$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/74d01110-f184-3d52-8ecb-69b7128c1944.roa File: 74d01110-f184-3d52-8ecb-69b7128c1944.roa (raw, json) Hash identifier: f0kiLfsXAd3qPbblF7Rm9G5yVEeDbm1H9ODb2YZeNWw= Subject key identifier: FB:EE:A3:3B:6F:56:C1:00:F1:83:0A:65:7A:29:27:1F:A9:0E:A7:75 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F498BB120B71026576366D5C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/74d01110-f184-3d52-8ecb-69b7128c1944.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 141738 IP address blocks: 72.244.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:b1:20:b7:10:26:57:63:66:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d1acefb1-a84e-4a81-bdbe-4ef783689d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:82:6d:c7:c3:e1:64:9a:d8:33:66:a6:d5:d7: 73:9c:a1:13:ca:2a:09:ca:ed:17:42:3e:b3:a3:07: e4:36:10:4f:0b:74:97:83:ab:68:ed:f5:96:21:f5: 5c:44:cb:b4:bb:ea:4b:ab:a0:c4:3f:1b:26:ab:13: 26:f0:35:ba:e5:28:55:54:12:da:73:92:35:e5:19: 5d:41:b2:db:24:4a:85:81:fb:22:34:50:9f:c6:d2: ad:78:db:01:c9:4d:00:3f:39:10:f6:bb:fe:66:b6: 76:ba:91:cf:88:9e:f4:aa:1e:8d:3b:7e:7f:26:7f: 75:49:0f:3d:8a:aa:e9:bb:6f:c4:28:e1:c1:5c:74: 20:2d:e7:3c:7f:5b:1e:87:06:f4:8a:7c:a4:5b:43: d2:e1:41:4f:ea:67:c5:e5:03:07:b2:28:a1:26:be: 74:26:d6:a2:e1:90:fa:ed:07:e8:73:bc:72:df:d0: 7f:9d:99:49:dc:32:9e:ab:a1:e0:c3:06:a5:05:6a: 69:8e:fc:bf:5f:c2:38:b3:fa:68:fd:8e:d8:05:dc: 08:ce:16:e3:8e:88:2b:4d:10:69:9c:32:88:8d:86: 52:a5:f1:57:e3:31:ca:d3:60:12:97:af:1b:86:6b: 2b:a8:b4:1c:8e:8f:eb:c8:c0:2d:f7:8c:fa:28:d9: 8d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EE:A3:3B:6F:56:C1:00:F1:83:0A:65:7A:29:27:1F:A9:0E:A7:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/74d01110-f184-3d52-8ecb-69b7128c1944.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:0d:bb:3a:51:11:ec:3a:2f:cb:a7:1d:ef:bc:6d:29:4e:91: 61:f3:17:ef:0c:46:9d:ad:1a:b1:f3:b0:8c:d2:f8:ff:a3:ff: 6f:20:cf:da:34:f1:27:98:c2:2e:5b:4d:1f:12:48:10:43:40: b3:7c:be:cb:a9:2b:51:ba:79:d1:cf:c5:e0:6d:3f:6a:b1:55: 13:2b:d4:72:3c:26:3a:17:54:19:40:43:1d:21:a0:58:5e:45: d3:12:14:4f:f8:0b:fd:79:93:df:56:d0:08:53:8c:99:73:23: 7d:0a:39:dd:ea:2e:c5:0f:b2:3d:8f:a9:5c:40:31:83:c3:c2: a4:b8:e9:aa:1a:b2:9c:01:3f:df:d3:3e:00:0f:87:e6:59:5f: bd:17:3f:7c:3d:01:eb:4b:ff:de:35:49:27:04:9a:56:3d:64: f3:9d:c7:bc:f4:26:6a:9b:3e:e9:b5:5d:34:d9:5c:a8:22:a3: 99:fc:59:1a:bd:4a:34:14:e6:b9:46:ac:03:7b:e6:b8:b3:d4: f0:54:3f:2c:7b:ab:f1:32:7f:c9:11:dc:5c:7d:f7:13:7f:62: 38:27:cb:70:6e:b5:ec:f9:72:ce:e7:30:fa:34:59:38:d5:4f: 35:30:21:3a:ac:09:da:17:f3:42:62:e3:04:dc:3d:39:ac:c5: 43:0d:96:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji7EgtxAmV2Nm1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDFhY2VmYjEtYTg0ZS00YTgxLWJkYmUtNGVmNzgzNjg5ZDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oJtx8PhZJrYM2am1ddznKETyioJyu0XQj6z owfkNhBPC3SXg6to7fWWIfVcRMu0u+pLq6DEPxsmqxMm8DW65ShVVBLac5I15Rld QbLbJEqFgfsiNFCfxtKteNsByU0APzkQ9rv+ZrZ2upHPiJ70qh6NO35/Jn91SQ89 iqrpu2/EKOHBXHQgLec8f1sehwb0inykW0PS4UFP6mfF5QMHsiihJr50Jtai4ZD6 7Qfoc7xy39B/nZlJ3DKeq6HgwwalBWppjvy/X8I4s/po/Y7YBdwIzhbjjogrTRBp nDKIjYZSpfFX4zHK02ASl68bhmsrqLQcjo/ryMAt94z6KNmNEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvuoztvVsEA8YMKZXopJx+pDqd1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNzRkMDExMTAtZjE4NC0z ZDUyLThlY2ItNjliNzEyOGMxOTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwNuzpREew6L8unHe+8bSlOkWHzF+8MRp2tGrHzsIzS+P+j/28gz9o0 8SeYwi5bTR8SSBBDQLN8vsupK1G6edHPxeBtP2qxVRMr1HI8JjoXVBlAQx0hoFhe RdMSFE/4C/15k99W0AhTjJlzI30KOd3qLsUPsj2PqVxAMYPDwqS46aoaspwBP9/T PgAPh+ZZX70XP3w9AetL/941SScEmlY9ZPOdx7z0JmqbPum1XTTZXKgio5n8WRq9 SjQU5rlGrAN75riz1PBUPyx7q/Eyf8kR3Fx99xN/Yjgny3Butez5cs7nMPo0WTjV TzUwITqsCdoX80Ji4wTcPTmsxUMNlio= -----END CERTIFICATE-----Generated at Sat Oct 10 14:58:08 2026 by rpki-client