$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b21123a7-5f10-313a-ba9a-714a6880b487.roa File: b21123a7-5f10-313a-ba9a-714a6880b487.roa (raw, json) Hash identifier: SjGmukZW4Kn8ZFvzfCJiLe72aLD332/3sWp1SL7JPYE= Subject key identifier: 67:67:0A:74:05:C2:98:98:D5:9A:4C:6C:38:BD:B8:0B:4F:F6:7A:AB Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F480D65FE0E62E048BC49CE00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b21123a7-5f10-313a-ba9a-714a6880b487.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 5650 IP address blocks: 72.244.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:65:fe:0e:62:e0:48:bc:49:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=ee456cf2-7e1c-4488-abbe-f8ee5e8c2996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:db:06:12:ef:bb:9d:8f:0e:6c:30:48:d4:69: 79:ba:1f:9d:35:b8:e3:39:60:f5:09:7b:0d:60:8e: ec:24:be:cc:1a:d6:4a:cf:1a:76:ee:0a:98:d4:75: 27:73:32:00:2e:6e:43:73:88:44:58:1c:a5:71:f8: d3:15:12:2b:ea:0f:f2:46:d3:89:b7:3c:5e:69:63: f5:55:ba:6e:99:41:aa:31:a9:a0:b2:67:c6:06:4d: 0c:22:1b:01:0a:55:5a:e3:74:0e:80:81:f3:ba:08: 78:36:41:e7:ae:4a:60:4d:8c:ae:2e:40:dc:1b:13: 5a:60:12:a9:d1:f5:b1:7f:9e:05:72:3a:57:1a:e4: e9:7f:28:22:14:89:5c:a8:39:a6:40:fa:5b:2c:a3: 80:d3:6e:c5:da:19:09:46:90:14:43:0d:0b:33:61: 04:ed:58:9a:87:15:d1:70:31:39:39:1e:b5:5c:80: cd:94:46:76:26:9d:f8:e2:89:c9:6f:f7:b9:f7:29: 49:a1:54:75:fb:76:1f:54:f9:b1:1f:04:74:1b:c8: 53:cd:41:da:2a:83:a5:f8:8f:62:90:cb:26:86:8d: fa:31:1d:a3:70:8b:d4:fd:77:c8:58:ec:f9:31:62: 77:e0:09:f8:82:c3:1c:d9:e6:94:97:9e:f8:51:5a: 03:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:67:0A:74:05:C2:98:98:D5:9A:4C:6C:38:BD:B8:0B:4F:F6:7A:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b21123a7-5f10-313a-ba9a-714a6880b487.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:34:17:cf:aa:55:64:65:85:e3:b4:3d:22:e1:ec:3b:b2:1d: 13:58:8c:17:1f:b6:93:72:49:11:91:bf:f8:42:6a:6d:08:af: 5e:e3:5b:35:ff:54:7b:16:6f:75:d4:c4:66:fa:a1:35:69:92: 6d:9e:22:e4:a0:a5:ff:a7:c6:fc:89:85:07:51:82:b7:c6:ce: 19:dd:03:9c:6e:2e:55:34:8a:a6:e4:35:90:db:59:e1:d7:c8: 65:94:52:6e:24:13:3f:98:31:02:34:52:8a:72:6f:30:cf:fd: f1:75:b1:8e:3a:a4:74:ef:5a:78:41:47:1d:48:be:99:51:8a: 1f:02:38:a8:10:2b:94:0e:39:bc:75:f8:2c:10:7c:e3:ce:b5: a1:65:b2:f4:bc:8a:6a:f7:6a:95:38:59:c6:03:80:cc:ff:50: 29:1c:17:ee:3f:cd:98:a4:5c:3b:eb:b4:08:e8:97:cf:71:0e: 5d:79:e2:2b:8e:ad:d2:ec:51:c2:56:79:96:f2:b9:3b:15:e7: e9:34:cb:2c:77:0c:bb:31:40:5a:c0:53:21:37:ed:f1:33:06: 94:72:f2:39:65:72:05:eb:a6:15:78:37:14:70:4e:c0:b2:3a: 1e:29:17:bf:77:5c:45:6c:5e:35:ee:08:f8:c2:c8:3a:a7:06: d3:b8:00:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDWX+DmLgSLxJzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZWU0NTZjZjItN2UxYy00NDg4LWFiYmUtZjhlZTVlOGMyOTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9dsGEu+7nY8ObDBI1Gl5uh+dNbjjOWD1CXsN YI7sJL7MGtZKzxp27gqY1HUnczIALm5Dc4hEWBylcfjTFRIr6g/yRtOJtzxeaWP1 VbpumUGqMamgsmfGBk0MIhsBClVa43QOgIHzugh4NkHnrkpgTYyuLkDcGxNaYBKp 0fWxf54FcjpXGuTpfygiFIlcqDmmQPpbLKOA027F2hkJRpAUQw0LM2EE7ViahxXR cDE5OR61XIDNlEZ2Jp344onJb/e59ylJoVR1+3YfVPmxHwR0G8hTzUHaKoOl+I9i kMsmho36MR2jcIvU/XfIWOz5MWJ34An4gsMc2eaUl574UVoDSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdnCnQFwpiY1ZpMbDi9uAtP9nqrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjIxMTIzYTctNWYxMC0z MTNhLWJhOWEtNzE0YTY4ODBiNDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPS0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALg0F8+qVWRlheO0PSLh7DuyHRNYjBcftpNySRGRv/hCam0Ir17jWzX/ VHsWb3XUxGb6oTVpkm2eIuSgpf+nxvyJhQdRgrfGzhndA5xuLlU0iqbkNZDbWeHX yGWUUm4kEz+YMQI0UopybzDP/fF1sY46pHTvWnhBRx1IvplRih8COKgQK5QOObx1 +CwQfOPOtaFlsvS8imr3apU4WcYDgMz/UCkcF+4/zZikXDvrtAjol89xDl154iuO rdLsUcJWeZbyuTsV5+k0yyx3DLsxQFrAUyE37fEzBpRy8jllcgXrphV4NxRwTsCy Oh4pF793XEVsXjXuCPjCyDqnBtO4AJE= -----END CERTIFICATE-----Generated at Thu Oct 8 15:19:02 2026 by rpki-client