$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/caf5a584-dfc7-393b-9216-331c3ed9c417.roa File: caf5a584-dfc7-393b-9216-331c3ed9c417.roa (raw, json) Hash identifier: LWej2A2qsKrYEXyBwv2p3UFYYXg4O+al/om9JrBLtcM= Subject key identifier: F1:A8:41:7E:1C:80:5A:ED:5C:E4:73:F9:E7:E8:15:97:BA:4D:62:83 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B235BF00B9B8F1557AD3FF980 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/caf5a584-dfc7-393b-9216-331c3ed9c417.roa Signing time: Tue 09 Sep 2025 14:26:14 +0000 ROA not before: Tue 09 Sep 2025 14:26:14 +0000 ROA not after: Mon 08 Dec 2025 15:26:14 +0000 asID: 9304 IP address blocks: 72.244.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:5b:f0:0b:9b:8f:15:57:ad:3f:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 9 14:26:14 2025 GMT Not After : Dec 8 15:26:14 2025 GMT Subject: CN=edbbe5d6-524a-4610-921f-772cefc539b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:62:0c:ea:04:20:c3:30:52:d8:d9:5f:be:56: 78:75:00:d6:00:dc:0a:23:ac:20:27:cf:51:4d:89: c4:c0:b0:c6:09:c3:fe:57:7f:72:c6:71:1a:df:67: 45:39:f0:63:37:c9:26:34:c1:8e:6a:5f:9d:f5:1a: 11:6a:f4:9e:d4:dc:3c:15:68:6b:9d:7c:d1:27:a3: a0:27:81:9d:d4:59:6d:4b:e4:96:a9:4a:f2:8b:ec: 43:1b:fb:d5:91:1e:09:2f:1d:55:32:54:86:50:df: 8e:4a:2e:20:f3:76:03:fe:6c:28:50:fc:e9:e6:3e: 3a:80:10:da:0f:79:c5:04:01:ac:7d:76:3c:75:53: 04:cd:8f:45:91:e8:98:bb:65:b1:b7:76:9a:2c:f3: 37:5c:41:07:90:6e:27:a5:16:62:e7:92:f0:5b:64: 59:76:ab:79:99:35:88:0a:a3:74:5f:54:ce:85:1e: dd:64:3b:79:ed:e0:6a:86:bb:d2:a3:bb:32:e7:26: 10:7d:3a:71:38:19:fa:28:1c:04:40:65:6e:9c:ef: 34:6a:80:30:66:25:ac:ee:52:32:b6:47:53:41:cb: cb:4a:f4:0c:85:31:e1:af:df:40:63:54:d1:4a:28: 37:6b:33:f1:48:6d:8a:d7:aa:9d:08:48:55:6d:2f: 13:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A8:41:7E:1C:80:5A:ED:5C:E4:73:F9:E7:E8:15:97:BA:4D:62:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/caf5a584-dfc7-393b-9216-331c3ed9c417.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:ae:d6:e2:20:05:28:3e:f7:46:42:ea:bb:43:54:12:b2:f2: 28:34:ce:70:fd:67:19:87:70:76:79:71:9c:fb:30:d9:84:cf: 84:18:68:90:2b:a3:5a:6c:30:fd:a8:05:1d:4a:11:3c:e4:57: 44:ac:6c:21:94:cc:6c:8a:3e:cf:b8:1e:1b:06:6a:43:27:21: e4:20:2d:05:2d:1a:0e:5a:c1:fc:5c:b0:78:e4:44:7f:17:9a: fe:b1:24:eb:07:72:a2:ed:45:1e:0e:b6:a8:f7:99:74:13:39: ee:81:4f:ed:ea:48:4d:43:4f:07:5e:df:97:52:9c:6e:a2:3f: f9:9b:03:e3:d6:03:02:1e:f1:7e:0f:07:5e:7e:bd:8c:8e:48: 51:c1:e1:0a:df:b0:34:9c:89:cf:8c:35:a5:93:ce:83:5f:ab: 44:47:87:2a:76:58:37:5f:b7:6b:8e:b1:f6:b1:97:e0:70:2d: 7b:f9:40:c7:d4:eb:48:d0:6c:9b:24:aa:b7:be:e8:10:94:6b: 86:23:06:d9:60:bb:6d:02:64:34:58:58:7e:08:d2:0c:8f:37: 01:ac:67:c1:7f:fe:96:6d:ac:de:d6:f3:6f:9c:4c:2f:fa:3e: 6c:62:76:9a:9e:b8:6a:24:a7:24:87:8b:ec:10:14:b4:b0:c5: f0:36:6f:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjW/ALm48VV60/+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwOTE0MjYxNFoXDTI1MTIwODE1MjYxNFowLzEtMCsGA1UEAxMk ZWRiYmU1ZDYtNTI0YS00NjEwLTkyMWYtNzcyY2VmYzUzOWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mIM6gQgwzBS2NlfvlZ4dQDWANwKI6wgJ89R TYnEwLDGCcP+V39yxnEa32dFOfBjN8kmNMGOal+d9RoRavSe1Nw8FWhrnXzRJ6Og J4Gd1FltS+SWqUryi+xDG/vVkR4JLx1VMlSGUN+OSi4g83YD/mwoUPzp5j46gBDa D3nFBAGsfXY8dVMEzY9FkeiYu2Wxt3aaLPM3XEEHkG4npRZi55LwW2RZdqt5mTWI CqN0X1TOhR7dZDt57eBqhrvSo7sy5yYQfTpxOBn6KBwEQGVunO80aoAwZiWs7lIy tkdTQcvLSvQMhTHhr99AY1TRSig3azPxSG2K16qdCEhVbS8TmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGoQX4cgFrtXORz+efoFZe6TWKDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2FmNWE1ODQtZGZjNy0z OTNiLTkyMTYtMzMxYzNlZDljNDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPTuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKu1uIgBSg+90ZC6rtDVBKy8ig0znD9ZxmHcHZ5cZz7MNmEz4QYaJAr o1psMP2oBR1KETzkV0SsbCGUzGyKPs+4HhsGakMnIeQgLQUtGg5awfxcsHjkRH8X mv6xJOsHcqLtRR4Otqj3mXQTOe6BT+3qSE1DTwde35dSnG6iP/mbA+PWAwIe8X4P B15+vYyOSFHB4QrfsDScic+MNaWTzoNfq0RHhyp2WDdft2uOsfaxl+BwLXv5QMfU 60jQbJskqre+6BCUa4YjBtlgu20CZDRYWH4I0gyPNwGsZ8F//pZtrN7W82+cTC/6 PmxidpqeuGokpySHi+wQFLSwxfA2b8Y= -----END CERTIFICATE-----Generated at Sat Oct 11 09:01:09 2025 by rpki-client