$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c66972a3-c67e-3956-ab6d-78952e7fb461.roa File: c66972a3-c67e-3956-ab6d-78952e7fb461.roa (raw, json) Hash identifier: e70Vf3ABB1CGUceRbZq9KgoXDAMUoR2JaVHrv9y3flQ= Subject key identifier: 1E:3A:71:85:B7:84:B3:AA:C8:7A:F1:C4:4B:15:65:04:77:A0:6E:8C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B54D51E64D54FB01C1F5D9280 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c66972a3-c67e-3956-ab6d-78952e7fb461.roa Signing time: Sat 27 Sep 2025 07:45:01 +0000 ROA not before: Sat 27 Sep 2025 07:45:01 +0000 ROA not after: Fri 26 Dec 2025 08:45:01 +0000 asID: 214025 IP address blocks: 72.244.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:d5:1e:64:d5:4f:b0:1c:1f:5d:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 27 07:45:01 2025 GMT Not After : Dec 26 08:45:01 2025 GMT Subject: CN=65030394-9b96-4b8e-b846-e20acdd9dda5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ac:b1:dd:91:2e:2f:ed:03:34:30:d5:c9:5f: 81:ee:49:4c:db:10:9e:c4:8a:61:b5:c8:47:c9:0d: 2d:c3:79:00:6c:88:c2:3e:6f:2f:a7:8e:57:d2:2e: a0:b7:b2:3b:61:38:22:81:21:ed:3a:f6:8b:b7:dc: d1:09:9b:89:59:cb:5c:58:b7:c3:fd:f8:d9:75:4d: f1:9c:2e:c3:16:f4:23:93:5e:f2:46:45:65:16:a3: 04:12:13:d2:a6:64:1d:ae:51:10:c6:d8:8f:df:01: da:d6:a2:17:3b:e6:d4:32:40:58:d6:e2:28:1a:74: 24:34:f8:eb:d0:51:3c:ec:fa:0f:b7:c1:0d:1d:8f: f0:46:0a:d2:80:e2:4c:b9:05:53:5c:2e:c1:f2:9f: 6f:ae:24:3b:37:54:97:4f:bb:02:8f:db:db:7e:c1: 1f:65:46:b3:cb:2a:90:f4:61:e8:cc:a3:96:fc:5d: c6:f6:f4:0f:f4:b1:00:da:f9:1a:25:76:da:a5:f1: 2a:ba:f6:af:a6:c9:7f:8d:3b:e6:f9:a4:c6:77:f7: 46:a0:71:6f:35:b3:79:8b:24:68:dc:84:e6:46:6f: 57:60:5f:75:13:34:7e:74:50:13:b0:1e:51:17:cc: 58:d9:d6:c8:02:b0:5f:4e:5b:00:d9:a0:1e:94:d5: 7c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3A:71:85:B7:84:B3:AA:C8:7A:F1:C4:4B:15:65:04:77:A0:6E:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c66972a3-c67e-3956-ab6d-78952e7fb461.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:fb:bb:d8:1e:e7:f2:3c:d5:10:55:0d:7c:17:79:45:00:00: 48:34:df:61:70:42:62:a2:fa:ff:4c:9f:ea:26:70:e3:42:71: e7:f8:62:44:1f:c5:f4:46:d7:04:7d:bb:29:1b:ef:50:db:b0: 46:4a:e5:86:b5:95:9b:36:7a:d7:bb:30:3a:47:3f:c1:62:4b: 59:24:21:ed:c3:94:ca:63:12:fd:e6:21:1c:38:06:36:59:be: 4a:e0:e9:58:e4:46:a7:f8:b8:33:ea:c6:8d:15:63:de:0d:59: 0a:5f:97:45:b9:91:a6:a3:84:a2:1f:11:e6:1f:f1:31:b4:2b: 8f:44:ac:39:29:eb:32:16:3e:dd:ca:81:a8:39:d4:8f:d3:12: dd:10:31:3c:6b:38:23:7e:71:61:f2:1f:0b:e4:d2:30:5b:75: 5a:eb:0a:4b:67:83:e7:83:de:f7:0c:95:89:f7:bd:ad:ca:37: f4:1f:14:52:87:03:40:d8:ef:db:f0:be:5e:7a:c5:48:87:52: ed:66:64:4e:66:0c:b7:b7:57:21:10:3d:6d:ce:0a:99:bb:b4: 68:9f:ff:e2:e4:84:43:38:89:aa:63:28:0d:5c:6c:11:ac:02: 87:c1:d1:4f:3e:7e:2d:43:0a:c4:0c:e4:2d:cc:c0:7b:37:f8: 70:72:71:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtU1R5k1U+wHB9dkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyNzA3NDUwMVoXDTI1MTIyNjA4NDUwMVowLzEtMCsGA1UEAxMk NjUwMzAzOTQtOWI5Ni00YjhlLWI4NDYtZTIwYWNkZDlkZGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnayx3ZEuL+0DNDDVyV+B7klM2xCexIphtchH yQ0tw3kAbIjCPm8vp45X0i6gt7I7YTgigSHtOvaLt9zRCZuJWctcWLfD/fjZdU3x nC7DFvQjk17yRkVlFqMEEhPSpmQdrlEQxtiP3wHa1qIXO+bUMkBY1uIoGnQkNPjr 0FE87PoPt8ENHY/wRgrSgOJMuQVTXC7B8p9vriQ7N1SXT7sCj9vbfsEfZUazyyqQ 9GHozKOW/F3G9vQP9LEA2vkaJXbapfEquvavpsl/jTvm+aTGd/dGoHFvNbN5iyRo 3ITmRm9XYF91EzR+dFATsB5RF8xY2dbIArBfTlsA2aAelNV8DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB46cYW3hLOqyHrxxEsVZQR3oG6MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzY2OTcyYTMtYzY3ZS0z OTU2LWFiNmQtNzg5NTJlN2ZiNDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPSdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE77u9ge5/I81RBVDXwXeUUAAEg032FwQmKi+v9Mn+omcONCcef4YkQf xfRG1wR9uykb71DbsEZK5Ya1lZs2ete7MDpHP8FiS1kkIe3DlMpjEv3mIRw4BjZZ vkrg6VjkRqf4uDPqxo0VY94NWQpfl0W5kaajhKIfEeYf8TG0K49ErDkp6zIWPt3K gag51I/TEt0QMTxrOCN+cWHyHwvk0jBbdVrrCktng+eD3vcMlYn3va3KN/QfFFKH A0DY79vwvl56xUiHUu1mZE5mDLe3VyEQPW3OCpm7tGif/+LkhEM4iapjKA1cbBGs AofB0U8+fi1DCsQM5C3MwHs3+HBycTY= -----END CERTIFICATE-----Generated at Sat Oct 11 09:00:00 2025 by rpki-client