$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ec6d2598-cd82-3814-a20c-9f4f41000587.roa File: ec6d2598-cd82-3814-a20c-9f4f41000587.roa (raw, json) Hash identifier: rPKStCXBIbBVUH/K+e1ToKsN+l6zFNIoBxFxBDBem2E= Subject key identifier: 87:55:94:0E:DF:3E:60:FD:EC:B8:05:84:97:6C:E5:03:CF:52:5C:8A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4989429B7251B6315BC06780 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ec6d2598-cd82-3814-a20c-9f4f41000587.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 4826 IP address blocks: 72.244.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:42:9b:72:51:b6:31:5b:c0:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f44195a8-3bec-47df-a6d5-1ec51e08546c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:47:69:27:cd:fc:48:14:79:08:ca:99:d6:93: 5d:7a:fc:93:ff:ca:b3:f8:36:37:6f:80:97:d7:98: 73:85:26:90:13:f4:6d:c4:33:e4:8c:27:1c:f6:3d: 43:cf:ef:bd:b8:19:6b:18:bd:21:12:97:30:6f:75: 9e:95:9e:1b:77:4e:31:df:59:0b:9b:3d:a6:08:f1: dd:72:56:29:18:67:f8:e6:bf:87:7f:85:df:e0:7d: e7:6c:a0:84:a4:66:49:4e:09:84:b8:66:7e:ad:17: d4:69:1a:6c:a5:cb:40:94:2d:10:18:a7:85:c9:70: 5a:f5:6b:08:22:b1:5c:07:ff:4c:19:ca:c1:23:32: 0d:84:f5:e7:84:ce:43:63:8a:95:7c:8e:5d:dc:d7: e1:bd:8f:c3:51:55:a3:fd:da:d5:a2:51:74:18:c4: 63:be:96:39:e2:1c:ff:23:26:60:61:7f:3c:3a:b2: 2f:d1:b8:53:0e:4f:a3:3c:6a:b5:80:2b:76:7c:62: 90:c9:25:ad:4e:c7:03:8a:7b:ca:be:44:fe:ee:0c: d8:33:aa:c5:12:a1:68:11:e6:4c:61:a8:b6:91:d6: 71:81:d8:5e:22:18:58:b7:c1:25:e6:cd:1f:db:29: af:79:c0:30:7f:1a:e9:fc:24:3b:3b:d9:5f:b6:11: 5b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:55:94:0E:DF:3E:60:FD:EC:B8:05:84:97:6C:E5:03:CF:52:5C:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ec6d2598-cd82-3814-a20c-9f4f41000587.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:13:3b:a8:aa:09:f1:1e:4d:d8:71:78:84:af:db:43:12:9e: 42:92:1a:76:c6:66:81:b7:38:0b:95:1a:e0:c8:32:df:dc:83: 81:2a:28:fb:7b:cd:26:80:44:cd:db:1e:22:6d:d3:12:2c:9d: a6:e7:2c:03:31:49:0f:62:71:ba:79:0e:d2:63:dd:c1:07:ac: 49:62:c3:93:dc:8f:7c:cb:78:6c:56:a4:50:2a:c0:da:48:cf: 41:07:de:e4:6f:6b:ff:ec:d6:a4:5b:27:a8:e2:46:55:7f:31: 37:fd:52:46:df:53:bf:f8:95:a2:5c:23:33:ee:ab:9f:83:ac: 96:e0:e5:66:cd:8c:2d:91:f2:52:67:ca:4f:ca:06:4a:2c:71: b4:01:ab:ca:15:0c:1f:86:b6:75:65:5e:48:75:21:c7:bd:89: 25:6f:be:26:ba:70:a0:9f:5c:dd:f7:28:7d:1a:b9:a0:41:e7: 0f:26:76:14:b5:9e:be:af:37:5e:3a:aa:77:dd:e9:cb:de:fd: a9:21:81:47:11:66:12:04:e7:80:a1:d8:a1:06:23:55:38:48: d0:37:58:9d:53:01:1d:09:8b:00:5b:68:5b:ff:c0:7f:61:90: 4e:1a:89:2b:85:2c:75:e8:aa:df:7c:be:37:8f:25:53:58:34: 68:f8:6d:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiUKbclG2MVvAZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjQ0MTk1YTgtM2JlYy00N2RmLWE2ZDUtMWVjNTFlMDg1NDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEdpJ838SBR5CMqZ1pNdevyT/8qz+DY3b4CX 15hzhSaQE/RtxDPkjCcc9j1Dz++9uBlrGL0hEpcwb3WelZ4bd04x31kLmz2mCPHd clYpGGf45r+Hf4Xf4H3nbKCEpGZJTgmEuGZ+rRfUaRpspctAlC0QGKeFyXBa9WsI IrFcB/9MGcrBIzINhPXnhM5DY4qVfI5d3NfhvY/DUVWj/drVolF0GMRjvpY54hz/ IyZgYX88OrIv0bhTDk+jPGq1gCt2fGKQySWtTscDinvKvkT+7gzYM6rFEqFoEeZM Yai2kdZxgdheIhhYt8El5s0f2ymvecAwfxrp/CQ7O9lfthFbVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdVlA7fPmD97LgFhJds5QPPUlyKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZWM2ZDI1OTgtY2Q4Mi0z ODE0LWEyMGMtOWY0ZjQxMDAwNTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPSUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMATO6iqCfEeTdhxeISv20MSnkKSGnbGZoG3OAuVGuDIMt/cg4EqKPt7 zSaARM3bHiJt0xIsnabnLAMxSQ9icbp5DtJj3cEHrEliw5Pcj3zLeGxWpFAqwNpI z0EH3uRva//s1qRbJ6jiRlV/MTf9UkbfU7/4laJcIzPuq5+DrJbg5WbNjC2R8lJn yk/KBkoscbQBq8oVDB+GtnVlXkh1Ice9iSVvvia6cKCfXN33KH0auaBB5w8mdhS1 nr6vN146qnfd6cve/akhgUcRZhIE54Ch2KEGI1U4SNA3WJ1TAR0JiwBbaFv/wH9h kE4aiSuFLHXoqt98vjePJVNYNGj4bc0= -----END CERTIFICATE-----Generated at Tue Sep 29 00:40:46 2026 by rpki-client