$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/299762e0-5609-31b1-a8fd-ea984b1f5823.roa File: 299762e0-5609-31b1-a8fd-ea984b1f5823.roa (raw, json) Hash identifier: 5AH8BQKE/nJoshxWrw+lgAxAcFSvUP0BC3xC2xoqSek= Subject key identifier: 71:9E:D1:45:2E:59:DA:DA:B7:8C:1D:7B:09:CF:2B:2D:24:2D:11:6D Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F68F3182871EFE53263CD7900 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/299762e0-5609-31b1-a8fd-ea984b1f5823.roa Signing time: Tue 06 Oct 2026 07:49:19 +0000 ROA not before: Tue 06 Oct 2026 07:49:19 +0000 ROA not after: Mon 04 Jan 2027 08:49:19 +0000 asID: 219075 IP address blocks: 72.244.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:68:f3:18:28:71:ef:e5:32:63:cd:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 6 07:49:19 2026 GMT Not After : Jan 4 08:49:19 2027 GMT Subject: CN=d3cda1ff-14c3-4ec1-9d9c-48663aba9893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e1:8c:e0:c8:d7:fe:f9:f3:ec:81:60:f9:a5: 9f:de:57:51:6e:f7:51:0f:db:1e:ba:c2:c3:42:8b: ab:85:dc:95:f6:f7:81:08:0b:c7:9e:23:ba:a5:ba: 5d:53:e2:65:c2:cd:89:7e:7e:90:93:00:36:c9:6a: 10:88:68:27:ea:c9:b4:88:c2:58:79:60:9e:9b:da: a9:dd:f8:74:12:8f:dd:84:30:d0:f2:73:12:a7:39: 84:99:43:77:8a:ce:68:61:50:02:23:7a:f9:6f:d9: e2:76:91:5a:c7:9b:14:b5:bd:21:29:8a:22:8e:c2: 0e:30:63:f4:64:35:bf:07:a7:b8:80:b9:e3:0e:82: 6d:9e:7c:d7:12:5e:be:4f:17:1c:32:9b:9f:94:bf: 86:87:b6:9f:28:26:cd:f0:65:fe:bf:87:c5:f1:33: 0e:99:f1:13:2b:c7:b3:c8:93:2f:44:a4:e3:c3:ea: 54:5a:41:be:b2:ba:4a:d5:89:84:bb:c5:ea:9a:0a: f2:d5:ea:ec:e9:b6:31:d5:08:1c:b7:1b:72:27:fb: a5:89:60:d9:a5:08:eb:9a:18:51:bf:02:88:4d:21: e5:5b:e3:ef:84:8c:2c:ba:cb:1b:e9:88:d0:97:ed: 32:6b:06:3d:d6:0c:70:fd:34:fd:26:56:13:41:b9: 20:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9E:D1:45:2E:59:DA:DA:B7:8C:1D:7B:09:CF:2B:2D:24:2D:11:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/299762e0-5609-31b1-a8fd-ea984b1f5823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:ac:bc:30:52:23:6b:15:82:69:6b:07:0e:f0:87:a4:15:67: 54:83:e3:64:67:e8:fe:6a:46:72:7c:98:e4:7a:c8:20:14:c2: 5f:5a:b9:27:b6:a8:93:20:b0:1f:06:b2:13:99:01:a0:a8:6d: 7a:6b:36:92:55:e7:ba:88:a1:d8:0a:36:51:21:55:f6:d4:df: 06:b2:72:fb:18:83:c8:9e:82:f0:0d:97:0a:a9:6d:6d:11:b2: 35:c1:b0:c9:68:0a:31:1f:a3:dc:ae:c2:a1:8c:d6:9f:ba:2b: a8:dc:c9:7a:08:fe:8b:65:03:3c:8e:ad:5f:b9:cc:c9:33:7e: 35:fd:61:a2:e7:bb:81:19:f3:b0:5a:be:71:5d:66:36:22:1b: d1:81:3d:62:81:89:f1:78:dc:b9:3a:33:89:4e:78:87:5e:a5: 14:a6:e7:c8:1b:05:01:ae:a8:f7:41:67:4f:5d:b9:5c:8d:9d: 13:1a:3f:58:15:03:27:9e:df:b1:a3:b6:30:25:3d:08:6a:58: 49:34:23:95:18:d7:ec:f2:c6:9d:75:1c:bc:e3:28:88:fb:69: 9c:1e:aa:a0:c0:ce:6d:9e:ca:f2:cf:eb:95:04:fb:4a:63:95: da:66:34:56:4f:20:66:bc:3e:70:74:c8:eb:9a:79:37:69:5e: 1b:3c:21:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9o8xgoce/lMmPNeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwNjA3NDkxOVoXDTI3MDEwNDA4NDkxOVowLzEtMCsGA1UEAxMk ZDNjZGExZmYtMTRjMy00ZWMxLTlkOWMtNDg2NjNhYmE5ODkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+GM4MjX/vnz7IFg+aWf3ldRbvdRD9seusLD QourhdyV9veBCAvHniO6pbpdU+Jlws2Jfn6QkwA2yWoQiGgn6sm0iMJYeWCem9qp 3fh0Eo/dhDDQ8nMSpzmEmUN3is5oYVACI3r5b9nidpFax5sUtb0hKYoijsIOMGP0 ZDW/B6e4gLnjDoJtnnzXEl6+TxccMpuflL+Gh7afKCbN8GX+v4fF8TMOmfETK8ez yJMvRKTjw+pUWkG+srpK1YmEu8Xqmgry1ers6bYx1QgctxtyJ/uliWDZpQjrmhhR vwKITSHlW+PvhIwsussb6YjQl+0yawY91gxw/TT9JlYTQbkgJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGe0UUuWdrat4wdewnPKy0kLRFtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjk5NzYyZTAtNTYwOS0z MWIxLWE4ZmQtZWE5ODRiMWY1ODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPRCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWsvDBSI2sVgmlrBw7wh6QVZ1SD42Rn6P5qRnJ8mOR6yCAUwl9auSe2 qJMgsB8GshOZAaCobXprNpJV57qIodgKNlEhVfbU3waycvsYg8iegvANlwqpbW0R sjXBsMloCjEfo9yuwqGM1p+6K6jcyXoI/otlAzyOrV+5zMkzfjX9YaLnu4EZ87Ba vnFdZjYiG9GBPWKBifF43Lk6M4lOeIdepRSm58gbBQGuqPdBZ09duVyNnRMaP1gV Ayee37GjtjAlPQhqWEk0I5UY1+zyxp11HLzjKIj7aZweqqDAzm2eyvLP65UE+0pj ldpmNFZPIGa8PnB0yOuaeTdpXhs8IWs= -----END CERTIFICATE-----Generated at Sun Oct 11 07:43:04 2026 by rpki-client