$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/70f1537c-d59b-377b-8097-88b75108e48b.roa File: 70f1537c-d59b-377b-8097-88b75108e48b.roa (raw, json) Hash identifier: 7XVFsaa3MPsZ7I5V3xMwt+qWpKSIdIuSZaOp6RGNdgg= Subject key identifier: FB:05:06:AE:39:C2:C4:48:8C:BA:62:32:F6:F5:93:DB:29:22:28:D1 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F5B97FE9210C6D34AB55E3C40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/70f1537c-d59b-377b-8097-88b75108e48b.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 152672 IP address blocks: 72.244.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:97:fe:92:10:c6:d3:4a:b5:5e:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=1414f26b-ae7e-40b0-8ab2-061c7055bbf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:14:e3:2e:75:74:b9:98:06:59:1a:ea:96:64: b0:d0:07:b5:3e:8f:f9:f3:bc:7f:de:15:c8:0b:b7: 0a:a5:ef:32:4a:0e:6d:40:f3:51:cb:8c:bf:c9:d8: 54:5b:9d:d2:15:ed:82:12:77:f0:b5:75:2e:d3:ff: 73:fc:19:5f:93:f3:c1:c1:13:cc:aa:f7:8e:7c:66: 56:df:57:a1:68:1c:14:20:0b:7b:bd:de:9b:9b:27: e9:64:22:ed:58:42:77:d7:f1:d6:71:d9:7a:09:a8: 60:6e:2f:ff:6e:c9:73:73:ae:e7:a1:96:75:91:24: 82:7c:a9:2e:74:bd:4b:72:35:91:61:06:30:c0:ce: dd:06:fa:3e:e5:e3:b0:8b:08:0e:39:d1:4e:7f:cf: 11:7c:34:3a:41:07:9d:4b:39:89:9c:fa:40:2d:ac: 38:10:81:c8:b2:6f:7c:29:7c:03:95:26:5c:04:4f: e6:7a:29:6b:5d:a9:fd:d8:65:a7:2d:ac:a5:98:2d: b5:bd:4d:c2:5e:c5:9d:77:cb:25:36:27:e5:9e:25: 60:5f:e0:d2:63:3f:7f:e4:52:66:a5:89:3d:8f:94: 87:a8:47:22:c8:80:da:d2:5d:71:01:f7:c7:4e:04: 82:0b:2d:73:2b:b2:15:2d:15:1e:8b:0c:aa:00:cd: 1d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:05:06:AE:39:C2:C4:48:8C:BA:62:32:F6:F5:93:DB:29:22:28:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/70f1537c-d59b-377b-8097-88b75108e48b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:2f:b6:13:fe:43:a3:21:77:c2:5f:a1:67:50:f6:31:34:97: c2:01:9b:01:a4:25:29:8b:3d:7b:b2:e3:e6:61:e7:41:2b:fd: 38:05:0a:8e:4c:ba:87:9d:1a:85:61:c8:c8:f3:fb:09:b4:0a: 1d:69:5b:1c:76:51:6b:5a:c9:a2:7e:8e:14:df:f3:c8:b8:43: 9d:ad:8b:0d:05:9e:f4:7d:2e:4f:09:9f:97:04:c8:85:13:10: 42:21:4d:19:d7:d0:79:d1:df:c5:77:f0:85:8a:17:05:ff:df: 08:c2:5a:0d:2c:fb:a9:0b:32:ca:6b:0c:6e:83:ed:fb:9a:cc: ae:c3:25:f1:4d:df:98:2f:a4:0f:4b:10:72:be:73:b1:36:df: db:ce:24:d7:00:1f:f5:55:e8:0c:a8:36:10:93:c8:d3:78:a9: dd:04:21:f6:be:fa:33:50:eb:9c:bf:e9:52:79:30:89:af:b8: 58:36:de:d6:ee:20:a4:bf:80:56:53:96:c0:db:b8:81:8c:f4: 65:97:05:6d:93:37:06:d4:70:f8:3e:e2:75:d4:86:f8:e6:cd: de:9d:57:d6:5f:01:13:9c:e6:6a:b0:cc:c6:74:a4:f5:00:f1: aa:d9:bb:94:5b:f6:d0:0e:e7:c2:1c:3d:84:d2:10:e9:b4:25: 4d:60:2a:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bl/6SEMbTSrVePEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk MTQxNGYyNmItYWU3ZS00MGIwLThhYjItMDYxYzcwNTViYmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hTjLnV0uZgGWRrqlmSw0Ae1Po/587x/3hXI C7cKpe8ySg5tQPNRy4y/ydhUW53SFe2CEnfwtXUu0/9z/Blfk/PBwRPMqveOfGZW 31ehaBwUIAt7vd6bmyfpZCLtWEJ31/HWcdl6Cahgbi//bslzc67noZZ1kSSCfKku dL1LcjWRYQYwwM7dBvo+5eOwiwgOOdFOf88RfDQ6QQedSzmJnPpALaw4EIHIsm98 KXwDlSZcBE/meilrXan92GWnLaylmC21vU3CXsWdd8slNiflniVgX+DSYz9/5FJm pYk9j5SHqEciyIDa0l1xAffHTgSCCy1zK7IVLRUeiwyqAM0dcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsFBq45wsRIjLpiMvb1k9spIijRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNzBmMTUzN2MtZDU5Yi0z NzdiLTgwOTctODhiNzUxMDhlNDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPTkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcvthP+Q6Mhd8JfoWdQ9jE0l8IBmwGkJSmLPXuy4+Zh50Er/TgFCo5M uoedGoVhyMjz+wm0Ch1pWxx2UWtayaJ+jhTf88i4Q52tiw0FnvR9Lk8Jn5cEyIUT EEIhTRnX0HnR38V38IWKFwX/3wjCWg0s+6kLMsprDG6D7fuazK7DJfFN35gvpA9L EHK+c7E239vOJNcAH/VV6AyoNhCTyNN4qd0EIfa++jNQ65y/6VJ5MImvuFg23tbu IKS/gFZTlsDbuIGM9GWXBW2TNwbUcPg+4nXUhvjmzd6dV9ZfAROc5mqwzMZ0pPUA 8arZu5Rb9tAO58IcPYTSEOm0JU1gKtQ= -----END CERTIFICATE-----Generated at Sun Oct 11 10:09:38 2026 by rpki-client