$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bfc15757-4c56-33c1-a42c-a6774141c364.roa File: bfc15757-4c56-33c1-a42c-a6774141c364.roa (raw, json) Hash identifier: nfJ9YTMff5ido4UBW73yzKr8gCzy7bHhiWKkLRDJKHE= Subject key identifier: EF:CA:5D:B4:2E:95:E0:86:06:83:CF:77:9D:6F:20:89:64:EA:B8:0A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B3B2DDF5EA64ABCA1ADA977C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bfc15757-4c56-33c1-a42c-a6774141c364.roa Signing time: Thu 18 Sep 2025 03:12:49 +0000 ROA not before: Thu 18 Sep 2025 03:12:49 +0000 ROA not after: Wed 17 Dec 2025 04:12:49 +0000 asID: 25198 IP address blocks: 72.244.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3b:2d:df:5e:a6:4a:bc:a1:ad:a9:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 18 03:12:49 2025 GMT Not After : Dec 17 04:12:49 2025 GMT Subject: CN=4a698e25-64bb-48b2-84a8-9d7869d567ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:aa:a7:0d:0e:89:0b:40:a9:eb:9d:bf:50:b5: e4:de:82:9e:41:a8:bb:c1:31:b7:7e:7c:de:78:35: d1:2b:2e:f6:86:4d:be:0b:4a:b4:df:84:07:21:ce: 11:ab:57:48:5b:57:d4:8d:47:d8:cb:4a:49:d5:a6: af:bf:1f:ac:5e:ae:e2:2a:3b:a2:3a:38:1f:3b:67: 2b:36:40:fe:ae:d9:4e:9c:70:a5:6f:f9:d9:a8:38: eb:22:9a:33:b5:f1:5b:f7:38:71:d3:85:f2:4f:a2: 5d:ba:52:d8:26:83:57:a5:4f:eb:44:77:62:0d:bc: 35:12:41:3b:09:63:65:61:b6:36:8c:f2:f4:db:3a: c5:04:91:da:cf:15:73:85:97:f5:95:da:ec:25:25: 5e:b5:23:87:dd:e1:d1:83:90:82:36:fa:be:22:68: 27:c7:bf:0c:ee:bb:8b:85:09:41:46:f0:b1:8e:ea: 1e:a8:44:b7:b6:53:95:06:06:7e:56:ef:8c:b0:9b: 6d:79:bd:32:f3:0c:f3:87:b3:70:b8:14:0d:06:89: 68:ea:dd:82:86:56:65:34:82:99:8a:5e:78:ca:64: 90:cb:10:ac:e9:b6:db:50:56:21:60:81:65:89:14: 4d:9d:ed:5f:22:81:2c:81:e3:7a:57:16:af:78:e3: 47:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CA:5D:B4:2E:95:E0:86:06:83:CF:77:9D:6F:20:89:64:EA:B8:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bfc15757-4c56-33c1-a42c-a6774141c364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:22:e4:db:92:7c:e2:39:0b:32:56:b0:a7:3b:4d:c7:25:91: 1d:2a:14:9d:23:5e:02:c7:8f:22:dc:d2:0d:8e:69:e8:b1:df: 95:a5:ef:15:95:ba:e2:68:93:9b:65:47:2a:a2:8c:a0:2d:6b: 51:66:52:6b:39:15:26:58:38:e8:3b:db:c8:58:96:5e:21:58: 85:a6:5a:ae:15:54:78:17:09:f4:80:df:d7:f1:31:ce:c5:73: 91:1d:34:04:37:42:0c:df:60:35:bb:44:79:95:0e:15:07:63: 7e:5c:54:14:b1:1d:1e:44:d7:c8:59:07:b9:c0:0f:64:87:f7: c1:7c:45:27:48:d2:9f:27:06:c0:be:eb:49:eb:23:56:21:5d: 97:7f:dd:11:ea:1a:49:6f:5f:c4:0f:6a:ce:ca:3a:db:92:50: 33:cc:df:ff:c3:3d:63:12:20:19:90:f1:78:d7:bf:8d:2b:ef: 89:c6:0a:75:ba:26:55:e2:33:e0:f0:4b:b3:b4:ce:91:97:1b: ce:87:c3:f8:99:25:11:c2:14:4c:10:83:a9:ba:47:cf:d1:25: 4d:48:d0:d0:f5:b3:54:34:77:41:28:1e:ec:f1:2c:7b:f9:76: 9b:14:d5:4e:db:58:69:43:07:80:99:80:fb:0e:cc:27:39:06: 13:eb:52:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs7Ld9epkq8oa2pd8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxODAzMTI0OVoXDTI1MTIxNzA0MTI0OVowLzEtMCsGA1UEAxMk NGE2OThlMjUtNjRiYi00OGIyLTg0YTgtOWQ3ODY5ZDU2N2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqqnDQ6JC0Cp652/ULXk3oKeQai7wTG3fnze eDXRKy72hk2+C0q034QHIc4Rq1dIW1fUjUfYy0pJ1aavvx+sXq7iKjuiOjgfO2cr NkD+rtlOnHClb/nZqDjrIpoztfFb9zhx04XyT6JdulLYJoNXpU/rRHdiDbw1EkE7 CWNlYbY2jPL02zrFBJHazxVzhZf1ldrsJSVetSOH3eHRg5CCNvq+Imgnx78M7ruL hQlBRvCxjuoeqES3tlOVBgZ+Vu+MsJtteb0y8wzzh7NwuBQNBolo6t2ChlZlNIKZ il54ymSQyxCs6bbbUFYhYIFliRRNne1fIoEsgeN6VxaveONHiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/KXbQuleCGBoPPd51vIIlk6rgKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmZjMTU3NTctNGM1Ni0z M2MxLWE0MmMtYTY3NzQxNDFjMzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPQnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8i5NuSfOI5CzJWsKc7TcclkR0qFJ0jXgLHjyLc0g2Oaeix35Wl7xWV uuJok5tlRyqijKAta1FmUms5FSZYOOg728hYll4hWIWmWq4VVHgXCfSA39fxMc7F c5EdNAQ3QgzfYDW7RHmVDhUHY35cVBSxHR5E18hZB7nAD2SH98F8RSdI0p8nBsC+ 60nrI1YhXZd/3RHqGklvX8QPas7KOtuSUDPM3//DPWMSIBmQ8XjXv40r74nGCnW6 JlXiM+DwS7O0zpGXG86Hw/iZJRHCFEwQg6m6R8/RJU1I0ND1s1Q0d0EoHuzxLHv5 dpsU1U7bWGlDB4CZgPsOzCc5BhPrUvU= -----END CERTIFICATE-----Generated at Sat Oct 11 09:01:13 2025 by rpki-client