$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ec6d2598-cd82-3814-a20c-9f4f41000587.roa File: ec6d2598-cd82-3814-a20c-9f4f41000587.roa (raw, json) Hash identifier: uc8uC+2kjAf4h4E+e7IQDJExk4Ms2+PVGJdc/gaGYks= Subject key identifier: 30:43:A5:29:5A:30:4E:4B:1D:CA:2F:C5:EA:F3:32:CD:F6:94:31:F5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B5DB981A2192772A32EF88E80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ec6d2598-cd82-3814-a20c-9f4f41000587.roa Signing time: Tue 30 Sep 2025 12:11:39 +0000 ROA not before: Tue 30 Sep 2025 12:11:39 +0000 ROA not after: Mon 29 Dec 2025 13:11:39 +0000 asID: 4826 IP address blocks: 72.244.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:b9:81:a2:19:27:72:a3:2e:f8:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 30 12:11:39 2025 GMT Not After : Dec 29 13:11:39 2025 GMT Subject: CN=9659b7f4-32bc-4c98-9d8e-beb86ad59dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:23:5f:af:3e:40:0d:6a:96:25:04:8b:9c:ad: f4:e8:29:f7:9e:e0:df:4d:c3:41:da:9b:07:26:c0: 04:2e:e6:b2:55:eb:a5:cc:02:c8:e6:aa:d4:d2:bc: e8:05:7b:32:23:c0:3d:c4:b7:30:ec:b5:71:8e:1e: 9a:f7:76:00:7f:39:6e:e1:eb:97:a7:de:78:dd:ee: 33:75:31:76:86:15:56:a5:9c:bc:d5:37:71:06:b3: 69:b0:ec:ec:d9:cd:b3:2d:26:2a:73:e6:f8:4e:8c: 27:d0:9d:19:e6:56:b2:95:75:60:4a:ad:af:f7:29: 20:74:cd:d6:c2:fc:8e:08:eb:0d:fd:81:4b:2a:00: e3:3e:09:0a:a4:65:35:d8:33:0c:25:59:ff:39:07: d9:d8:ca:ea:d7:55:c3:9f:74:e6:de:6a:8d:0c:46: b6:77:58:4e:f5:e1:87:fa:b3:b7:d3:bf:9a:38:72: c5:cd:65:af:53:9e:83:5a:f4:70:d1:2a:c3:ad:e4: a7:8d:69:25:d5:a3:b2:ad:fe:70:e0:e8:4f:fd:39: ee:fa:67:d3:94:6c:98:2a:46:c0:1e:d6:6f:7c:4a: 63:84:50:4b:5e:9a:ca:32:14:55:b7:05:ba:65:8f: 7c:2f:31:10:f9:4d:5f:c1:e5:15:58:25:4b:5b:c0: 46:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:43:A5:29:5A:30:4E:4B:1D:CA:2F:C5:EA:F3:32:CD:F6:94:31:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ec6d2598-cd82-3814-a20c-9f4f41000587.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:ee:e6:72:ae:f8:c8:88:a8:55:b5:e1:e2:a3:0f:44:9b:dc: 40:51:63:1c:71:a7:f7:56:9d:8a:72:49:7f:d4:1d:d3:fb:f3: da:a6:ad:b3:c9:06:9b:c0:66:6b:6e:a9:73:25:41:b8:e2:0f: 05:7a:ce:85:31:c1:db:22:9f:52:0a:64:7b:d8:ea:5a:cc:fd: 31:d6:5f:68:e3:e3:de:c3:0c:c2:c0:1a:1b:33:c1:31:47:41: 40:a0:43:32:f5:8b:dd:b0:e2:9f:1b:47:98:9f:92:82:ae:60: 13:25:5e:a7:69:70:99:b6:9e:35:36:9e:17:07:19:c1:87:59: 0c:06:fe:4f:7d:85:30:df:b7:86:08:90:1f:31:d2:e2:5c:d9: 54:2b:cb:6f:a6:fd:ae:4f:c9:5d:63:4a:93:7d:28:cb:55:d8: 3e:c6:21:d6:39:e5:4a:ae:31:40:5d:e0:fb:01:9c:00:19:0d: 29:0c:05:bf:83:69:6c:1e:9f:eb:ef:ee:cd:fc:3d:d1:b2:55: f5:e5:56:84:29:98:53:0a:65:1a:86:25:67:54:cf:fd:4e:c0: 7e:60:d1:87:20:0a:ca:d5:37:8d:63:8f:2e:51:6a:ac:82:3d: 8f:d7:fa:0b:ce:54:7e:d2:10:70:d8:8c:81:17:d1:da:18:4e: 1f:9e:e0:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtduYGiGSdyoy74joAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkzMDEyMTEzOVoXDTI1MTIyOTEzMTEzOVowLzEtMCsGA1UEAxMk OTY1OWI3ZjQtMzJiYy00Yzk4LTlkOGUtYmViODZhZDU5ZGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSNfrz5ADWqWJQSLnK306Cn3nuDfTcNB2psH JsAELuayVeulzALI5qrU0rzoBXsyI8A9xLcw7LVxjh6a93YAfzlu4euXp9543e4z dTF2hhVWpZy81TdxBrNpsOzs2c2zLSYqc+b4Town0J0Z5laylXVgSq2v9ykgdM3W wvyOCOsN/YFLKgDjPgkKpGU12DMMJVn/OQfZ2Mrq11XDn3Tm3mqNDEa2d1hO9eGH +rO307+aOHLFzWWvU56DWvRw0SrDreSnjWkl1aOyrf5w4OhP/Tnu+mfTlGyYKkbA HtZvfEpjhFBLXprKMhRVtwW6ZY98LzEQ+U1fweUVWCVLW8BGhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBDpSlaME5LHcovxerzMs32lDH1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZWM2ZDI1OTgtY2Q4Mi0z ODE0LWEyMGMtOWY0ZjQxMDAwNTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPSUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbu5nKu+MiIqFW14eKjD0Sb3EBRYxxxp/dWnYpySX/UHdP789qmrbPJ BpvAZmtuqXMlQbjiDwV6zoUxwdsin1IKZHvY6lrM/THWX2jj497DDMLAGhszwTFH QUCgQzL1i92w4p8bR5ifkoKuYBMlXqdpcJm2njU2nhcHGcGHWQwG/k99hTDft4YI kB8x0uJc2VQry2+m/a5PyV1jSpN9KMtV2D7GIdY55UquMUBd4PsBnAAZDSkMBb+D aWwen+vv7s38PdGyVfXlVoQpmFMKZRqGJWdUz/1OwH5g0YcgCsrVN41jjy5RaqyC PY/X+gvOVH7SEHDYjIEX0doYTh+e4Kc= -----END CERTIFICATE-----Generated at Sat Oct 11 09:01:09 2025 by rpki-client