$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a88d37bf-2399-30aa-b7ba-3a6496923b9a.roa File: a88d37bf-2399-30aa-b7ba-3a6496923b9a.roa (raw, json) Hash identifier: B6ivibgeJfUJOiUt2C+chVzwfNB1e1njroPpysG3HAM= Subject key identifier: B3:7E:5B:90:4C:7B:A5:E6:00:A8:4A:3B:AF:01:A7:25:17:A8:2A:ED Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B235D0B0DC688F46D32C22B00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a88d37bf-2399-30aa-b7ba-3a6496923b9a.roa Signing time: Tue 09 Sep 2025 14:28:28 +0000 ROA not before: Tue 09 Sep 2025 14:28:28 +0000 ROA not after: Mon 08 Dec 2025 15:28:28 +0000 asID: 9304 IP address blocks: 72.244.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:5d:0b:0d:c6:88:f4:6d:32:c2:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 9 14:28:28 2025 GMT Not After : Dec 8 15:28:28 2025 GMT Subject: CN=3839e31e-7224-4e61-a3b1-c57b26ea316c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c1:2e:ee:d4:bb:c4:1d:99:58:36:38:5d:4d: 89:0c:09:2b:05:2b:14:0f:83:83:b9:73:a7:08:a7: 6e:6e:3e:45:9b:5b:4d:45:b4:fa:24:89:0d:19:15: 70:88:e1:39:38:82:6b:91:f4:a0:d5:6e:e7:7c:83: 5b:d5:00:dd:a3:45:dc:a0:09:f6:aa:fd:8b:30:08: c0:03:1b:5e:2a:a2:3c:29:b4:cc:89:2d:fc:f3:df: 78:06:79:96:22:af:56:f1:16:60:09:7a:1f:34:f3: de:da:48:4a:e8:d3:c9:99:ca:6d:16:6e:b3:cc:e7: a8:95:a4:23:40:67:2b:9f:ad:ed:c0:90:bf:d3:9d: 09:d1:a1:93:e0:08:0b:81:2d:f0:e7:0f:74:d3:5c: e9:ca:3e:f5:cf:68:6e:d2:6e:52:03:ad:f0:1e:3c: 39:68:8e:01:5e:c5:e1:1e:6d:73:d7:55:3f:1d:a7: 39:0d:6d:09:7a:40:a1:50:75:e3:94:29:b8:ec:13: cf:e1:04:a6:52:4f:33:ef:f0:59:72:96:59:a6:35: a8:e7:fd:a6:a6:a7:a2:8d:c8:3b:76:e8:c7:8c:02: 22:91:ce:f9:6c:86:16:1c:13:e8:80:50:97:06:d7: 53:26:56:b2:23:d8:16:87:a3:4a:ce:23:61:ce:5b: ef:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7E:5B:90:4C:7B:A5:E6:00:A8:4A:3B:AF:01:A7:25:17:A8:2A:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a88d37bf-2399-30aa-b7ba-3a6496923b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:37:27:74:67:9b:5f:dd:59:a0:69:2f:98:6f:da:94:fd:1c: 77:f2:59:d7:16:67:20:31:9e:83:e9:63:03:fe:06:04:40:b6: 93:26:36:cb:0c:c0:95:67:fd:23:e7:b5:8f:6a:1d:cb:ba:b5: 64:81:c9:c4:0d:86:25:20:5b:b7:81:d6:3d:33:2f:1b:ba:0b: c5:0a:c4:cf:b0:3e:7e:d2:81:7c:64:45:1a:77:af:33:b2:b0: 31:cd:ab:b1:d6:07:22:65:35:d1:e6:42:77:19:f9:74:cb:07: 20:08:15:6c:da:10:78:50:50:77:b0:0d:aa:2b:31:e4:82:9f: 89:a0:26:c0:a4:36:34:3d:3e:5d:f2:6e:69:70:c2:50:0f:12: da:49:35:97:19:3d:ed:cb:ad:11:f4:de:77:84:72:86:4f:09: 4c:b8:b6:d1:0f:f0:eb:38:2a:57:b0:db:f0:ca:43:9b:79:42: c6:3a:47:e5:84:f0:e8:c2:23:c0:72:a5:e1:75:39:43:d0:d3: 93:4c:cd:8c:6a:9c:ca:f9:8d:cd:25:f8:17:59:14:51:ef:7f: 25:23:8f:9a:97:72:2c:01:4c:91:15:b6:ba:da:b7:f0:47:63: 70:b5:50:40:a9:9d:e2:5d:bc:dc:38:70:3e:a2:90:18:98:46: 06:4e:07:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjXQsNxoj0bTLCKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwOTE0MjgyOFoXDTI1MTIwODE1MjgyOFowLzEtMCsGA1UEAxMk MzgzOWUzMWUtNzIyNC00ZTYxLWEzYjEtYzU3YjI2ZWEzMTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsEu7tS7xB2ZWDY4XU2JDAkrBSsUD4ODuXOn CKdubj5Fm1tNRbT6JIkNGRVwiOE5OIJrkfSg1W7nfINb1QDdo0XcoAn2qv2LMAjA AxteKqI8KbTMiS388994BnmWIq9W8RZgCXofNPPe2khK6NPJmcptFm6zzOeolaQj QGcrn63twJC/050J0aGT4AgLgS3w5w9001zpyj71z2hu0m5SA63wHjw5aI4BXsXh Hm1z11U/Hac5DW0JekChUHXjlCm47BPP4QSmUk8z7/BZcpZZpjWo5/2mpqeijcg7 dujHjAIikc75bIYWHBPogFCXBtdTJlayI9gWh6NKziNhzlvv+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLN+W5BMe6XmAKhKO68BpyUXqCrtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTg4ZDM3YmYtMjM5OS0z MGFhLWI3YmEtM2E2NDk2OTIzYjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPQJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALA3J3Rnm1/dWaBpL5hv2pT9HHfyWdcWZyAxnoPpYwP+BgRAtpMmNssM wJVn/SPntY9qHcu6tWSBycQNhiUgW7eB1j0zLxu6C8UKxM+wPn7SgXxkRRp3rzOy sDHNq7HWByJlNdHmQncZ+XTLByAIFWzaEHhQUHewDaorMeSCn4mgJsCkNjQ9Pl3y bmlwwlAPEtpJNZcZPe3LrRH03neEcoZPCUy4ttEP8Os4Klew2/DKQ5t5QsY6R+WE 8OjCI8BypeF1OUPQ05NMzYxqnMr5jc0l+BdZFFHvfyUjj5qXciwBTJEVtrrat/BH Y3C1UECpneJdvNw4cD6ikBiYRgZOBzI= -----END CERTIFICATE-----Generated at Sat Oct 11 08:59:54 2025 by rpki-client