$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1bc0d5ba-7fd0-3e85-a802-0e6b5668aa80.roa File: 1bc0d5ba-7fd0-3e85-a802-0e6b5668aa80.roa (raw, json) Hash identifier: u1sw0zXVBiT2ZIYq5Q3u51/ET/OmKXa61yw9+hklmbg= Subject key identifier: A0:DD:23:F6:A9:29:3F:B5:1B:33:AE:5B:C1:04:20:68:1B:3B:B1:96 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4972B984D569725F82C7D180 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1bc0d5ba-7fd0-3e85-a802-0e6b5668aa80.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 72.244.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:b9:84:d5:69:72:5f:82:c7:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6cfa160e-37b2-4313-baf1-f6e559720653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:39:7b:6c:df:16:26:5d:88:28:e5:fb:d2:87: e0:5c:ef:d9:4a:6a:29:bc:e6:f1:38:57:0e:47:b9: 02:64:16:22:9c:64:29:b1:f9:a9:7f:e9:7c:3d:9c: fa:a3:fd:dd:88:86:a5:75:78:8d:75:fe:38:8e:5a: 01:99:17:73:10:34:ab:9a:dc:02:5f:82:a1:a4:69: 12:d8:b0:f1:f6:e3:15:3b:6b:db:ee:83:a0:4a:a3: 7e:07:f1:72:49:35:27:07:5b:8e:e5:f0:37:cc:75: 23:f0:4a:16:82:df:f1:bd:d2:9d:2f:92:9b:c3:03: 9d:a5:4c:36:48:92:a4:a3:de:2b:6f:26:6d:56:53: 94:c8:63:6c:21:68:ca:3b:e9:a0:2a:64:ab:47:6c: 8a:84:a5:1e:54:89:2c:16:df:aa:27:ac:ce:be:71: b1:33:41:c2:31:aa:8b:2c:ca:49:8d:41:3c:a4:0c: 5b:f4:84:44:48:35:46:c4:07:cd:e8:94:75:50:ef: 11:97:57:96:c2:7e:f6:5c:72:02:95:42:99:32:57: 5b:9d:6e:e0:99:83:c9:84:d4:82:b4:98:fe:9d:8f: 44:56:d6:30:d9:ad:17:71:74:45:b4:f8:b7:f9:ce: 75:6c:fe:ea:ba:32:03:68:7d:ef:2c:54:5e:81:bd: b3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DD:23:F6:A9:29:3F:B5:1B:33:AE:5B:C1:04:20:68:1B:3B:B1:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1bc0d5ba-7fd0-3e85-a802-0e6b5668aa80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:d0:b7:c3:65:40:46:30:7a:24:fb:02:81:28:d2:bc:ac:a6: 53:1e:43:b5:34:b7:2e:eb:ed:48:82:de:47:21:d7:0e:db:29: 85:0a:1c:7e:7b:d8:cc:e4:1c:3a:f2:8e:fc:14:82:09:d3:4f: aa:ac:7b:38:85:a8:e0:bc:eb:59:58:ab:6a:26:8c:6f:3e:60: 89:f7:e2:a1:2f:c7:bb:01:20:4d:c2:03:01:41:91:85:c3:3a: 37:21:e6:c1:47:ec:37:7d:30:4f:f4:8b:d7:ad:01:98:31:28: c4:e7:30:72:6a:48:90:59:ef:39:43:96:41:d4:bb:59:25:df: c9:8d:97:58:f4:c0:73:08:d7:fa:d6:80:5c:b4:2d:de:c1:9c: 30:f9:16:75:cc:e6:1b:00:cb:66:8e:0b:4f:c9:49:37:18:ed: 30:d1:f0:d9:29:57:d6:fb:d2:f9:93:4d:7d:3e:cb:98:0c:69: b9:01:33:18:81:dd:6e:bd:a2:59:75:0e:b8:d6:69:66:6c:bb: 0e:d1:ad:c0:f7:8b:97:39:c8:60:00:13:be:1b:a1:a0:b8:a4: 4b:4a:57:04:96:ca:44:af:8d:8e:e3:45:87:c2:30:66:29:23: a4:7d:29:bc:f0:23:27:2c:c5:f2:48:a1:a0:36:a2:23:77:cd: b5:ff:de:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcrmE1WlyX4LH0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmNmYTE2MGUtMzdiMi00MzEzLWJhZjEtZjZlNTU5NzIwNjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDl7bN8WJl2IKOX70ofgXO/ZSmopvObxOFcO R7kCZBYinGQpsfmpf+l8PZz6o/3diIaldXiNdf44jloBmRdzEDSrmtwCX4KhpGkS 2LDx9uMVO2vb7oOgSqN+B/FySTUnB1uO5fA3zHUj8EoWgt/xvdKdL5KbwwOdpUw2 SJKko94rbyZtVlOUyGNsIWjKO+mgKmSrR2yKhKUeVIksFt+qJ6zOvnGxM0HCMaqL LMpJjUE8pAxb9IRESDVGxAfN6JR1UO8Rl1eWwn72XHIClUKZMldbnW7gmYPJhNSC tJj+nY9EVtYw2a0XcXRFtPi3+c51bP7qujIDaH3vLFRegb2znwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDdI/apKT+1GzOuW8EEIGgbO7GWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMWJjMGQ1YmEtN2ZkMC0z ZTg1LWE4MDItMGU2YjU2NjhhYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/Qt8NlQEYweiT7AoEo0rysplMeQ7U0ty7r7UiC3kch1w7bKYUKHH57 2MzkHDryjvwUggnTT6qseziFqOC861lYq2omjG8+YIn34qEvx7sBIE3CAwFBkYXD Ojch5sFH7Dd9ME/0i9etAZgxKMTnMHJqSJBZ7zlDlkHUu1kl38mNl1j0wHMI1/rW gFy0Ld7BnDD5FnXM5hsAy2aOC0/JSTcY7TDR8NkpV9b70vmTTX0+y5gMabkBMxiB 3W69oll1DrjWaWZsuw7RrcD3i5c5yGAAE74boaC4pEtKVwSWykSvjY7jRYfCMGYp I6R9KbzwIycsxfJIoaA2oiN3zbX/3pU= -----END CERTIFICATE-----Generated at Sat Sep 26 22:29:42 2026 by rpki-client