$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cb66ba19-bbb0-3be7-a5f7-272c420f8c5c.roa File: cb66ba19-bbb0-3be7-a5f7-272c420f8c5c.roa (raw, json) Hash identifier: Smd5UbPzm8iVcrVdgHqKnczgLmSJTDlD31dRBz53qiU= Subject key identifier: 6C:33:C3:EB:3B:95:01:4C:42:C2:FA:64:E6:0B:2A:67:94:AD:90:95 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B8B43CFDB8DC6A2F9FB185CE0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cb66ba19-bbb0-3be7-a5f7-272c420f8c5c.roa Signing time: Thu 16 Oct 2025 19:41:42 +0000 ROA not before: Thu 16 Oct 2025 19:41:42 +0000 ROA not after: Wed 14 Jan 2026 20:41:42 +0000 asID: 53581 IP address blocks: 72.244.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:43:cf:db:8d:c6:a2:f9:fb:18:5c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 16 19:41:42 2025 GMT Not After : Jan 14 20:41:42 2026 GMT Subject: CN=6c5457b9-6c7a-40da-91bd-a30e599d293f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a3:4f:c1:1b:c3:e6:6e:b4:40:ac:99:84:65: a9:2c:1f:ab:f6:3b:bb:e2:90:64:5a:d6:b8:d5:cc: 59:44:6f:b9:46:97:e2:bc:a0:57:e6:08:22:3a:5c: 15:82:e9:8c:65:98:99:10:7c:a4:30:84:1b:83:fc: c2:fd:b1:c8:56:11:03:6b:67:47:1e:02:c4:27:0a: 35:18:01:ac:a2:80:b0:21:25:2d:27:8b:3b:97:5b: c0:0e:f5:a4:0f:a4:9b:f8:60:05:09:70:e1:52:1e: c6:33:b2:ec:4f:a1:8b:82:b0:f0:64:aa:72:68:c2: 31:eb:60:4f:28:4f:f2:54:b9:7f:33:c3:e6:fb:fa: d2:7a:14:e7:7f:24:a9:ca:cb:60:72:39:86:ba:fb: e7:e7:22:35:ef:e9:bc:e7:a3:ea:48:8f:c3:0e:0a: dd:5c:8e:47:bd:cf:22:cf:eb:48:fc:d6:f7:53:ca: 81:98:5a:67:70:0b:f4:f7:cd:7f:e1:7a:3d:5b:79: a6:05:15:54:c0:9e:35:f6:cf:26:83:4d:07:8b:79: 03:56:f5:70:cf:64:90:d6:71:73:7c:5e:c4:fb:5d: 52:01:76:2b:f9:e7:f5:35:15:f3:7c:dd:01:5f:b5: 3d:b8:56:6f:78:81:61:63:b7:06:42:28:93:62:85: 9a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:33:C3:EB:3B:95:01:4C:42:C2:FA:64:E6:0B:2A:67:94:AD:90:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cb66ba19-bbb0-3be7-a5f7-272c420f8c5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:14:06:24:a5:a8:00:cb:c5:b4:21:93:d0:d6:28:18:9e:44: 7b:cc:47:b0:a3:4f:62:9f:79:1f:c5:98:ce:e9:1d:b7:8e:15: 32:1f:75:97:cb:71:42:ea:c0:d1:69:cc:f4:56:0a:12:f3:2e: a6:9c:4e:48:e6:cb:22:f5:30:69:67:58:7d:b9:5b:85:87:d0: e4:4c:e8:49:18:97:d6:d7:f4:22:50:6b:9a:64:58:2e:2e:c6: a2:c9:5c:27:3d:e4:fe:e0:4a:4c:7a:59:ce:7d:91:70:d7:a4: 38:32:89:79:7e:3f:bc:31:59:7e:de:f3:ab:99:ad:98:82:d6: 43:54:56:af:c5:1a:19:c9:12:1e:83:db:fe:fe:42:9c:cd:ff: e4:3b:e0:49:9b:cf:69:ff:31:fa:23:bd:58:7e:e6:78:7c:10: 5a:00:20:91:2a:f2:cf:35:48:f7:a9:4c:64:fe:47:fa:cd:16: c4:09:f3:18:56:3d:8a:e0:e6:c5:e4:71:aa:5d:8d:df:45:7e: 8e:3c:05:a7:d8:d2:fa:8d:25:18:46:fd:dd:b7:4d:78:52:92: 41:a1:64:65:fb:72:ea:35:0a:e8:66:3f:27:30:ea:4e:13:8b: cc:70:ba:5e:49:a2:d6:b9:f0:19:f4:31:cf:e3:af:1c:83:8f: 86:e9:dd:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuLQ8/bjcai+fsYXOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxNjE5NDE0MloXDTI2MDExNDIwNDE0MlowLzEtMCsGA1UEAxMk NmM1NDU3YjktNmM3YS00MGRhLTkxYmQtYTMwZTU5OWQyOTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6NPwRvD5m60QKyZhGWpLB+r9ju74pBkWta4 1cxZRG+5RpfivKBX5ggiOlwVgumMZZiZEHykMIQbg/zC/bHIVhEDa2dHHgLEJwo1 GAGsooCwISUtJ4s7l1vADvWkD6Sb+GAFCXDhUh7GM7LsT6GLgrDwZKpyaMIx62BP KE/yVLl/M8Pm+/rSehTnfySpystgcjmGuvvn5yI17+m856PqSI/DDgrdXI5Hvc8i z+tI/Nb3U8qBmFpncAv0981/4Xo9W3mmBRVUwJ419s8mg00Hi3kDVvVwz2SQ1nFz fF7E+11SAXYr+ef1NRXzfN0BX7U9uFZveIFhY7cGQiiTYoWa0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwzw+s7lQFMQsL6ZOYLKmeUrZCVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2I2NmJhMTktYmJiMC0z YmU3LWE1ZjctMjcyYzQyMGY4YzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPSeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIUBiSlqADLxbQhk9DWKBieRHvMR7CjT2KfeR/FmM7pHbeOFTIfdZfL cULqwNFpzPRWChLzLqacTkjmyyL1MGlnWH25W4WH0ORM6EkYl9bX9CJQa5pkWC4u xqLJXCc95P7gSkx6Wc59kXDXpDgyiXl+P7wxWX7e86uZrZiC1kNUVq/FGhnJEh6D 2/7+QpzN/+Q74Embz2n/MfojvVh+5nh8EFoAIJEq8s81SPepTGT+R/rNFsQJ8xhW PYrg5sXkcapdjd9Ffo48BafY0vqNJRhG/d23TXhSkkGhZGX7cuo1CuhmPycw6k4T i8xwul5Jota58Bn0Mc/jrxyDj4bp3dQ= -----END CERTIFICATE-----Generated at Mon Oct 20 03:50:08 2025 by rpki-client