$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ba3599f6-ddeb-33a3-b77e-9189137a1251.roa File: ba3599f6-ddeb-33a3-b77e-9189137a1251.roa (raw, json) Hash identifier: ysAEFSU9lr6wHWLumvNpVUxy1gXRA2TPrOSKRaWXC34= Subject key identifier: 69:F4:F4:46:77:F1:DC:0B:A3:35:5B:8F:C7:89:CF:06:5B:8F:72:F1 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4AD591958FD0E8D29B9ACA80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ba3599f6-ddeb-33a3-b77e-9189137a1251.roa Signing time: Fri 25 Sep 2026 12:55:35 +0000 ROA not before: Fri 25 Sep 2026 12:55:35 +0000 ROA not after: Thu 24 Dec 2026 13:55:35 +0000 asID: 6079 IP address blocks: 72.244.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d5:91:95:8f:d0:e8:d2:9b:9a:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 12:55:35 2026 GMT Not After : Dec 24 13:55:35 2026 GMT Subject: CN=db03c9b6-b4dd-496a-869b-c74435d6da05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d1:dd:66:78:26:26:78:26:56:10:29:6c:f2: 8b:18:fb:1c:d5:5b:fa:e8:e1:e2:ff:b5:d0:ee:c5: 83:d0:2f:43:9d:aa:e0:21:77:94:a7:37:e1:2f:5f: 69:b2:a9:81:dd:65:95:38:dd:6c:4e:f5:a5:87:e1: 0c:25:d7:f4:86:2e:75:64:41:41:66:df:d6:45:99: 46:7a:fb:91:13:84:6e:5a:88:c6:c8:8b:35:3e:6f: d8:05:92:82:bb:a3:88:8f:39:c0:d9:38:79:11:3a: 63:91:49:41:18:f1:2d:ef:87:95:01:cb:fe:2d:7a: ba:57:e6:c4:64:83:b9:b1:96:8d:80:e5:c7:56:34: 44:3a:c3:cc:25:dd:51:d6:55:86:9d:16:d8:df:2b: 3d:76:0e:5b:0b:cc:4b:1d:31:7c:d3:de:26:47:eb: f7:1e:93:85:f4:38:16:8f:74:02:c4:48:de:8a:af: c0:f9:4f:d7:35:72:6e:23:7c:dc:d2:b3:39:c5:55: 37:39:81:91:d4:46:2f:5c:ad:64:4d:10:dd:b2:71: 87:41:d1:ca:f6:d0:93:e7:23:2f:60:36:1b:b9:49: f0:ee:5c:b9:f4:32:6d:70:55:1f:51:72:79:3a:05: 68:8a:c6:f5:bb:9f:4c:c3:62:05:eb:7b:b7:25:0b: 04:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F4:F4:46:77:F1:DC:0B:A3:35:5B:8F:C7:89:CF:06:5B:8F:72:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ba3599f6-ddeb-33a3-b77e-9189137a1251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:cd:44:1b:4b:a8:f8:d6:c1:98:a8:f3:bd:3b:fc:51:dd:c6: 22:52:87:90:f0:7c:1a:7b:fe:66:1c:29:6d:9a:f5:95:0a:38: fe:d3:f3:e3:75:b4:52:54:b2:f4:31:47:d5:1b:96:4d:77:b9: c4:6d:4d:a9:97:4f:0e:37:b2:9f:42:08:d6:4f:9f:db:6d:71: 46:bf:56:48:ca:01:8b:8f:db:aa:49:c8:f7:c3:7a:49:41:49: 2a:3d:e9:85:22:bb:12:a2:b8:eb:36:7d:39:d8:25:a1:73:56: 30:a6:7b:a3:ec:5c:ff:c2:f9:f7:fc:58:12:7b:97:e3:46:9e: 60:fa:94:a7:ea:6e:43:1a:3c:25:09:5d:77:4a:05:80:2c:a2: c7:95:b4:91:85:83:0d:c0:66:08:5b:9f:67:c9:c7:5d:62:dd: e5:2d:9e:85:64:8e:2a:7e:6b:a6:2e:89:08:0b:3e:f8:ba:af: c1:4e:56:b3:aa:e2:50:ea:e7:e9:9b:bd:48:9b:c1:18:f4:4b: 9a:b2:8b:d9:a8:b0:84:1e:d3:bf:17:a1:03:f4:a8:bb:63:46: 59:8d:e7:2c:65:e4:27:a5:bd:e1:d6:88:ef:8e:f9:7f:bc:aa: 43:f3:db:46:84:4a:38:e4:49:39:76:d3:c9:fd:0a:b3:aa:50: 66:e0:9d:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9K1ZGVj9Do0puayoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTEyNTUzNVoXDTI2MTIyNDEzNTUzNVowLzEtMCsGA1UEAxMk ZGIwM2M5YjYtYjRkZC00OTZhLTg2OWItYzc0NDM1ZDZkYTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdHdZngmJngmVhApbPKLGPsc1Vv66OHi/7XQ 7sWD0C9DnargIXeUpzfhL19psqmB3WWVON1sTvWlh+EMJdf0hi51ZEFBZt/WRZlG evuRE4RuWojGyIs1Pm/YBZKCu6OIjznA2Th5ETpjkUlBGPEt74eVAcv+LXq6V+bE ZIO5sZaNgOXHVjREOsPMJd1R1lWGnRbY3ys9dg5bC8xLHTF8094mR+v3HpOF9DgW j3QCxEjeiq/A+U/XNXJuI3zc0rM5xVU3OYGR1EYvXK1kTRDdsnGHQdHK9tCT5yMv YDYbuUnw7ly59DJtcFUfUXJ5OgVoisb1u59Mw2IF63u3JQsEIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGn09EZ38dwLozVbj8eJzwZbj3LxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmEzNTk5ZjYtZGRlYi0z M2EzLWI3N2UtOTE4OTEzN2ExMjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPTtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXNRBtLqPjWwZio8707/FHdxiJSh5DwfBp7/mYcKW2a9ZUKOP7T8+N1 tFJUsvQxR9Ublk13ucRtTamXTw43sp9CCNZPn9ttcUa/VkjKAYuP26pJyPfDeklB SSo96YUiuxKiuOs2fTnYJaFzVjCme6PsXP/C+ff8WBJ7l+NGnmD6lKfqbkMaPCUJ XXdKBYAsoseVtJGFgw3AZghbn2fJx11i3eUtnoVkjip+a6YuiQgLPvi6r8FOVrOq 4lDq5+mbvUibwRj0S5qyi9mosIQe078XoQP0qLtjRlmN5yxl5CelveHWiO+O+X+8 qkPz20aESjjkSTl208n9CrOqUGbgnek= -----END CERTIFICATE-----Generated at Mon Sep 28 06:53:33 2026 by rpki-client