$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0af87895-e5cf-31c9-853f-7b6d7c800dd2.roa File: 0af87895-e5cf-31c9-853f-7b6d7c800dd2.roa (raw, json) Hash identifier: Q9xPPHPLVyVGhV0bhAX7vBBhpOe1i/AW/WFS8ntfJ0E= Subject key identifier: E5:60:9D:30:58:C8:3B:D9:71:B6:3F:55:D2:34:89:2F:02:2B:63:88 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4974DD61B9E8095CE3B768C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0af87895-e5cf-31c9-853f-7b6d7c800dd2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 212238 IP address blocks: 72.244.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:dd:61:b9:e8:09:5c:e3:b7:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4b581c7a-61eb-4517-be31-4489894efc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dd:38:38:d7:f0:ac:bd:9d:8a:38:7c:02:ab: 88:f2:bd:4c:4a:5d:33:50:19:90:32:91:75:7e:37: 83:0f:67:76:ce:4b:99:79:4f:56:d2:f6:28:01:29: 54:62:b4:5f:68:cd:5c:49:6e:2d:77:7f:1a:73:d6: 0c:05:64:d2:93:ae:f3:34:9e:7d:b6:93:cd:73:79: e4:0c:07:64:6c:4d:5b:7c:ce:41:4f:c8:22:70:32: 1c:10:a6:a5:1e:a1:b5:d9:5b:d0:16:bc:3a:ca:07: 9b:63:50:d1:0f:3c:f4:be:ce:d2:e5:48:46:b5:34: 3b:76:eb:35:56:9e:d8:d3:07:ba:c9:46:97:b3:1e: 7a:f9:6d:53:ea:9f:2d:da:74:34:28:84:62:79:38: 1b:16:b3:a4:b5:ca:ea:62:c4:aa:39:a7:4a:42:c4: 0c:66:57:d6:7f:dd:91:55:9b:a1:51:1a:dc:bc:85: 9a:ea:a2:e2:88:6e:e8:a2:ec:de:ff:f3:2f:50:ce: ca:26:93:0e:35:51:65:fe:e0:bc:95:90:f9:2c:9b: 81:30:e3:a8:f3:ea:3a:34:29:c7:c1:aa:1b:e9:9c: 2d:6c:38:d1:86:03:24:aa:b1:06:b4:61:e1:35:92: b8:b3:50:19:55:b4:ec:49:d4:90:a1:9d:42:85:68: 31:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:60:9D:30:58:C8:3B:D9:71:B6:3F:55:D2:34:89:2F:02:2B:63:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0af87895-e5cf-31c9-853f-7b6d7c800dd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:91:76:d4:3d:cd:d4:ba:aa:37:a2:a9:73:e5:86:ac:2e:23: 2d:b2:54:39:c2:e6:dc:c5:3a:c7:5e:03:c5:d3:8c:bd:8e:3e: f5:2e:76:0e:27:6b:fb:27:d8:eb:1b:f1:d2:06:07:ea:b9:bb: c7:2d:2e:bb:40:ce:1a:ed:60:e6:d1:ba:c6:82:cf:8e:c5:4e: 4c:e4:47:c5:8c:a1:c9:c0:05:7c:d3:36:ca:b4:6c:9c:eb:c7: f7:cd:96:16:bc:bf:fe:23:24:99:f7:a6:33:19:0c:a4:d4:8a: 3e:59:d8:a2:fa:14:3f:b2:43:9f:31:a2:a9:b4:b2:8f:33:ec: 92:06:67:32:0d:68:54:1a:ab:15:2b:dd:a1:ca:7f:c9:4a:5a: 9e:0c:0c:ac:b1:f9:20:bb:0e:de:e3:50:77:d7:b5:74:b0:7d: 04:b6:c6:34:39:c7:02:80:9e:53:06:1b:64:83:ac:43:d0:bc: a2:55:18:75:ca:da:e6:9b:7b:b7:e7:bd:0c:cf:e2:a4:22:da: 8d:99:00:32:04:9f:b2:3a:32:45:37:bd:28:a6:ab:4b:05:cf: be:ca:07:59:91:dd:da:ce:81:6c:41:42:9c:ef:10:2a:5c:47: 0e:3e:a2:3f:f6:1a:e8:46:ef:f1:76:fe:41:3a:df:e8:50:49: ca:53:6a:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdN1huegJXOO3aMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGI1ODFjN2EtNjFlYi00NTE3LWJlMzEtNDQ4OTg5NGVmYzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt04ONfwrL2dijh8AquI8r1MSl0zUBmQMpF1 fjeDD2d2zkuZeU9W0vYoASlUYrRfaM1cSW4td38ac9YMBWTSk67zNJ59tpPNc3nk DAdkbE1bfM5BT8gicDIcEKalHqG12VvQFrw6ygebY1DRDzz0vs7S5UhGtTQ7dus1 Vp7Y0we6yUaXsx56+W1T6p8t2nQ0KIRieTgbFrOktcrqYsSqOadKQsQMZlfWf92R VZuhURrcvIWa6qLiiG7oouze//MvUM7KJpMONVFl/uC8lZD5LJuBMOOo8+o6NCnH waob6ZwtbDjRhgMkqrEGtGHhNZK4s1AZVbTsSdSQoZ1ChWgxswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVgnTBYyDvZcbY/VdI0iS8CK2OIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGFmODc4OTUtZTVjZi0z MWM5LTg1M2YtN2I2ZDdjODAwZGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSPQuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiRdtQ9zdS6qjeiqXPlhqwuIy2yVDnC5tzFOsdeA8XTjL2OPvUudg4n a/sn2Osb8dIGB+q5u8ctLrtAzhrtYObRusaCz47FTkzkR8WMocnABXzTNsq0bJzr x/fNlha8v/4jJJn3pjMZDKTUij5Z2KL6FD+yQ58xoqm0so8z7JIGZzINaFQaqxUr 3aHKf8lKWp4MDKyx+SC7Dt7jUHfXtXSwfQS2xjQ5xwKAnlMGG2SDrEPQvKJVGHXK 2uabe7fnvQzP4qQi2o2ZADIEn7I6MkU3vSimq0sFz77KB1mR3drOgWxBQpzvECpc Rw4+oj/2GuhG7/F2/kE63+hQScpTagA= -----END CERTIFICATE-----Generated at Wed Sep 30 09:31:52 2026 by rpki-client