$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0ccd33c1-309a-30a2-b48e-4426ae4b6990.roa File: 0ccd33c1-309a-30a2-b48e-4426ae4b6990.roa (raw, json) Hash identifier: bxEagPkIQ6XirrCO0CezE7XfUWwn53aE7glQrYJGgpo= Subject key identifier: A2:FD:2E:67:1A:A5:0E:8B:71:F4:79:0C:CA:CE:12:F0:84:BC:32:4C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4C3D67C8379D72598302E080 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0ccd33c1-309a-30a2-b48e-4426ae4b6990.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 39521 IP address blocks: 72.244.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:67:c8:37:9d:72:59:83:02:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=963c3e46-0e61-4369-b9a1-64d2eec791e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b4:8e:c5:af:b0:18:d0:7d:5e:7c:ac:79:df: 7e:87:eb:dd:c6:34:02:65:ea:57:1c:f5:97:78:db: 77:1f:e5:89:c2:60:27:90:08:f8:d2:9e:3d:6b:06: 1a:65:09:53:84:bd:cc:ee:74:7b:20:59:13:30:f9: e3:22:eb:a0:05:67:50:1f:7a:eb:dc:02:e4:ca:3d: 84:dc:80:a8:b2:8e:3a:0e:99:46:b8:8b:43:58:ee: 1f:54:8e:4d:37:4c:7c:72:83:98:cc:2c:78:7f:fc: 70:ec:fc:f9:e8:80:42:ea:28:45:35:13:a7:0b:8a: 31:de:f2:e7:f8:cd:41:78:8d:7a:45:46:57:2e:cc: 69:89:01:5c:72:71:8d:c2:43:ef:d6:28:b4:39:32: 7d:f6:99:29:0c:3a:77:39:ed:24:70:88:25:3a:45: 24:0d:cb:74:02:0b:df:8a:21:a2:fb:6a:d5:a9:74: 7a:6a:0f:60:e6:0a:20:3c:8b:51:a7:2a:29:a9:fa: 50:27:64:34:54:f4:0c:2c:fe:2c:60:3c:d4:5d:f1: 44:be:82:da:13:95:0f:3e:5b:58:85:d6:92:de:a1: d0:85:fb:43:31:d2:70:d6:fa:be:8f:44:f6:98:05: 18:fa:68:5b:8f:ae:f0:a1:48:0c:9b:e3:c8:56:ae: 5a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FD:2E:67:1A:A5:0E:8B:71:F4:79:0C:CA:CE:12:F0:84:BC:32:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0ccd33c1-309a-30a2-b48e-4426ae4b6990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:f1:12:70:dd:13:28:87:9e:1c:9b:82:3e:d4:11:56:e8:05: 91:af:52:ee:38:ac:c6:d1:36:4d:f7:d9:8f:14:e5:14:84:21: d7:a4:10:ef:ed:42:a2:72:cc:57:ea:c2:c3:81:67:65:70:f1: 63:df:5c:9c:b6:76:f8:e5:1e:0a:9a:aa:1f:90:6f:62:dd:df: 3d:6a:e3:63:64:db:f6:09:cf:64:62:7b:78:80:5b:95:72:e5: 49:90:0b:fe:69:ab:c2:18:e8:e7:e3:89:b3:cd:5e:eb:4a:98: 79:aa:58:b5:7e:48:b7:72:b1:69:09:46:9a:1e:c4:ef:8d:80: a0:94:56:26:79:4d:b1:4c:c3:19:0f:9a:c8:fd:31:c6:01:f9: 6e:1f:84:47:43:4b:d2:9e:ab:f5:6b:81:07:db:40:5a:10:f8: 1f:fc:3b:0e:ab:3d:ff:ec:46:a8:44:bc:05:a4:be:df:2a:8d: 7d:d5:64:37:e9:af:b3:ed:84:56:09:37:a8:d2:44:b2:c6:e3: 70:7a:41:9f:4e:30:46:80:07:7d:3a:5b:16:4c:be:1a:3f:ec: 9b:c2:a9:64:71:74:7a:a8:24:9f:71:e9:cb:2a:05:ca:96:6d: 5f:85:2e:45:fc:ff:7a:32:20:c8:c5:c7:e8:75:6f:9c:63:5f: 5f:50:35:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWfIN51yWYMC4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OTYzYzNlNDYtMGU2MS00MzY5LWI5YTEtNjRkMmVlYzc5MWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbSOxa+wGNB9Xnysed9+h+vdxjQCZepXHPWX eNt3H+WJwmAnkAj40p49awYaZQlThL3M7nR7IFkTMPnjIuugBWdQH3rr3ALkyj2E 3ICoso46DplGuItDWO4fVI5NN0x8coOYzCx4f/xw7Pz56IBC6ihFNROnC4ox3vLn +M1BeI16RUZXLsxpiQFccnGNwkPv1ii0OTJ99pkpDDp3Oe0kcIglOkUkDct0Agvf iiGi+2rVqXR6ag9g5gogPItRpyopqfpQJ2Q0VPQMLP4sYDzUXfFEvoLaE5UPPltY hdaS3qHQhftDMdJw1vq+j0T2mAUY+mhbj67woUgMm+PIVq5ajQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKL9LmcapQ6LcfR5DMrOEvCEvDJMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGNjZDMzYzEtMzA5YS0z MGEyLWI0OGUtNDQyNmFlNGI2OTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPR8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDxEnDdEyiHnhybgj7UEVboBZGvUu44rMbRNk332Y8U5RSEIdekEO/t QqJyzFfqwsOBZ2Vw8WPfXJy2dvjlHgqaqh+Qb2Ld3z1q42Nk2/YJz2Rie3iAW5Vy 5UmQC/5pq8IY6OfjibPNXutKmHmqWLV+SLdysWkJRpoexO+NgKCUViZ5TbFMwxkP msj9McYB+W4fhEdDS9Keq/VrgQfbQFoQ+B/8Ow6rPf/sRqhEvAWkvt8qjX3VZDfp r7PthFYJN6jSRLLG43B6QZ9OMEaAB306WxZMvho/7JvCqWRxdHqoJJ9x6csqBcqW bV+FLkX8/3oyIMjFx+h1b5xjX19QNcg= -----END CERTIFICATE-----Generated at Mon Sep 28 05:04:55 2026 by rpki-client