$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b7e01edc-456e-38c0-a9e0-550c093b44d7.roa File: b7e01edc-456e-38c0-a9e0-550c093b44d7.roa (raw, json) Hash identifier: vhhi6/4bB4kRpufRTkJ0oFmyskKwOAvjmCOYEhXJvjA= Subject key identifier: D7:C3:87:C9:AD:13:7D:71:6D:93:DC:20:45:88:1E:89:25:0D:23:60 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B20A6594A8108427D505DE940 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b7e01edc-456e-38c0-a9e0-550c093b44d7.roa Signing time: Mon 08 Sep 2025 15:08:44 +0000 ROA not before: Mon 08 Sep 2025 15:08:44 +0000 ROA not after: Sun 07 Dec 2025 16:08:44 +0000 asID: 40676 IP address blocks: 72.244.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:a6:59:4a:81:08:42:7d:50:5d:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 8 15:08:44 2025 GMT Not After : Dec 7 16:08:44 2025 GMT Subject: CN=f7506bc9-1664-4372-a3ed-58a17b9b3b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:20:1b:12:3c:85:5b:d1:de:42:41:79:8e:bd: 2f:69:2f:99:75:83:2f:f0:4c:dd:a3:a5:42:3a:51: 93:f7:e0:f3:7b:5c:8c:26:2a:23:d5:90:6d:3b:57: 3f:3b:42:40:63:eb:23:48:99:ae:e2:68:78:62:5d: f6:4c:ed:3a:8e:15:ff:bd:9d:83:1b:66:a6:ca:63: 21:63:c3:66:ce:3c:a1:6a:f8:df:09:68:69:e1:9b: 8c:ee:29:89:b3:b5:13:1c:36:21:d0:b0:39:20:b2: 01:55:94:71:44:b2:03:eb:c5:50:24:37:c7:61:36: 14:25:b8:dc:8c:a1:ec:58:ee:93:80:b9:ed:c7:c9: 07:b2:23:16:09:cc:4f:90:a2:fc:6f:e0:56:dd:a8: 81:1b:df:8d:98:cc:85:e1:f6:ab:23:6a:42:de:dd: 0f:17:45:75:e6:c3:49:70:ff:4b:19:aa:8d:e2:69: 24:34:5b:58:06:de:11:a2:27:6e:58:fc:7d:8a:fe: 2b:09:94:60:1d:36:e9:e4:82:48:48:cb:69:f1:29: 39:79:2f:b9:83:33:c3:fb:a9:63:36:5c:60:e6:98: a0:9f:e3:f1:05:06:7a:47:a4:ff:90:40:a1:1e:98: 0d:77:84:72:68:28:1e:9a:08:25:3d:68:61:04:63: 66:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C3:87:C9:AD:13:7D:71:6D:93:DC:20:45:88:1E:89:25:0D:23:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b7e01edc-456e-38c0-a9e0-550c093b44d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:be:b7:ef:6a:66:05:7b:1a:0f:33:a8:c3:eb:ed:53:1d:94: c9:f8:aa:49:3d:ab:20:55:41:ab:d3:7d:6a:a0:78:c4:da:f1: 94:53:c1:41:7b:f6:2b:89:cd:7c:dc:e9:0a:7a:13:ce:09:da: cf:b6:60:e7:10:86:71:e6:e1:d3:6c:5b:39:64:ea:61:67:a6: 79:5f:69:89:e4:50:e5:fe:e4:50:34:89:8e:42:3c:0a:d1:e4: 50:f7:a5:d8:f1:c0:be:55:39:c5:be:1e:34:c0:01:94:ec:aa: 25:52:a6:60:6b:07:74:4e:2c:27:f6:58:ea:38:15:b8:be:11: f7:8f:fa:22:59:97:ec:f5:92:ad:65:30:d9:fc:fd:09:8e:a6: c1:71:49:55:ba:f3:30:14:76:32:b6:82:87:8c:e1:28:73:13: 0a:21:e3:76:b3:cf:2b:e3:78:0e:ee:2e:21:ab:12:50:8d:f6: 82:31:a5:57:68:36:a6:1a:f3:d9:9c:44:35:b2:22:2b:49:f2: 75:e0:e5:89:81:c3:45:58:94:88:4e:0e:33:29:31:d1:3d:82: 5d:85:f6:69:f0:e3:5b:e3:24:f4:1c:ec:b6:17:f5:b4:38:7f: 03:4a:4e:c2:3d:de:c8:41:8d:72:52:2d:a9:2c:a7:93:b3:84: 13:f0:da:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgpllKgQhCfVBd6UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwODE1MDg0NFoXDTI1MTIwNzE2MDg0NFowLzEtMCsGA1UEAxMk Zjc1MDZiYzktMTY2NC00MzcyLWEzZWQtNThhMTdiOWIzYjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCAbEjyFW9HeQkF5jr0vaS+ZdYMv8Ezdo6VC OlGT9+Dze1yMJioj1ZBtO1c/O0JAY+sjSJmu4mh4Yl32TO06jhX/vZ2DG2amymMh Y8NmzjyhavjfCWhp4ZuM7imJs7UTHDYh0LA5ILIBVZRxRLID68VQJDfHYTYUJbjc jKHsWO6TgLntx8kHsiMWCcxPkKL8b+BW3aiBG9+NmMyF4farI2pC3t0PF0V15sNJ cP9LGaqN4mkkNFtYBt4RoiduWPx9iv4rCZRgHTbp5IJISMtp8Sk5eS+5gzPD+6lj Nlxg5pign+PxBQZ6R6T/kEChHpgNd4RyaCgemgglPWhhBGNmDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfDh8mtE31xbZPcIEWIHoklDSNgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjdlMDFlZGMtNDU2ZS0z OGMwLWE5ZTAtNTUwYzA5M2I0NGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPTYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABu+t+9qZgV7Gg8zqMPr7VMdlMn4qkk9qyBVQavTfWqgeMTa8ZRTwUF7 9iuJzXzc6Qp6E84J2s+2YOcQhnHm4dNsWzlk6mFnpnlfaYnkUOX+5FA0iY5CPArR 5FD3pdjxwL5VOcW+HjTAAZTsqiVSpmBrB3ROLCf2WOo4Fbi+EfeP+iJZl+z1kq1l MNn8/QmOpsFxSVW68zAUdjK2goeM4ShzEwoh43azzyvjeA7uLiGrElCN9oIxpVdo NqYa89mcRDWyIitJ8nXg5YmBw0VYlIhODjMpMdE9gl2F9mnw41vjJPQc7LYX9bQ4 fwNKTsI93shBjXJSLaksp5OzhBPw2gY= -----END CERTIFICATE-----Generated at Wed Sep 17 17:36:55 2025 by rpki-client