$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d101618c-fb5b-33ab-90d6-cf42989b4ab7.roa File: d101618c-fb5b-33ab-90d6-cf42989b4ab7.roa (raw, json) Hash identifier: ya5TU+dqzJfqjSPjoGz9awBcfhFbGfmS/JA1QsFv3rw= Subject key identifier: E4:8E:03:80:1D:ED:34:2D:65:68:C5:B0:15:6E:8C:4D:A0:76:36:56 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B28910C633D2BEA4F42A37300 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d101618c-fb5b-33ab-90d6-cf42989b4ab7.roa Signing time: Thu 11 Sep 2025 11:12:17 +0000 ROA not before: Thu 11 Sep 2025 11:12:17 +0000 ROA not after: Wed 10 Dec 2025 12:12:17 +0000 asID: 40676 IP address blocks: 72.244.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:91:0c:63:3d:2b:ea:4f:42:a3:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 11 11:12:17 2025 GMT Not After : Dec 10 12:12:17 2025 GMT Subject: CN=4db1ce6f-db80-4bf8-a7d5-39ab74fb6349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:37:9c:d1:c4:41:a6:ff:a4:b1:f1:a6:46:cb: 08:6a:65:04:dc:33:8a:7a:54:cd:be:4f:7f:4a:9e: e6:40:3c:f0:04:8e:71:65:df:82:ef:28:5b:2c:97: 8c:a1:d2:bc:de:b8:f9:ef:e0:90:52:d1:9a:1f:4f: 69:62:16:3b:00:93:3f:90:80:73:35:d4:85:38:ff: 29:d7:c5:30:c6:ac:35:26:d4:52:59:76:e4:80:70: f7:67:63:ef:f4:b1:29:dc:ae:d1:9f:f2:48:59:ec: 41:72:11:8d:71:3a:bf:76:67:d5:e0:1b:03:ed:8d: 47:02:fb:46:ae:f0:af:a1:a2:f5:fc:1f:88:ab:84: fa:ed:d5:b0:3a:e5:67:a6:dc:f3:0a:46:ee:6a:1d: a9:e0:45:f9:cf:35:cf:7c:43:a7:e3:ad:da:09:5a: e6:0a:9a:5f:40:17:00:5e:51:14:62:13:46:53:2e: b0:fd:d3:e7:43:1c:58:f5:3d:d4:27:65:ea:a5:d3: 11:93:5b:fa:3c:07:a2:28:43:0e:d5:03:b2:f4:57: ba:ba:9e:74:63:52:46:c9:f2:dc:9a:09:22:66:f3: 7d:bd:ae:c1:db:25:0a:4e:a9:aa:48:ab:1f:6c:62: 31:17:10:5e:2f:a5:93:5e:46:2f:4f:de:a9:78:34: be:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8E:03:80:1D:ED:34:2D:65:68:C5:B0:15:6E:8C:4D:A0:76:36:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d101618c-fb5b-33ab-90d6-cf42989b4ab7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:58:58:f8:d3:07:01:27:93:5d:24:c1:fe:00:d7:db:64:2c: 43:38:9f:c0:44:82:7a:ba:c5:38:45:b7:da:fc:e9:2e:36:2d: 74:b9:ee:49:3d:dc:7c:6e:84:f8:3b:2e:25:a0:32:6f:50:22: be:c8:98:86:be:67:bb:6d:79:d5:32:6d:4b:30:37:e7:b2:88: 91:e4:25:fc:24:3b:5e:04:72:f2:f1:13:0e:51:c8:d7:da:b1: 53:7e:3f:1f:fd:a8:ea:87:ea:9d:41:f7:79:f9:0f:fd:b6:d8: d9:12:3a:13:78:b5:56:0d:26:bb:19:39:0d:e6:b3:69:2c:ae: 7d:15:68:18:59:ac:d0:f9:b3:f6:14:45:fb:68:87:d0:54:74: 72:3e:c1:e2:25:8f:e9:6d:a3:7f:32:26:53:79:f1:48:72:8f: 18:08:6c:d2:19:29:51:07:0f:d4:aa:15:f6:b5:17:5c:17:25: 9c:f4:fb:22:8e:a4:4c:56:89:83:a7:16:00:a3:20:32:13:e2: 9f:73:41:49:b4:cc:75:02:47:37:32:06:9c:fe:ee:cb:ae:48: f4:00:f0:fd:bf:60:c2:f6:28:1b:0e:fa:a9:e3:4c:b3:ce:df: 9d:9d:18:19:89:7d:dd:7f:66:cf:9a:25:03:60:bb:b1:23:48: f1:e4:15:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsokQxjPSvqT0KjcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxMTExMTIxN1oXDTI1MTIxMDEyMTIxN1owLzEtMCsGA1UEAxMk NGRiMWNlNmYtZGI4MC00YmY4LWE3ZDUtMzlhYjc0ZmI2MzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDec0cRBpv+ksfGmRssIamUE3DOKelTNvk9/ Sp7mQDzwBI5xZd+C7yhbLJeModK83rj57+CQUtGaH09pYhY7AJM/kIBzNdSFOP8p 18Uwxqw1JtRSWXbkgHD3Z2Pv9LEp3K7Rn/JIWexBchGNcTq/dmfV4BsD7Y1HAvtG rvCvoaL1/B+Iq4T67dWwOuVnptzzCkbuah2p4EX5zzXPfEOn463aCVrmCppfQBcA XlEUYhNGUy6w/dPnQxxY9T3UJ2XqpdMRk1v6PAeiKEMO1QOy9Fe6up50Y1JGyfLc mgkiZvN9va7B2yUKTqmqSKsfbGIxFxBeL6WTXkYvT96peDS+0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSOA4Ad7TQtZWjFsBVujE2gdjZWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDEwMTYxOGMtZmI1Yi0z M2FiLTkwZDYtY2Y0Mjk4OWI0YWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPS4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMJYWPjTBwEnk10kwf4A19tkLEM4n8BEgnq6xThFt9r86S42LXS57kk9 3HxuhPg7LiWgMm9QIr7ImIa+Z7ttedUybUswN+eyiJHkJfwkO14EcvLxEw5RyNfa sVN+Px/9qOqH6p1B93n5D/222NkSOhN4tVYNJrsZOQ3ms2ksrn0VaBhZrND5s/YU Rftoh9BUdHI+weIlj+lto38yJlN58UhyjxgIbNIZKVEHD9SqFfa1F1wXJZz0+yKO pExWiYOnFgCjIDIT4p9zQUm0zHUCRzcyBpz+7suuSPQA8P2/YML2KBsO+qnjTLPO 352dGBmJfd1/Zs+aJQNgu7EjSPHkFWQ= -----END CERTIFICATE-----Generated at Wed Sep 17 17:40:22 2025 by rpki-client