$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5857f24f-8b55-35c3-a514-9d3f1a90d46b.roa File: 5857f24f-8b55-35c3-a514-9d3f1a90d46b.roa (raw, json) Hash identifier: C/jULuOs9DMEeuIFLuiBNLgdqPKYfLlQc6g0y0BdJ4g= Subject key identifier: 03:73:77:D3:55:92:A6:5F:8D:F6:7F:38:68:74:8D:F2:3F:B4:8A:05 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EF9E20DE92392AEBB5A700060 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5857f24f-8b55-35c3-a514-9d3f1a90d46b.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 2914 IP address blocks: 72.245.128.0/21 maxlen: 24 72.245.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:0d:e9:23:92:ae:bb:5a:70:00:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=9c0a71ac-5a74-4cb0-9f77-2e7588aa2a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0f:68:15:48:3f:a4:44:97:35:b7:6b:73:d0: bd:c2:49:ee:20:29:2b:01:00:f7:9c:fb:11:b1:a7: 73:a7:b2:d7:db:e5:38:ec:c4:49:86:cb:07:32:7f: bc:66:fd:bf:b1:2d:e9:b2:6b:86:43:7e:bb:c8:ed: 43:2d:0b:47:70:93:e6:e8:c9:e4:7d:e2:1a:2d:2e: eb:d1:26:40:a8:23:02:f4:2e:3c:91:a5:40:cf:e4: dd:75:3d:84:49:9b:94:6d:30:4d:d4:c0:c6:79:ad: 80:9b:44:49:d3:c3:c6:af:01:ae:e9:ee:0c:6f:58: ed:d0:63:d4:ac:1b:3d:6e:b8:37:0f:69:06:6a:e2: f6:51:6f:91:16:eb:2e:7c:eb:b3:8b:6b:b8:82:36: a3:d5:ff:00:51:1d:03:ea:81:f9:ac:d6:6f:fb:d0: 9f:12:65:2f:fb:b7:d4:4f:dd:88:53:53:01:28:74: a2:97:00:f8:ec:08:c3:d4:0e:a2:c1:a4:54:ef:5f: d3:a1:0a:38:48:d5:30:3d:82:d0:96:29:40:e3:03: cc:a2:f7:3a:bf:0e:ed:15:01:ac:7b:66:2a:63:bb: e8:2a:b0:ba:62:43:02:6e:46:53:7b:d5:3b:18:77: d4:c0:1d:4e:79:de:bf:47:e1:8d:16:89:25:1f:07: d7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:73:77:D3:55:92:A6:5F:8D:F6:7F:38:68:74:8D:F2:3F:B4:8A:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5857f24f-8b55-35c3-a514-9d3f1a90d46b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.245.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:a7:17:b8:99:f4:59:c5:01:84:e4:7d:42:6c:96:3e:73:8e: 6c:f6:80:0b:73:15:67:78:f6:77:29:a1:4a:93:46:9a:d7:fb: 4f:f9:21:c1:1c:d6:a5:d1:86:3a:9c:c7:1b:48:2e:df:5b:54: 56:f5:74:14:92:c7:26:89:0b:92:f5:92:1e:31:8d:ee:a9:f1: 2b:6b:68:df:ff:b3:dc:d1:b7:8f:65:6b:94:8b:6e:ad:8c:c0: 61:e8:2b:4f:aa:1f:b7:20:5c:af:63:f4:a1:98:33:4f:c8:b0: 55:05:36:e9:8d:26:d3:5c:a5:47:af:41:c8:eb:b3:20:d6:26: cd:df:aa:86:9b:18:e1:3a:04:2e:9a:b0:e8:2e:49:25:34:10: 4b:eb:5d:da:71:79:77:81:85:d4:6c:ed:29:bc:dd:97:92:46: 27:49:29:46:06:73:c3:8f:88:37:8a:79:ed:3a:ab:a9:1e:8d: cb:3a:e6:e1:22:58:05:50:b6:11:83:96:33:d2:7b:f6:64:24: 90:e5:06:24:55:9e:42:5a:9f:63:4a:c4:e5:fc:e1:93:54:ff: 28:f4:fd:2e:a6:8d:2b:3e:72:ac:f1:5f:07:78:cc:c3:30:b9: ce:22:6e:44:13:4a:87:5f:03:52:16:79:71:0c:ff:65:3b:c0: d5:ab:c8:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754g3pI5Kuu1pwAGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk OWMwYTcxYWMtNWE3NC00Y2IwLTlmNzctMmU3NTg4YWEyYTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7A9oFUg/pESXNbdrc9C9wknuICkrAQD3nPsR sadzp7LX2+U47MRJhssHMn+8Zv2/sS3psmuGQ367yO1DLQtHcJPm6MnkfeIaLS7r 0SZAqCMC9C48kaVAz+TddT2ESZuUbTBN1MDGea2Am0RJ08PGrwGu6e4Mb1jt0GPU rBs9brg3D2kGauL2UW+RFusufOuzi2u4gjaj1f8AUR0D6oH5rNZv+9CfEmUv+7fU T92IU1MBKHSilwD47AjD1A6iwaRU71/ToQo4SNUwPYLQlilA4wPMovc6vw7tFQGs e2YqY7voKrC6YkMCbkZTe9U7GHfUwB1Oed6/R+GNFoklHwfXmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANzd9NVkqZfjfZ/OGh0jfI/tIoFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNTg1N2YyNGYtOGI1NS0z NWMzLWE1MTQtOWQzZjFhOTBkNDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESPWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMWnF7iZ9FnFAYTkfUJslj5zjmz2gAtzFWd49ncpoUqTRprX+0/5IcEc 1qXRhjqcxxtILt9bVFb1dBSSxyaJC5L1kh4xje6p8StraN//s9zRt49la5SLbq2M wGHoK0+qH7cgXK9j9KGYM0/IsFUFNumNJtNcpUevQcjrsyDWJs3fqoabGOE6BC6a sOguSSU0EEvrXdpxeXeBhdRs7Sm83ZeSRidJKUYGc8OPiDeKee06q6kejcs65uEi WAVQthGDljPSe/ZkJJDlBiRVnkJan2NKxOX84ZNU/yj0/S6mjSs+cqzxXwd4zMMw uc4ibkQTSodfA1IWeXEM/2U7wNWryCs= -----END CERTIFICATE-----Generated at Thu Oct 8 02:21:44 2026 by rpki-client