$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aa641847-011c-3b2f-baa3-556b8cbf7748.roa File: aa641847-011c-3b2f-baa3-556b8cbf7748.roa (raw, json) Hash identifier: 3iVyq/eD4KxrAODYbS+IipgMjWGqouwuIRm0dDCIRXs= Subject key identifier: 10:6E:8A:6F:C4:7A:C4:75:E5:74:37:38:DF:E5:C5:C3:FF:21:C1:C9 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F63F83088024C77234F271980 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aa641847-011c-3b2f-baa3-556b8cbf7748.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 834 IP address blocks: 72.244.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:30:88:02:4c:77:23:4f:27:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=5d343efc-56a5-4011-b521-3b10d93c9d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:53:97:f8:4f:6e:24:3a:36:97:20:00:2d:65: 72:f3:aa:2b:da:95:26:ff:f6:e0:81:f1:50:d6:37: 3e:88:d5:6d:e9:55:8f:a9:ca:0e:08:09:85:a2:71: aa:e7:94:54:70:10:2e:65:6c:b1:40:80:3c:64:1e: 60:c3:45:7f:90:2a:ba:eb:02:4c:ab:72:8a:fb:a7: ba:da:04:92:d2:2c:91:90:f5:fc:bb:6f:38:51:a1: dc:37:8d:bf:cd:29:fa:3f:32:60:e0:ee:e4:e2:e5: 1b:9e:69:d3:8b:df:3a:71:25:de:91:97:16:e8:23: 2b:4b:2a:8a:b2:0d:12:e2:1f:ef:ac:db:db:ea:e1: e2:12:1c:12:01:31:f5:17:b6:7c:b9:eb:26:e3:f1: 7c:b9:19:ea:5d:6b:e7:0f:91:fd:92:45:e7:2f:b0: db:43:70:6b:d9:b2:7a:96:f2:30:85:4f:77:1c:d3: e0:36:8f:17:2d:97:08:38:38:e6:50:ea:52:be:4e: 79:86:70:4e:8d:10:71:31:33:6b:b7:ff:19:1b:69: 47:9c:78:9b:ba:c9:83:04:70:5f:f9:b4:0a:6c:7b: 98:10:de:bd:73:3f:99:27:ed:31:34:5e:92:17:00: d8:a0:ce:8f:2a:32:46:f6:bd:5d:d6:cb:7a:b4:24: 09:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6E:8A:6F:C4:7A:C4:75:E5:74:37:38:DF:E5:C5:C3:FF:21:C1:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aa641847-011c-3b2f-baa3-556b8cbf7748.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:6f:e7:96:b9:11:6a:09:69:17:b2:68:ae:36:82:d1:0c:76: 8a:b3:b0:63:d7:c1:89:dc:c0:74:8c:92:50:0a:0e:05:0f:64: 8e:8a:bf:60:0a:14:88:e6:57:b5:06:c6:63:31:b7:99:f1:c3: a0:30:c7:3c:83:bd:bf:b6:a1:7a:ce:12:fa:87:5c:07:e8:97: 0f:f3:e8:0b:33:e8:d2:a4:be:e1:b4:b4:71:73:b7:f9:1f:f5: 1e:e5:6e:f8:f4:fd:5b:52:2f:6a:13:48:eb:e2:4d:5b:7e:9c: 0b:bc:1b:9f:4e:1b:0b:9e:04:dc:b8:bc:7e:a4:fc:72:67:46: 1d:5e:90:4f:59:ef:7f:3f:64:f0:02:5a:47:32:03:5f:4b:30: ac:29:4b:37:8a:38:eb:40:0a:8f:a9:85:6b:4d:fd:c7:ee:03: c9:e2:70:56:71:19:92:5d:e2:59:54:b5:6b:78:aa:36:16:71: 2f:c8:92:21:8e:fc:aa:34:8c:16:80:6c:0b:0c:d2:6c:2c:50: 72:ad:7a:61:49:df:76:4c:75:b8:95:c1:f1:44:37:49:be:90: c6:09:9f:b9:4e:56:e4:40:fb:af:4b:7e:e1:ea:c9:4f:3c:aa: 0a:15:f3:3b:6d:7b:2c:36:cb:fd:7a:ea:db:36:2c:43:17:66: ff:61:44:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+DCIAkx3I08nGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk NWQzNDNlZmMtNTZhNS00MDExLWI1MjEtM2IxMGQ5M2M5ZDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lOX+E9uJDo2lyAALWVy86or2pUm//bggfFQ 1jc+iNVt6VWPqcoOCAmFonGq55RUcBAuZWyxQIA8ZB5gw0V/kCq66wJMq3KK+6e6 2gSS0iyRkPX8u284UaHcN42/zSn6PzJg4O7k4uUbnmnTi986cSXekZcW6CMrSyqK sg0S4h/vrNvb6uHiEhwSATH1F7Z8uesm4/F8uRnqXWvnD5H9kkXnL7DbQ3Br2bJ6 lvIwhU93HNPgNo8XLZcIODjmUOpSvk55hnBOjRBxMTNrt/8ZG2lHnHibusmDBHBf +bQKbHuYEN69cz+ZJ+0xNF6SFwDYoM6PKjJG9r1d1st6tCQJCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBuim/EesR15XQ3ON/lxcP/IcHJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWE2NDE4NDctMDExYy0z YjJmLWJhYTMtNTU2YjhjYmY3NzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESPQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNv55a5EWoJaReyaK42gtEMdoqzsGPXwYncwHSMklAKDgUPZI6Kv2AK FIjmV7UGxmMxt5nxw6AwxzyDvb+2oXrOEvqHXAfolw/z6Asz6NKkvuG0tHFzt/kf 9R7lbvj0/VtSL2oTSOviTVt+nAu8G59OGwueBNy4vH6k/HJnRh1ekE9Z738/ZPAC WkcyA19LMKwpSzeKOOtACo+phWtN/cfuA8nicFZxGZJd4llUtWt4qjYWcS/IkiGO /Ko0jBaAbAsM0mwsUHKtemFJ33ZMdbiVwfFEN0m+kMYJn7lOVuRA+69LfuHqyU88 qgoV8ztteyw2y/166ts2LEMXZv9hRE0= -----END CERTIFICATE-----Generated at Sun Oct 11 06:58:01 2026 by rpki-client