$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e453d788-9b5f-35a2-ab9b-70516f88eef0.roa File: e453d788-9b5f-35a2-ab9b-70516f88eef0.roa (raw, json) Hash identifier: 5gzbiwnHlwoSSTM5U8Tvw8d0uV6AMNR/UglwslFtF68= Subject key identifier: CE:60:7E:C0:D8:87:3D:01:A1:83:8D:E9:C4:03:D8:BD:28:17:E0:DC Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F6C582AFF17F680D020F14DE0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e453d788-9b5f-35a2-ab9b-70516f88eef0.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 211440 IP address blocks: 72.244.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:2a:ff:17:f6:80:d0:20:f1:4d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=598bfc2a-096a-4ca0-acdd-9908ac20d72c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:18:bb:49:35:dd:29:6f:3d:52:81:17:a7:01: 52:e1:f8:ad:ce:91:36:7a:57:c8:cd:95:c6:ea:c0: 73:9b:be:8c:ed:c8:aa:a4:ef:a8:41:07:41:5b:3a: 88:6a:22:f9:16:84:71:76:57:56:2b:64:36:7b:80: 73:fb:fa:18:c0:96:c6:7f:9b:cc:d3:26:02:f7:d9: bd:56:55:1d:99:4d:a2:32:fa:c6:e0:c7:ec:8b:b5: 88:b1:63:25:9a:f6:5c:a5:bb:fe:e2:cf:75:cb:1a: 8f:51:90:7a:8f:a3:54:f9:ad:14:2e:68:c9:df:3a: 68:1c:b9:75:10:a3:dd:71:18:1e:c1:f3:e3:33:bb: d0:ba:e1:46:34:1e:3c:7c:07:77:85:8e:c0:61:f9: 0d:5a:5d:bc:8b:9d:1d:41:8b:ac:43:41:bd:2b:a5: a7:5d:65:dc:f4:4b:a0:4c:91:46:b4:19:6a:20:95: 8e:b0:28:e5:54:42:e0:de:48:e0:4a:fe:3f:95:e4: 34:1a:96:79:56:66:ef:7e:1c:02:3c:24:99:c2:bc: 19:41:63:20:72:5f:bf:73:57:15:3a:ec:97:e5:22: 3a:19:00:d2:ea:53:58:cc:6f:33:d5:47:04:d0:dc: 6d:13:96:82:3d:2a:c1:f5:67:bc:4f:aa:c7:57:b9: c4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:60:7E:C0:D8:87:3D:01:A1:83:8D:E9:C4:03:D8:BD:28:17:E0:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e453d788-9b5f-35a2-ab9b-70516f88eef0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:67:86:92:47:7b:91:d0:7d:22:64:71:5b:cc:ad:e8:5d:22: da:ce:5c:ca:c7:1a:91:ae:28:78:b0:a5:8f:37:29:d0:51:5c: 4b:db:b9:9a:9b:4b:3f:90:f5:a3:55:83:91:66:e8:bb:c1:5f: 61:c7:9a:c4:b2:c9:51:99:3c:db:07:d1:ed:c2:6b:e9:23:5d: ae:82:f7:5e:d6:1b:21:a5:26:06:8d:e4:12:72:1a:a0:05:79: 36:bf:89:2c:17:36:e4:61:12:2f:f8:34:b8:54:a6:47:49:48: bb:95:90:d2:5b:e7:39:df:91:64:d0:b3:37:b8:2b:98:cd:d3: 36:d1:35:be:1c:f2:ce:8a:b3:ed:de:ff:e9:b5:27:61:e8:59: a3:31:66:b7:8a:da:b4:88:58:c0:48:0d:f8:bd:82:b2:9e:76: 50:a6:71:24:aa:23:e7:63:fd:db:aa:ae:d0:5b:da:10:dc:34: 33:36:60:71:59:09:b6:b3:0f:c0:ae:04:d8:bb:98:a1:ca:4a: 17:46:be:9c:53:1b:8e:63:c5:28:a1:af:3c:b3:fc:63:54:8e: 82:78:e5:fa:c6:2d:d5:e0:ba:f4:7f:41:8c:14:51:de:02:57: 3e:1c:2f:b5:89:67:62:61:1a:d4:b3:34:6d:57:be:9c:b8:84: a1:3a:6e:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWCr/F/aA0CDxTeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk NTk4YmZjMmEtMDk2YS00Y2EwLWFjZGQtOTkwOGFjMjBkNzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxi7STXdKW89UoEXpwFS4fitzpE2elfIzZXG 6sBzm76M7ciqpO+oQQdBWzqIaiL5FoRxdldWK2Q2e4Bz+/oYwJbGf5vM0yYC99m9 VlUdmU2iMvrG4Mfsi7WIsWMlmvZcpbv+4s91yxqPUZB6j6NU+a0ULmjJ3zpoHLl1 EKPdcRgewfPjM7vQuuFGNB48fAd3hY7AYfkNWl28i50dQYusQ0G9K6WnXWXc9Eug TJFGtBlqIJWOsCjlVELg3kjgSv4/leQ0GpZ5VmbvfhwCPCSZwrwZQWMgcl+/c1cV OuyX5SI6GQDS6lNYzG8z1UcE0NxtE5aCPSrB9We8T6rHV7nELQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5gfsDYhz0BoYON6cQD2L0oF+DcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZTQ1M2Q3ODgtOWI1Zi0z NWEyLWFiOWItNzA1MTZmODhlZWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPQCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdnhpJHe5HQfSJkcVvMrehdItrOXMrHGpGuKHiwpY83KdBRXEvbuZqb Sz+Q9aNVg5Fm6LvBX2HHmsSyyVGZPNsH0e3Ca+kjXa6C917WGyGlJgaN5BJyGqAF eTa/iSwXNuRhEi/4NLhUpkdJSLuVkNJb5znfkWTQsze4K5jN0zbRNb4c8s6Ks+3e /+m1J2HoWaMxZreK2rSIWMBIDfi9grKedlCmcSSqI+dj/duqrtBb2hDcNDM2YHFZ CbazD8CuBNi7mKHKShdGvpxTG45jxSihrzyz/GNUjoJ45frGLdXguvR/QYwUUd4C Vz4cL7WJZ2JhGtSzNG1Xvpy4hKE6bg4= -----END CERTIFICATE-----Generated at Sun Oct 11 06:43:01 2026 by rpki-client