$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e1cb986f-76ac-3b8f-aefe-e5a1556febe6.roa File: e1cb986f-76ac-3b8f-aefe-e5a1556febe6.roa (raw, json) Hash identifier: Rsk78iaS2eQk96oNAn7vKkBz7jWpnbdphhfrrrUK/IQ= Subject key identifier: C0:17:59:36:71:A8:36:4D:F6:4E:F3:0D:65:F3:CC:BE:C3:B3:8D:30 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B3923F89666CA0338ACEA3194 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e1cb986f-76ac-3b8f-aefe-e5a1556febe6.roa Signing time: Wed 17 Sep 2025 09:41:15 +0000 ROA not before: Wed 17 Sep 2025 09:41:15 +0000 ROA not after: Tue 16 Dec 2025 10:41:15 +0000 asID: 25198 IP address blocks: 72.244.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:23:f8:96:66:ca:03:38:ac:ea:31:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 17 09:41:15 2025 GMT Not After : Dec 16 10:41:15 2025 GMT Subject: CN=c866f6ce-229a-44ec-92b0-8ab15f4e1b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:78:06:1f:a4:e6:0f:2b:3e:c2:a0:9e:a7:f4: 61:98:6a:ac:fe:2b:e4:9b:7c:e6:17:00:b4:12:5f: b5:84:26:b1:e8:92:3c:f0:1d:8d:8e:ff:a4:f6:d4: e0:97:b2:e2:10:cb:63:d8:42:c9:90:00:46:d6:4a: ae:60:6b:25:a5:1c:51:ba:18:2b:43:bd:4d:05:01: af:5b:13:18:fc:48:48:0e:b4:12:80:e6:2a:bb:45: 37:89:ce:90:a7:2f:44:b2:c8:df:c5:50:03:4d:02: 9a:7c:ec:75:28:3b:4e:72:65:5e:11:17:7b:7d:8d: 62:b7:2c:89:62:be:9a:43:ae:85:c7:27:f9:3f:7f: b4:57:8c:b2:12:42:0f:b6:14:c5:55:d0:88:e2:09: 68:6f:f3:fa:05:fb:1b:5e:17:df:5b:05:38:01:ac: ab:b5:21:c4:59:bb:01:63:fb:8f:43:7a:f3:62:d6: 69:1a:0e:c4:07:3a:70:87:76:fa:dd:1d:75:0a:0c: 63:15:d6:12:c5:f4:0a:43:6d:a4:d2:45:35:6b:46: 99:ba:9e:ff:9d:21:74:14:82:83:1a:2a:98:c2:c7: 80:c3:95:21:2e:e4:17:92:65:70:cc:90:61:78:c0: 1a:99:85:8a:e2:58:fc:5a:14:21:40:8e:35:d3:ec: 21:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:17:59:36:71:A8:36:4D:F6:4E:F3:0D:65:F3:CC:BE:C3:B3:8D:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e1cb986f-76ac-3b8f-aefe-e5a1556febe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:36:b2:0f:c9:d5:a0:a6:5d:d3:e2:99:92:79:cd:80:ca:04: cf:63:1e:22:a9:70:46:0e:52:90:f5:bf:7f:b7:19:66:18:c0: fd:e5:34:c3:c3:71:66:b2:c0:8d:30:a0:69:be:bb:fb:f4:65: 2a:60:e1:40:31:b8:59:4e:7e:31:33:82:a5:8b:84:06:e5:91: 75:00:97:52:85:ce:6e:0f:93:f4:f5:44:0e:e8:8a:b0:eb:64: fe:3d:5d:f6:d0:72:0c:17:e8:ca:46:8e:e7:f9:5a:3b:88:ba: cf:3c:e7:d4:5a:8c:a2:ec:8c:ba:c4:ae:09:e2:1a:54:08:2a: ea:62:d0:37:92:5a:c2:c6:1d:4d:73:a4:97:3f:ff:ea:fb:0d: 4d:99:09:0e:12:1d:b7:59:2d:39:c8:2e:97:41:48:c5:2f:c0: fb:2b:b8:25:44:38:52:4f:49:dc:f9:9c:f9:88:53:1f:f6:e3: 9c:89:77:84:e3:52:54:bb:80:52:e5:92:c7:d7:2f:37:fc:9f: 9d:92:9d:c4:56:23:85:d7:e8:20:2f:18:67:a4:53:8f:39:43: 53:cc:e5:5d:8c:34:99:3e:79:52:c4:97:65:e3:e8:4d:12:3f: a6:aa:d7:2b:21:46:f8:0f:8f:95:17:e2:05:65:cd:04:57:01: c3:ab:0f:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5I/iWZsoDOKzqMZQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxNzA5NDExNVoXDTI1MTIxNjEwNDExNVowLzEtMCsGA1UEAxMk Yzg2NmY2Y2UtMjI5YS00NGVjLTkyYjAtOGFiMTVmNGUxYjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHgGH6TmDys+wqCep/RhmGqs/ivkm3zmFwC0 El+1hCax6JI88B2Njv+k9tTgl7LiEMtj2ELJkABG1kquYGslpRxRuhgrQ71NBQGv WxMY/EhIDrQSgOYqu0U3ic6Qpy9EssjfxVADTQKafOx1KDtOcmVeERd7fY1ityyJ Yr6aQ66Fxyf5P3+0V4yyEkIPthTFVdCI4glob/P6BfsbXhffWwU4AayrtSHEWbsB Y/uPQ3rzYtZpGg7EBzpwh3b63R11CgxjFdYSxfQKQ22k0kU1a0aZup7/nSF0FIKD GiqYwseAw5UhLuQXkmVwzJBheMAamYWK4lj8WhQhQI410+wh7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAXWTZxqDZN9k7zDWXzzL7Ds40wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZTFjYjk4NmYtNzZhYy0z YjhmLWFlZmUtZTVhMTU1NmZlYmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPSJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMM2sg/J1aCmXdPimZJ5zYDKBM9jHiKpcEYOUpD1v3+3GWYYwP3lNMPD cWaywI0woGm+u/v0ZSpg4UAxuFlOfjEzgqWLhAblkXUAl1KFzm4Pk/T1RA7oirDr ZP49XfbQcgwX6MpGjuf5WjuIus8859RajKLsjLrErgniGlQIKupi0DeSWsLGHU1z pJc//+r7DU2ZCQ4SHbdZLTnILpdBSMUvwPsruCVEOFJPSdz5nPmIUx/245yJd4Tj UlS7gFLlksfXLzf8n52SncRWI4XX6CAvGGekU485Q1PM5V2MNJk+eVLEl2Xj6E0S P6aq1yshRvgPj5UX4gVlzQRXAcOrD6c= -----END CERTIFICATE-----Generated at Sat Oct 11 08:52:29 2025 by rpki-client