$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b672b5da-8400-3d21-a541-56d3699001e8.roa File: b672b5da-8400-3d21-a541-56d3699001e8.roa (raw, json) Hash identifier: nBcpg+pFWqZJ59FOysLQjioLD+6sP/nJhzBmHVOB6l0= Subject key identifier: A3:18:46:75:D3:43:BE:A0:5E:04:94:A4:12:C9:1B:51:3D:58:49:25 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B4EFEC35E543D5F8762659280 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b672b5da-8400-3d21-a541-56d3699001e8.roa Signing time: Thu 25 Sep 2025 05:34:04 +0000 ROA not before: Thu 25 Sep 2025 05:34:04 +0000 ROA not after: Wed 24 Dec 2025 06:34:04 +0000 asID: 9304 IP address blocks: 72.244.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:fe:c3:5e:54:3d:5f:87:62:65:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 05:34:04 2025 GMT Not After : Dec 24 06:34:04 2025 GMT Subject: CN=e3ec1ec3-1820-4513-8b66-3142d30d7d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:58:a9:0e:84:8b:b2:bb:68:9f:ec:c0:96:20: a1:cd:b3:35:13:d4:86:2a:77:c5:e0:e5:05:ab:6e: 31:c2:4e:b5:99:a0:14:0c:6f:b2:df:f7:66:7f:e5: f1:c9:33:2c:cf:4b:7a:db:ee:29:9b:87:fc:0f:58: 2d:12:05:6f:4c:57:f3:fd:5e:ae:a1:4d:68:25:49: bb:28:86:c3:dd:65:54:60:5b:76:72:27:9c:4e:19: ae:85:71:65:8f:8c:b9:bf:03:e9:e7:18:ed:10:e6: 62:17:9c:43:10:d4:3e:2f:19:03:d3:2b:31:70:b2: 89:3a:97:e9:ea:a9:d8:0c:16:2a:ec:a0:9c:cb:07: eb:09:c9:3a:fb:34:cf:21:51:58:9d:68:da:e7:d1: 31:f6:5e:7a:f4:63:89:1b:30:d0:d6:ae:7b:3a:56: ec:e7:0b:25:ba:01:9d:00:56:38:d1:2b:fd:d8:66: a2:12:be:9d:4a:a1:ba:b4:74:d0:b4:bd:eb:83:b4: 69:64:04:88:7d:df:8d:24:ef:b1:29:7f:32:32:58: 83:67:0b:90:c9:77:1b:e8:e0:4e:e5:9f:27:01:7a: ac:2b:38:87:24:33:be:80:80:69:39:c3:4d:69:48: 95:56:21:83:95:1b:13:c6:4d:c1:b1:6c:11:94:00: c9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:18:46:75:D3:43:BE:A0:5E:04:94:A4:12:C9:1B:51:3D:58:49:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b672b5da-8400-3d21-a541-56d3699001e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a2:47:31:9c:d4:aa:fb:44:d2:30:9b:63:73:d0:d0:32:2a: 15:41:90:9b:ed:09:03:c5:8a:de:9a:d2:9f:dc:67:6e:a1:df: e0:37:00:ec:f7:10:61:22:ae:db:1f:3e:c8:8a:e3:d6:ac:6e: e0:a9:42:52:7a:c5:f1:ce:6b:90:78:68:42:d9:85:a6:9a:7b: cb:60:b2:ff:67:1c:4d:37:01:23:a4:91:af:9b:47:b3:67:a8: 39:04:40:bb:aa:ae:fd:5d:8b:e5:48:1b:a8:ad:ed:3d:07:f4: 22:6f:03:7d:3e:c2:4f:e9:43:25:01:5d:0d:e2:0e:da:ba:83: 77:c8:f9:5a:88:fb:21:ec:96:46:a8:4d:9f:16:55:86:b3:04: c0:df:55:ac:9e:fc:6a:c7:36:9b:a1:95:9c:a0:80:19:43:2e: d9:bd:19:3d:37:87:0b:ef:8b:f6:a1:50:6a:2d:4f:1b:94:45: f7:bf:52:e5:35:5b:1c:b6:c3:46:f8:60:0b:58:41:bd:fb:c7: 2f:2d:c9:30:80:3e:a2:d5:b1:81:7c:4b:d1:b3:be:ef:d5:d5: 09:50:b4:64:82:52:e1:33:38:2b:9f:a0:84:61:ea:11:be:e0: 62:cb:70:44:69:69:4f:df:19:ba:52:a6:f4:4a:91:71:b0:b5: f5:6d:07:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtO/sNeVD1fh2JlkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyNTA1MzQwNFoXDTI1MTIyNDA2MzQwNFowLzEtMCsGA1UEAxMk ZTNlYzFlYzMtMTgyMC00NTEzLThiNjYtMzE0MmQzMGQ3ZDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklipDoSLsrton+zAliChzbM1E9SGKnfF4OUF q24xwk61maAUDG+y3/dmf+XxyTMsz0t62+4pm4f8D1gtEgVvTFfz/V6uoU1oJUm7 KIbD3WVUYFt2ciecThmuhXFlj4y5vwPp5xjtEOZiF5xDENQ+LxkD0ysxcLKJOpfp 6qnYDBYq7KCcywfrCck6+zTPIVFYnWja59Ex9l569GOJGzDQ1q57Olbs5wslugGd AFY40Sv92GaiEr6dSqG6tHTQtL3rg7RpZASIfd+NJO+xKX8yMliDZwuQyXcb6OBO 5Z8nAXqsKziHJDO+gIBpOcNNaUiVViGDlRsTxk3BsWwRlADJBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMYRnXTQ76gXgSUpBLJG1E9WEklMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjY3MmI1ZGEtODQwMC0z ZDIxLWE1NDEtNTZkMzY5OTAwMWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSPRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaiRzGc1Kr7RNIwm2Nz0NAyKhVBkJvtCQPFit6a0p/cZ26h3+A3AOz3 EGEirtsfPsiK49asbuCpQlJ6xfHOa5B4aELZhaaae8tgsv9nHE03ASOkka+bR7Nn qDkEQLuqrv1di+VIG6it7T0H9CJvA30+wk/pQyUBXQ3iDtq6g3fI+VqI+yHslkao TZ8WVYazBMDfVaye/GrHNpuhlZyggBlDLtm9GT03hwvvi/ahUGotTxuURfe/UuU1 Wxy2w0b4YAtYQb37xy8tyTCAPqLVsYF8S9Gzvu/V1QlQtGSCUuEzOCufoIRh6hG+ 4GLLcERpaU/fGbpSpvRKkXGwtfVtBxE= -----END CERTIFICATE-----Generated at Sat Oct 11 08:57:32 2025 by rpki-client