$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/efa157e5-2959-3bc6-81cd-23eb0e716c65.roa File: efa157e5-2959-3bc6-81cd-23eb0e716c65.roa (raw, json) Hash identifier: dyb0jKDh+4pkXiwjbXmlbMtWoDWsaphSg0V0DikcdbE= Subject key identifier: 13:19:5B:97:D8:0B:EF:0C:CC:AD:A7:E3:AB:68:87:8D:9B:E2:6D:93 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B6905BEE37085AA3C1CFCFF80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/efa157e5-2959-3bc6-81cd-23eb0e716c65.roa Signing time: Sat 04 Oct 2025 13:19:09 +0000 ROA not before: Sat 04 Oct 2025 13:19:09 +0000 ROA not after: Fri 02 Jan 2026 14:19:09 +0000 asID: 4766 IP address blocks: 72.244.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:69:05:be:e3:70:85:aa:3c:1c:fc:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 4 13:19:09 2025 GMT Not After : Jan 2 14:19:09 2026 GMT Subject: CN=04005a45-28d3-4329-88c7-98cc968fdd85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:73:a6:53:06:8e:16:c6:a8:e4:6d:a3:b2:46: 5c:b0:e0:be:78:b7:71:e8:fd:69:7d:79:f4:08:be: 3f:47:51:d9:67:1d:c2:8a:87:31:52:ef:4c:0a:de: c1:7b:e7:4d:c1:8c:46:96:d7:d2:24:d1:03:d2:f7: b4:52:e5:e6:62:b2:bf:4b:d8:d0:b4:d3:6c:a3:a0: b0:01:ee:99:2b:0b:62:bb:7e:05:7c:59:08:50:72: 00:98:a5:55:d2:ae:0e:0c:1c:af:e4:89:91:a6:1d: de:b0:59:f8:5a:bb:53:29:70:9c:f1:2b:19:58:0a: 72:92:44:ce:2e:75:11:3b:ff:82:aa:aa:31:ca:6d: 59:c0:0a:8c:d5:f1:5b:46:c9:08:1c:fd:59:cd:a0: dd:43:6f:32:96:70:e0:e2:2a:81:69:94:33:e1:62: 21:26:b1:ff:bf:8c:25:1d:00:45:5f:f6:50:0b:a5: e7:40:09:14:15:ff:65:fe:e5:e9:a4:11:7f:b2:f1: 74:64:1f:56:8b:77:a5:2f:7b:b3:18:2a:bf:c4:f5: 11:bc:d1:28:44:46:ec:21:c7:e7:91:41:2c:a7:6e: 53:88:7f:f6:91:e2:53:f1:5b:cf:19:39:6b:ee:0d: 31:3b:7a:f1:60:73:d3:67:a2:dd:ad:d7:1b:b2:71: 93:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:19:5B:97:D8:0B:EF:0C:CC:AD:A7:E3:AB:68:87:8D:9B:E2:6D:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/efa157e5-2959-3bc6-81cd-23eb0e716c65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ef:62:56:ea:90:8f:dc:7f:60:89:7f:2b:77:16:50:f0:7b: 95:ea:c3:a6:5a:c9:bc:5d:16:42:2b:5f:76:e2:0a:43:72:01: 24:c2:82:5f:77:5b:56:b6:30:d3:c2:c0:6d:78:ba:e8:6f:26: 6d:b5:6b:ac:69:0f:f9:84:a7:6b:72:a6:39:e1:b2:04:90:e1: d6:b8:de:40:49:e5:ff:e6:9a:50:38:d0:0c:f4:46:ce:23:e4: ab:47:d9:11:9e:e4:e5:74:1a:41:c1:cc:93:b4:fc:68:78:13: 49:5d:b6:20:07:af:46:e5:4e:a8:15:22:8d:17:84:5e:fc:b9: 86:a8:92:9e:fe:93:d5:76:08:d6:6e:ed:8e:32:15:6a:ed:84: be:2e:d2:42:60:9e:1d:39:3c:b0:c6:42:53:68:58:8b:e8:08: 4e:fa:b6:05:b2:d1:01:26:2c:5d:4c:ee:3a:ee:7d:62:84:ca: 8b:04:1f:0b:d7:f6:5a:37:f6:4c:10:66:ad:52:59:3b:82:b6: c4:e1:f8:90:79:95:6b:9a:4a:ab:11:39:55:7a:a8:6a:e1:1b: da:39:65:b9:5d:6e:52:34:31:d6:45:3f:b4:e6:ed:e5:86:c9: f2:2c:89:46:68:51:32:8f:11:4a:67:52:07:0c:af:1f:7a:ca: ed:fa:d5:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtpBb7jcIWqPBz8/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAwNDEzMTkwOVoXDTI2MDEwMjE0MTkwOVowLzEtMCsGA1UEAxMk MDQwMDVhNDUtMjhkMy00MzI5LTg4YzctOThjYzk2OGZkZDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnOmUwaOFsao5G2jskZcsOC+eLdx6P1pfXn0 CL4/R1HZZx3CiocxUu9MCt7Be+dNwYxGltfSJNED0ve0UuXmYrK/S9jQtNNso6Cw Ae6ZKwtiu34FfFkIUHIAmKVV0q4ODByv5ImRph3esFn4WrtTKXCc8SsZWApykkTO LnURO/+Cqqoxym1ZwAqM1fFbRskIHP1ZzaDdQ28ylnDg4iqBaZQz4WIhJrH/v4wl HQBFX/ZQC6XnQAkUFf9l/uXppBF/svF0ZB9Wi3elL3uzGCq/xPURvNEoREbsIcfn kUEsp25TiH/2keJT8VvPGTlr7g0xO3rxYHPTZ6LdrdcbsnGTbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMZW5fYC+8MzK2n46toh42b4m2TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZWZhMTU3ZTUtMjk1OS0z YmM2LTgxY2QtMjNlYjBlNzE2YzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSPR8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7vYlbqkI/cf2CJfyt3FlDwe5Xqw6ZaybxdFkIrX3biCkNyASTCgl93 W1a2MNPCwG14uuhvJm21a6xpD/mEp2typjnhsgSQ4da43kBJ5f/mmlA40Az0Rs4j 5KtH2RGe5OV0GkHBzJO0/Gh4E0ldtiAHr0blTqgVIo0XhF78uYaokp7+k9V2CNZu 7Y4yFWrthL4u0kJgnh05PLDGQlNoWIvoCE76tgWy0QEmLF1M7jrufWKEyosEHwvX 9lo39kwQZq1SWTuCtsTh+JB5lWuaSqsROVV6qGrhG9o5ZbldblI0MdZFP7Tm7eWG yfIsiUZoUTKPEUpnUgcMrx96yu361XY= -----END CERTIFICATE-----Generated at Sat Oct 11 08:52:24 2025 by rpki-client