$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/272be75e-d30a-3107-80d0-ca26340f8e71.roa File: 272be75e-d30a-3107-80d0-ca26340f8e71.roa (raw, json) Hash identifier: XviO6OuwDJ6ygD16Z7RWvruSruQq5QvRcbEiVlip684= Subject key identifier: FF:FB:90:E9:5E:63:B7:3F:FE:3C:31:1C:0F:C2:71:35:DA:6D:7D:78 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F68F30475D360A8967A2EBB00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/272be75e-d30a-3107-80d0-ca26340f8e71.roa Signing time: Tue 06 Oct 2026 07:49:10 +0000 ROA not before: Tue 06 Oct 2026 07:49:10 +0000 ROA not after: Mon 04 Jan 2027 08:49:10 +0000 asID: 218910 IP address blocks: 72.244.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:68:f3:04:75:d3:60:a8:96:7a:2e:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 6 07:49:10 2026 GMT Not After : Jan 4 08:49:10 2027 GMT Subject: CN=f0257dbb-bfa3-43fd-8b16-63614bddb109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d4:44:34:28:79:57:5e:ee:b2:45:c6:db:3f: 7c:7f:5e:c8:b0:b0:03:4e:1f:d5:0f:37:33:69:77: 9d:cc:73:34:b8:fd:5f:75:cc:8e:31:08:3b:69:b7: d8:08:10:70:3a:a7:f6:70:0d:d4:ab:6e:0a:6a:0a: 5f:3c:86:44:44:82:e4:f9:96:92:24:a0:cc:a1:c7: 7e:b5:b4:87:f8:15:6a:ae:69:95:2d:cf:be:4d:e9: 5e:45:ac:78:1a:56:dd:f1:b7:82:6d:c1:0e:d2:46: e5:74:b9:6f:60:dc:42:e3:f2:5e:c6:bc:f6:63:70: 99:16:fa:40:ab:a5:03:ab:6e:18:dd:2b:6e:e2:83: 42:ea:dc:a6:c5:bb:d8:50:c4:e9:94:b8:64:21:86: 63:6b:bb:2f:0e:c1:86:08:e7:f4:8d:f8:01:8f:52: 3d:7d:6d:a4:a7:cb:dc:7f:d7:a4:36:a8:b3:76:1c: 3c:32:1d:d5:8f:07:41:3e:a6:80:bb:35:da:66:c9: aa:33:e8:79:be:f9:2a:3f:01:31:e1:99:da:e7:4e: cd:52:e1:1b:82:d9:f5:a4:2c:b2:ee:56:65:1f:fb: 69:44:17:af:af:52:c0:a6:20:ae:fa:21:57:5d:78: 3d:b2:f9:9a:ef:44:db:c1:9e:2a:43:6f:83:ec:82: 96:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FB:90:E9:5E:63:B7:3F:FE:3C:31:1C:0F:C2:71:35:DA:6D:7D:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/272be75e-d30a-3107-80d0-ca26340f8e71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:41:dd:8e:13:e3:03:bb:47:00:c6:f1:58:65:61:5b:7a:bb: 60:c8:2a:68:7e:f2:df:9e:66:e1:e7:5d:a7:98:b0:9b:61:fb: 4c:74:19:f4:16:a6:c9:18:ab:a0:c3:2f:f7:7c:35:9d:cd:46: 4a:ef:fe:34:16:9f:1f:83:a9:ec:4d:05:e7:2a:fa:b9:1c:fb: 73:46:72:ae:eb:4c:f1:96:8c:47:32:f2:b5:bf:2e:99:ca:82: 8d:61:1b:db:82:fc:cb:ba:51:6b:a2:d6:0d:ac:7b:3d:6b:9a: 96:12:07:4b:5f:bc:a6:38:d5:8e:16:98:8a:b2:b1:84:8b:ba: b3:24:2d:bc:6e:24:ea:bf:7c:86:15:f0:77:d5:c0:03:1e:f4: 95:83:42:d5:7e:7c:d1:9f:71:ae:63:3e:a7:07:0f:80:99:90: 1d:5f:fb:a6:5e:b9:36:0f:07:75:86:7e:1f:b1:be:c3:03:03: 89:e9:93:8e:51:72:37:c0:6e:a1:23:08:2f:e1:db:68:e3:e0: da:b0:a0:f8:fa:7b:c3:be:33:fa:da:49:7b:fd:0e:30:20:28: bb:9b:b8:2d:0b:c1:8b:54:be:c8:ff:30:47:30:34:55:39:db: 6b:c0:39:56:48:bf:f7:f9:a3:a8:77:28:52:2d:85:a3:81:7f: e3:95:a0:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9o8wR102ColnouuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwNjA3NDkxMFoXDTI3MDEwNDA4NDkxMFowLzEtMCsGA1UEAxMk ZjAyNTdkYmItYmZhMy00M2ZkLThiMTYtNjM2MTRiZGRiMTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudRENCh5V17uskXG2z98f17IsLADTh/VDzcz aXedzHM0uP1fdcyOMQg7abfYCBBwOqf2cA3Uq24KagpfPIZERILk+ZaSJKDMocd+ tbSH+BVqrmmVLc++TeleRax4Glbd8beCbcEO0kbldLlvYNxC4/Jexrz2Y3CZFvpA q6UDq24Y3Stu4oNC6tymxbvYUMTplLhkIYZja7svDsGGCOf0jfgBj1I9fW2kp8vc f9ekNqizdhw8Mh3VjwdBPqaAuzXaZsmqM+h5vvkqPwEx4Zna507NUuEbgtn1pCyy 7lZlH/tpRBevr1LApiCu+iFXXXg9svma70TbwZ4qQ2+D7IKW8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/7kOleY7c//jwxHA/CcTXabX14MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjcyYmU3NWUtZDMwYS0z MTA3LTgwZDAtY2EyNjM0MGY4ZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPRHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5B3Y4T4wO7RwDG8VhlYVt6u2DIKmh+8t+eZuHnXaeYsJth+0x0GfQW pskYq6DDL/d8NZ3NRkrv/jQWnx+DqexNBecq+rkc+3NGcq7rTPGWjEcy8rW/LpnK go1hG9uC/Mu6UWui1g2sez1rmpYSB0tfvKY41Y4WmIqysYSLurMkLbxuJOq/fIYV 8HfVwAMe9JWDQtV+fNGfca5jPqcHD4CZkB1f+6ZeuTYPB3WGfh+xvsMDA4npk45R cjfAbqEjCC/h22jj4NqwoPj6e8O+M/raSXv9DjAgKLubuC0LwYtUvsj/MEcwNFU5 22vAOVZIv/f5o6h3KFIthaOBf+OVoCE= -----END CERTIFICATE-----Generated at Sat Oct 10 05:54:55 2026 by rpki-client