$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d8488135-951f-3fc2-ad32-1ac2b65e7cd6.roa File: d8488135-951f-3fc2-ad32-1ac2b65e7cd6.roa (raw, json) Hash identifier: DSF9Er4rd0Kz2wvaxCsubNgJ5LXPSK5VG/P7ga1A9K8= Subject key identifier: CC:30:BF:4C:83:F5:0F:38:44:DA:55:D9:C7:BE:AC:DC:77:8E:99:90 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B89C00CD31668C681C30E7300 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d8488135-951f-3fc2-ad32-1ac2b65e7cd6.roa Signing time: Thu 16 Oct 2025 06:40:24 +0000 ROA not before: Thu 16 Oct 2025 06:40:24 +0000 ROA not after: Wed 14 Jan 2026 07:40:24 +0000 asID: 142111 IP address blocks: 72.244.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:c0:0c:d3:16:68:c6:81:c3:0e:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 16 06:40:24 2025 GMT Not After : Jan 14 07:40:24 2026 GMT Subject: CN=5ec64a3a-3f80-465a-86df-3568bc1598f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cc:78:f9:57:fa:6a:ae:61:26:81:33:28:f3: fc:c1:8c:a5:92:87:8e:6b:91:5c:d7:16:b8:50:6a: 19:a6:16:db:a8:fe:a6:ec:0d:b9:12:87:f2:b0:c9: 43:c9:cd:39:0f:d2:70:f4:b4:dc:5e:60:46:79:ce: ca:1e:fc:90:c2:f8:53:00:a1:a7:ac:b3:53:af:89: 82:4a:3a:b1:02:8f:15:22:32:2a:56:dd:fa:25:e5: 37:8a:b9:73:a0:a6:5b:b5:a0:6c:ec:d5:b6:6c:93: b4:d7:dd:48:c0:2b:24:32:d3:e9:35:03:25:15:49: fc:f7:46:9e:4d:41:55:c9:36:15:37:c3:72:6b:84: 25:7d:67:eb:6d:66:83:e3:bb:a9:9f:65:8f:34:71: df:2d:bd:ea:46:d7:66:a7:65:78:0f:e3:66:f6:a6: 99:cc:16:89:30:7e:69:27:eb:76:93:5b:11:79:cc: 74:7c:b7:fc:0f:38:b1:2c:6b:0e:50:9b:29:0b:59: 7c:79:e8:b0:18:bb:e9:1b:3d:64:bc:7d:f9:a3:39: 1c:90:43:20:8a:f2:a7:92:b6:6c:0f:84:62:35:92: 00:1d:ca:f4:2b:0e:dc:57:6e:86:07:74:fa:c7:43: 06:7f:d9:59:d1:76:16:1f:bd:3e:f9:50:07:69:48: a3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:30:BF:4C:83:F5:0F:38:44:DA:55:D9:C7:BE:AC:DC:77:8E:99:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d8488135-951f-3fc2-ad32-1ac2b65e7cd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:fe:ca:c4:60:95:0d:9c:26:68:7a:d7:99:c4:bd:f4:cf:98: 23:e8:1e:83:ae:ed:03:19:6f:f1:42:7b:ee:35:40:4f:fc:a8: d6:60:4d:56:d6:6c:2f:fc:d3:fb:0a:3b:b9:ad:79:08:d2:7d: e6:47:a8:79:4d:61:3a:16:cf:13:7f:ef:f4:e5:10:73:a7:a2: 88:73:47:45:9d:b4:84:08:ba:50:97:c6:7f:4f:5f:c9:ff:0f: 82:37:f9:6c:54:46:4a:54:fe:52:75:82:72:d4:17:01:c8:26: 8c:71:a4:9f:e4:b9:d6:f1:6a:2c:28:8d:d3:58:53:82:17:b8: 34:c3:ba:7d:2a:43:01:81:77:1a:41:33:d5:b0:24:25:2c:15: 50:f7:29:2a:3b:2d:57:07:07:29:60:36:b9:53:65:28:d1:ee: 94:2a:b4:f4:40:2c:ad:17:96:03:c5:98:f1:ac:71:5f:20:cc: d7:ce:c6:90:eb:96:04:af:f6:4a:a3:8e:3d:33:ac:2e:71:56: 1e:32:17:85:a2:31:8d:7a:01:35:b6:03:31:3c:54:ff:85:2a: 19:27:72:75:cf:a9:1a:75:cb:d1:e1:22:1d:e7:5a:1b:9d:cd: cf:77:1b:7f:df:d8:c6:4d:a9:7b:b9:1f:b7:04:56:3a:2f:c7: d2:b0:9b:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJwAzTFmjGgcMOcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxNjA2NDAyNFoXDTI2MDExNDA3NDAyNFowLzEtMCsGA1UEAxMk NWVjNjRhM2EtM2Y4MC00NjVhLTg2ZGYtMzU2OGJjMTU5OGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscx4+Vf6aq5hJoEzKPP8wYylkoeOa5Fc1xa4 UGoZphbbqP6m7A25EofysMlDyc05D9Jw9LTcXmBGec7KHvyQwvhTAKGnrLNTr4mC SjqxAo8VIjIqVt36JeU3irlzoKZbtaBs7NW2bJO0191IwCskMtPpNQMlFUn890ae TUFVyTYVN8Nya4QlfWfrbWaD47upn2WPNHHfLb3qRtdmp2V4D+Nm9qaZzBaJMH5p J+t2k1sRecx0fLf8DzixLGsOUJspC1l8eeiwGLvpGz1kvH35ozkckEMgivKnkrZs D4RiNZIAHcr0Kw7cV26GB3T6x0MGf9lZ0XYWH70++VAHaUijjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwwv0yD9Q84RNpV2ce+rNx3jpmQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDg0ODgxMzUtOTUxZi0z ZmMyLWFkMzItMWFjMmI2NWU3Y2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPQKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGH+ysRglQ2cJmh615nEvfTPmCPoHoOu7QMZb/FCe+41QE/8qNZgTVbW bC/80/sKO7mteQjSfeZHqHlNYToWzxN/7/TlEHOnoohzR0WdtIQIulCXxn9PX8n/ D4I3+WxURkpU/lJ1gnLUFwHIJoxxpJ/kudbxaiwojdNYU4IXuDTDun0qQwGBdxpB M9WwJCUsFVD3KSo7LVcHBylgNrlTZSjR7pQqtPRALK0XlgPFmPGscV8gzNfOxpDr lgSv9kqjjj0zrC5xVh4yF4WiMY16ATW2AzE8VP+FKhkncnXPqRp1y9HhIh3nWhud zc93G3/f2MZNqXu5H7cEVjovx9Kwm1k= -----END CERTIFICATE-----Generated at Sat Oct 18 18:41:32 2025 by rpki-client