$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2de3e58b-78e2-396c-bd45-9454380e065b.roa File: 2de3e58b-78e2-396c-bd45-9454380e065b.roa (raw, json) Hash identifier: RwNSZlsjM2j4Vwev8YQlqI025dP3FosF1WL7wa973VE= Subject key identifier: 4C:A3:0D:0B:C7:61:BD:11:99:CB:F8:BD:29:D4:AB:C7:FB:E8:73:8C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B4A233840A925ABEE81C9F500 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2de3e58b-78e2-396c-bd45-9454380e065b.roa Signing time: Tue 23 Sep 2025 11:48:29 +0000 ROA not before: Tue 23 Sep 2025 11:48:29 +0000 ROA not after: Mon 22 Dec 2025 12:48:29 +0000 asID: 9304 IP address blocks: 72.244.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:23:38:40:a9:25:ab:ee:81:c9:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 23 11:48:29 2025 GMT Not After : Dec 22 12:48:29 2025 GMT Subject: CN=986d86ea-aa8d-40ae-aa26-436ad07ec872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3b:31:29:8a:00:38:7b:1a:5d:fa:d3:12:13: 6f:9f:02:1d:ba:84:a1:53:58:fc:52:3a:4b:a1:6f: 00:80:ad:23:0e:e3:b7:e5:17:ad:5a:d6:5c:d5:c3: 50:03:3a:86:4a:3d:2e:d6:4f:3b:39:b9:6f:f4:92: 75:73:e7:ab:2e:b7:e0:bf:3d:03:68:b4:79:6c:b9: 06:25:86:29:ed:83:ed:c2:ca:5a:a9:09:74:f9:22: b5:fd:7d:38:24:69:08:be:f0:0a:91:dc:67:8b:07: 38:2c:05:14:a7:a4:7d:23:fe:a8:3c:55:e7:42:3c: bb:f4:92:f0:a3:80:be:01:4f:ea:ee:d2:d5:8d:6a: 60:b3:03:38:1c:db:48:5b:1f:89:47:5c:31:0d:b8: bb:bf:51:93:43:36:40:c8:09:a4:90:f6:38:2e:d5: de:2c:ae:86:09:eb:51:27:c6:8f:a6:0c:47:fd:6f: c0:26:4c:3a:e6:6f:c0:84:e4:83:12:84:59:ba:65: af:af:50:5d:95:66:82:52:5f:08:a6:9c:bc:05:8a: 98:b4:10:7b:1c:27:f9:6f:15:42:29:d7:78:b4:f9: bd:8e:d3:ad:c9:fb:4f:d2:51:69:43:e1:8c:35:c4: 82:37:d8:26:ff:02:71:f7:cf:ef:a2:0c:eb:35:e0: e5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A3:0D:0B:C7:61:BD:11:99:CB:F8:BD:29:D4:AB:C7:FB:E8:73:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2de3e58b-78e2-396c-bd45-9454380e065b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:20:3a:a4:74:a2:50:2e:b5:ae:a7:14:f8:61:ca:79:3c:24: 92:45:b1:45:f7:24:db:16:3e:74:fd:aa:48:7b:4a:28:31:05: 06:58:19:24:6a:13:14:5b:43:ca:78:0a:26:ba:5a:bc:22:40: e4:85:d3:fd:8f:98:98:cc:ca:e1:ea:47:8e:79:9d:a6:26:52: 28:9a:dd:35:46:c4:64:ec:0f:6c:b6:c7:4d:ed:12:ab:ed:95: 69:4a:b4:eb:3b:e2:36:e8:0c:26:35:dc:f3:23:89:30:6e:12: b9:91:f0:81:60:84:f0:bb:36:29:94:27:f8:db:8e:c9:e6:62: f3:04:05:87:99:d0:1b:e0:48:47:39:70:26:6f:90:ec:2d:94: e4:f5:4b:ac:13:a8:e3:6c:b1:9e:5f:41:98:1d:be:17:6c:2a: 71:ce:cb:58:f4:13:bb:2b:ee:00:a5:eb:3e:54:5b:d2:12:49: 98:75:1a:c6:58:23:56:d3:4f:3c:90:2e:69:2b:1d:79:0e:91: 67:71:d8:4d:7d:a0:31:f3:ac:8b:f1:4b:61:af:de:68:2b:8a: 52:8f:5d:3b:7c:03:4b:05:a7:e3:a2:3a:31:6d:71:4c:6f:4a: 74:7c:5e:e6:7e:70:76:7f:67:2c:61:6c:04:eb:26:43:b2:c6: 91:4f:ad:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKIzhAqSWr7oHJ9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyMzExNDgyOVoXDTI1MTIyMjEyNDgyOVowLzEtMCsGA1UEAxMk OTg2ZDg2ZWEtYWE4ZC00MGFlLWFhMjYtNDM2YWQwN2VjODcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTsxKYoAOHsaXfrTEhNvnwIduoShU1j8UjpL oW8AgK0jDuO35RetWtZc1cNQAzqGSj0u1k87Oblv9JJ1c+erLrfgvz0DaLR5bLkG JYYp7YPtwspaqQl0+SK1/X04JGkIvvAKkdxniwc4LAUUp6R9I/6oPFXnQjy79JLw o4C+AU/q7tLVjWpgswM4HNtIWx+JR1wxDbi7v1GTQzZAyAmkkPY4LtXeLK6GCetR J8aPpgxH/W/AJkw65m/AhOSDEoRZumWvr1BdlWaCUl8Ippy8BYqYtBB7HCf5bxVC Kdd4tPm9jtOtyftP0lFpQ+GMNcSCN9gm/wJx98/vogzrNeDlhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyjDQvHYb0Rmcv4vSnUq8f76HOMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmRlM2U1OGItNzhlMi0z OTZjLWJkNDUtOTQ1NDM4MGUwNjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPTDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8gOqR0olAuta6nFPhhynk8JJJFsUX3JNsWPnT9qkh7SigxBQZYGSRq ExRbQ8p4Cia6WrwiQOSF0/2PmJjMyuHqR455naYmUiia3TVGxGTsD2y2x03tEqvt lWlKtOs74jboDCY13PMjiTBuErmR8IFghPC7NimUJ/jbjsnmYvMEBYeZ0BvgSEc5 cCZvkOwtlOT1S6wTqONssZ5fQZgdvhdsKnHOy1j0E7sr7gCl6z5UW9ISSZh1GsZY I1bTTzyQLmkrHXkOkWdx2E19oDHzrIvxS2Gv3mgrilKPXTt8A0sFp+OiOjFtcUxv SnR8XuZ+cHZ/ZyxhbATrJkOyxpFPrdk= -----END CERTIFICATE-----Generated at Wed Nov 5 03:24:03 2025 by rpki-client