$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d97cbb7-101c-3256-b1df-d5eae6da338b.roa File: 4d97cbb7-101c-3256-b1df-d5eae6da338b.roa (raw, json) Hash identifier: ohhLjKMMZKtznqWMVARMMZmKefQzXqwGciLIbLd2HXo= Subject key identifier: 65:63:C0:71:65:6E:64:21:E1:AB:46:92:D1:99:3B:1D:3D:FD:72:39 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F497387B4AD22F58C84309A80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d97cbb7-101c-3256-b1df-d5eae6da338b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 9304 IP address blocks: 72.244.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:87:b4:ad:22:f5:8c:84:30:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=80a8c703-a59a-4d27-9c17-f1d4ca36db09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:34:c5:50:42:81:80:dd:44:ab:9b:62:2a:e8: ee:f7:a5:af:31:89:e2:0c:54:00:65:9a:fa:05:99: 69:65:bd:54:57:ac:ee:98:3a:5d:62:ef:4d:2a:ef: 92:f8:88:78:5d:90:73:97:7c:15:60:9c:32:5b:55: a8:cf:44:26:6b:10:3b:51:6a:ba:3e:47:d7:3b:ef: e7:11:23:d8:56:be:21:26:9b:aa:1f:7a:ca:ad:41: 2b:14:74:ef:71:d8:53:94:55:56:95:d5:da:7a:f7: 31:ba:94:cd:20:e4:c9:96:b3:f1:4f:39:e6:76:8c: e6:26:ed:b6:8d:dd:d7:4b:20:01:90:e0:d1:0b:e7: 36:12:52:e5:3d:d5:59:9f:43:9b:5d:9d:c5:87:63: ff:2b:81:11:06:4a:0d:dc:3d:e0:11:a8:1c:f5:50: 91:0e:d8:94:ed:3d:bf:9e:19:4f:c2:f6:ff:d7:21: ba:a9:c3:b2:94:c2:00:4f:be:e6:83:3b:e0:ca:0d: e7:cb:77:99:f0:4e:41:4b:f9:5b:36:2b:05:7c:37: f3:55:a9:10:a5:d1:58:95:4a:d0:33:59:e1:50:f5: 86:61:1a:24:e2:e6:e5:34:e3:bf:0b:b2:04:9a:96: 9d:78:60:99:1d:ed:d5:c1:15:30:c8:0c:e7:f9:93: e8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:63:C0:71:65:6E:64:21:E1:AB:46:92:D1:99:3B:1D:3D:FD:72:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d97cbb7-101c-3256-b1df-d5eae6da338b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:65:ad:b2:50:d6:69:c9:24:9f:41:fe:82:59:87:01:69:d0: 1c:0c:b9:ff:74:1b:e2:04:c9:c8:6c:5d:15:5a:c4:72:ea:eb: 3a:3a:3c:81:a2:5a:c6:79:e5:16:72:26:32:71:1d:99:d3:89: 88:7d:f5:7a:fd:16:73:60:c3:af:86:ee:29:de:73:0f:a8:e9: 56:52:0a:0e:94:42:a1:5f:a8:83:23:2f:de:c4:7b:3d:55:11: 3f:3f:77:0c:9e:ec:bc:6f:80:1f:f3:15:30:0c:01:4b:4a:58: 68:37:f4:78:bb:22:e5:1a:59:05:8a:2b:07:21:e2:f3:b7:c8: 59:a1:93:77:b0:18:eb:8f:60:a3:bb:a0:6c:9f:b6:82:50:31: 8b:6b:53:8d:9c:fc:43:a7:4b:11:69:66:4f:03:e2:4c:a9:2c: 20:66:dc:fd:f6:eb:2d:f9:06:9c:b4:f9:0f:26:ca:ab:a7:83: 51:00:e4:36:cc:c3:c0:c4:4f:8b:7c:0e:89:ac:d3:50:ff:93: 8c:51:81:f0:50:1a:89:b3:55:19:c3:2a:ee:db:99:57:b9:b5: f6:5b:67:2f:0f:d4:73:db:39:94:92:85:59:17:67:cf:52:fb: 2f:f1:0f:9b:99:b6:89:93:c5:c2:4e:27:a7:e2:9f:a2:97:3a: 4e:9d:a2:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc4e0rSL1jIQwmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODBhOGM3MDMtYTU5YS00ZDI3LTljMTctZjFkNGNhMzZkYjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzTFUEKBgN1Eq5tiKuju96WvMYniDFQAZZr6 BZlpZb1UV6zumDpdYu9NKu+S+Ih4XZBzl3wVYJwyW1Woz0QmaxA7UWq6PkfXO+/n ESPYVr4hJpuqH3rKrUErFHTvcdhTlFVWldXaevcxupTNIOTJlrPxTznmdozmJu22 jd3XSyABkODRC+c2ElLlPdVZn0ObXZ3Fh2P/K4ERBkoN3D3gEagc9VCRDtiU7T2/ nhlPwvb/1yG6qcOylMIAT77mgzvgyg3ny3eZ8E5BS/lbNisFfDfzVakQpdFYlUrQ M1nhUPWGYRok4ublNOO/C7IEmpadeGCZHe3VwRUwyAzn+ZPoawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVjwHFlbmQh4atGktGZOx09/XI5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGQ5N2NiYjctMTAxYy0z MjU2LWIxZGYtZDVlYWU2ZGEzMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPRtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBlrbJQ1mnJJJ9B/oJZhwFp0BwMuf90G+IEychsXRVaxHLq6zo6PIGi WsZ55RZyJjJxHZnTiYh99Xr9FnNgw6+G7inecw+o6VZSCg6UQqFfqIMjL97Eez1V ET8/dwye7LxvgB/zFTAMAUtKWGg39Hi7IuUaWQWKKwch4vO3yFmhk3ewGOuPYKO7 oGyftoJQMYtrU42c/EOnSxFpZk8D4kypLCBm3P326y35Bpy0+Q8myqung1EA5DbM w8DET4t8Doms01D/k4xRgfBQGomzVRnDKu7bmVe5tfZbZy8P1HPbOZSShVkXZ89S +y/xD5uZtomTxcJOJ6fin6KXOk6doow= -----END CERTIFICATE-----Generated at Tue Sep 29 12:57:02 2026 by rpki-client