$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/10f9106f-38d7-334c-be0c-2e81c68cb772.roa File: 10f9106f-38d7-334c-be0c-2e81c68cb772.roa (raw, json) Hash identifier: Cf/2pCD4d6Sqh4zbm/dkvT/+klowPsUjJMeQTrGShEE= Subject key identifier: 0D:B1:21:87:60:6F:D8:DB:2C:34:EF:E7:DA:C4:DB:3E:4A:44:25:20 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BB727BBB5005DD74EB3A63A00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/10f9106f-38d7-334c-be0c-2e81c68cb772.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 3257 IP address blocks: 72.245.192.0/21 maxlen: 24 72.245.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:bb:b5:00:5d:d7:4e:b3:a6:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=bddf712a-3af3-4ca7-a388-698f09ad2827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4e:80:1c:8d:2d:c2:2d:93:07:30:7f:95:01: fc:94:52:86:1a:7e:67:8b:04:6a:6c:62:75:83:03: a4:49:71:70:e0:ed:b9:74:cd:36:1b:5e:ee:ab:02: 1c:a3:26:a0:19:51:02:bc:96:aa:6b:32:92:90:cf: 8a:94:65:d1:c2:5c:3b:dd:49:bd:15:33:78:f4:d5: 4d:c1:fa:f7:99:3d:45:24:4f:c1:d8:e9:a6:e1:66: 18:4b:1e:10:a3:9f:da:14:16:1c:50:18:c8:04:62: 4b:02:cb:44:0b:1e:15:ce:d6:44:e7:91:44:0d:62: 4a:8f:7b:01:eb:da:56:e5:74:0d:6e:9f:10:96:b0: c9:c2:fd:2a:65:3c:85:3d:1d:ac:8e:46:f0:cb:7a: 60:43:5f:d1:96:6a:56:cf:5c:d6:ae:98:48:ae:a5: ae:33:87:a0:60:9f:3c:ac:0d:09:3d:d7:37:a2:17: b6:81:bd:4b:d4:4d:60:f0:77:1a:d9:d1:3d:86:a8: a3:73:aa:4d:dd:1e:99:57:6a:7f:79:b4:0e:6b:3a: 27:74:c4:23:b9:cc:f4:26:17:ee:77:13:4e:63:00: fc:aa:f5:94:ea:1f:a6:87:8d:eb:8a:65:6b:71:33: 9a:62:e4:bf:c1:cf:4e:c2:98:84:b9:2f:7a:8a:bd: 24:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B1:21:87:60:6F:D8:DB:2C:34:EF:E7:DA:C4:DB:3E:4A:44:25:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/10f9106f-38d7-334c-be0c-2e81c68cb772.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.245.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:9b:16:32:ac:e7:c1:31:54:93:82:ee:ad:99:c5:b9:dd:cc: 79:34:ca:ae:df:1d:51:5f:6b:55:a8:a3:0a:f3:46:f5:2f:da: 67:93:53:38:e0:9a:99:61:39:67:99:26:ce:ed:1a:63:c4:70: e4:f6:16:2a:75:a1:96:20:1e:28:14:0e:d3:de:d3:61:b7:b7: 8f:a6:3c:3a:fb:73:69:16:9d:52:27:08:e1:22:44:51:fc:ed: bd:5e:77:8c:17:16:02:1d:c3:e9:55:74:58:bb:85:f2:a6:77: 16:a8:db:e6:bc:ee:74:3f:80:b5:97:7c:ce:2c:8b:fc:fe:fc: a9:06:9a:a1:ea:04:9f:9c:5a:cc:b3:27:d2:d6:c9:eb:3f:f0: c1:0e:ce:2d:cb:71:b5:d2:84:33:68:7e:89:4c:22:90:cc:38: ee:66:87:d3:7b:4e:f8:0f:9c:b8:58:8c:36:97:05:ca:a2:5f: 7d:7e:86:dd:ad:a3:9f:09:e0:8e:a5:bd:25:31:46:fc:41:c7: 32:cc:88:67:fe:6f:62:5d:ad:70:bf:69:cb:a3:44:04:9b:23: 5a:b6:83:b1:d9:5f:a7:52:06:0f:83:69:5e:02:40:e1:f7:49: f3:5d:0e:32:41:e8:b5:23:e8:8b:44:fb:dc:6d:1a:58:c2:96: d9:28:f7:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3J7u1AF3XTrOmOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk YmRkZjcxMmEtM2FmMy00Y2E3LWEzODgtNjk4ZjA5YWQyODI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE6AHI0twi2TBzB/lQH8lFKGGn5niwRqbGJ1 gwOkSXFw4O25dM02G17uqwIcoyagGVECvJaqazKSkM+KlGXRwlw73Um9FTN49NVN wfr3mT1FJE/B2Omm4WYYSx4Qo5/aFBYcUBjIBGJLAstECx4VztZE55FEDWJKj3sB 69pW5XQNbp8QlrDJwv0qZTyFPR2sjkbwy3pgQ1/RlmpWz1zWrphIrqWuM4egYJ88 rA0JPdc3ohe2gb1L1E1g8Hca2dE9hqijc6pN3R6ZV2p/ebQOazondMQjucz0Jhfu dxNOYwD8qvWU6h+mh43rimVrcTOaYuS/wc9OwpiEuS96ir0kQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2xIYdgb9jbLDTv59rE2z5KRCUgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMTBmOTEwNmYtMzhkNy0z MzRjLWJlMGMtMmU4MWM2OGNiNzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESPXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMqbFjKs58ExVJOC7q2ZxbndzHk0yq7fHVFfa1WoowrzRvUv2meTUzjg mplhOWeZJs7tGmPEcOT2Fip1oZYgHigUDtPe02G3t4+mPDr7c2kWnVInCOEiRFH8 7b1ed4wXFgIdw+lVdFi7hfKmdxao2+a87nQ/gLWXfM4si/z+/KkGmqHqBJ+cWsyz J9LWyes/8MEOzi3LcbXShDNofolMIpDMOO5mh9N7TvgPnLhYjDaXBcqiX31+ht2t o58J4I6lvSUxRvxBxzLMiGf+b2JdrXC/acujRASbI1q2g7HZX6dSBg+DaV4CQOH3 SfNdDjJB6LUj6ItE+9xtGljCltko90M= -----END CERTIFICATE-----Generated at Thu Nov 6 01:46:53 2025 by rpki-client