$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cbd5d5ef-b9bc-3e39-a60d-9813de2bd340.roa File: cbd5d5ef-b9bc-3e39-a60d-9813de2bd340.roa (raw, json) Hash identifier: 8MLZS3XtIDehAV3LV9A2ScReHsAGSpV4eszsf+JZjRY= Subject key identifier: F0:46:65:A4:B0:30:05:56:2B:42:5C:33:81:3B:32:0B:72:94:6F:E8 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F497496EAD0351DA9A8DFA580 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cbd5d5ef-b9bc-3e39-a60d-9813de2bd340.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 834 IP address blocks: 72.244.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:96:ea:d0:35:1d:a9:a8:df:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bea7783d-14c5-4015-b0ce-fbfcb9bdd77e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:26:b5:f0:01:0b:dc:b3:4e:e8:40:17:20:5c: db:9b:94:d4:56:5d:78:4f:da:79:50:07:15:a9:93: 04:6c:f7:ad:b1:fc:86:1a:96:7c:71:fa:4d:28:5e: 2f:d1:cc:54:7f:12:56:ff:0f:ee:5e:b0:de:72:aa: 18:96:71:98:b0:91:bb:d4:1f:1b:99:b7:2b:8f:53: 3c:de:8f:e0:ab:34:ea:f3:9f:30:c8:1c:b7:07:c8: 7f:4a:a2:36:53:15:0c:bd:8e:cc:e6:33:e2:aa:b2: ba:03:1c:ee:c2:76:a6:f5:7f:06:50:23:82:2e:b8: f3:ac:ea:c2:d0:ed:25:6c:40:ee:d6:53:f7:81:33: b0:e0:a2:f2:6b:2f:81:6d:2e:a4:40:f9:c0:90:5a: dd:dc:65:85:8f:a8:18:bd:4b:ce:5c:2e:81:06:4e: 43:8f:57:8c:3f:7f:2f:c6:97:5d:8e:4c:28:64:d6: 09:88:10:c0:b2:81:79:26:21:22:53:03:b2:b6:28: 57:56:b4:bd:ed:06:d6:9f:b8:7e:2e:27:21:bc:78: 14:9c:9c:d8:dd:24:83:81:6d:29:aa:1b:52:87:98: 81:e8:7d:c3:ad:d8:cc:d2:57:97:a9:58:6f:70:eb: 66:8a:43:6f:4b:e5:7d:b4:2c:ca:06:d4:37:56:9a: f8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:46:65:A4:B0:30:05:56:2B:42:5C:33:81:3B:32:0B:72:94:6F:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cbd5d5ef-b9bc-3e39-a60d-9813de2bd340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:df:73:84:96:dc:b9:2d:ac:5b:04:b7:53:45:5b:56:b6:94: 37:60:16:84:13:31:29:04:7c:09:55:c7:db:0f:15:04:3f:20: bc:93:6d:d2:04:f6:d2:96:5a:b0:69:87:17:18:cc:38:95:ff: 8f:30:c2:31:6f:ad:85:f3:95:b6:ca:39:e6:3b:ae:3b:e8:fc: 71:d6:85:47:7f:b2:82:01:f3:c7:5d:2a:86:2d:09:0b:7c:32: a4:a8:53:e0:90:47:af:16:dd:13:4c:55:32:9f:77:03:03:7e: c8:cb:c8:ae:9b:b2:d8:86:1e:ef:c0:ff:99:6b:d8:f6:30:1d: a6:bd:82:b3:02:5c:90:52:41:cb:13:10:3f:05:18:33:7c:8e: 82:98:0b:13:22:6b:2b:64:9e:8d:c4:d3:36:fa:89:55:e0:30: d8:ac:6a:34:54:5f:96:8b:66:e2:62:e5:14:36:21:cf:9c:4d: 09:a6:48:d4:05:ee:48:02:22:2e:fd:91:2e:c8:39:27:82:43: cf:49:05:43:44:12:c8:1d:10:ef:45:70:6f:19:74:87:79:f0: 7a:ff:2f:4f:76:4a:a0:8a:87:de:6e:8a:b5:4f:47:b1:88:0d: 63:b4:54:00:25:60:ba:b5:96:99:de:e2:76:a2:ea:d8:50:d6: 4d:6c:01:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdJbq0DUdqajfpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmVhNzc4M2QtMTRjNS00MDE1LWIwY2UtZmJmY2I5YmRkNzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmya18AEL3LNO6EAXIFzbm5TUVl14T9p5UAcV qZMEbPetsfyGGpZ8cfpNKF4v0cxUfxJW/w/uXrDecqoYlnGYsJG71B8bmbcrj1M8 3o/gqzTq858wyBy3B8h/SqI2UxUMvY7M5jPiqrK6Axzuwnam9X8GUCOCLrjzrOrC 0O0lbEDu1lP3gTOw4KLyay+BbS6kQPnAkFrd3GWFj6gYvUvOXC6BBk5Dj1eMP38v xpddjkwoZNYJiBDAsoF5JiEiUwOytihXVrS97QbWn7h+LichvHgUnJzY3SSDgW0p qhtSh5iB6H3DrdjM0leXqVhvcOtmikNvS+V9tCzKBtQ3Vpr48wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBGZaSwMAVWK0JcM4E7MgtylG/oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2JkNWQ1ZWYtYjliYy0z ZTM5LWE2MGQtOTgxM2RlMmJkMzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPTkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7fc4SW3LktrFsEt1NFW1a2lDdgFoQTMSkEfAlVx9sPFQQ/ILyTbdIE 9tKWWrBphxcYzDiV/48wwjFvrYXzlbbKOeY7rjvo/HHWhUd/soIB88ddKoYtCQt8 MqSoU+CQR68W3RNMVTKfdwMDfsjLyK6bstiGHu/A/5lr2PYwHaa9grMCXJBSQcsT ED8FGDN8joKYCxMiaytkno3E0zb6iVXgMNisajRUX5aLZuJi5RQ2Ic+cTQmmSNQF 7kgCIi79kS7IOSeCQ89JBUNEEsgdEO9FcG8ZdId58Hr/L092SqCKh95uirVPR7GI DWO0VAAlYLq1lpne4nai6thQ1k1sAX8= -----END CERTIFICATE-----Generated at Sun Sep 27 01:35:33 2026 by rpki-client