$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ee8ce001-cca1-3452-b2e3-ddf02767d0b3.roa File: ee8ce001-cca1-3452-b2e3-ddf02767d0b3.roa (raw, json) Hash identifier: e5ZV5siI+uYbx0liZiwz2hVFZnPUEYkuuuS2FoLNNKc= Subject key identifier: CB:89:65:15:8B:1E:1D:BA:60:7F:36:0A:CC:0F:1A:E9:9E:09:03:D0 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B4A234FF9CFE60927D654C180 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ee8ce001-cca1-3452-b2e3-ddf02767d0b3.roa Signing time: Tue 23 Sep 2025 11:48:40 +0000 ROA not before: Tue 23 Sep 2025 11:48:40 +0000 ROA not after: Mon 22 Dec 2025 12:48:40 +0000 asID: 9304 IP address blocks: 72.244.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:23:4f:f9:cf:e6:09:27:d6:54:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 23 11:48:40 2025 GMT Not After : Dec 22 12:48:40 2025 GMT Subject: CN=2bbf9f03-cbd0-45b7-bc9b-8e596f2ff109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6e:0e:16:31:5e:98:95:7f:6a:c2:4d:2b:97: 81:7b:6c:45:5a:73:88:14:04:37:72:96:39:8d:c3: 59:8f:2c:08:14:07:dd:89:3a:16:d6:69:b1:c6:64: a8:4c:a6:e4:d7:27:55:50:5b:62:63:92:81:67:50: 49:9b:0b:1f:43:0d:ac:ce:af:90:ea:b6:57:dc:e7: ec:12:d3:a6:d5:ee:13:80:19:81:40:c7:a0:35:df: 01:a4:34:cc:59:a9:c2:01:57:08:de:09:04:39:a5: 4f:19:8a:70:01:21:e3:d6:27:d2:d0:fa:ec:25:df: 67:13:c7:61:f5:a3:21:0b:ed:db:ba:4b:c0:fd:6a: 70:5c:33:00:2a:f8:6a:9b:c9:60:6f:4b:1e:cf:03: 3b:bc:c9:21:78:bf:6f:03:13:08:a1:4d:11:91:51: 2c:dd:92:27:fa:79:21:6d:81:51:e5:5e:cb:00:2f: 5a:19:83:07:be:c4:d1:20:b2:06:9a:88:8b:8e:a6: ab:2a:80:91:8a:b4:28:ff:24:ea:94:4d:2b:e0:dd: 26:24:a6:dc:4d:71:46:9c:bc:16:e7:4c:d3:b0:07: a4:11:66:46:33:19:77:30:e7:18:2c:f3:4a:2a:af: ad:ea:ca:6d:d3:01:8e:b3:3d:06:56:6d:8f:db:95: 3a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:89:65:15:8B:1E:1D:BA:60:7F:36:0A:CC:0F:1A:E9:9E:09:03:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ee8ce001-cca1-3452-b2e3-ddf02767d0b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:e1:7a:04:82:fd:49:8d:64:65:5d:7b:bd:ad:91:a9:96:85: 1f:5e:22:bd:af:fd:3c:eb:71:96:2f:e8:d5:19:d9:81:61:7a: 3a:37:5c:b3:0f:e8:cc:b1:db:05:91:c2:52:32:e6:14:25:30: 2b:b9:18:a8:b8:df:41:e4:a0:78:67:d4:c3:34:8a:80:a9:d7: 7a:84:d1:21:9d:86:86:b4:88:2f:df:65:54:ff:a3:d1:a5:54: 08:cc:0d:a0:8f:c2:9d:93:bd:e9:7f:e3:68:f5:3d:ef:96:10: 2c:32:e9:54:ff:ea:fd:9b:c9:56:7e:9b:f8:24:5b:dc:f5:6f: 2e:81:2d:b7:bf:ed:f8:97:be:f0:56:71:9e:fb:cb:22:5c:58: 92:30:c3:23:b8:9b:10:08:11:b2:28:66:6b:6b:d4:f9:cb:1e: 36:2f:76:4b:6e:b2:28:03:b1:6d:e1:97:79:77:00:5c:94:eb: d7:f7:3a:20:d1:87:b6:31:03:d4:11:c0:95:d9:ca:a3:d6:41: af:22:3a:18:f8:42:91:dd:eb:5b:36:55:4e:d9:a2:54:f4:3d: 39:4e:f0:07:31:b9:d9:2e:4b:b7:d8:4f:03:75:1a:ca:3c:1d: 4f:58:9d:eb:07:28:d7:75:7b:90:b7:ec:6c:b0:dd:62:ce:a0: e2:55:c0:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKI0/5z+YJJ9ZUwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyMzExNDg0MFoXDTI1MTIyMjEyNDg0MFowLzEtMCsGA1UEAxMk MmJiZjlmMDMtY2JkMC00NWI3LWJjOWItOGU1OTZmMmZmMTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkm4OFjFemJV/asJNK5eBe2xFWnOIFAQ3cpY5 jcNZjywIFAfdiToW1mmxxmSoTKbk1ydVUFtiY5KBZ1BJmwsfQw2szq+Q6rZX3Ofs EtOm1e4TgBmBQMegNd8BpDTMWanCAVcI3gkEOaVPGYpwASHj1ifS0PrsJd9nE8dh 9aMhC+3bukvA/WpwXDMAKvhqm8lgb0sezwM7vMkheL9vAxMIoU0RkVEs3ZIn+nkh bYFR5V7LAC9aGYMHvsTRILIGmoiLjqarKoCRirQo/yTqlE0r4N0mJKbcTXFGnLwW 50zTsAekEWZGMxl3MOcYLPNKKq+t6spt0wGOsz0GVm2P25U6QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuJZRWLHh26YH82CswPGumeCQPQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZWU4Y2UwMDEtY2NhMS0z NDUyLWIyZTMtZGRmMDI3NjdkMGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPTXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrhegSC/UmNZGVde72tkamWhR9eIr2v/TzrcZYv6NUZ2YFhejo3XLMP 6Myx2wWRwlIy5hQlMCu5GKi430HkoHhn1MM0ioCp13qE0SGdhoa0iC/fZVT/o9Gl VAjMDaCPwp2Tvel/42j1Pe+WECwy6VT/6v2byVZ+m/gkW9z1by6BLbe/7fiXvvBW cZ77yyJcWJIwwyO4mxAIEbIoZmtr1PnLHjYvdktusigDsW3hl3l3AFyU69f3OiDR h7YxA9QRwJXZyqPWQa8iOhj4QpHd61s2VU7ZolT0PTlO8AcxudkuS7fYTwN1Gso8 HU9YnesHKNd1e5C37Gyw3WLOoOJVwK8= -----END CERTIFICATE-----Generated at Sat Oct 11 09:01:14 2025 by rpki-client