$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b5d77914-49f6-388f-bc20-672136d60d04.roa File: b5d77914-49f6-388f-bc20-672136d60d04.roa (raw, json) Hash identifier: OAqeEY0l27M9OZRxzVsl5iPq4MMFhQiu+WpPKZzXBgU= Subject key identifier: 98:55:5E:23:98:A0:3F:66:6A:34:F9:D7:52:47:C2:6D:2D:21:C9:B3 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B20A653E308B20AC667D81836 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b5d77914-49f6-388f-bc20-672136d60d04.roa Signing time: Mon 08 Sep 2025 15:08:42 +0000 ROA not before: Mon 08 Sep 2025 15:08:42 +0000 ROA not after: Sun 07 Dec 2025 16:08:42 +0000 asID: 40676 IP address blocks: 72.244.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:a6:53:e3:08:b2:0a:c6:67:d8:18:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 15:08:42 2025 GMT Not After : Dec 7 16:08:42 2025 GMT Subject: CN=efba2d76-58ef-470d-afab-087d4c1dac5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:38:9e:58:83:aa:9c:bb:2e:49:f1:dd:6a:ec: 45:d7:65:84:04:e0:f0:74:af:38:4d:65:11:e8:2c: fe:61:bd:3f:83:56:27:52:e2:3e:17:ad:60:71:6a: 24:18:b4:67:fd:42:2f:e5:7a:31:f8:d9:66:a2:6f: 13:c9:62:50:51:2c:65:b4:f9:ae:67:5e:06:8c:51: 8b:4a:7f:dd:2d:64:b9:ee:7e:b0:1b:c1:97:da:8c: db:89:5b:77:87:9c:01:a0:fa:44:b3:77:b2:b1:0f: 5c:6a:f4:dd:df:f3:95:cc:66:48:b9:ce:4f:db:2b: e4:d7:1c:f1:04:71:a4:68:e6:f7:ff:85:6b:22:8b: 49:23:7a:ae:6f:a7:a5:9b:5f:29:e1:91:9b:b1:c7: 0a:43:74:0a:b3:d6:a2:4c:04:75:ae:4e:8c:c1:a6: 1c:04:20:b5:14:3c:50:17:e8:14:51:d7:9f:21:4b: 64:2c:8e:05:7e:ee:ee:58:e9:f8:ee:3a:39:57:46: d5:ac:f1:ad:6f:23:5a:25:3a:dc:63:47:8f:65:6a: e9:93:c9:a3:c8:c7:e8:7c:f0:77:8f:e4:39:b2:b4: 15:5b:29:24:6d:3f:45:61:c2:07:4e:38:41:8b:bd: 2a:40:53:ef:99:c4:66:71:14:d8:5a:bd:7b:b3:d9: 81:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:55:5E:23:98:A0:3F:66:6A:34:F9:D7:52:47:C2:6D:2D:21:C9:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b5d77914-49f6-388f-bc20-672136d60d04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:53:7c:a9:98:3d:9f:a5:66:44:7f:ff:9f:fb:eb:05:e0:cb: ad:fe:e8:88:35:df:e4:15:2d:02:e1:0e:0d:ee:fe:a4:bd:ff: c2:35:d2:92:ae:03:04:d9:71:4d:bd:3d:d2:22:b0:3a:1e:94: 92:c1:e4:44:34:93:5e:7b:0e:1e:f2:14:c4:99:0d:c8:b0:f7: ba:96:e8:1a:d6:d4:75:54:9e:16:81:2b:8e:d6:20:b2:6a:d9: 61:69:96:e3:76:f8:ab:53:39:51:13:bb:5e:00:f2:fb:08:24: f5:14:12:84:bc:ac:85:41:c2:47:24:c3:cc:d2:8a:d5:d7:b8: 43:6e:de:bc:85:50:a9:1f:d1:60:02:ca:f3:cd:e1:c7:60:18: 8a:76:bc:a3:6b:02:3e:f4:67:54:6e:f9:b8:e2:30:50:03:a0: a1:6a:d4:74:a6:cb:ef:02:8a:e5:40:c4:eb:66:59:18:da:8c: 80:29:b0:47:01:40:1d:62:6a:28:26:dd:3e:20:ec:a0:87:84: 1e:d8:89:9e:97:a0:61:cf:bf:3f:32:36:4c:21:a3:35:2c:5e: 84:ad:6b:e1:63:97:c4:70:10:02:b6:b8:e8:3a:7e:d1:0f:16: 0a:7b:89:50:c0:91:45:89:ca:e6:5e:8f:7b:1b:20:9b:04:d3: ea:9a:10:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgplPjCLIKxmfYGDYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODE1MDg0MloXDTI1MTIwNzE2MDg0MlowLzEtMCsGA1UEAxMk ZWZiYTJkNzYtNThlZi00NzBkLWFmYWItMDg3ZDRjMWRhYzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjieWIOqnLsuSfHdauxF12WEBODwdK84TWUR 6Cz+Yb0/g1YnUuI+F61gcWokGLRn/UIv5Xox+Nlmom8TyWJQUSxltPmuZ14GjFGL Sn/dLWS57n6wG8GX2ozbiVt3h5wBoPpEs3eysQ9cavTd3/OVzGZIuc5P2yvk1xzx BHGkaOb3/4VrIotJI3qub6elm18p4ZGbsccKQ3QKs9aiTAR1rk6MwaYcBCC1FDxQ F+gUUdefIUtkLI4Ffu7uWOn47jo5V0bVrPGtbyNaJTrcY0ePZWrpk8mjyMfofPB3 j+Q5srQVWykkbT9FYcIHTjhBi70qQFPvmcRmcRTYWr17s9mBIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhVXiOYoD9majT511JHwm0tIcmzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjVkNzc5MTQtNDlmNi0z ODhmLWJjMjAtNjcyMTM2ZDYwZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElTfKmYPZ+lZkR//5/76wXgy63+6Ig13+QVLQLhDg3u/qS9/8I10pKu AwTZcU29PdIisDoelJLB5EQ0k157Dh7yFMSZDciw97qW6BrW1HVUnhaBK47WILJq 2WFpluN2+KtTOVETu14A8vsIJPUUEoS8rIVBwkckw8zSitXXuENu3ryFUKkf0WAC yvPN4cdgGIp2vKNrAj70Z1Ru+bjiMFADoKFq1HSmy+8CiuVAxOtmWRjajIApsEcB QB1iaigm3T4g7KCHhB7YiZ6XoGHPvz8yNkwhozUsXoSta+Fjl8RwEAK2uOg6ftEP Fgp7iVDAkUWJyuZej3sbIJsE0+qaEPE= -----END CERTIFICATE-----Generated at Wed Sep 17 17:40:23 2025 by rpki-client