E5F72642A48C8B03D00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a86c86f0-e885-3ee1-8520-1bb1ca210643.roa Signing time: Sun 14 Sep 2025 06:40:34 +0000 ROA not before: Sun 14 Sep 2025 06:40:34 +0000 ROA not after: Sat 13 Dec 2025 07:40:34 +0000 asID: 25198 IP address blocks: 72.244.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:30:6a:3e:5f:72:64:2a:48:c8:b0:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 14 06:40:34 2025 GMT Not After : Dec 13 07:40:34 2025 GMT Subject: CN=dd291e78-e73b-46d7-bbd8-107f2af4af68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d5:95:4c:5e:63:d6:05:42:f3:8d:63:1c:d1: 76:aa:7f:32:29:d5:7f:2b:f6:30:4d:6c:8d:b9:57: 2e:3d:39:34:3f:9a:d8:21:14:dc:d0:1a:99:e0:aa: bb:89:de:a6:4b:b0:cc:cc:83:29:4e:40:02:28:62: ed:16:c0:b0:63:df:40:a0:a9:ca:95:4a:c4:ac:d6: 69:df:59:6d:3c:9e:10:ef:5e:e2:a8:3a:af:6b:07: 26:ad:6e:78:ab:c8:7c:83:9d:dd:df:aa:10:18:27: 93:51:ab:ea:4b:aa:b4:7d:a3:ed:3d:a1:49:a9:87: 83:d2:65:df:10:ef:c3:cd:3a:62:91:90:37:67:8c: 13:8b:dd:d4:eb:9e:ed:f3:9e:95:03:53:60:5e:44: e7:dd:2c:12:a6:45:21:36:e1:b6:9a:cf:09:33:2d: a7:11:5a:31:bc:ed:2f:73:0d:9e:50:fb:a8:13:39: a2:c3:20:a0:77:9e:5e:b4:72:75:48:a5:97:20:c6: af:3e:3d:7c:f5:f3:9d:93:34:af:d1:6e:02:07:5b: f5:0f:4b:a4:4a:dd:b0:d0:8a:b6:9d:71:ca:48:63: e4:87:6c:0d:ee:f7:91:15:12:8f:79:9e:3d:c9:ca: 83:97:b3:ee:3d:8e:7d:06:51:ba:2e:ef:06:3b:55: cc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CA:D3:5E:4F:08:F3:40:32:42:A1:3F:BC:7D:76:A5:10:B8:05:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a86c86f0-e885-3ee1-8520-1bb1ca210643.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:98:3f:5d:fd:8e:e4:8e:ca:80:d8:6e:8c:0d:69:b5:9f:cf: 34:8c:82:a5:69:a5:2a:13:45:67:dd:b4:14:a2:7b:99:90:af: dc:57:9b:1d:e1:e9:02:0a:86:c1:54:dc:3f:d2:69:07:ea:d9: 9a:53:cc:7c:5f:19:e3:90:18:5d:dc:04:6b:50:94:c2:87:c6: f0:a9:e9:c3:6e:d6:ba:7e:b5:69:6d:ac:ec:4d:0c:ff:dd:95: dd:15:ca:f3:23:0e:61:0a:f8:91:46:ed:86:f8:cf:ce:88:7a: 8a:f6:1e:31:3a:71:f2:06:9c:4d:60:ab:e3:25:d8:66:64:36: 60:92:33:ce:88:53:56:a6:b0:bd:6f:85:f6:62:68:32:be:41: 40:52:a3:b0:84:92:13:fd:c3:03:03:be:5c:f0:7c:dc:7d:9b: a3:ea:50:02:96:d7:60:ed:34:b5:f9:31:30:62:92:58:bc:76: 85:1c:b9:11:0e:d6:9f:3f:2f:62:5d:a3:2d:9d:2e:74:b4:18: e4:2b:a9:30:ce:8c:2b:cf:48:21:ae:b2:b1:5e:75:d8:16:f7: 9b:d7:6f:fc:2b:e8:9e:d3:8c:c4:c9:35:4a:4b:63:ab:d1:8d: be:6f:43:f0:5c:50:95:3f:ee:fd:76:dc:9d:c9:f5:de:0c:f6: 9e:84:1d:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEswaj5fcmQqSMiwPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxNDA2NDAzNFoXDTI1MTIxMzA3NDAzNFowLzEtMCsGA1UEAxMk ZGQyOTFlNzgtZTczYi00NmQ3LWJiZDgtMTA3ZjJhZjRhZjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNWVTF5j1gVC841jHNF2qn8yKdV/K/YwTWyN uVcuPTk0P5rYIRTc0BqZ4Kq7id6mS7DMzIMpTkACKGLtFsCwY99AoKnKlUrErNZp 31ltPJ4Q717iqDqvawcmrW54q8h8g53d36oQGCeTUavqS6q0faPtPaFJqYeD0mXf EO/DzTpikZA3Z4wTi93U657t856VA1NgXkTn3SwSpkUhNuG2ms8JMy2nEVoxvO0v cw2eUPuoEzmiwyCgd55etHJ1SKWXIMavPj189fOdkzSv0W4CB1v1D0ukSt2w0Iq2 nXHKSGPkh2wN7veRFRKPeZ49ycqDl7PuPY59BlG6Lu8GO1XMBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3K015PCPNAMkKhP7x9dqUQuAWkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTg2Yzg2ZjAtZTg4NS0z ZWUxLTg1MjAtMWJiMWNhMjEwNjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPTtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALuYP139juSOyoDYbowNabWfzzSMgqVppSoTRWfdtBSie5mQr9xXmx3h 6QIKhsFU3D/SaQfq2ZpTzHxfGeOQGF3cBGtQlMKHxvCp6cNu1rp+tWltrOxNDP/d ld0VyvMjDmEK+JFG7Yb4z86Ieor2HjE6cfIGnE1gq+Ml2GZkNmCSM86IU1amsL1v hfZiaDK+QUBSo7CEkhP9wwMDvlzwfNx9m6PqUAKW12DtNLX5MTBikli8doUcuREO 1p8/L2Jdoy2dLnS0GOQrqTDOjCvPSCGusrFeddgW95vXb/wr6J7TjMTJNUpLY6vR jb5vQ/BcUJU/7v123J3J9d4M9p6EHeM= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:48 2025 by rpki-client