$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/71bd2c70-8f4b-357f-a3d3-a9bf51a65b1f.roa File: 71bd2c70-8f4b-357f-a3d3-a9bf51a65b1f.roa (raw, json) Hash identifier: EKsK9z/Z/JTb+wM0xG5tVRM9J+z6AXFAtDJqSOLdOrs= Subject key identifier: 16:BF:D6:6A:C5:33:27:9A:15:3F:6E:98:98:27:8C:63:3B:36:58:94 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4BE09ED5CAEB940A30712F00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/71bd2c70-8f4b-357f-a3d3-a9bf51a65b1f.roa Signing time: Fri 25 Sep 2026 21:53:39 +0000 ROA not before: Fri 25 Sep 2026 21:53:39 +0000 ROA not after: Thu 24 Dec 2026 22:53:39 +0000 asID: 834 IP address blocks: 72.244.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4b:e0:9e:d5:ca:eb:94:0a:30:71:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 21:53:39 2026 GMT Not After : Dec 24 22:53:39 2026 GMT Subject: CN=f064d3d4-0056-473f-a8b7-3d7bb20a2aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a1:aa:00:d3:02:f9:e4:69:84:9a:f8:13:03: 69:cf:d9:b2:1e:5e:8e:d4:b6:5e:c4:36:71:17:13: c3:08:7a:50:ef:50:07:96:4f:61:cd:69:6f:d2:ad: d8:39:f4:dc:19:da:76:20:85:3b:bd:bb:dc:4f:2f: ad:cd:42:1c:2d:22:bf:a0:86:ad:de:80:7c:e1:d1: e9:58:24:13:3e:2c:aa:27:52:f2:c3:2d:0f:1c:7f: ba:36:ed:af:ca:68:94:a1:0c:e1:c4:10:d7:e8:bf: 98:c3:73:cf:14:40:58:9b:3c:ea:af:8b:35:0a:33: 57:6f:7e:b7:97:da:cb:08:5e:1c:a3:b2:93:9f:36: 88:2c:1d:ef:76:ea:98:fd:3d:d7:af:56:9e:74:3e: eb:f1:cc:42:f2:94:da:e3:31:af:11:8f:1b:f0:58: 5c:50:1a:87:e8:44:a2:a6:0a:18:5f:be:3e:cf:f7: fb:57:d0:07:b5:17:05:15:f7:03:e6:10:96:6c:ad: 81:21:b8:35:b9:5a:bd:0e:ca:e6:1d:d3:f3:6e:fa: 28:fd:f9:da:d9:c0:70:fa:dc:92:e1:89:55:95:df: 29:6c:c9:28:87:03:48:74:c1:0b:a2:60:89:e5:85: 28:4c:11:29:53:26:a8:86:8d:7c:87:04:7c:b7:76: 93:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BF:D6:6A:C5:33:27:9A:15:3F:6E:98:98:27:8C:63:3B:36:58:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/71bd2c70-8f4b-357f-a3d3-a9bf51a65b1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:0a:e8:ca:46:0d:f1:84:63:45:bc:d4:a5:3d:be:42:95:6e: 85:f6:3e:c8:f7:c2:bc:87:4b:64:50:ca:3f:a4:8c:d7:02:08: c0:40:1a:79:d0:56:3e:66:0d:af:1d:c0:ed:1b:ba:07:60:b5: a0:df:d9:f5:26:92:5a:92:1c:7e:26:a8:58:0c:af:55:3c:14: bf:e8:81:67:f9:2c:85:8e:08:e7:b5:b6:67:dc:ee:b1:00:5c: 6c:e4:ff:3f:af:99:dc:f3:76:18:ff:e9:6d:6f:41:7e:cc:58: 8b:01:e4:f2:cc:bc:35:1b:1e:ff:c7:7b:83:7d:9f:23:1f:66: 6d:d3:2b:12:b1:20:68:a8:34:e4:b8:b5:1e:3d:41:ed:96:56: 9b:2e:cf:20:24:29:09:b9:17:09:84:20:b3:30:d0:63:6c:06: 21:48:19:b3:a3:4a:b1:a7:eb:76:9a:71:d7:7d:33:76:c6:27: 5f:c6:5b:63:82:c9:fc:3d:5b:cc:6b:20:9b:3f:db:74:a3:3a: c4:1b:d8:e9:af:64:f0:ca:0d:82:0b:f8:06:df:d5:bd:ed:16: ce:b4:bc:f5:75:7c:23:07:48:cb:8c:d3:4d:fd:06:a0:5d:9c: af:cd:5a:cb:de:a5:44:6f:4e:1b:5b:ca:97:b3:e9:b1:d7:61: 8d:7a:8a:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9L4J7VyuuUCjBxLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTIxNTMzOVoXDTI2MTIyNDIyNTMzOVowLzEtMCsGA1UEAxMk ZjA2NGQzZDQtMDA1Ni00NzNmLWE4YjctM2Q3YmIyMGEyYWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKGqANMC+eRphJr4EwNpz9myHl6O1LZexDZx FxPDCHpQ71AHlk9hzWlv0q3YOfTcGdp2IIU7vbvcTy+tzUIcLSK/oIat3oB84dHp WCQTPiyqJ1Lywy0PHH+6Nu2vymiUoQzhxBDX6L+Yw3PPFEBYmzzqr4s1CjNXb363 l9rLCF4co7KTnzaILB3vduqY/T3Xr1aedD7r8cxC8pTa4zGvEY8b8FhcUBqH6ESi pgoYX74+z/f7V9AHtRcFFfcD5hCWbK2BIbg1uVq9DsrmHdPzbvoo/fna2cBw+tyS 4YlVld8pbMkohwNIdMELomCJ5YUoTBEpUyaoho18hwR8t3aTtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBa/1mrFMyeaFT9umJgnjGM7NliUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNzFiZDJjNzAtOGY0Yi0z NTdmLWEzZDMtYTliZjUxYTY1YjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPTsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYK6MpGDfGEY0W81KU9vkKVboX2Psj3wryHS2RQyj+kjNcCCMBAGnnQ Vj5mDa8dwO0bugdgtaDf2fUmklqSHH4mqFgMr1U8FL/ogWf5LIWOCOe1tmfc7rEA XGzk/z+vmdzzdhj/6W1vQX7MWIsB5PLMvDUbHv/He4N9nyMfZm3TKxKxIGioNOS4 tR49Qe2WVpsuzyAkKQm5FwmEILMw0GNsBiFIGbOjSrGn63aacdd9M3bGJ1/GW2OC yfw9W8xrIJs/23SjOsQb2OmvZPDKDYIL+Abf1b3tFs60vPV1fCMHSMuM0039BqBd nK/NWsvepURvThtbypez6bHXYY16ivA= -----END CERTIFICATE-----Generated at Sun Sep 27 10:18:53 2026 by rpki-client