$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c8d3707c-2598-385a-b69a-cf424dfc6f57.roa File: c8d3707c-2598-385a-b69a-cf424dfc6f57.roa (raw, json) Hash identifier: YIeSv6XamZjOjzLqqyH/+FsLXBG3zw7bARbfGkHj0AM= Subject key identifier: 8B:25:A0:A3:0B:8E:6E:E5:27:F7:13:11:D5:80:75:A3:3D:6C:80:98 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EBB11CFF8AD32123F3B387D80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c8d3707c-2598-385a-b69a-cf424dfc6f57.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 64267 IP address blocks: 72.244.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:cf:f8:ad:32:12:3f:3b:38:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=cfc4f8eb-f431-4e42-a02d-013ba4777d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a2:67:6f:b3:5a:ee:6f:4d:cd:69:96:2e:0b: e7:a8:f2:51:62:2b:e1:55:8d:41:14:5c:7a:22:cb: 20:38:61:cd:d8:2f:48:a3:12:31:27:7c:95:4b:38: 8a:ee:ad:65:79:51:11:62:77:69:29:b1:b7:4d:41: ad:dc:e3:82:06:1a:b5:b3:29:b0:91:c6:e4:e3:c4: e8:65:43:af:15:61:bb:07:a0:a4:6e:c2:91:b1:be: 0c:f0:cb:2a:5c:ae:78:36:4f:94:f0:c7:1d:1d:6f: 7d:e9:72:7f:0f:2f:c9:e8:44:25:04:fe:13:cc:f5: 48:e5:cf:b5:bb:85:8a:a9:79:6b:08:fc:7a:45:b7: 33:4a:f0:11:5d:69:8d:13:82:46:66:34:0d:17:e2: 55:68:48:bc:52:47:38:1d:ca:b6:c4:e1:74:98:0f: df:1c:98:a0:6d:dd:b1:27:3f:96:f9:fb:7b:0d:8e: c5:d8:a2:4e:6e:13:96:48:c9:57:16:72:11:12:f1: 61:6c:66:e5:ec:d2:30:72:84:3e:a2:cb:d0:f4:8f: 4a:11:69:0f:83:eb:f9:c3:c5:78:7a:d2:c7:f1:92: 8c:1b:b7:4c:72:e3:d8:84:b5:4f:df:99:60:05:97: 89:74:40:50:e8:3c:99:6e:9d:b5:c6:66:74:be:0b: 78:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:25:A0:A3:0B:8E:6E:E5:27:F7:13:11:D5:80:75:A3:3D:6C:80:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c8d3707c-2598-385a-b69a-cf424dfc6f57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:34:ae:0c:c8:ef:74:8b:f6:1f:c0:35:3a:ed:d1:25:de:f1: 40:0c:9b:ae:1e:26:7e:78:48:ae:0c:47:ae:5c:de:7a:a4:d8: a3:03:7b:81:97:04:6c:fa:99:27:5e:51:53:7b:3d:b9:7e:4e: 3c:03:3d:22:a4:f2:3c:d6:9e:ff:0e:1c:f6:61:1d:a5:b6:a8: 2e:a8:17:8c:57:3b:bf:9a:01:8d:8a:0b:8d:5e:5a:79:4e:e9: a5:7a:7f:d1:9b:84:ce:7d:87:88:ea:14:53:f6:0f:bf:89:d4: 2d:f3:0f:37:1d:d4:f2:ba:ed:f6:49:3f:a1:a5:c8:c8:b2:77: f2:5e:3d:66:76:da:ef:36:39:8c:af:b7:ef:0c:7d:4d:00:56: ec:c1:4d:96:fa:f6:c0:fe:ec:e1:11:a5:0c:e4:25:92:8b:ed: 50:07:62:d0:d1:9a:73:2e:9e:54:cb:d5:31:e0:6d:c6:e8:5c: f6:96:66:79:9b:32:82:85:4c:05:a9:a4:39:69:22:97:2a:74: 10:5c:d1:ae:96:b7:2d:97:9a:c5:6a:8d:9c:0d:84:63:33:ff: 48:87:b8:06:9f:36:7c:b8:b0:7f:b9:6e:44:81:60:03:af:1d: 6b:ed:c3:78:5d:8e:8e:dd:8b:92:50:43:4e:42:e9:dc:44:28: b7:73:77:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67Ec/4rTISPzs4fYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk Y2ZjNGY4ZWItZjQzMS00ZTQyLWEwMmQtMDEzYmE0Nzc3ZDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6Jnb7Na7m9NzWmWLgvnqPJRYivhVY1BFFx6 IssgOGHN2C9IoxIxJ3yVSziK7q1leVERYndpKbG3TUGt3OOCBhq1symwkcbk48To ZUOvFWG7B6CkbsKRsb4M8MsqXK54Nk+U8McdHW996XJ/Dy/J6EQlBP4TzPVI5c+1 u4WKqXlrCPx6RbczSvARXWmNE4JGZjQNF+JVaEi8Ukc4Hcq2xOF0mA/fHJigbd2x Jz+W+ft7DY7F2KJObhOWSMlXFnIREvFhbGbl7NIwcoQ+osvQ9I9KEWkPg+v5w8V4 etLH8ZKMG7dMcuPYhLVP35lgBZeJdEBQ6DyZbp21xmZ0vgt4owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsloKMLjm7lJ/cTEdWAdaM9bICYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzhkMzcwN2MtMjU5OC0z ODVhLWI2OWEtY2Y0MjRkZmM2ZjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPT7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMQ0rgzI73SL9h/ANTrt0SXe8UAMm64eJn54SK4MR65c3nqk2KMDe4GX BGz6mSdeUVN7Pbl+TjwDPSKk8jzWnv8OHPZhHaW2qC6oF4xXO7+aAY2KC41eWnlO 6aV6f9GbhM59h4jqFFP2D7+J1C3zDzcd1PK67fZJP6GlyMiyd/JePWZ22u82OYyv t+8MfU0AVuzBTZb69sD+7OERpQzkJZKL7VAHYtDRmnMunlTL1THgbcboXPaWZnmb MoKFTAWppDlpIpcqdBBc0a6Wty2XmsVqjZwNhGMz/0iHuAafNny4sH+5bkSBYAOv HWvtw3hdjo7di5JQQ05C6dxEKLdzd/M= -----END CERTIFICATE-----Generated at Sat Sep 26 19:26:43 2026 by rpki-client