$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33666ca0-c011-3fa4-a7e0-568666d37066.roa File: 33666ca0-c011-3fa4-a7e0-568666d37066.roa (raw, json) Hash identifier: I6+QIz/Dhq6jI4uuNhamJIcsMNj85P1246PeGtcMkxM= Subject key identifier: 6E:E9:AC:85:82:3A:CB:95:AC:58:C5:44:21:C4:26:F2:7B:3C:1B:54 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F6161DD2774D55371CC19E940 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33666ca0-c011-3fa4-a7e0-568666d37066.roa Signing time: Sat 03 Oct 2026 14:46:03 +0000 ROA not before: Sat 03 Oct 2026 14:46:03 +0000 ROA not after: Fri 01 Jan 2027 15:46:03 +0000 asID: 402899 IP address blocks: 72.244.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:61:dd:27:74:d5:53:71:cc:19:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 3 14:46:03 2026 GMT Not After : Jan 1 15:46:03 2027 GMT Subject: CN=93885ae2-4c09-493b-9810-1ea3fd710269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ef:c9:3b:5f:08:e4:2d:88:53:f0:76:1f:a0: b9:f2:17:49:b0:2f:72:0a:15:88:8b:06:be:9f:4f: 61:9d:0c:0f:b1:ce:c4:f6:b9:40:48:71:9f:75:a1: cc:da:74:1f:ae:bb:6e:b4:74:01:b5:36:6a:92:83: 9f:68:6d:b5:fc:f6:b0:ec:50:d6:1b:c4:9b:cc:12: ed:eb:31:ae:59:0f:c1:20:42:6d:a9:b6:aa:ae:b0: b2:6d:26:57:0d:ce:de:85:4f:28:ab:cf:4e:01:11: ee:ab:38:cf:ff:8d:db:50:8e:d1:eb:a3:38:83:78: 87:94:5a:7f:a5:64:ea:fb:0b:ab:80:3b:99:bf:8c: 6e:5d:c2:46:65:16:f8:6a:11:fd:4b:ed:47:7f:83: 11:64:b3:99:4d:fd:f5:dd:db:bd:1f:d7:00:1f:ba: 40:b3:a6:34:f0:48:18:bb:7a:8c:e0:7a:41:18:67: dc:03:5c:e7:b0:9e:ac:7b:31:03:46:3f:c9:c9:b2: 74:65:11:71:16:7d:8d:8f:9b:8b:b4:64:52:19:7c: bb:62:ad:50:11:06:d7:03:e9:ec:2a:ba:23:e0:08: 76:d7:30:02:c5:1f:84:fe:b3:80:45:98:fd:9f:c1: 47:e8:28:94:ee:96:6f:74:88:5f:d9:56:dc:25:82: 5f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E9:AC:85:82:3A:CB:95:AC:58:C5:44:21:C4:26:F2:7B:3C:1B:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33666ca0-c011-3fa4-a7e0-568666d37066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:fa:23:cd:1a:8b:63:ed:f9:28:4c:9a:06:1a:bc:fa:a7:a4: 10:22:f9:5c:05:07:fd:0a:60:62:ba:30:bf:a1:f6:68:fe:77: c5:44:98:4b:08:25:d1:8d:bd:c4:55:58:cd:3c:f3:39:71:bb: 65:f9:87:a3:1b:54:cd:27:df:6b:c3:95:c6:88:c3:a2:2e:94: 52:1d:8c:e2:e3:1f:dc:a8:3f:89:51:66:89:1d:f3:7b:74:90: 7f:40:5a:5a:e6:91:7a:dd:a6:21:b4:05:06:b8:3c:4c:d4:95: b7:f0:b2:3d:5f:2a:f2:ba:bd:b5:b9:33:ca:d5:32:1f:c5:70: b8:42:d8:26:0f:93:10:fb:ac:63:f5:b2:eb:3d:dc:d2:0d:7d: d7:15:08:19:1c:72:d3:57:01:6b:2f:38:4e:d7:da:16:c9:f0: 5f:a7:0c:f1:ef:cb:7b:2d:90:b6:10:e4:eb:1f:c7:12:e9:9e: 22:f8:34:3a:8e:97:c4:e8:cb:bf:93:c8:68:3a:08:23:8b:35: 91:2a:f3:fe:4e:01:62:0c:bb:68:38:ce:85:e7:44:22:9f:67: 75:61:90:ed:4d:3f:13:9e:52:ce:a2:a3:e0:3d:26:72:5f:4e: 68:ce:70:8c:90:48:02:61:43:30:8c:39:62:63:62:8c:ff:62: b7:bc:2c:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hYd0ndNVTccwZ6UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwMzE0NDYwM1oXDTI3MDEwMTE1NDYwM1owLzEtMCsGA1UEAxMk OTM4ODVhZTItNGMwOS00OTNiLTk4MTAtMWVhM2ZkNzEwMjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku/JO18I5C2IU/B2H6C58hdJsC9yChWIiwa+ n09hnQwPsc7E9rlASHGfdaHM2nQfrrtutHQBtTZqkoOfaG21/Paw7FDWG8SbzBLt 6zGuWQ/BIEJtqbaqrrCybSZXDc7ehU8oq89OARHuqzjP/43bUI7R66M4g3iHlFp/ pWTq+wurgDuZv4xuXcJGZRb4ahH9S+1Hf4MRZLOZTf313du9H9cAH7pAs6Y08EgY u3qM4HpBGGfcA1znsJ6sezEDRj/JybJ0ZRFxFn2Nj5uLtGRSGXy7Yq1QEQbXA+ns Kroj4Ah21zACxR+E/rOARZj9n8FH6CiU7pZvdIhf2VbcJYJfcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7prIWCOsuVrFjFRCHEJvJ7PBtUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzM2NjZjYTAtYzAxMS0z ZmE0LWE3ZTAtNTY4NjY2ZDM3MDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPRIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF76I80ai2Pt+ShMmgYavPqnpBAi+VwFB/0KYGK6ML+h9mj+d8VEmEsI JdGNvcRVWM088zlxu2X5h6MbVM0n32vDlcaIw6IulFIdjOLjH9yoP4lRZokd83t0 kH9AWlrmkXrdpiG0BQa4PEzUlbfwsj1fKvK6vbW5M8rVMh/FcLhC2CYPkxD7rGP1 sus93NINfdcVCBkcctNXAWsvOE7X2hbJ8F+nDPHvy3stkLYQ5OsfxxLpniL4NDqO l8Toy7+TyGg6CCOLNZEq8/5OAWIMu2g4zoXnRCKfZ3VhkO1NPxOeUs6io+A9JnJf TmjOcIyQSAJhQzCMOWJjYoz/Yre8LEI= -----END CERTIFICATE-----Generated at Sun Oct 11 23:36:45 2026 by rpki-client