$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/49d3a737-db1a-3217-b92a-db5ae1304db4.roa File: 49d3a737-db1a-3217-b92a-db5ae1304db4.roa (raw, json) Hash identifier: QYfPEsKGMfVs1ITpurT1Aw4fv2bXGYzGO/kMzei8+P0= Subject key identifier: BB:7C:58:0C:9F:F1:C0:2C:E9:E0:18:DB:26:40:30:66:40:D2:C3:59 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F5B9800F594BE52AA28FD1D80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/49d3a737-db1a-3217-b92a-db5ae1304db4.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 142111 IP address blocks: 72.244.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:98:00:f5:94:be:52:aa:28:fd:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=b274c539-3b0a-45de-972d-c4961643410c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0d:5b:51:b8:2a:93:f5:c4:57:60:41:7b:b6: 94:2a:f9:e5:b7:dd:02:8f:96:3f:f5:17:d9:82:e0: 90:6b:7d:70:b7:47:50:36:f1:23:4f:97:d7:1b:72: 48:5c:f5:82:df:33:5c:e4:69:92:a5:ca:b1:3e:c6: ad:5b:12:d8:92:69:19:6f:4e:38:51:77:d0:5d:06: b1:7b:37:eb:f1:d4:61:cd:b4:c5:6a:89:30:30:a8: 6c:86:36:8f:55:a0:0c:e2:f9:84:40:3e:21:39:3e: f2:95:97:93:ab:ca:92:0b:e6:96:31:ee:e0:b1:36: 63:7e:9c:c7:8b:44:79:a3:ba:3f:32:ba:9e:84:f6: 10:8c:bb:a5:70:02:16:c0:2d:d0:99:c8:a9:30:7b: 82:5c:d6:1f:bc:5c:de:86:8d:da:fc:5e:99:a3:a5: 80:a2:db:61:60:db:26:fc:00:c7:c7:b9:85:1a:f9: ff:d1:0b:be:b0:00:ff:0f:db:66:e7:0f:ef:7e:57: 47:8e:ec:a1:ab:84:dd:a2:24:c1:48:9f:3a:ec:55: f0:5d:3a:ce:1f:45:85:f5:37:cd:fe:09:79:39:86: 78:21:81:3b:ba:69:c9:db:3c:cc:28:e2:ef:d9:e9: db:cf:b5:a0:7a:24:7b:86:b6:da:10:0d:96:03:07: 51:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:7C:58:0C:9F:F1:C0:2C:E9:E0:18:DB:26:40:30:66:40:D2:C3:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/49d3a737-db1a-3217-b92a-db5ae1304db4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:bc:c5:ce:b9:cf:cf:79:87:23:6d:30:80:6e:eb:b4:b5:b8: 6b:df:1f:91:c6:d2:f9:96:94:43:da:63:78:8d:5b:23:bd:9d: e6:36:3d:dc:58:fd:4e:84:7b:a9:b1:f2:74:28:96:c2:0e:41: 8b:13:60:e9:6c:ad:7b:c1:72:8a:32:2c:07:aa:81:79:a2:b2: c7:ed:5a:25:8d:7c:db:63:3d:0e:a2:18:87:ad:01:54:ae:b8: b9:47:a5:64:a2:7a:46:43:67:1e:7f:a4:29:f9:bc:f1:5f:93: de:c0:52:27:f4:3a:eb:8b:21:82:60:75:68:f7:97:7b:88:68: 0c:c7:89:4f:64:f2:22:b9:25:9b:6e:1f:0c:89:e7:10:f6:90: c2:54:c3:70:e1:e1:0a:39:a0:c8:62:56:36:1f:4d:ac:98:c0: 4f:20:28:60:27:20:23:93:2b:85:0c:42:24:0e:1d:52:ad:0f: 5d:d2:6c:22:bd:b7:b5:5f:14:90:22:8e:3a:3b:41:43:0d:be: 43:83:04:8a:87:63:6d:de:c3:24:24:b6:f6:d3:10:88:d9:45: f3:8d:83:60:e9:7d:97:c9:57:56:61:32:cd:8a:67:05:35:a7: 2a:ee:5e:89:8e:99:36:0f:8b:41:7c:d9:e0:94:fa:f0:0d:74: fb:2e:8a:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bmAD1lL5Sqij9HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk YjI3NGM1MzktM2IwYS00NWRlLTk3MmQtYzQ5NjE2NDM0MTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhw1bUbgqk/XEV2BBe7aUKvnlt90Cj5Y/9RfZ guCQa31wt0dQNvEjT5fXG3JIXPWC3zNc5GmSpcqxPsatWxLYkmkZb044UXfQXQax ezfr8dRhzbTFaokwMKhshjaPVaAM4vmEQD4hOT7ylZeTq8qSC+aWMe7gsTZjfpzH i0R5o7o/MrqehPYQjLulcAIWwC3QmcipMHuCXNYfvFzeho3a/F6Zo6WAotthYNsm /ADHx7mFGvn/0Qu+sAD/D9tm5w/vfldHjuyhq4TdoiTBSJ867FXwXTrOH0WF9TfN /gl5OYZ4IYE7umnJ2zzMKOLv2enbz7WgeiR7hrbaEA2WAwdRbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLt8WAyf8cAs6eAY2yZAMGZA0sNZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDlkM2E3MzctZGIxYS0z MjE3LWI5MmEtZGI1YWUxMzA0ZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPTkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+8xc65z895hyNtMIBu67S1uGvfH5HG0vmWlEPaY3iNWyO9neY2PdxY /U6Ee6mx8nQolsIOQYsTYOlsrXvBcooyLAeqgXmissftWiWNfNtjPQ6iGIetAVSu uLlHpWSiekZDZx5/pCn5vPFfk97AUif0OuuLIYJgdWj3l3uIaAzHiU9k8iK5JZtu HwyJ5xD2kMJUw3Dh4Qo5oMhiVjYfTayYwE8gKGAnICOTK4UMQiQOHVKtD13SbCK9 t7VfFJAijjo7QUMNvkODBIqHY23ewyQktvbTEIjZRfONg2DpfZfJV1ZhMs2KZwU1 pyruXomOmTYPi0F82eCU+vANdPsuik8= -----END CERTIFICATE-----Generated at Sun Oct 11 06:42:52 2026 by rpki-client