$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/320c5114-a97d-32fd-8f9f-9ea818a40471.roa File: 320c5114-a97d-32fd-8f9f-9ea818a40471.roa (raw, json) Hash identifier: B9yQLXrnorVSaQ0azqJKKxyCk/2YgjVvIPDH9iBrPko= Subject key identifier: 2B:D4:4B:84:9A:2B:78:F4:E9:A2:AB:0E:B0:33:B3:37:91:69:84:A5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B84541D0F41433D3FEC9B06C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/320c5114-a97d-32fd-8f9f-9ea818a40471.roa Signing time: Tue 14 Oct 2025 08:03:53 +0000 ROA not before: Tue 14 Oct 2025 08:03:53 +0000 ROA not after: Mon 12 Jan 2026 09:03:53 +0000 asID: 142111 IP address blocks: 72.244.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:54:1d:0f:41:43:3d:3f:ec:9b:06:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 14 08:03:53 2025 GMT Not After : Jan 12 09:03:53 2026 GMT Subject: CN=3d9fd84f-f0e8-473d-bd9f-acec4ec97cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b1:47:4b:c9:23:56:da:55:65:ce:45:9c:d0: 9c:90:57:7b:aa:85:00:8e:e9:a4:68:2e:5a:bc:12: b6:18:37:0a:7f:91:a8:86:ce:8d:24:48:cf:79:85: 79:8a:ed:39:94:2c:77:9f:e4:f1:70:35:4a:e2:8b: f9:bf:81:9e:02:ae:d2:06:0d:46:46:e4:69:0d:8a: 03:ff:db:30:23:28:c7:01:1b:23:25:c3:aa:c7:18: 01:92:94:82:3b:db:3b:6d:c7:9a:aa:91:0b:49:5c: c8:75:82:ab:7f:20:03:98:8c:33:c6:b9:27:80:43: da:fd:7a:28:53:ec:4c:35:a0:25:d5:0e:83:55:06: 3a:0a:46:a9:44:8a:44:05:05:85:09:73:24:1f:c4: ae:88:67:72:c5:8f:95:58:78:75:49:7c:3c:26:ab: 02:26:a6:41:a4:2c:03:e1:d2:a0:dd:34:f3:0f:83: bd:4d:b0:db:fd:86:ae:9e:43:04:ad:ce:70:44:29: 30:78:d1:18:ed:f5:39:ad:1c:86:9a:d9:b2:cb:90: 0c:33:5c:42:cc:f2:e7:23:5b:13:68:b5:79:1a:0e: d7:6c:d2:1f:38:dd:a5:15:a2:80:24:3e:88:31:1d: 8d:d8:27:df:04:06:bf:06:8f:a2:62:3e:16:ef:15: eb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D4:4B:84:9A:2B:78:F4:E9:A2:AB:0E:B0:33:B3:37:91:69:84:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/320c5114-a97d-32fd-8f9f-9ea818a40471.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:8e:ba:15:86:fe:b8:ae:bc:46:65:e3:ca:35:fc:55:f6:b6: 4b:ac:58:05:7f:c2:da:d5:9f:57:1a:9e:0f:66:2f:ef:e4:99: ac:be:8b:77:89:44:96:60:4f:fd:f9:db:17:d8:f3:4b:17:3a: f4:7a:df:bc:47:fa:4f:c8:7b:74:21:f2:5b:8d:41:18:a0:f4: 38:2f:d1:ed:de:c0:18:a3:6b:49:df:63:fc:0e:fa:2a:cd:53: 88:7a:c3:6b:74:f0:75:f9:86:16:75:89:e2:ae:34:bb:db:9b: 93:5a:23:71:30:5c:7e:d7:93:52:59:43:20:85:55:3c:da:a3: 0a:84:3e:e9:4a:b7:c9:8f:1c:ca:b1:56:e2:15:d4:ad:73:2a: d7:2a:d3:e2:b9:08:f5:0a:1f:3f:61:b4:ce:c1:40:67:99:db: 7d:f3:cc:b0:d3:14:34:23:36:74:b8:27:da:25:ca:b9:ad:6c: c0:3f:23:99:f2:94:15:c4:d1:4a:2b:69:b0:25:dd:ee:ce:52: 30:90:0b:41:5e:05:ad:9a:0d:9a:ea:47:b8:17:ae:45:10:4c: 6d:10:6d:c9:82:f9:6c:22:4b:ef:ed:b9:4f:52:10:9a:11:ec: f8:f2:40:56:57:8f:4c:72:32:b9:fe:43:f9:c5:81:d6:33:07: e5:29:1d:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuEVB0PQUM9P+ybBsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxNDA4MDM1M1oXDTI2MDExMjA5MDM1M1owLzEtMCsGA1UEAxMk M2Q5ZmQ4NGYtZjBlOC00NzNkLWJkOWYtYWNlYzRlYzk3Y2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLFHS8kjVtpVZc5FnNCckFd7qoUAjumkaC5a vBK2GDcKf5Gohs6NJEjPeYV5iu05lCx3n+TxcDVK4ov5v4GeAq7SBg1GRuRpDYoD /9swIyjHARsjJcOqxxgBkpSCO9s7bceaqpELSVzIdYKrfyADmIwzxrkngEPa/Xoo U+xMNaAl1Q6DVQY6CkapRIpEBQWFCXMkH8SuiGdyxY+VWHh1SXw8JqsCJqZBpCwD 4dKg3TTzD4O9TbDb/YaunkMErc5wRCkweNEY7fU5rRyGmtmyy5AMM1xCzPLnI1sT aLV5Gg7XbNIfON2lFaKAJD6IMR2N2CffBAa/Bo+iYj4W7xXr5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvUS4SaK3j06aKrDrAzszeRaYSlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzIwYzUxMTQtYTk3ZC0z MmZkLThmOWYtOWVhODE4YTQwNDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPQBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOOuhWG/riuvEZl48o1/FX2tkusWAV/wtrVn1cang9mL+/kmay+i3eJ RJZgT/352xfY80sXOvR637xH+k/Ie3Qh8luNQRig9Dgv0e3ewBija0nfY/wO+irN U4h6w2t08HX5hhZ1ieKuNLvbm5NaI3EwXH7Xk1JZQyCFVTzaowqEPulKt8mPHMqx VuIV1K1zKtcq0+K5CPUKHz9htM7BQGeZ233zzLDTFDQjNnS4J9olyrmtbMA/I5ny lBXE0UorabAl3e7OUjCQC0FeBa2aDZrqR7gXrkUQTG0QbcmC+WwiS+/tuU9SEJoR 7PjyQFZXj0xyMrn+Q/nFgdYzB+UpHdU= -----END CERTIFICATE-----Generated at Sat Oct 18 18:48:22 2025 by rpki-client