$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21caf5b2-dad3-3b08-bf0c-8ff085123e9e.roa File: 21caf5b2-dad3-3b08-bf0c-8ff085123e9e.roa (raw, json) Hash identifier: zhJOleHEOtut94SL5X3EQ66gcq/CNUjdZgBWi/VXAIA= Subject key identifier: 78:6A:54:7D:7C:94:E5:B4:90:7A:A5:9E:4B:01:D2:32:F3:79:11:E3 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F374D56B705668D0017553800 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21caf5b2-dad3-3b08-bf0c-8ff085123e9e.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 834 IP address blocks: 72.244.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:56:b7:05:66:8d:00:17:55:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=1e543b05-70d4-4205-87db-2b8959c8bbc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:32:a3:93:c2:9d:65:d5:31:e2:0c:46:f0:08: f2:08:de:ff:3d:86:9b:66:2f:17:78:f1:fa:38:1c: ce:83:7c:4f:06:52:f8:95:d1:9a:32:ae:aa:d8:26: c5:fb:7e:b5:2e:1d:ba:d4:3b:3b:b2:63:c1:7a:f7: e4:28:8d:a7:f7:4d:69:59:25:1f:8c:fe:0b:4b:d2: 57:a3:ba:9b:8d:46:cc:b2:cd:55:ac:a5:6b:20:07: 84:e3:be:51:f6:a4:d2:de:50:0f:a1:56:02:2a:9a: 85:f6:b9:5b:28:97:84:5d:41:15:e1:9d:21:4f:bf: ae:77:9d:25:52:f9:b8:1a:f9:32:f5:d6:66:1d:3c: 95:6d:5f:56:93:0c:8d:b5:aa:39:fa:04:81:99:cd: a0:d6:77:f1:c8:55:32:c2:d4:82:6b:d9:eb:67:0f: fc:73:dc:58:bc:54:12:d4:14:11:9b:96:c5:89:e7: 8a:cb:45:50:90:45:ce:f1:84:b7:3c:74:db:00:97: f1:0c:93:fd:56:2a:fc:b5:8a:97:0c:b8:1f:88:fb: 8f:f4:7f:31:45:85:1a:60:eb:9d:c0:0e:c3:89:97: b3:78:53:73:f1:a5:97:29:c9:2c:56:2e:69:b6:29: 3d:bc:20:7a:d6:fb:f6:bc:d3:6a:50:cc:4f:49:94: 22:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6A:54:7D:7C:94:E5:B4:90:7A:A5:9E:4B:01:D2:32:F3:79:11:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21caf5b2-dad3-3b08-bf0c-8ff085123e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:d8:24:23:d0:55:7e:90:82:de:21:f2:fd:95:52:b5:c2:5c: 7f:e7:bf:28:34:9a:d5:55:5b:d3:6f:61:3a:3f:7c:e9:c3:80: a4:7f:78:7d:d8:28:7d:5c:c6:b8:0a:72:40:bc:31:c3:e2:75: 82:a2:7d:73:1b:2d:2b:4a:8f:05:c6:de:fc:1a:66:e9:a0:ac: 10:6e:f3:9e:69:0c:92:63:2b:d2:cd:29:83:cc:c2:35:d3:89: d3:98:c6:94:6f:b8:10:d7:d8:43:63:65:7b:8a:64:b3:ba:1b: 4a:42:e4:04:e0:e8:49:c3:6a:b0:0c:8e:de:6b:70:7c:13:3f: e8:14:2f:be:8e:8c:e0:69:b7:63:ac:7f:ca:17:83:e7:de:01: 53:28:0a:23:85:f8:2e:a6:42:14:14:af:95:80:f2:c3:8e:aa: df:f1:76:d3:3c:3c:eb:13:b1:c3:bd:db:15:99:20:76:c2:97: 20:e2:31:6e:af:2b:8f:21:60:24:54:69:61:05:98:b0:04:41: 43:2a:c4:bf:d5:a9:de:b5:94:24:c8:ac:1d:57:35:9d:fa:7b: d1:ad:b9:e7:62:18:df:f7:7b:50:2a:df:a9:26:57:a1:d7:2b: 84:61:ad:4a:37:30:81:1c:6b:01:3c:39:bc:09:d6:b5:8d:ec: 1a:88:ad:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TVa3BWaNABdVOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk MWU1NDNiMDUtNzBkNC00MjA1LTg3ZGItMmI4OTU5YzhiYmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizKjk8KdZdUx4gxG8AjyCN7/PYabZi8XePH6 OBzOg3xPBlL4ldGaMq6q2CbF+361Lh261Ds7smPBevfkKI2n901pWSUfjP4LS9JX o7qbjUbMss1VrKVrIAeE475R9qTS3lAPoVYCKpqF9rlbKJeEXUEV4Z0hT7+ud50l Uvm4Gvky9dZmHTyVbV9WkwyNtao5+gSBmc2g1nfxyFUywtSCa9nrZw/8c9xYvFQS 1BQRm5bFieeKy0VQkEXO8YS3PHTbAJfxDJP9Vir8tYqXDLgfiPuP9H8xRYUaYOud wA7DiZezeFNz8aWXKcksVi5ptik9vCB61vv2vNNqUMxPSZQikwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhqVH18lOW0kHqlnksB0jLzeRHjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjFjYWY1YjItZGFkMy0z YjA4LWJmMGMtOGZmMDg1MTIzZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPTDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfYJCPQVX6Qgt4h8v2VUrXCXH/nvyg0mtVVW9NvYTo/fOnDgKR/eH3Y KH1cxrgKckC8McPidYKifXMbLStKjwXG3vwaZumgrBBu855pDJJjK9LNKYPMwjXT idOYxpRvuBDX2ENjZXuKZLO6G0pC5ATg6EnDarAMjt5rcHwTP+gUL76OjOBpt2Os f8oXg+feAVMoCiOF+C6mQhQUr5WA8sOOqt/xdtM8POsTscO92xWZIHbClyDiMW6v K48hYCRUaWEFmLAEQUMqxL/Vqd61lCTIrB1XNZ36e9GtuediGN/3e1Aq36kmV6HX K4RhrUo3MIEcawE8ObwJ1rWN7BqIrYU= -----END CERTIFICATE-----Generated at Mon Sep 28 21:43:06 2026 by rpki-client