$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/77dac16f-6fa8-3e1e-abf3-2550911ddf1d.roa File: 77dac16f-6fa8-3e1e-abf3-2550911ddf1d.roa (raw, json) Hash identifier: QkAERovpftEx8y6774p21QsGByLxZ5lyowqrjYaLf5c= Subject key identifier: 1F:37:61:92:93:85:1B:D9:D9:EC:25:FF:A3:61:91:E2:9A:95:47:02 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BC0047B7928D803537FD7D5A0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/77dac16f-6fa8-3e1e-abf3-2550911ddf1d.roa Signing time: Tue 04 Nov 2025 17:11:56 +0000 ROA not before: Tue 04 Nov 2025 17:11:56 +0000 ROA not after: Mon 02 Feb 2026 17:11:56 +0000 asID: 274650 IP address blocks: 72.244.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:04:7b:79:28:d8:03:53:7f:d7:d5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 4 17:11:56 2025 GMT Not After : Feb 2 17:11:56 2026 GMT Subject: CN=71bf5ca4-494e-4d84-b85b-1fdf5f01a69a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5a:1f:6a:c6:d1:9d:a7:5f:3e:b2:6f:4a:fc: 65:05:75:c1:a7:5c:65:ce:6e:a3:e6:07:d3:92:6c: 24:f4:20:20:a0:f5:3f:c7:18:44:0c:79:2a:8a:89: 98:06:0b:35:3b:f2:87:42:9f:9e:ca:f5:ec:51:7c: 7b:d6:a7:ff:71:8f:7d:4a:cc:6a:0f:5f:34:d8:af: 62:80:0f:b1:25:8e:d3:42:50:74:4b:5f:44:72:70: 71:61:ed:3b:b3:3c:90:e6:4a:2b:cd:13:3c:ef:18: 96:a6:b1:b5:83:aa:8c:4a:aa:9b:6b:fc:6b:f4:2c: 0c:d1:c1:a1:cb:4d:19:d6:f8:2c:4d:2d:4b:5a:d8: 7b:fc:86:f4:9b:98:fe:be:77:13:6e:01:e6:8d:9a: 4f:f2:a5:22:6d:4c:3c:19:07:a9:ba:2a:6d:1b:fb: f1:fb:4e:94:7a:65:c8:51:31:8a:6d:cd:98:70:7f: 9b:8e:ee:c2:b0:26:58:9d:25:ab:88:54:46:46:79: cd:eb:17:a3:b9:d6:0c:6f:02:23:c2:32:0d:56:c4: c3:cb:39:6c:f9:9a:4a:bf:e0:b7:6b:db:c3:14:db: 4a:ac:10:82:6a:cd:57:db:ec:b0:c4:07:71:74:32: c8:2f:d6:4e:90:8e:64:83:d2:4d:2e:78:89:4c:df: 98:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:37:61:92:93:85:1B:D9:D9:EC:25:FF:A3:61:91:E2:9A:95:47:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/77dac16f-6fa8-3e1e-abf3-2550911ddf1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d3:40:cc:30:99:c6:59:b1:9a:9a:db:95:01:62:0a:06:f7: be:d1:93:8c:fa:15:e8:94:aa:95:f2:a3:d4:3d:6f:3d:a5:6d: 99:7a:26:85:b5:7f:53:40:28:a9:cd:a3:1c:45:5d:05:a4:f1: 4f:62:76:a6:a7:4d:7f:dc:71:7f:d5:bb:b6:70:93:96:72:08: 05:e0:d1:1e:62:f5:df:0c:89:d7:4b:b2:18:42:55:be:61:b4: 8d:06:63:85:12:52:88:bd:71:6a:b3:35:58:06:0f:77:2a:bb: 9f:0b:fd:36:0f:ce:0c:5d:b9:6e:f0:74:56:f8:e6:39:b0:af: 08:5b:f4:df:c4:b5:95:70:a5:fb:6a:5d:2b:43:39:dd:98:f2: 00:ce:b0:9c:b6:1b:36:3d:80:bc:97:7b:ad:e0:c1:a1:f1:57: 06:e9:9d:d1:1d:d7:bb:26:bd:f3:14:6b:53:7f:2e:95:2f:66: 16:fb:7f:e8:9f:7a:a2:2a:b3:7f:1f:96:9d:b9:7e:ab:84:52: 23:b0:31:8d:f5:7f:fe:87:53:03:c9:23:f9:4a:6b:63:7c:0b: 4b:5f:5b:37:63:08:28:2f:bb:94:d4:d9:b4:4e:8c:f6:64:e7: 67:28:55:5d:05:c4:b9:90:39:52:8c:a7:5b:49:7c:87:7d:0b: 62:33:1d:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvABHt5KNgDU3/X1aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEwNDE3MTE1NloXDTI2MDIwMjE3MTE1NlowLzEtMCsGA1UEAxMk NzFiZjVjYTQtNDk0ZS00ZDg0LWI4NWItMWZkZjVmMDFhNjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1ofasbRnadfPrJvSvxlBXXBp1xlzm6j5gfT kmwk9CAgoPU/xxhEDHkqiomYBgs1O/KHQp+eyvXsUXx71qf/cY99SsxqD1802K9i gA+xJY7TQlB0S19EcnBxYe07szyQ5korzRM87xiWprG1g6qMSqqba/xr9CwM0cGh y00Z1vgsTS1LWth7/Ib0m5j+vncTbgHmjZpP8qUibUw8GQepuiptG/vx+06UemXI UTGKbc2YcH+bju7CsCZYnSWriFRGRnnN6xejudYMbwIjwjINVsTDyzls+ZpKv+C3 a9vDFNtKrBCCas1X2+ywxAdxdDLIL9ZOkI5kg9JNLniJTN+YWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB83YZKThRvZ2ewl/6NhkeKalUcCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNzdkYWMxNmYtNmZhOC0z ZTFlLWFiZjMtMjU1MDkxMWRkZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPR1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfTQMwwmcZZsZqa25UBYgoG977Rk4z6FeiUqpXyo9Q9bz2lbZl6JoW1 f1NAKKnNoxxFXQWk8U9idqanTX/ccX/Vu7Zwk5ZyCAXg0R5i9d8MiddLshhCVb5h tI0GY4USUoi9cWqzNVgGD3cqu58L/TYPzgxduW7wdFb45jmwrwhb9N/EtZVwpftq XStDOd2Y8gDOsJy2GzY9gLyXe63gwaHxVwbpndEd17smvfMUa1N/LpUvZhb7f+if eqIqs38flp25fquEUiOwMY31f/6HUwPJI/lKa2N8C0tfWzdjCCgvu5TU2bROjPZk 52coVV0FxLmQOVKMp1tJfId9C2IzHR4= -----END CERTIFICATE-----Generated at Wed Nov 5 12:58:56 2025 by rpki-client