$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/390af8e2-1368-3158-9475-fc3a4f8eaa53.roa File: 390af8e2-1368-3158-9475-fc3a4f8eaa53.roa (raw, json) Hash identifier: kqUIKNWrvO2ZbB++sM4692gRatf/7bs2+KmpSf4R4gQ= Subject key identifier: C9:3D:C2:FB:F5:52:B0:3B:05:94:83:33:19:15:38:3F:72:83:D9:03 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4964C5306A7E00DB67837700 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/390af8e2-1368-3158-9475-fc3a4f8eaa53.roa Signing time: Fri 25 Sep 2026 00:32:30 +0000 ROA not before: Fri 25 Sep 2026 00:32:30 +0000 ROA not after: Thu 24 Dec 2026 01:32:30 +0000 asID: 219427 IP address blocks: 72.244.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:64:c5:30:6a:7e:00:db:67:83:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 00:32:30 2026 GMT Not After : Dec 24 01:32:30 2026 GMT Subject: CN=85bfc5a7-1e95-407b-b0e6-adf103de8316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b0:61:b0:c6:63:3a:1b:1e:b7:c9:bd:22:6f: 92:30:81:1e:9f:04:6d:d4:02:50:0f:2c:d5:56:a8: 2c:6b:1f:f8:a1:b4:d9:c7:11:bf:00:d4:84:4f:63: 01:3b:4e:f4:38:4c:35:e8:c4:e7:c9:6e:28:df:ca: aa:0e:5b:16:fe:0d:b5:2c:4c:fe:e9:7b:d8:63:cc: 8d:2e:32:cd:11:49:ff:80:ed:30:af:e0:c9:39:78: 4e:c2:b3:13:85:db:d2:ca:18:da:b2:75:2f:38:6b: 54:d5:dc:90:fe:48:88:20:b5:9d:41:b6:6e:65:24: de:1b:8a:be:9d:63:30:6d:1d:13:26:4e:97:23:ee: f5:61:47:66:11:5e:03:8e:5a:6e:15:05:6a:d0:9e: 3c:03:02:69:1c:4d:da:df:56:ad:6d:29:27:fb:16: f8:91:25:be:09:4d:a5:cb:5e:c4:89:50:30:70:32: 0b:c8:f4:ba:4a:15:25:8a:e3:5a:50:ba:17:cc:3c: 92:85:f1:5f:13:7f:90:8c:1b:70:d9:e0:e1:f0:4c: 99:63:93:df:d4:f5:cf:24:12:ac:6a:92:59:db:44: 01:28:89:41:40:d8:9b:6b:38:99:45:7a:51:61:0b: 1d:56:1c:ab:3f:bd:05:e0:be:af:87:a8:be:43:ad: d1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3D:C2:FB:F5:52:B0:3B:05:94:83:33:19:15:38:3F:72:83:D9:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/390af8e2-1368-3158-9475-fc3a4f8eaa53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:10:2c:52:7b:43:62:38:68:28:dc:38:b3:ba:ab:6e:aa:f5: ba:e7:3c:69:0a:fd:a5:88:b2:94:4c:65:78:e7:db:39:9a:74: 94:14:7e:00:82:39:bb:32:eb:c4:79:d5:b2:90:84:79:d1:22: 0c:18:1e:ce:80:ff:3e:44:a3:bc:55:3b:b5:66:a4:15:f3:48: 00:c7:24:bf:a9:57:be:2f:49:c9:82:bb:3e:73:e6:d9:28:1f: c5:6a:a8:d7:6e:bb:2e:5c:72:a8:a8:3f:5e:a4:fe:d7:0e:e7: b6:b1:2e:b9:82:98:69:59:3e:8b:40:f5:f5:2c:26:5e:22:3a: 44:1f:15:e8:ca:ff:18:55:bc:fb:c9:26:49:b6:ae:dd:2d:02: 8c:96:82:ff:99:67:27:94:02:73:e4:70:1f:65:c5:51:ae:aa: eb:85:7e:8b:e9:2c:f6:e4:fd:d9:b9:be:c5:fe:63:49:30:d4: 70:a1:02:45:bf:87:e4:af:86:e3:76:1c:e7:53:b1:e1:8b:0c: 84:19:99:fb:22:c8:4f:fc:5e:53:3d:00:3f:53:41:3b:e0:54: 51:97:af:cf:98:63:8d:96:97:32:c3:a3:6d:9c:fa:4e:1d:02: 49:39:62:9d:d6:4a:5e:88:34:9c:ac:4c:9c:48:36:c0:84:d1: 8a:37:b3:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JZMUwan4A22eDdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAwMzIzMFoXDTI2MTIyNDAxMzIzMFowLzEtMCsGA1UEAxMk ODViZmM1YTctMWU5NS00MDdiLWIwZTYtYWRmMTAzZGU4MzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLBhsMZjOhset8m9Im+SMIEenwRt1AJQDyzV Vqgsax/4obTZxxG/ANSET2MBO070OEw16MTnyW4o38qqDlsW/g21LEz+6XvYY8yN LjLNEUn/gO0wr+DJOXhOwrMThdvSyhjasnUvOGtU1dyQ/kiIILWdQbZuZSTeG4q+ nWMwbR0TJk6XI+71YUdmEV4DjlpuFQVq0J48AwJpHE3a31atbSkn+xb4kSW+CU2l y17EiVAwcDILyPS6ShUliuNaULoXzDyShfFfE3+QjBtw2eDh8EyZY5Pf1PXPJBKs apJZ20QBKIlBQNibaziZRXpRYQsdVhyrP70F4L6vh6i+Q63RPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMk9wvv1UrA7BZSDMxkVOD9yg9kDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzkwYWY4ZTItMTM2OC0z MTU4LTk0NzUtZmMzYTRmOGVhYTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPRVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcQLFJ7Q2I4aCjcOLO6q26q9brnPGkK/aWIspRMZXjn2zmadJQUfgCC Obsy68R51bKQhHnRIgwYHs6A/z5Eo7xVO7VmpBXzSADHJL+pV74vScmCuz5z5tko H8VqqNduuy5ccqioP16k/tcO57axLrmCmGlZPotA9fUsJl4iOkQfFejK/xhVvPvJ Jkm2rt0tAoyWgv+ZZyeUAnPkcB9lxVGuquuFfovpLPbk/dm5vsX+Y0kw1HChAkW/ h+SvhuN2HOdTseGLDIQZmfsiyE/8XlM9AD9TQTvgVFGXr8+YY42WlzLDo22c+k4d Akk5Yp3WSl6INJysTJxINsCE0Yo3szI= -----END CERTIFICATE-----Generated at Mon Sep 28 06:53:16 2026 by rpki-client