$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d4bb0498-49d5-34f5-a847-f5a912b76784.roa File: d4bb0498-49d5-34f5-a847-f5a912b76784.roa (raw, json) Hash identifier: AwIYR6LDyNShXKNEJYx3rQuZiBMbjfzkKx5iUJf7kDE= Subject key identifier: F1:BB:61:84:95:17:F7:87:CB:4E:EC:30:54:0A:67:FD:09:32:B1:E5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4AD57E36F060199D7092C500 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d4bb0498-49d5-34f5-a847-f5a912b76784.roa Signing time: Fri 25 Sep 2026 12:55:26 +0000 ROA not before: Fri 25 Sep 2026 12:55:26 +0000 ROA not after: Thu 24 Dec 2026 13:55:26 +0000 asID: 6079 IP address blocks: 72.244.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d5:7e:36:f0:60:19:9d:70:92:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 12:55:26 2026 GMT Not After : Dec 24 13:55:26 2026 GMT Subject: CN=7f1d7c58-8476-44e7-91d0-319f195ea213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7e:13:25:52:db:6a:1e:79:19:ac:99:1d:22: 39:8a:9f:48:9f:9d:b5:9f:d9:89:c6:24:76:b1:9c: 64:82:d3:f2:08:f7:f0:31:89:ad:24:0c:48:ce:0c: 30:e0:bd:2d:21:c6:8f:b8:e7:e1:30:e2:ce:7c:a2: b9:06:dd:de:b8:34:cf:58:97:48:86:e9:8b:71:1d: 12:46:56:6c:69:97:b4:10:a8:a9:4c:98:66:cb:58: ff:71:1f:53:34:79:f2:90:63:8a:7c:d0:71:46:4a: 99:e6:e1:38:81:7d:b6:dd:b4:78:d7:be:81:1a:1e: bb:c9:f7:67:bb:04:41:8f:87:84:b1:9f:b6:6d:66: ec:34:58:00:8c:ba:43:37:4a:45:95:81:0a:96:90: 14:65:8f:a1:8e:35:5e:0e:84:85:c9:46:21:aa:13: c4:bb:f8:3d:06:60:06:4a:f6:06:1c:3f:9e:2f:b3: 5f:be:ff:6e:b7:be:c5:4e:3b:bc:2a:4e:15:c5:ba: dc:b3:65:72:23:d1:48:8e:b0:56:7f:f7:35:07:24: 49:7a:db:3d:66:09:c7:d6:ad:dc:7a:d0:b0:df:39: aa:25:78:de:59:22:77:3a:01:2d:bc:43:2a:04:99: 4e:ca:23:15:83:17:16:4e:63:85:35:7d:66:47:c8: d9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:BB:61:84:95:17:F7:87:CB:4E:EC:30:54:0A:67:FD:09:32:B1:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d4bb0498-49d5-34f5-a847-f5a912b76784.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:11:65:f7:55:3d:e4:0a:78:3e:09:41:07:b2:98:8c:df:de: b9:63:61:a7:c9:1b:5a:20:c0:86:cf:e4:87:6b:81:84:d6:b5: 3d:97:61:20:f1:e5:96:03:f0:39:d6:e2:e4:a7:22:81:01:3e: 47:ea:b6:ef:3f:42:3e:ca:8d:13:94:61:12:7a:88:7c:8b:97: 66:eb:04:d8:05:e7:86:50:09:46:89:a4:8d:2e:46:92:c3:8e: f4:95:a5:b7:88:b4:a7:48:12:e6:d0:ee:56:20:a2:1f:7d:bc: e6:72:55:7e:52:a7:7b:d7:6f:36:db:df:d6:6c:e8:a5:32:57: 8c:eb:9f:df:75:6f:78:fb:42:30:0c:2d:8c:62:e5:0e:7b:e0: a9:a1:b9:7b:d3:87:99:15:de:9b:89:b3:c3:24:c1:d2:f5:62: c1:67:a7:cf:0e:d2:a6:8e:67:0f:82:3f:ee:19:ee:24:55:6e: 86:a7:60:e3:bf:b9:39:16:14:cd:53:1d:ba:24:24:3e:f2:d8: a5:00:26:59:ec:89:42:34:25:cd:2a:ca:0c:ff:b6:b3:72:80: 85:21:14:b1:d2:2d:15:d4:bb:1e:c5:3b:d5:32:5f:8c:48:60: b2:dd:4c:43:5f:cc:16:be:78:64:3c:3f:49:66:e0:d0:c1:45: 1c:2e:57:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9K1X428GAZnXCSxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTEyNTUyNloXDTI2MTIyNDEzNTUyNlowLzEtMCsGA1UEAxMk N2YxZDdjNTgtODQ3Ni00NGU3LTkxZDAtMzE5ZjE5NWVhMjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy34TJVLbah55GayZHSI5ip9In521n9mJxiR2 sZxkgtPyCPfwMYmtJAxIzgww4L0tIcaPuOfhMOLOfKK5Bt3euDTPWJdIhumLcR0S RlZsaZe0EKipTJhmy1j/cR9TNHnykGOKfNBxRkqZ5uE4gX223bR4176BGh67yfdn uwRBj4eEsZ+2bWbsNFgAjLpDN0pFlYEKlpAUZY+hjjVeDoSFyUYhqhPEu/g9BmAG SvYGHD+eL7Nfvv9ut77FTju8Kk4Vxbrcs2VyI9FIjrBWf/c1ByRJets9ZgnH1q3c etCw3zmqJXjeWSJ3OgEtvEMqBJlOyiMVgxcWTmOFNX1mR8jZ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPG7YYSVF/eHy07sMFQKZ/0JMrHlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDRiYjA0OTgtNDlkNS0z NGY1LWE4NDctZjVhOTEyYjc2Nzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPTVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADARZfdVPeQKeD4JQQeymIzf3rljYafJG1ogwIbP5IdrgYTWtT2XYSDx 5ZYD8DnW4uSnIoEBPkfqtu8/Qj7KjROUYRJ6iHyLl2brBNgF54ZQCUaJpI0uRpLD jvSVpbeItKdIEubQ7lYgoh99vOZyVX5Sp3vXbzbb39Zs6KUyV4zrn991b3j7QjAM LYxi5Q574KmhuXvTh5kV3puJs8MkwdL1YsFnp88O0qaOZw+CP+4Z7iRVboanYOO/ uTkWFM1THbokJD7y2KUAJlnsiUI0Jc0qygz/trNygIUhFLHSLRXUux7FO9UyX4xI YLLdTENfzBa+eGQ8P0lm4NDBRRwuV3Q= -----END CERTIFICATE-----Generated at Sat Oct 10 15:04:01 2026 by rpki-client