$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4cfcc102-7f0f-30cd-8d9d-2b6361d86a1a.roa File: 4cfcc102-7f0f-30cd-8d9d-2b6361d86a1a.roa (raw, json) Hash identifier: 7GqcHMWRGlUJIFybghG+3xuHtfhWAH5957r7OEXg8WE= Subject key identifier: 8C:37:81:C8:F7:E6:EB:02:8E:A1:ED:AA:0F:09:B8:D2:E9:B3:C5:71 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B9862E9B1E016681700C70600 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4cfcc102-7f0f-30cd-8d9d-2b6361d86a1a.roa Signing time: Tue 21 Oct 2025 12:29:52 +0000 ROA not before: Tue 21 Oct 2025 12:29:52 +0000 ROA not after: Mon 19 Jan 2026 13:29:52 +0000 asID: 9009 IP address blocks: 72.244.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:62:e9:b1:e0:16:68:17:00:c7:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 21 12:29:52 2025 GMT Not After : Jan 19 13:29:52 2026 GMT Subject: CN=827d868f-fb37-4307-8cdb-af84013c9284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ba:93:e3:0d:48:61:9e:71:a8:4e:e4:45:c2: d5:c0:90:15:7e:39:27:3d:74:6d:d0:f0:17:f2:9e: 05:c1:96:60:14:31:8e:6c:c6:df:4a:9b:8f:16:9b: aa:58:13:00:4b:f1:2d:9c:30:79:e6:84:c0:0c:b9: f8:d5:52:fc:6f:76:71:23:38:f8:4d:02:0d:95:40: e0:27:1c:2d:58:c8:9f:85:97:60:03:10:53:54:d8: 88:4f:a9:c0:d1:c0:9a:3a:3a:a1:e5:9c:6a:8f:7d: 54:c6:ea:1d:14:e3:82:1c:d0:d4:3e:9b:38:d3:1a: 9f:e4:dd:4f:49:d4:52:29:31:b8:6c:dc:64:a9:cd: 18:e8:f4:ae:17:66:e3:a0:5c:4e:61:ce:bb:94:31: f0:31:de:db:78:ad:36:1e:e0:78:6e:43:6f:0c:c6: 9f:db:44:cf:60:4d:8e:d2:e1:01:b1:f4:c0:8f:1d: aa:19:d9:39:ca:0e:be:ba:9d:ee:e3:fc:b4:d2:48: 93:d0:cf:f5:99:32:16:ae:f5:bb:c6:5f:21:85:42: b0:3f:34:78:69:d1:35:c4:5b:9e:7c:a1:10:86:1d: 2f:7d:1b:0c:0d:c3:a0:2a:ca:9a:11:8c:52:eb:00: 7c:c0:a1:30:73:6e:64:d5:17:83:04:19:e5:8a:68: 89:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:37:81:C8:F7:E6:EB:02:8E:A1:ED:AA:0F:09:B8:D2:E9:B3:C5:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4cfcc102-7f0f-30cd-8d9d-2b6361d86a1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:fa:04:32:69:77:ae:eb:a0:94:07:bb:14:b8:38:72:2a:a4: d5:6e:6d:b6:0b:c1:5c:41:48:33:2c:09:8f:db:78:35:72:69: 9a:02:99:79:3d:67:81:57:11:6d:4e:72:8d:08:56:4d:22:72: 06:86:a8:43:b1:76:44:34:bc:47:1e:9a:87:9f:db:be:99:78: 0c:07:a7:ef:a5:d3:e5:7f:95:73:30:21:af:7b:20:33:14:cb: 4b:82:2c:dd:7a:86:a2:01:a2:e6:3a:d4:58:5c:c2:ee:44:e5: e8:3f:e7:0e:1c:45:47:aa:3c:0a:2d:3a:0a:11:bb:5c:98:f1: b3:6d:17:cb:15:00:89:ad:04:5c:45:d8:2b:c7:c4:66:ec:51: e2:81:fe:46:e1:ff:c5:ed:d3:f7:6c:ec:d8:e7:e0:b8:db:a1: 47:f3:32:02:ce:84:d2:c3:ef:c4:18:bf:5e:b9:4e:01:ca:b7: bf:c2:37:37:e1:43:5e:85:5e:88:f1:c8:39:12:8f:5c:10:b5: 99:30:44:21:74:96:a7:b2:b2:42:30:c6:52:cc:5a:eb:90:68: db:13:ad:07:13:0b:38:0e:8c:5a:b7:50:9b:4c:85:a2:a3:6c: c0:78:fb:50:44:13:54:31:04:6b:3c:36:e0:63:0b:94:4c:3f: 14:ba:1a:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYYumx4BZoFwDHBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyMTEyMjk1MloXDTI2MDExOTEzMjk1MlowLzEtMCsGA1UEAxMk ODI3ZDg2OGYtZmIzNy00MzA3LThjZGItYWY4NDAxM2M5Mjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7qT4w1IYZ5xqE7kRcLVwJAVfjknPXRt0PAX 8p4FwZZgFDGObMbfSpuPFpuqWBMAS/EtnDB55oTADLn41VL8b3ZxIzj4TQINlUDg JxwtWMifhZdgAxBTVNiIT6nA0cCaOjqh5Zxqj31UxuodFOOCHNDUPps40xqf5N1P SdRSKTG4bNxkqc0Y6PSuF2bjoFxOYc67lDHwMd7beK02HuB4bkNvDMaf20TPYE2O 0uEBsfTAjx2qGdk5yg6+up3u4/y00kiT0M/1mTIWrvW7xl8hhUKwPzR4adE1xFue fKEQhh0vfRsMDcOgKsqaEYxS6wB8wKEwc25k1ReDBBnlimiJnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIw3gcj35usCjqHtqg8JuNLps8VxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGNmY2MxMDItN2YwZi0z MGNkLThkOWQtMmI2MzYxZDg2YTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPQmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACL6BDJpd67roJQHuxS4OHIqpNVubbYLwVxBSDMsCY/beDVyaZoCmXk9 Z4FXEW1Oco0IVk0icgaGqEOxdkQ0vEcemoef276ZeAwHp++l0+V/lXMwIa97IDMU y0uCLN16hqIBouY61Fhcwu5E5eg/5w4cRUeqPAotOgoRu1yY8bNtF8sVAImtBFxF 2CvHxGbsUeKB/kbh/8Xt0/ds7Njn4LjboUfzMgLOhNLD78QYv165TgHKt7/CNzfh Q16FXojxyDkSj1wQtZkwRCF0lqeyskIwxlLMWuuQaNsTrQcTCzgOjFq3UJtMhaKj bMB4+1BEE1QxBGs8NuBjC5RMPxS6GgA= -----END CERTIFICATE-----Generated at Wed Nov 5 05:38:05 2025 by rpki-client