$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cdd6b082-c916-38e8-8091-6a7f484c31f2.roa File: cdd6b082-c916-38e8-8091-6a7f484c31f2.roa (raw, json) Hash identifier: VnrScUbWPo35AIT+vNbsBWJS431knCXqP92tRGqlvCE= Subject key identifier: DF:45:F0:05:8D:42:85:5B:29:51:F9:E2:4D:ED:98:21:EB:D6:54:F9 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B235BC9F5EF1C427B886FC900 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cdd6b082-c916-38e8-8091-6a7f484c31f2.roa Signing time: Tue 09 Sep 2025 14:25:56 +0000 ROA not before: Tue 09 Sep 2025 14:25:56 +0000 ROA not after: Mon 08 Dec 2025 15:25:56 +0000 asID: 9304 IP address blocks: 72.244.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:5b:c9:f5:ef:1c:42:7b:88:6f:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 9 14:25:56 2025 GMT Not After : Dec 8 15:25:56 2025 GMT Subject: CN=cf6d7f94-21a4-4eb8-9e9a-97021430e8b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7e:47:74:a5:9c:99:e4:bf:3c:dd:89:ff:0d: 0d:0d:45:8f:44:e2:a0:37:76:21:67:fa:d3:44:27: 94:8e:48:08:d9:9b:d4:4d:e0:08:b1:4a:3d:6f:56: 27:5a:c9:57:ce:2f:ab:d3:b5:eb:ee:21:fc:59:59: bb:2e:d6:10:b5:e1:1f:94:31:27:89:16:40:e1:18: 3d:dd:15:f7:59:ea:f7:e0:e8:92:32:43:2d:34:42: 2d:44:bf:77:a3:8f:11:b4:38:7b:fe:9e:ca:9b:6e: 21:e5:f4:06:c4:ac:ba:4d:72:7b:89:79:e5:aa:24: 92:a1:62:7b:5d:af:2e:d8:48:41:4d:35:a3:77:ee: 87:fd:2a:b2:c1:42:4c:56:e8:91:0d:27:b4:79:24: 46:87:ad:69:27:81:94:4a:5f:83:6f:8c:52:07:aa: b9:2b:bd:e2:fd:7f:ef:9f:e2:d9:c2:63:34:55:94: 3b:da:13:6e:bb:80:08:7a:4e:ff:44:a9:13:ad:9e: e0:f5:fe:a4:7f:62:85:8d:01:e0:17:7c:e8:b8:93: 9c:f0:cc:a5:ea:b1:7a:03:32:4d:16:78:88:f1:48: 3e:c6:9e:02:7a:fe:11:b2:7d:47:b8:9f:2d:20:43: cb:ad:61:84:a8:14:96:d7:35:ed:1e:0e:c1:24:77: 35:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:45:F0:05:8D:42:85:5B:29:51:F9:E2:4D:ED:98:21:EB:D6:54:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cdd6b082-c916-38e8-8091-6a7f484c31f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:b0:3e:5d:04:ac:a7:64:1e:a0:5d:e5:28:a5:b1:f4:75:72: af:63:a1:13:29:12:0b:05:df:c1:ea:37:c3:e5:06:cb:72:c2: de:89:58:3c:8b:a5:9c:82:b7:b5:07:89:76:3c:be:cc:1a:16: c5:64:9f:45:39:10:d4:2f:ce:2c:21:83:b8:df:e3:61:82:41: 33:f1:d4:59:99:02:6c:7d:d6:3c:f6:a9:aa:8b:43:28:46:af: 66:88:fc:20:aa:43:8a:82:a0:cc:39:cc:4f:3c:30:31:da:39: 01:51:b4:b1:64:8f:c8:9e:9a:31:28:09:1d:88:79:55:00:d5: 65:dd:65:52:47:dd:61:1a:49:6a:dc:c1:f5:f1:33:80:6b:99: 51:81:45:69:5f:bd:e2:32:dd:0d:7b:17:f1:e6:08:d8:3e:68: 54:30:21:fa:ea:5c:38:b2:18:28:ef:4c:b1:79:04:b8:a0:89: b1:c9:7c:5b:dc:62:e9:73:02:18:5d:f7:de:4c:07:26:07:de: e4:34:a8:b9:9f:77:b6:ec:fa:03:54:cd:4f:78:cb:6e:ab:0c: 8c:f7:ca:cd:be:c4:c1:fa:bc:a7:b3:da:81:d9:96:b6:e3:77: a2:d5:92:7e:90:98:9b:79:7b:ce:25:ce:a0:c5:64:22:95:56: 72:6b:a7:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjW8n17xxCe4hvyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwOTE0MjU1NloXDTI1MTIwODE1MjU1NlowLzEtMCsGA1UEAxMk Y2Y2ZDdmOTQtMjFhNC00ZWI4LTllOWEtOTcwMjE0MzBlOGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH5HdKWcmeS/PN2J/w0NDUWPROKgN3YhZ/rT RCeUjkgI2ZvUTeAIsUo9b1YnWslXzi+r07Xr7iH8WVm7LtYQteEflDEniRZA4Rg9 3RX3Wer34OiSMkMtNEItRL93o48RtDh7/p7Km24h5fQGxKy6TXJ7iXnlqiSSoWJ7 Xa8u2EhBTTWjd+6H/SqywUJMVuiRDSe0eSRGh61pJ4GUSl+Db4xSB6q5K73i/X/v n+LZwmM0VZQ72hNuu4AIek7/RKkTrZ7g9f6kf2KFjQHgF3zouJOc8Myl6rF6AzJN FniI8Ug+xp4Cev4Rsn1HuJ8tIEPLrWGEqBSW1zXtHg7BJHc1yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9F8AWNQoVbKVH54k3tmCHr1lT5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2RkNmIwODItYzkxNi0z OGU4LTgwOTEtNmE3ZjQ4NGMzMWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPT5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIawPl0ErKdkHqBd5SilsfR1cq9joRMpEgsF38HqN8PlBstywt6JWDyL pZyCt7UHiXY8vswaFsVkn0U5ENQvziwhg7jf42GCQTPx1FmZAmx91jz2qaqLQyhG r2aI/CCqQ4qCoMw5zE88MDHaOQFRtLFkj8iemjEoCR2IeVUA1WXdZVJH3WEaSWrc wfXxM4BrmVGBRWlfveIy3Q17F/HmCNg+aFQwIfrqXDiyGCjvTLF5BLigibHJfFvc YulzAhhd995MByYH3uQ0qLmfd7bs+gNUzU94y26rDIz3ys2+xMH6vKez2oHZlrbj d6LVkn6QmJt5e84lzqDFZCKVVnJrp0c= -----END CERTIFICATE-----Generated at Sat Oct 11 08:59:53 2025 by rpki-client