$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ff1c1e88-2299-39ea-8202-af4d554b435e.roa File: ff1c1e88-2299-39ea-8202-af4d554b435e.roa (raw, json) Hash identifier: Nr/k+lhWTgi+bPVayHZpg1RshShdXjzy4PjfeA6Q/fY= Subject key identifier: DA:4D:0B:FF:D4:6E:ED:29:2B:29:C6:DD:30:AC:67:2F:18:5E:52:B3 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B3BAA67FDD95BB4D27DD6F580 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ff1c1e88-2299-39ea-8202-af4d554b435e.roa Signing time: Thu 18 Sep 2025 07:23:44 +0000 ROA not before: Thu 18 Sep 2025 07:23:44 +0000 ROA not after: Wed 17 Dec 2025 08:23:44 +0000 asID: 23470 IP address blocks: 72.244.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3b:aa:67:fd:d9:5b:b4:d2:7d:d6:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 18 07:23:44 2025 GMT Not After : Dec 17 08:23:44 2025 GMT Subject: CN=641aa3a9-b696-46de-9e74-1a44737e7309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d4:a1:08:ba:0f:76:37:1e:9b:ac:4e:50:65: 17:07:2f:27:2a:4e:f1:0b:4e:34:26:f1:77:9f:92: 32:13:c7:0d:6b:d8:96:15:c2:58:08:db:9d:76:15: 82:a3:c0:5b:65:9f:8e:37:52:83:9a:f8:59:68:ab: 8a:e2:d9:3b:a8:96:8f:b5:f3:1b:bb:22:74:7e:8b: 95:4b:db:cc:c9:96:ec:93:cd:5d:7c:af:7c:68:86: 5f:66:f0:0d:10:d5:2f:c6:74:ff:47:15:a6:1a:8e: 31:53:cf:f5:bb:4d:c6:49:96:3e:de:c8:4d:20:f2: aa:b4:f9:5e:3e:23:f9:b7:58:00:ae:d5:f5:53:f8: cb:97:21:49:86:ce:e7:66:b1:a0:4d:34:b3:a9:10: 47:46:c7:9e:56:89:a3:3c:5d:66:3e:f2:8b:48:96: cc:fa:06:53:42:4d:2c:1f:9b:67:c0:16:70:a9:06: 3b:f3:12:70:d8:65:90:c2:28:55:c5:be:a9:c0:25: f5:b6:03:6e:d9:a6:5a:ce:d3:e6:be:96:d3:3b:bb: f3:c9:fd:81:bd:f9:45:8b:d3:59:89:39:b8:fe:f5: 96:4d:7b:f5:c9:98:d0:5b:75:b0:95:ef:19:32:9f: a2:18:a3:7f:42:ed:54:75:06:27:f1:23:3e:f1:3d: 11:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4D:0B:FF:D4:6E:ED:29:2B:29:C6:DD:30:AC:67:2F:18:5E:52:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ff1c1e88-2299-39ea-8202-af4d554b435e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:d4:af:e6:68:cd:36:4f:33:c1:14:a2:3d:59:c2:1c:75:41: e6:92:fa:78:75:18:ab:1d:24:96:85:82:8d:24:eb:83:c8:da: b4:9b:8a:f2:49:ee:f5:05:47:3c:3a:ae:13:df:19:fd:1f:f5: 35:7c:31:96:0e:29:30:42:57:58:ef:71:da:d9:38:5a:68:d5: 82:b5:ed:27:2a:fd:3a:f9:2d:80:c5:73:77:f7:58:cb:56:2d: 49:4f:24:84:69:0f:ef:79:9a:5a:2d:72:c2:31:6d:ca:10:e0: 80:5c:3e:9f:02:9f:02:cf:9d:d6:7e:32:0a:01:cc:50:c2:f4: 4a:b0:43:d2:d6:a4:ac:0f:a4:13:4f:c7:a3:ef:56:7d:73:c3: 96:da:92:63:2c:b7:72:70:44:1a:a6:45:15:02:f0:bb:ad:c2: 63:1a:e1:18:d3:55:ae:68:f8:3f:5e:d0:85:55:30:78:0a:8e: 66:1f:a0:ab:19:d6:14:c1:22:ad:8e:0c:e0:6d:bd:de:6f:52: f2:66:97:f0:3c:c9:30:5c:59:17:24:d3:be:ef:d8:55:21:40: 98:5d:f7:09:d1:a0:70:e3:0f:f0:90:ad:5b:ef:ff:bc:2a:79: 7e:fe:f1:e8:36:96:fc:1e:e0:64:2c:79:9e:5a:af:74:d1:3b: 89:d0:bc:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs7qmf92Vu00n3W9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxODA3MjM0NFoXDTI1MTIxNzA4MjM0NFowLzEtMCsGA1UEAxMk NjQxYWEzYTktYjY5Ni00NmRlLTllNzQtMWE0NDczN2U3MzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19ShCLoPdjcem6xOUGUXBy8nKk7xC040JvF3 n5IyE8cNa9iWFcJYCNuddhWCo8BbZZ+ON1KDmvhZaKuK4tk7qJaPtfMbuyJ0fouV S9vMyZbsk81dfK98aIZfZvANENUvxnT/RxWmGo4xU8/1u03GSZY+3shNIPKqtPle PiP5t1gArtX1U/jLlyFJhs7nZrGgTTSzqRBHRseeVomjPF1mPvKLSJbM+gZTQk0s H5tnwBZwqQY78xJw2GWQwihVxb6pwCX1tgNu2aZaztPmvpbTO7vzyf2BvflFi9NZ iTm4/vWWTXv1yZjQW3Wwle8ZMp+iGKN/Qu1UdQYn8SM+8T0RowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpNC//Ubu0pKynG3TCsZy8YXlKzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmYxYzFlODgtMjI5OS0z OWVhLTgyMDItYWY0ZDU1NGI0MzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPSZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/Ur+ZozTZPM8EUoj1Zwhx1QeaS+nh1GKsdJJaFgo0k64PI2rSbivJJ 7vUFRzw6rhPfGf0f9TV8MZYOKTBCV1jvcdrZOFpo1YK17Scq/Tr5LYDFc3f3WMtW LUlPJIRpD+95mlotcsIxbcoQ4IBcPp8CnwLPndZ+MgoBzFDC9EqwQ9LWpKwPpBNP x6PvVn1zw5bakmMst3JwRBqmRRUC8LutwmMa4RjTVa5o+D9e0IVVMHgKjmYfoKsZ 1hTBIq2ODOBtvd5vUvJml/A8yTBcWRck077v2FUhQJhd9wnRoHDjD/CQrVvv/7wq eX7+8eg2lvwe4GQseZ5ar3TRO4nQvP8= -----END CERTIFICATE-----Generated at Wed Oct 8 22:56:33 2025 by rpki-client