$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/44b6a699-b84f-3452-af68-12e4066b9fa6.roa File: 44b6a699-b84f-3452-af68-12e4066b9fa6.roa (raw, json) Hash identifier: ggHeZ5ibQnEADflZxFE5Q342GoM/pFqc/mzlWIH0EqY= Subject key identifier: EF:94:0B:60:09:0F:63:C7:EA:C6:EE:93:42:C8:AF:12:7E:EA:F8:AD Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4AD587F38D3210C728A72A80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/44b6a699-b84f-3452-af68-12e4066b9fa6.roa Signing time: Fri 25 Sep 2026 12:55:30 +0000 ROA not before: Fri 25 Sep 2026 12:55:30 +0000 ROA not after: Thu 24 Dec 2026 13:55:30 +0000 asID: 6079 IP address blocks: 72.244.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d5:87:f3:8d:32:10:c7:28:a7:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 12:55:30 2026 GMT Not After : Dec 24 13:55:30 2026 GMT Subject: CN=7ca5afc8-90cd-4559-9bec-b836a094d5d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:34:6a:e5:36:e5:b1:fc:a2:7e:81:c2:64:81: 06:a5:eb:ef:76:c1:e8:44:a6:a7:c0:96:7d:2c:e4: c0:34:58:7d:e7:46:af:2f:af:bc:82:96:9f:00:f0: 36:f1:5e:2f:7f:11:c2:f3:4c:a6:2f:eb:81:e4:29: 4a:a8:59:4a:ed:78:3f:45:fa:5e:9f:3c:08:ef:34: cf:ad:2e:17:17:2d:b9:68:c9:5b:f4:0c:24:aa:d1: c3:5f:be:72:97:04:18:e4:8f:a0:e0:2b:02:40:c9: 63:e1:4e:53:f5:57:4e:c9:8f:a3:63:f1:c8:a5:3f: ba:b7:6f:98:b6:51:bf:a6:b2:c0:17:90:fe:ce:53: ea:3a:82:08:b5:18:fe:59:55:32:17:97:83:7e:2a: 0a:d3:e9:12:b4:c1:53:9e:70:1d:bd:8a:67:44:d1: 9d:98:91:a5:13:10:11:cc:39:bb:03:b4:5a:08:87: b2:ab:39:d2:a2:69:48:7e:10:c1:37:72:9f:14:a8: b4:a5:f0:74:95:4c:26:d7:56:d7:5d:0d:59:96:f0: 2c:31:75:e8:a2:42:c1:99:cc:d1:07:8d:e8:94:5d: 7b:1e:18:46:0b:8c:f0:a6:6d:75:a8:4b:3c:14:43: 5b:61:78:ff:7c:b0:17:89:ce:18:c0:e7:2a:e0:cf: 4e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:94:0B:60:09:0F:63:C7:EA:C6:EE:93:42:C8:AF:12:7E:EA:F8:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/44b6a699-b84f-3452-af68-12e4066b9fa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:8b:88:b7:0b:ec:6a:79:78:db:f7:48:bd:e1:b0:24:81:c2: a9:c7:45:81:67:29:34:be:8d:2c:32:7d:9c:4d:e1:46:fa:15: 6d:a2:b8:6e:41:89:67:33:eb:be:86:50:f8:f7:29:39:1b:fc: f0:54:5d:aa:52:e2:d9:70:1d:c0:81:b4:21:97:2c:8f:b0:22: f3:44:92:95:5c:ca:7c:11:4e:b0:0f:ba:b2:90:a7:31:dd:62: 47:2b:b7:a6:2f:0d:bd:ad:75:05:cd:72:40:d8:e7:b1:8f:66: 0f:6d:de:e8:00:2f:6c:ac:54:65:7c:32:62:56:27:ed:78:bd: f5:b2:4f:0c:5c:ec:32:2d:c7:b4:20:86:87:7b:15:86:ec:b6: 9e:f6:a9:40:f5:09:0e:4a:03:a2:23:dc:0d:44:75:6e:2d:7e: ee:2f:8d:64:ab:5a:7a:11:5c:f9:1a:72:ce:6c:60:ff:04:fb: 80:58:ec:29:8d:50:1a:ed:ae:4c:fa:db:8c:c1:f4:7e:97:88: d2:96:49:b4:ae:07:af:c8:0a:54:b4:57:70:73:1c:69:88:5e: ea:d3:5a:2b:8d:b7:4f:41:83:39:4c:46:c8:e8:be:0b:67:6b: 47:90:56:35:34:19:7f:6a:68:55:f9:18:e8:74:d8:44:a1:2c: aa:88:da:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9K1YfzjTIQxyinKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTEyNTUzMFoXDTI2MTIyNDEzNTUzMFowLzEtMCsGA1UEAxMk N2NhNWFmYzgtOTBjZC00NTU5LTliZWMtYjgzNmEwOTRkNWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+DRq5TblsfyifoHCZIEGpevvdsHoRKanwJZ9 LOTANFh950avL6+8gpafAPA28V4vfxHC80ymL+uB5ClKqFlK7Xg/RfpenzwI7zTP rS4XFy25aMlb9AwkqtHDX75ylwQY5I+g4CsCQMlj4U5T9VdOyY+jY/HIpT+6t2+Y tlG/prLAF5D+zlPqOoIItRj+WVUyF5eDfioK0+kStMFTnnAdvYpnRNGdmJGlExAR zDm7A7RaCIeyqznSomlIfhDBN3KfFKi0pfB0lUwm11bXXQ1ZlvAsMXXookLBmczR B43olF17HhhGC4zwpm11qEs8FENbYXj/fLAXic4YwOcq4M9OIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+UC2AJD2PH6sbuk0LIrxJ+6vitMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDRiNmE2OTktYjg0Zi0z NDUyLWFmNjgtMTJlNDA2NmI5ZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSPTYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL2LiLcL7Gp5eNv3SL3hsCSBwqnHRYFnKTS+jSwyfZxN4Ub6FW2iuG5B iWcz676GUPj3KTkb/PBUXapS4tlwHcCBtCGXLI+wIvNEkpVcynwRTrAPurKQpzHd Ykcrt6YvDb2tdQXNckDY57GPZg9t3ugAL2ysVGV8MmJWJ+14vfWyTwxc7DItx7Qg hod7FYbstp72qUD1CQ5KA6Ij3A1EdW4tfu4vjWSrWnoRXPkacs5sYP8E+4BY7CmN UBrtrkz624zB9H6XiNKWSbSuB6/IClS0V3BzHGmIXurTWiuNt09BgzlMRsjovgtn a0eQVjU0GX9qaFX5GOh02EShLKqI2kE= -----END CERTIFICATE-----Generated at Mon Sep 28 05:17:01 2026 by rpki-client