$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f940ec52-15b8-3133-aa67-f906062b5e10.roa File: f940ec52-15b8-3133-aa67-f906062b5e10.roa (raw, json) Hash identifier: CAZFxVpi2uZ4kUM+2o8eO941r16Ab/lVLqhtpODeI1U= Subject key identifier: 88:92:24:1A:2B:6C:63:65:16:D0:17:AC:7F:DC:E9:89:93:0F:EC:3C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B235BB32E8E42D941CE424B00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f940ec52-15b8-3133-aa67-f906062b5e10.roa Signing time: Tue 09 Sep 2025 14:25:45 +0000 ROA not before: Tue 09 Sep 2025 14:25:45 +0000 ROA not after: Mon 08 Dec 2025 15:25:45 +0000 asID: 9304 IP address blocks: 72.244.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:5b:b3:2e:8e:42:d9:41:ce:42:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 9 14:25:45 2025 GMT Not After : Dec 8 15:25:45 2025 GMT Subject: CN=c3df9b68-aa7f-4102-8cd9-93cbb1e4270b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:cd:f4:28:87:d5:7e:e7:b8:81:74:38:0d:93: b7:e4:b4:ae:06:00:09:ae:2f:70:31:bd:0e:9e:63: a0:0b:52:52:23:45:9a:5d:23:0d:b1:fe:fa:b8:e0: 8e:c2:7a:0c:5e:9c:40:cd:10:84:8d:66:16:2a:63: d8:5a:5f:b2:c7:1b:db:c8:79:65:ab:61:05:2f:ca: d1:11:90:8c:32:e0:ff:15:4f:b4:95:ca:59:81:cf: 48:72:4b:7c:37:f2:54:b3:79:15:14:78:2d:ee:98: 0b:57:02:d9:dc:44:a7:96:63:f9:04:8d:46:26:12: 55:47:f8:13:b7:bf:77:d1:3f:8a:d4:c0:af:26:f7: 4a:ce:89:37:73:d8:86:97:d6:d7:27:78:f3:e2:b1: d7:63:c0:af:26:11:a6:bf:58:16:50:b3:42:ac:de: 64:ca:b8:6a:63:76:d4:73:5e:14:26:5c:9e:a3:9e: 99:9b:c1:e5:6e:4c:8b:0d:d1:4f:8e:28:bb:38:8c: d1:a3:ed:e8:2a:2c:0c:df:9d:55:22:7a:bd:e2:4f: e2:6b:11:a3:54:3b:a8:21:a3:72:64:84:36:e2:06: a4:a8:ac:ca:d7:b2:6b:e3:db:33:50:4b:7e:00:6a: 10:79:12:25:6d:05:c4:96:98:f4:51:26:9e:e1:0b: 4c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:92:24:1A:2B:6C:63:65:16:D0:17:AC:7F:DC:E9:89:93:0F:EC:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f940ec52-15b8-3133-aa67-f906062b5e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:fc:0d:4d:93:d2:d6:03:ec:83:cc:53:17:23:1b:96:d5:10: 09:75:98:f2:c8:d8:7d:70:58:6a:f1:ca:0c:bd:ac:93:ae:83: c2:28:86:88:42:94:40:83:98:83:3d:2c:02:a9:d0:02:c7:bd: c8:04:0b:fe:2a:2c:83:07:e7:c9:df:85:53:f9:1f:29:5c:ba: a1:39:5e:98:28:6f:ce:71:4c:93:17:41:e7:08:a0:17:ee:31: e8:9f:27:e7:5d:e6:bd:fa:f0:09:02:f9:d0:2d:a7:22:db:0f: c3:55:c2:34:e8:b6:a4:bf:73:d0:90:74:10:8b:c2:b2:44:96: 14:92:41:fb:ec:6d:3c:e0:38:d6:36:28:96:c2:ed:72:56:63: 98:af:3c:18:79:99:77:c1:8e:1a:f0:a7:09:11:52:e8:ed:be: 87:7e:ae:2d:79:0e:e4:f7:07:a5:85:c5:6f:bd:2f:25:93:9e: 42:fd:09:a6:d4:58:54:5e:18:6f:39:65:4e:83:a3:b5:ec:01: ac:57:26:ac:d8:b7:85:fd:b2:57:6f:9d:ef:c1:30:f7:39:c2: 69:ce:df:dd:a9:c7:5b:b2:d3:c4:e9:8b:4a:f9:0d:c2:bb:91: f3:6b:22:ac:e5:53:8e:50:bd:4c:f7:2d:86:3e:66:6e:31:1a: f5:0a:f8:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjW7MujkLZQc5CSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkwOTE0MjU0NVoXDTI1MTIwODE1MjU0NVowLzEtMCsGA1UEAxMk YzNkZjliNjgtYWE3Zi00MTAyLThjZDktOTNjYmIxZTQyNzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM30KIfVfue4gXQ4DZO35LSuBgAJri9wMb0O nmOgC1JSI0WaXSMNsf76uOCOwnoMXpxAzRCEjWYWKmPYWl+yxxvbyHllq2EFL8rR EZCMMuD/FU+0lcpZgc9Ickt8N/JUs3kVFHgt7pgLVwLZ3ESnlmP5BI1GJhJVR/gT t7930T+K1MCvJvdKzok3c9iGl9bXJ3jz4rHXY8CvJhGmv1gWULNCrN5kyrhqY3bU c14UJlyeo56Zm8HlbkyLDdFPjii7OIzRo+3oKiwM351VInq94k/iaxGjVDuoIaNy ZIQ24gakqKzK17Jr49szUEt+AGoQeRIlbQXElpj0USae4QtMHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiSJBorbGNlFtAXrH/c6YmTD+w8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZjk0MGVjNTItMTViOC0z MTMzLWFhNjctZjkwNjA2MmI1ZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPQFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALv8DU2T0tYD7IPMUxcjG5bVEAl1mPLI2H1wWGrxygy9rJOug8IohohC lECDmIM9LAKp0ALHvcgEC/4qLIMH58nfhVP5HylcuqE5Xpgob85xTJMXQecIoBfu MeifJ+dd5r368AkC+dAtpyLbD8NVwjTotqS/c9CQdBCLwrJElhSSQfvsbTzgONY2 KJbC7XJWY5ivPBh5mXfBjhrwpwkRUujtvod+ri15DuT3B6WFxW+9LyWTnkL9CabU WFReGG85ZU6Do7XsAaxXJqzYt4X9sldvne/BMPc5wmnO392px1uy08Tpi0r5DcK7 kfNrIqzlU45QvUz3LYY+Zm4xGvUK+MI= -----END CERTIFICATE-----Generated at Sat Oct 11 09:01:14 2025 by rpki-client