$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7fbc4ee0-af03-3b47-a353-4f3640c2223e.roa File: 7fbc4ee0-af03-3b47-a353-4f3640c2223e.roa (raw, json) Hash identifier: Bi71erMU29DRxQTcqr6DUBFPYzDhfY5WSedYGQ5oZI4= Subject key identifier: 15:24:F6:0D:0A:46:07:99:16:BB:C0:63:1E:B4:E1:80:FF:C5:2F:A4 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F6C5852656D48397AAF449F80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7fbc4ee0-af03-3b47-a353-4f3640c2223e.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 53958 IP address blocks: 72.1.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:52:65:6d:48:39:7a:af:44:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=44fe299e-5ad7-4b60-8bac-a80dba9bc023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:69:42:82:0a:81:18:e5:65:b2:55:b9:e5:5a: 15:1c:85:71:00:2a:a2:38:6c:44:db:6a:3a:76:bd: e5:eb:8c:99:8f:80:d0:4a:f4:be:a4:1f:70:0c:b3: 12:12:8e:78:42:72:a7:88:da:21:99:d8:b0:74:a0: 06:7c:0f:aa:0a:f4:2f:ed:f7:59:5e:80:34:7e:bc: 5c:6a:c1:2f:3b:0e:7f:d5:72:e6:c0:2c:7d:d0:53: e2:9c:d4:6d:fe:ef:a5:3d:f2:c9:cd:dc:88:6c:c3: 89:29:1c:9d:b3:f8:3c:0b:69:79:e2:d5:d9:66:03: 41:cb:06:fa:f2:aa:82:0a:9d:c2:59:a6:9e:dd:03: 14:ca:e1:68:7f:e0:bd:6a:5a:0b:29:bc:36:e7:4d: c6:06:b0:3a:7d:67:55:b6:0e:e0:f8:e9:ce:fe:ea: 10:01:a8:79:15:81:c8:2a:89:5a:06:bf:39:55:f8: 2b:ed:3b:44:7c:75:10:63:6d:e5:0e:5f:54:eb:f9: fa:34:9c:fd:79:11:e3:77:1e:cc:e7:e0:90:a6:07: 71:f6:a7:0c:8c:db:fd:47:7e:c1:63:0e:27:2f:64: cc:68:62:46:99:13:a3:5a:b6:a9:38:d5:89:1a:db: e2:82:62:63:13:4b:e6:77:df:bf:e8:4d:7f:f8:37: 1e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:24:F6:0D:0A:46:07:99:16:BB:C0:63:1E:B4:E1:80:FF:C5:2F:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7fbc4ee0-af03-3b47-a353-4f3640c2223e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.1.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:88:a3:29:8c:fc:82:7a:e5:e3:0c:68:40:a9:5b:f7:29:e3: 21:93:b1:71:ee:1c:a3:11:7c:c1:e9:6e:9c:06:79:34:5c:2d: e6:78:45:00:6e:67:6b:bf:ea:80:4c:f1:80:1d:34:b1:92:49: 23:56:d1:bb:2b:1a:81:d9:fc:05:35:16:6a:5c:22:d6:ad:8c: 6b:ec:9c:d8:85:0b:9c:5f:ce:03:a3:5a:67:99:6d:94:4d:11: b0:73:46:1e:38:44:ee:1a:da:2d:3c:53:66:31:b2:9a:4f:ff: 56:14:0c:0a:fa:61:c3:9a:f6:f5:da:5d:8d:55:77:8c:ce:af: 3f:98:55:e5:97:b6:fa:8f:8c:81:53:e1:be:ec:eb:f6:7f:05: 07:99:e1:11:34:78:4f:6a:81:ae:92:38:9f:ba:31:45:48:f3: 8f:59:80:b6:51:82:53:20:cf:87:ca:37:a0:e2:b9:a9:43:50: ac:96:ec:8d:04:8e:f8:6d:db:4c:5b:ed:7b:ee:bb:05:cf:af: 09:23:b0:cf:79:cf:2b:15:62:17:52:51:c4:7e:c0:7b:8f:d8: 6b:0b:3d:a0:60:b6:e5:92:4e:0b:f6:69:92:c8:c9:55:50:5e: 67:2b:3a:60:dc:1e:c5:2b:ff:38:be:a6:54:cf:84:42:be:30: 81:b3:0b:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWFJlbUg5eq9En4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk NDRmZTI5OWUtNWFkNy00YjYwLThiYWMtYTgwZGJhOWJjMDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWlCggqBGOVlslW55VoVHIVxACqiOGxE22o6 dr3l64yZj4DQSvS+pB9wDLMSEo54QnKniNohmdiwdKAGfA+qCvQv7fdZXoA0frxc asEvOw5/1XLmwCx90FPinNRt/u+lPfLJzdyIbMOJKRyds/g8C2l54tXZZgNBywb6 8qqCCp3CWaae3QMUyuFof+C9aloLKbw2503GBrA6fWdVtg7g+OnO/uoQAah5FYHI KolaBr85Vfgr7TtEfHUQY23lDl9U6/n6NJz9eRHjdx7M5+CQpgdx9qcMjNv9R37B Yw4nL2TMaGJGmROjWrapONWJGtvigmJjE0vmd9+/6E1/+DceZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUk9g0KRgeZFrvAYx604YD/xS+kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvN2ZiYzRlZTAtYWYwMy0z YjQ3LWEzNTMtNGYzNjQwYzIyMjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAGgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCIoymM/IJ65eMMaECpW/cp4yGTsXHuHKMRfMHpbpwGeTRcLeZ4RQBu Z2u/6oBM8YAdNLGSSSNW0bsrGoHZ/AU1FmpcItatjGvsnNiFC5xfzgOjWmeZbZRN EbBzRh44RO4a2i08U2YxsppP/1YUDAr6YcOa9vXaXY1Vd4zOrz+YVeWXtvqPjIFT 4b7s6/Z/BQeZ4RE0eE9qga6SOJ+6MUVI849ZgLZRglMgz4fKN6DiualDUKyW7I0E jvht20xb7XvuuwXPrwkjsM95zysVYhdSUcR+wHuP2GsLPaBgtuWSTgv2aZLIyVVQ XmcrOmDcHsUr/zi+plTPhEK+MIGzC6g= -----END CERTIFICATE-----Generated at Sun Oct 11 06:48:01 2026 by rpki-client