$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/681823e9-8f10-3ff3-aa4d-9c0b25641b78.roa File: 681823e9-8f10-3ff3-aa4d-9c0b25641b78.roa (raw, json) Hash identifier: BLfbYjtMsUDULIcDzcQd5Xv/39ifOvnyuxC5sjb/lhI= Subject key identifier: C8:01:43:6F:76:83:63:34:B7:E7:7E:47:FA:D3:AB:F6:70:BA:E3:0B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B25F0906FE95D8B89513009C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/681823e9-8f10-3ff3-aa4d-9c0b25641b78.roa Signing time: Wed 10 Sep 2025 12:37:19 +0000 ROA not before: Wed 10 Sep 2025 12:37:19 +0000 ROA not after: Tue 09 Dec 2025 13:37:19 +0000 asID: 5650 IP address blocks: 72.244.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:f0:90:6f:e9:5d:8b:89:51:30:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 10 12:37:19 2025 GMT Not After : Dec 9 13:37:19 2025 GMT Subject: CN=5ae0271e-ab0d-4670-ab42-b490cd3a9316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7c:71:f5:f3:38:82:38:7a:a1:03:ef:7f:82: 81:62:0d:62:9f:ce:e3:72:74:a2:aa:e1:94:2f:3a: 78:85:ee:c8:9d:3f:cf:19:d6:19:65:bb:ed:31:a6: d0:30:fc:a5:40:1d:ce:5f:65:7a:28:5b:57:00:60: ae:40:e2:5c:a6:17:b2:92:27:d0:c5:89:58:15:72: 03:58:73:e0:48:5e:bd:9c:5c:19:29:c1:a2:1e:7b: c3:75:4e:87:9c:e0:de:2a:e9:6c:7c:b9:5f:82:48: 82:e6:fb:43:34:33:72:d1:34:da:ca:95:db:4b:fe: be:a9:8a:a7:9c:bf:04:51:1b:39:04:ef:58:12:82: f7:79:ba:b2:fe:e3:54:85:b6:40:45:59:fc:ca:15: c3:a1:96:80:eb:55:dd:a3:86:e1:93:a7:e1:0b:78: 22:11:58:f6:62:25:e1:40:04:14:f0:90:0b:23:42: 32:55:2b:98:36:72:77:32:1a:39:30:ba:1d:71:b0: 97:eb:20:d6:57:db:f0:25:c3:c9:9a:1c:fc:d5:38: f2:cf:d6:6a:be:66:16:6d:21:3b:89:ed:63:20:63: db:57:d9:0c:af:6f:1f:e8:4b:dd:0b:af:97:95:93: d3:f2:d9:16:8f:fb:0d:2c:c5:99:33:ec:53:d3:10: 16:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:01:43:6F:76:83:63:34:B7:E7:7E:47:FA:D3:AB:F6:70:BA:E3:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/681823e9-8f10-3ff3-aa4d-9c0b25641b78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:33:3c:53:97:fa:a9:57:69:59:bd:d2:10:a8:6e:2f:48:73: 38:dd:07:4d:1c:44:c4:1d:c2:7e:4b:e7:9b:9a:26:07:92:05: 17:a5:86:13:7b:60:b5:1c:8b:18:9a:4d:0c:9c:c9:2b:79:1f: 44:6b:28:70:b3:16:ec:0a:8a:98:cd:88:0c:52:be:e5:4b:e7: dc:f2:6f:7a:a2:8f:78:84:95:82:79:4e:d2:e3:f2:ec:47:d3: 8b:5d:9d:ac:9c:95:c6:1d:6b:36:a3:ce:43:c1:3c:59:94:08: df:5b:91:e1:b8:cc:53:47:3e:7a:dd:3d:45:b9:ec:8b:8a:97: 43:37:38:9f:0a:b1:66:5e:a8:bb:c4:1b:89:67:8c:3f:71:f7: 6f:6a:89:ad:5e:36:30:3a:73:32:0c:cb:66:c3:16:a4:23:0b: b0:d1:46:a7:8b:60:19:18:a3:17:96:6b:95:b9:4e:87:57:83: f3:a6:f2:28:f3:f6:b4:32:92:1c:fe:48:95:bd:90:13:43:b1: b8:a2:23:dd:83:f7:66:6a:2e:e9:6a:4a:bc:bf:e4:18:20:a4: 63:34:44:1a:25:63:31:ea:98:45:b6:6d:01:6a:64:94:0c:f0: 50:60:41:1c:cc:2c:16:90:5c:c4:3d:34:3b:9c:6d:71:7f:9c: 15:0d:98:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl8JBv6V2LiVEwCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkxMDEyMzcxOVoXDTI1MTIwOTEzMzcxOVowLzEtMCsGA1UEAxMk NWFlMDI3MWUtYWIwZC00NjcwLWFiNDItYjQ5MGNkM2E5MzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHxx9fM4gjh6oQPvf4KBYg1in87jcnSiquGU Lzp4he7InT/PGdYZZbvtMabQMPylQB3OX2V6KFtXAGCuQOJcpheykifQxYlYFXID WHPgSF69nFwZKcGiHnvDdU6HnODeKulsfLlfgkiC5vtDNDNy0TTaypXbS/6+qYqn nL8EURs5BO9YEoL3ebqy/uNUhbZARVn8yhXDoZaA61Xdo4bhk6fhC3giEVj2YiXh QAQU8JALI0IyVSuYNnJ3Mho5MLodcbCX6yDWV9vwJcPJmhz81Tjyz9ZqvmYWbSE7 ie1jIGPbV9kMr28f6EvdC6+XlZPT8tkWj/sNLMWZM+xT0xAWRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgBQ292g2M0t+d+R/rTq/ZwuuMLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjgxODIzZTktOGYxMC0z ZmYzLWFhNGQtOWMwYjI1NjQxYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPSwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0zPFOX+qlXaVm90hCobi9IczjdB00cRMQdwn5L55uaJgeSBRelhhN7 YLUcixiaTQycySt5H0RrKHCzFuwKipjNiAxSvuVL59zyb3qij3iElYJ5TtLj8uxH 04tdnayclcYdazajzkPBPFmUCN9bkeG4zFNHPnrdPUW57IuKl0M3OJ8KsWZeqLvE G4lnjD9x929qia1eNjA6czIMy2bDFqQjC7DRRqeLYBkYoxeWa5W5TodXg/Om8ijz 9rQykhz+SJW9kBNDsbiiI92D92ZqLulqSry/5BggpGM0RBolYzHqmEW2bQFqZJQM 8FBgQRzMLBaQXMQ9NDucbXF/nBUNmKE= -----END CERTIFICATE-----Generated at Wed Nov 5 02:15:55 2025 by rpki-client