$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b9c04c48-c55b-36c7-b36d-48ea1d7ee7a3.roa File: b9c04c48-c55b-36c7-b36d-48ea1d7ee7a3.roa (raw, json) Hash identifier: SjuHILtuPhH0PTBU8GnIGWBsGqNaOVS4t2FwSzsOor4= Subject key identifier: 15:FE:7E:96:BF:C8:2C:C7:50:D7:50:11:23:B0:C9:22:10:54:AE:58 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BAA7B16E1EB29F57562B95520 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b9c04c48-c55b-36c7-b36d-48ea1d7ee7a3.roa Signing time: Tue 28 Oct 2025 00:03:08 +0000 ROA not before: Tue 28 Oct 2025 00:03:08 +0000 ROA not after: Mon 26 Jan 2026 01:03:08 +0000 asID: 834 IP address blocks: 72.244.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:7b:16:e1:eb:29:f5:75:62:b9:55:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 28 00:03:08 2025 GMT Not After : Jan 26 01:03:08 2026 GMT Subject: CN=8a7c2fe1-1154-4a53-99bd-bd78d9405554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:41:52:87:38:44:07:fc:21:88:35:ce:f7:f0: 93:19:56:2a:51:f0:60:43:bd:96:41:b0:53:48:1a: 9a:59:fb:93:16:d7:5d:5a:a2:3b:20:8f:bf:7a:33: f9:e4:b3:5b:a5:f0:3e:83:68:7f:28:73:ce:a9:9f: 2c:a3:05:6d:09:90:7d:3f:36:4e:b1:cb:87:4f:94: b3:fa:8e:a7:ef:83:a6:80:3e:6a:6d:35:5f:7a:08: 71:5d:06:da:82:9b:1c:3a:7b:9b:f5:4f:d4:ac:c6: 93:6d:6d:c7:96:a4:55:41:24:61:b6:40:82:db:9a: d2:9a:0c:0f:fb:ab:1f:22:b4:6c:3f:fa:f1:54:95: 6d:9c:dd:5b:2b:33:0f:03:45:ef:7d:fc:0e:71:9a: 8e:9e:48:62:71:c3:68:7b:07:97:f5:75:46:f7:37: 40:da:08:c9:b0:2a:0e:98:58:2c:88:d9:fb:29:e3: 19:86:f3:eb:26:d9:36:01:f3:51:c6:0e:78:c2:93: c5:c9:08:f5:a2:c3:ba:16:c2:05:10:46:c2:e6:6a: f2:6a:e6:30:fe:1f:3d:94:ec:1b:bc:18:05:cc:83: 0d:b6:44:58:96:70:f9:d4:1b:d0:fd:b7:fa:07:d8: 9e:a8:2f:26:9e:39:16:35:c2:c0:ea:cc:32:5b:7a: 22:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:FE:7E:96:BF:C8:2C:C7:50:D7:50:11:23:B0:C9:22:10:54:AE:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b9c04c48-c55b-36c7-b36d-48ea1d7ee7a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:de:08:e8:68:0e:46:04:03:d9:b7:0d:f8:ba:6c:e2:38:e4: b2:f7:03:5a:03:20:17:d8:17:9d:02:30:99:e2:23:46:22:fd: 50:9a:6b:64:55:dd:7b:f0:c3:56:02:b0:29:dc:03:8c:64:2a: 1d:6e:5f:9c:c9:9a:ae:50:f6:05:62:2c:ea:ec:a4:b3:09:59: b7:7b:d6:68:14:75:ec:55:15:07:05:48:23:d4:1b:bf:5e:51: c8:1b:8a:2b:81:0c:4a:85:46:af:09:21:56:2f:ab:e5:88:29: 90:7a:49:3d:c8:0d:48:1b:7e:da:84:01:92:4a:1a:35:27:64: 94:3a:d7:34:ca:51:c9:5a:fc:95:21:52:2b:14:a6:6f:b6:17: a1:1c:4d:5e:7d:85:74:ba:39:5e:15:42:ef:90:76:2a:88:9d: a8:da:e7:94:a4:97:68:6f:2a:92:d6:7a:be:2a:d8:56:70:e2: 0a:f7:71:43:f0:88:ec:56:87:e6:02:0a:7f:a2:2e:74:91:dc: 06:d5:09:f7:37:5d:ee:6c:ff:32:0f:bc:1a:ed:c0:82:ab:94: 65:91:55:97:07:02:e3:fc:5c:0e:54:9e:27:f9:b9:1a:4f:0a: de:ad:05:da:0a:19:1f:19:82:f3:f3:f1:72:0b:53:0f:8d:cf: 8f:87:7c:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuqexbh6yn1dWK5VSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyODAwMDMwOFoXDTI2MDEyNjAxMDMwOFowLzEtMCsGA1UEAxMk OGE3YzJmZTEtMTE1NC00YTUzLTk5YmQtYmQ3OGQ5NDA1NTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEFShzhEB/whiDXO9/CTGVYqUfBgQ72WQbBT SBqaWfuTFtddWqI7II+/ejP55LNbpfA+g2h/KHPOqZ8sowVtCZB9PzZOscuHT5Sz +o6n74OmgD5qbTVfeghxXQbagpscOnub9U/UrMaTbW3HlqRVQSRhtkCC25rSmgwP +6sfIrRsP/rxVJVtnN1bKzMPA0XvffwOcZqOnkhiccNoeweX9XVG9zdA2gjJsCoO mFgsiNn7KeMZhvPrJtk2AfNRxg54wpPFyQj1osO6FsIFEEbC5mryauYw/h89lOwb vBgFzIMNtkRYlnD51BvQ/bf6B9ieqC8mnjkWNcLA6swyW3oiFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBX+fpa/yCzHUNdQESOwySIQVK5YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjljMDRjNDgtYzU1Yi0z NmM3LWIzNmQtNDhlYTFkN2VlN2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMPeCOhoDkYEA9m3Dfi6bOI45LL3A1oDIBfYF50CMJniI0Yi/VCaa2RV 3Xvww1YCsCncA4xkKh1uX5zJmq5Q9gViLOrspLMJWbd71mgUdexVFQcFSCPUG79e UcgbiiuBDEqFRq8JIVYvq+WIKZB6ST3IDUgbftqEAZJKGjUnZJQ61zTKUcla/JUh UisUpm+2F6EcTV59hXS6OV4VQu+QdiqInaja55Skl2hvKpLWer4q2FZw4gr3cUPw iOxWh+YCCn+iLnSR3AbVCfc3Xe5s/zIPvBrtwIKrlGWRVZcHAuP8XA5Unif5uRpP Ct6tBdoKGR8ZgvPz8XILUw+Nz4+HfMc= -----END CERTIFICATE-----Generated at Fri Oct 31 05:32:53 2025 by rpki-client