$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0281c541-22bf-35e2-a1cf-a25db9177876.roa File: 0281c541-22bf-35e2-a1cf-a25db9177876.roa (raw, json) Hash identifier: xIPB4Zu3aeTWJpGEPKew21afscO3HXe6PrGIv/8HagU= Subject key identifier: 6B:EC:79:16:3E:D6:1C:12:10:38:D4:2E:65:9E:0C:B3:8A:22:6B:75 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F305289EC17025FBB72D00320 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0281c541-22bf-35e2-a1cf-a25db9177876.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 399955 IP address blocks: 72.244.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:89:ec:17:02:5f:bb:72:d0:03:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=ea6b00a8-c28f-475f-800a-d2f0a60afbe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c0:b9:d3:02:20:4f:fc:48:eb:8e:42:0f:80: 0e:2a:8b:b3:51:f4:9f:83:52:19:0a:3d:76:18:fa: a5:da:1d:9d:aa:a0:fc:84:f6:81:44:18:cd:6a:50: fa:33:28:d3:1d:f5:ea:dd:10:cc:12:05:c8:4c:e6: 12:17:84:b8:8e:dd:fc:32:45:92:be:82:00:ba:22: dd:7d:61:c7:4b:55:91:ca:e7:59:8a:8b:47:ad:ff: da:ac:07:bb:e6:71:90:17:e9:20:d3:40:63:e2:d8: d5:a8:8c:fb:71:92:5e:45:66:4f:ae:05:26:64:26: b8:76:ea:f7:1f:5a:c5:f7:9b:98:4e:bc:bf:2e:7c: 6c:25:4d:66:d3:e3:e9:13:46:7a:80:57:5c:3a:d2: 08:bd:2b:50:3b:b1:7c:59:0f:44:50:16:b0:4a:eb: ae:32:22:16:9e:da:e1:66:12:be:ea:f1:0e:36:06: b6:7f:50:0d:f5:34:70:0a:ba:e3:b4:5c:4b:59:c3: f9:0a:29:58:19:2e:48:13:35:eb:8d:45:a0:6e:b6: ca:94:43:3a:f7:ff:e3:a2:18:96:49:38:eb:dc:fd: 84:a2:b9:ad:d2:f3:34:b7:22:8f:79:31:85:ca:45: 5f:4f:49:fe:17:5b:4f:e7:d4:72:cb:c4:b8:f8:5d: 76:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:EC:79:16:3E:D6:1C:12:10:38:D4:2E:65:9E:0C:B3:8A:22:6B:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0281c541-22bf-35e2-a1cf-a25db9177876.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:72:61:2d:81:3b:13:12:81:43:4c:73:55:5a:80:1a:78:96: 03:ff:a0:3d:ec:6e:3c:c9:ed:08:24:ec:56:11:42:c2:22:65: 42:f3:b6:be:7d:ec:a6:7f:bd:7c:ee:ce:e7:25:dd:de:db:8e: f8:8e:ed:a6:45:ee:ee:de:a8:aa:1a:b1:a8:33:4c:0b:65:29: 99:db:24:5f:08:16:c3:d4:da:3e:3a:ac:85:c2:28:a2:0b:41: 89:5d:2d:26:68:a3:84:0a:06:38:46:4a:9a:5d:39:26:a5:b2: e6:75:db:94:7e:20:48:2c:70:d2:42:4c:1c:98:35:c3:af:11: 86:37:ef:77:9e:30:3c:ee:2d:0a:62:2b:d8:93:66:31:c3:b4: 0e:0f:9a:b4:7d:23:f0:b7:08:84:1b:b7:c3:fa:51:fe:7a:65: cf:76:b8:be:93:a5:87:06:3d:23:ac:3c:46:43:b6:7e:87:5a: 1c:e2:b6:20:41:3e:2a:a5:bf:e0:e6:ef:66:76:a4:40:fd:b1: 60:fc:c8:58:a6:7e:50:82:08:e6:3b:bc:75:1a:a8:35:34:4b: 00:e5:09:43:c1:44:34:9e:10:56:b0:e3:d6:7a:8a:09:07:f9: 62:06:14:95:c2:13:a7:ce:e4:df:ec:ea:2c:4f:f4:30:d7:c8: 57:79:36:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUonsFwJfu3LQAyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk ZWE2YjAwYTgtYzI4Zi00NzVmLTgwMGEtZDJmMGE2MGFmYmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8C50wIgT/xI645CD4AOKouzUfSfg1IZCj12 GPql2h2dqqD8hPaBRBjNalD6MyjTHfXq3RDMEgXITOYSF4S4jt38MkWSvoIAuiLd fWHHS1WRyudZiotHrf/arAe75nGQF+kg00Bj4tjVqIz7cZJeRWZPrgUmZCa4dur3 H1rF95uYTry/LnxsJU1m0+PpE0Z6gFdcOtIIvStQO7F8WQ9EUBawSuuuMiIWntrh ZhK+6vEONga2f1AN9TRwCrrjtFxLWcP5CilYGS5IEzXrjUWgbrbKlEM69//johiW STjr3P2Eormt0vM0tyKPeTGFykVfT0n+F1tP59Ryy8S4+F12aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvseRY+1hwSEDjULmWeDLOKImt1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDI4MWM1NDEtMjJiZi0z NWUyLWExY2YtYTI1ZGI5MTc3ODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERyYS2BOxMSgUNMc1VagBp4lgP/oD3sbjzJ7Qgk7FYRQsIiZULztr59 7KZ/vXzuzucl3d7bjviO7aZF7u7eqKoasagzTAtlKZnbJF8IFsPU2j46rIXCKKIL QYldLSZoo4QKBjhGSppdOSalsuZ125R+IEgscNJCTByYNcOvEYY373eeMDzuLQpi K9iTZjHDtA4PmrR9I/C3CIQbt8P6Uf56Zc92uL6TpYcGPSOsPEZDtn6HWhzitiBB Piqlv+Dm72Z2pED9sWD8yFimflCCCOY7vHUaqDU0SwDlCUPBRDSeEFaw49Z6igkH +WIGFJXCE6fO5N/s6ixP9DDXyFd5NpI= -----END CERTIFICATE-----Generated at Fri Oct 9 21:01:57 2026 by rpki-client