$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/09c032dc-e5a2-39d2-a65e-cf6e36a04f3a.roa File: 09c032dc-e5a2-39d2-a65e-cf6e36a04f3a.roa (raw, json) Hash identifier: DnalH+I0x2AARu2b6Eqejoir7pk9rdbrcNynmifW2OE= Subject key identifier: B3:A1:27:C3:F0:9C:7E:C0:10:EF:58:E2:E1:B1:05:B2:F2:42:8B:FF Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B33B2DE0B0757E8FC6ED9EA80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/09c032dc-e5a2-39d2-a65e-cf6e36a04f3a.roa Signing time: Mon 15 Sep 2025 10:54:19 +0000 ROA not before: Mon 15 Sep 2025 10:54:19 +0000 ROA not after: Sun 14 Dec 2025 11:54:19 +0000 asID: 16276 IP address blocks: 72.244.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:b2:de:0b:07:57:e8:fc:6e:d9:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 15 10:54:19 2025 GMT Not After : Dec 14 11:54:19 2025 GMT Subject: CN=7609ecda-4c0b-41f9-958d-7505b0cc6246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8a:26:56:e9:9a:82:36:57:30:bb:c8:9c:aa: 14:82:b5:fd:03:88:36:81:6c:47:e8:6c:0f:6e:c1: dd:4c:28:f2:36:0f:e2:bc:c4:f1:7a:fb:a5:35:a0: 49:1b:22:a4:c3:57:cc:fb:e6:ca:ee:e1:77:25:e5: cc:c7:1d:aa:a1:3b:90:75:b9:7b:84:f9:eb:c5:5e: 73:20:9b:d3:7b:96:87:b6:63:c2:06:8f:33:e6:06: 9d:fe:9c:9c:fa:44:42:4b:75:df:8b:fa:40:f0:3a: b0:22:ba:b1:d9:b1:21:97:4f:94:7c:2a:f2:cf:68: 9f:2e:c3:10:25:20:8b:6a:c6:c1:b3:b4:fa:20:a2: 6d:f0:80:50:57:39:9f:6f:3c:01:d1:4e:28:c3:28: f7:fd:fb:e3:4c:5d:01:56:08:2b:ee:02:6c:91:ac: f8:39:29:ea:5f:92:aa:1c:97:3d:c4:7d:9c:77:b8: b1:9d:a0:28:ff:88:af:04:e2:3b:58:af:c9:ea:26: e5:f6:4e:d8:d3:82:83:84:e5:75:9b:c6:fe:e5:0c: 78:50:5f:03:41:75:62:e1:16:4f:11:73:62:73:d4: 4d:62:6d:e7:50:98:33:69:29:06:97:b9:3f:e3:42: 91:cd:04:8e:32:a1:8b:db:a6:ab:57:36:0b:3a:02: 5f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A1:27:C3:F0:9C:7E:C0:10:EF:58:E2:E1:B1:05:B2:F2:42:8B:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/09c032dc-e5a2-39d2-a65e-cf6e36a04f3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:22:02:9b:a7:69:7b:c4:09:65:d6:0f:14:97:1e:8a:a5:a2: fe:dc:4e:55:3d:ed:52:81:e5:fd:bd:7c:fe:d5:97:02:df:85: 8d:c3:9a:7c:69:07:13:34:37:9e:60:4b:b3:d0:10:d0:cc:ec: 6f:e5:ec:5c:27:3b:7b:8a:75:69:9e:2e:0b:f5:69:65:98:00: cc:7b:d3:f7:29:c9:6b:b5:0e:f7:71:ab:ba:2a:22:b1:91:37: dc:60:15:59:6c:39:14:24:e9:c7:b5:e8:9c:48:b9:b4:46:ba: f3:2c:eb:87:be:72:ed:79:4c:a7:31:77:77:7e:90:f8:b9:88: 55:77:31:73:ac:d2:1a:9e:ef:ff:0e:f1:74:f5:9d:7e:c6:7d: 9b:16:cb:d4:83:48:c5:6b:bb:ef:4f:5a:e5:a6:b7:aa:43:bf: 3b:0d:1e:ad:84:01:a8:63:ed:8e:06:5e:1e:ac:09:06:de:b7: bf:e1:c9:09:56:17:a1:44:19:f4:bc:ed:a5:8a:48:bd:fd:64: 1b:97:7a:b0:eb:b0:9e:63:8e:f4:1a:c0:4f:7b:67:c7:09:2d: 0d:cd:be:8b:27:c3:29:9e:d8:c0:8d:90:bd:d3:e4:b6:82:28: 6e:11:cd:05:42:30:74:84:ae:24:92:c8:46:3c:76:e5:da:dd: ba:bc:70:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEszst4LB1fo/G7Z6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxNTEwNTQxOVoXDTI1MTIxNDExNTQxOVowLzEtMCsGA1UEAxMk NzYwOWVjZGEtNGMwYi00MWY5LTk1OGQtNzUwNWIwY2M2MjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloomVumagjZXMLvInKoUgrX9A4g2gWxH6GwP bsHdTCjyNg/ivMTxevulNaBJGyKkw1fM++bK7uF3JeXMxx2qoTuQdbl7hPnrxV5z IJvTe5aHtmPCBo8z5gad/pyc+kRCS3Xfi/pA8DqwIrqx2bEhl0+UfCryz2ifLsMQ JSCLasbBs7T6IKJt8IBQVzmfbzwB0U4owyj3/fvjTF0BVggr7gJskaz4OSnqX5Kq HJc9xH2cd7ixnaAo/4ivBOI7WK/J6ibl9k7Y04KDhOV1m8b+5Qx4UF8DQXVi4RZP EXNic9RNYm3nUJgzaSkGl7k/40KRzQSOMqGL26arVzYLOgJfxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOhJ8PwnH7AEO9Y4uGxBbLyQov/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDljMDMyZGMtZTVhMi0z OWQyLWE2NWUtY2Y2ZTM2YTA0ZjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPTeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMiApunaXvECWXWDxSXHoqlov7cTlU97VKB5f29fP7VlwLfhY3Dmnxp BxM0N55gS7PQENDM7G/l7FwnO3uKdWmeLgv1aWWYAMx70/cpyWu1Dvdxq7oqIrGR N9xgFVlsORQk6ce16JxIubRGuvMs64e+cu15TKcxd3d+kPi5iFV3MXOs0hqe7/8O 8XT1nX7GfZsWy9SDSMVru+9PWuWmt6pDvzsNHq2EAahj7Y4GXh6sCQbet7/hyQlW F6FEGfS87aWKSL39ZBuXerDrsJ5jjvQawE97Z8cJLQ3Nvosnwyme2MCNkL3T5LaC KG4RzQVCMHSEriSSyEY8duXa3bq8cIM= -----END CERTIFICATE-----Generated at Tue Nov 4 21:03:18 2025 by rpki-client