$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b21123a7-5f10-313a-ba9a-714a6880b487.roa File: b21123a7-5f10-313a-ba9a-714a6880b487.roa (raw, json) Hash identifier: Sfd+acQoO/EuBnxXtl61cYVQpMIAtF5N2vSjUhyV83s= Subject key identifier: 61:A4:59:19:B9:8D:6C:FA:9B:22:F6:FF:7A:F0:32:D6:4D:59:4F:ED Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B25F0952B7BDA3EFB14B62BC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b21123a7-5f10-313a-ba9a-714a6880b487.roa Signing time: Wed 10 Sep 2025 12:37:21 +0000 ROA not before: Wed 10 Sep 2025 12:37:21 +0000 ROA not after: Tue 09 Dec 2025 13:37:21 +0000 asID: 5650 IP address blocks: 72.244.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:f0:95:2b:7b:da:3e:fb:14:b6:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 10 12:37:21 2025 GMT Not After : Dec 9 13:37:21 2025 GMT Subject: CN=1942205b-b98c-44dc-a960-1dc4c24f27dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:69:ab:d2:94:88:6f:76:04:a8:e6:3a:a5:30: 43:a5:f0:12:05:d1:6d:ae:50:70:d5:64:3a:5a:90: 98:60:5f:07:d9:59:6c:fe:89:08:99:5a:91:ae:1d: 88:7f:b5:1c:43:8f:cd:1d:e0:81:58:a7:da:e9:e5: 1b:9a:5d:c7:05:39:7f:3c:a5:af:d9:96:4c:46:4c: 9e:b5:b5:71:8e:40:0c:4f:4b:22:89:6d:98:94:23: 5a:f3:c0:76:0e:d1:65:8e:b7:b0:4e:0f:29:31:70: d2:f6:f1:e0:ef:71:88:f6:f9:74:f5:a9:e2:25:9d: be:dc:3b:cd:f2:37:db:2f:21:f9:f9:f3:97:57:d4: f2:bd:de:72:19:b0:a5:ec:01:4d:a3:b3:10:d0:00: f1:4b:55:6b:24:55:57:b2:c1:c6:85:24:c2:28:d7: b3:36:b3:1c:a5:35:33:15:41:e5:0d:dd:94:40:d4: c7:84:9d:e6:b3:e6:a0:9b:a1:92:2d:86:bc:84:9b: 99:00:79:c2:f3:f3:bc:1c:1f:03:37:4f:03:76:cf: b9:35:b0:b3:ea:ec:f1:f6:4d:7e:c2:50:38:11:e7: d2:9f:d8:f2:41:e6:5f:ac:f3:af:cf:cb:b2:ca:2e: ea:a6:dd:3a:4a:01:d5:2e:f4:49:94:21:19:43:87: 9c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A4:59:19:B9:8D:6C:FA:9B:22:F6:FF:7A:F0:32:D6:4D:59:4F:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b21123a7-5f10-313a-ba9a-714a6880b487.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:0b:c3:ba:84:64:48:d2:e2:d4:1c:9e:71:90:ba:f6:66:69: 20:b7:ea:bb:fe:5a:f7:d2:c6:b9:d5:9a:53:69:49:2b:07:d9: 6e:93:7f:fa:0f:46:f8:31:a3:61:9c:ce:46:08:83:fc:30:56: eb:4b:8d:64:03:7b:a7:4c:e3:59:30:b0:a1:a8:84:d6:cd:a2: fb:4d:08:7d:aa:54:be:46:0a:30:12:c1:d4:da:ae:1c:16:62: 78:82:0f:8f:39:d3:88:73:97:f6:03:26:c8:23:41:a0:a5:9c: f3:11:c9:d4:34:cd:3d:df:e7:d6:c2:a6:59:42:cb:7b:40:b1: 70:64:20:35:89:76:8a:ee:03:44:9b:35:4c:e7:f8:73:cc:9b: 20:92:03:f9:c1:1d:01:55:f3:dd:d9:b7:5c:3b:a7:cc:4f:50: 94:fb:69:4f:13:5e:0f:bd:6e:85:8b:89:e6:d2:b4:db:e6:39: 6e:11:fa:f9:82:72:8e:3c:f2:64:6c:57:bf:cd:bb:a1:8f:b1: 72:5f:b9:14:03:46:47:ff:4c:a5:2a:80:a6:4b:60:4a:c3:42: ba:2b:f0:0a:68:c7:b0:f0:a4:cb:76:98:3e:82:cf:32:f9:75: 8c:3d:07:78:2d:46:ff:2e:47:0c:fb:b8:60:0b:28:a7:4e:87: e4:31:a5:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl8JUre9o++xS2K8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxMDEyMzcyMVoXDTI1MTIwOTEzMzcyMVowLzEtMCsGA1UEAxMk MTk0MjIwNWItYjk4Yy00NGRjLWE5NjAtMWRjNGMyNGYyN2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGmr0pSIb3YEqOY6pTBDpfASBdFtrlBw1WQ6 WpCYYF8H2Vls/okImVqRrh2If7UcQ4/NHeCBWKfa6eUbml3HBTl/PKWv2ZZMRkye tbVxjkAMT0siiW2YlCNa88B2DtFljrewTg8pMXDS9vHg73GI9vl09aniJZ2+3DvN 8jfbLyH5+fOXV9Tyvd5yGbCl7AFNo7MQ0ADxS1VrJFVXssHGhSTCKNezNrMcpTUz FUHlDd2UQNTHhJ3ms+agm6GSLYa8hJuZAHnC8/O8HB8DN08Dds+5NbCz6uzx9k1+ wlA4EefSn9jyQeZfrPOvz8uyyi7qpt06SgHVLvRJlCEZQ4ec1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGkWRm5jWz6myL2/3rwMtZNWU/tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjIxMTIzYTctNWYxMC0z MTNhLWJhOWEtNzE0YTY4ODBiNDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPS0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwLw7qEZEjS4tQcnnGQuvZmaSC36rv+WvfSxrnVmlNpSSsH2W6Tf/oP Rvgxo2GczkYIg/wwVutLjWQDe6dM41kwsKGohNbNovtNCH2qVL5GCjASwdTarhwW YniCD48504hzl/YDJsgjQaClnPMRydQ0zT3f59bCpllCy3tAsXBkIDWJdoruA0Sb NUzn+HPMmyCSA/nBHQFV893Zt1w7p8xPUJT7aU8TXg+9boWLiebStNvmOW4R+vmC co488mRsV7/Nu6GPsXJfuRQDRkf/TKUqgKZLYErDQror8Apox7DwpMt2mD6CzzL5 dYw9B3gtRv8uRwz7uGALKKdOh+Qxpac= -----END CERTIFICATE-----Generated at Sat Oct 11 08:57:38 2025 by rpki-client