$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/696b9e64-f8ad-34f3-8555-f1e48edd31af.roa File: 696b9e64-f8ad-34f3-8555-f1e48edd31af.roa (raw, json) Hash identifier: 3g7/CL5S9g9xntzGg64DzjcJnIO+1rbMZ0OpmtAb+R4= Subject key identifier: AC:0F:65:F5:B1:0F:1B:06:CA:81:F6:04:BB:85:B5:D4:FF:D3:72:D8 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4AD5316A992CA6FBD03B2B80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/696b9e64-f8ad-34f3-8555-f1e48edd31af.roa Signing time: Fri 25 Sep 2026 12:54:50 +0000 ROA not before: Fri 25 Sep 2026 12:54:50 +0000 ROA not after: Thu 24 Dec 2026 13:54:50 +0000 asID: 6079 IP address blocks: 72.244.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d5:31:6a:99:2c:a6:fb:d0:3b:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 12:54:50 2026 GMT Not After : Dec 24 13:54:50 2026 GMT Subject: CN=ba6e8587-c7e4-4313-84d0-361391bbfbd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9b:51:a4:d3:1f:0e:bf:44:2a:64:87:f3:12: 83:6c:ad:23:cf:30:2a:f5:98:73:27:49:69:36:c8: 67:02:4a:c2:ec:37:58:e9:cb:97:ec:95:03:5d:a0: 34:25:c5:ca:f9:ad:25:66:6b:80:97:e3:1c:90:a7: 86:76:b9:7f:f6:1f:a0:cc:bc:43:a0:01:d5:3b:7d: 35:b5:bb:3a:04:ef:ae:8e:56:b4:2b:db:55:2c:c1: 11:5d:25:64:6e:44:ad:bd:23:25:7b:fc:bd:d5:1c: 6c:ff:92:01:63:0a:15:52:03:db:3a:6c:2b:fd:a1: 2a:95:42:f1:c0:a0:5e:08:6f:32:13:de:99:d0:13: e6:74:f6:42:ab:66:bf:79:b0:61:a5:e8:4c:42:f3: 69:53:b3:82:8d:84:98:e8:8a:08:1a:2d:8a:63:75: 6b:75:c2:a3:7c:e9:66:05:ac:4f:4c:94:a2:18:62: d8:8c:41:40:71:94:da:cc:64:3d:bd:96:b3:91:de: 39:1b:52:11:0c:f7:a5:2a:2e:d9:9b:12:9d:bb:f1: 59:2f:3f:c3:33:d8:c9:49:ef:36:4a:85:be:04:11: da:77:6d:9b:af:67:fe:3c:85:3c:31:86:75:72:f1: 0e:7e:be:b8:ea:56:01:5d:37:ae:82:c1:63:0c:05: 4b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:0F:65:F5:B1:0F:1B:06:CA:81:F6:04:BB:85:B5:D4:FF:D3:72:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/696b9e64-f8ad-34f3-8555-f1e48edd31af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:91:af:37:f2:7a:0b:16:e1:98:f4:8b:0f:4a:39:7e:93:97: 6e:d4:49:41:de:6b:67:f3:19:e1:e0:d9:08:24:46:8e:d0:e0: 69:70:d2:e0:ab:8a:b8:bb:e0:64:c1:37:b6:fc:c0:5f:f1:c4: e9:3d:c5:a8:b7:91:88:e7:b8:88:18:c9:69:27:05:16:9d:e5: 30:8a:97:eb:b3:25:e7:50:be:21:e8:93:50:4c:2d:50:f2:f7: c1:bc:5c:e5:a4:37:25:8c:0a:27:8c:f8:49:3c:9b:51:93:f2: 87:36:2c:13:0d:c9:87:e5:9f:42:ce:60:8e:07:f4:36:54:77: dd:4c:c6:26:5d:ae:41:c1:8e:c9:dd:c1:ac:33:a8:0f:87:2d: f3:13:20:70:3d:96:fe:86:a0:da:6a:60:ab:aa:d9:3b:01:24: 8f:64:72:4d:ea:78:e5:05:4a:6f:ee:9d:b4:01:28:da:ce:a0: d7:23:14:92:9e:b6:ec:ee:bb:31:46:51:c8:fb:f0:4b:c3:d6: ea:ad:c7:0e:e2:21:4d:d2:fb:25:df:db:91:0d:49:24:16:d9: 02:13:1f:08:3d:e7:5d:2b:c0:19:3c:33:a6:3e:9b:7b:3f:6e: 92:d0:0c:68:07:43:2a:17:e6:64:d6:82:c1:a8:99:35:8f:29: 5a:d0:cd:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9K1TFqmSym+9A7K4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTEyNTQ1MFoXDTI2MTIyNDEzNTQ1MFowLzEtMCsGA1UEAxMk YmE2ZTg1ODctYzdlNC00MzEzLTg0ZDAtMzYxMzkxYmJmYmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZtRpNMfDr9EKmSH8xKDbK0jzzAq9ZhzJ0lp NshnAkrC7DdY6cuX7JUDXaA0JcXK+a0lZmuAl+MckKeGdrl/9h+gzLxDoAHVO301 tbs6BO+ujla0K9tVLMERXSVkbkStvSMle/y91Rxs/5IBYwoVUgPbOmwr/aEqlULx wKBeCG8yE96Z0BPmdPZCq2a/ebBhpehMQvNpU7OCjYSY6IoIGi2KY3VrdcKjfOlm BaxPTJSiGGLYjEFAcZTazGQ9vZazkd45G1IRDPelKi7ZmxKdu/FZLz/DM9jJSe82 SoW+BBHad22br2f+PIU8MYZ1cvEOfr646lYBXTeugsFjDAVL3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwPZfWxDxsGyoH2BLuFtdT/03LYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjk2YjllNjQtZjhhZC0z NGYzLTg1NTUtZjFlNDhlZGQzMWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPQkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeRrzfyegsW4Zj0iw9KOX6Tl27USUHea2fzGeHg2QgkRo7Q4Glw0uCr iri74GTBN7b8wF/xxOk9xai3kYjnuIgYyWknBRad5TCKl+uzJedQviHok1BMLVDy 98G8XOWkNyWMCieM+Ek8m1GT8oc2LBMNyYfln0LOYI4H9DZUd91MxiZdrkHBjsnd wawzqA+HLfMTIHA9lv6GoNpqYKuq2TsBJI9kck3qeOUFSm/unbQBKNrOoNcjFJKe tuzuuzFGUcj78EvD1uqtxw7iIU3S+yXf25ENSSQW2QITHwg9510rwBk8M6Y+m3s/ bpLQDGgHQyoX5mTWgsGomTWPKVrQzYE= -----END CERTIFICATE-----Generated at Sun Oct 11 08:28:59 2026 by rpki-client