$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/91739ce1-2f81-3040-b7bf-9c5077d34e1e.roa File: 91739ce1-2f81-3040-b7bf-9c5077d34e1e.roa (raw, json) Hash identifier: d+t2mdT9u99rWjQhdQbFG58oA4j7hWSbSV/O5aFYp8k= Subject key identifier: F3:BF:4F:3B:CE:B4:8B:02:8B:E7:3F:C4:82:D6:52:BE:88:F4:4D:F4 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F498939C54D4CCFA67EF28100 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/91739ce1-2f81-3040-b7bf-9c5077d34e1e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 212238 IP address blocks: 72.244.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:39:c5:4d:4c:cf:a6:7e:f2:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6f3c484e-339c-413b-9743-327e069ec0f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3d:47:5f:68:48:0c:45:2f:dd:d7:1a:e9:36: 85:e7:8a:f1:2c:76:b6:07:05:1b:3d:55:39:f4:85: 0c:ae:07:79:43:6d:ed:ca:1a:d2:37:d3:ab:41:35: 8b:55:98:a6:3b:96:5e:11:6e:01:67:32:20:39:2a: e7:ad:86:c6:ca:04:bc:38:38:c3:9d:12:b1:dc:96: f2:dd:ea:c5:ac:c4:36:c0:7b:65:32:7c:18:5a:c3: e3:95:37:50:00:51:2b:56:92:19:24:8a:a5:9f:5d: f7:b0:74:e7:49:99:6e:5f:75:b5:c0:cb:fc:c4:e4: 88:ec:65:54:b9:03:bd:61:cf:d7:59:1c:f2:82:f1: 58:66:8d:dc:4f:68:b3:77:c4:e1:06:43:8a:23:7f: db:6b:e7:a4:5b:1f:c5:3c:8e:ad:66:19:41:d2:67: 7f:df:bf:13:71:97:fd:81:6d:3a:2b:c9:6b:97:49: f7:8a:67:69:3e:95:12:d4:bd:63:65:10:ae:2c:cd: 14:65:3a:23:51:e3:9c:67:8d:c7:42:1e:0b:b6:dd: 2e:db:30:a1:24:7e:45:2f:95:c1:a6:6c:2b:78:a7: 29:b2:98:27:cb:68:aa:57:1d:73:e7:03:dd:43:3c: 3e:6a:36:42:a5:fd:b3:d3:8d:bc:e2:a6:7d:15:15: f7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BF:4F:3B:CE:B4:8B:02:8B:E7:3F:C4:82:D6:52:BE:88:F4:4D:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/91739ce1-2f81-3040-b7bf-9c5077d34e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:5f:2a:c8:98:5e:8b:94:91:d8:66:4e:6c:42:35:8b:9c:e5: 7d:de:b8:9d:a6:c9:02:f8:7d:a4:07:3a:a5:82:93:82:25:9f: 2a:39:8f:2d:ed:b4:9b:82:66:8c:e4:ba:73:16:4e:24:04:2b: 2e:0d:28:7d:c8:17:cc:2b:50:2e:a5:d1:4b:26:fb:74:1f:89: cc:57:4f:7f:e5:fa:ae:42:42:08:9d:ed:96:dc:3a:1f:db:31: a2:a0:ae:67:44:36:22:f6:73:87:b3:ea:1d:0b:fa:7c:fe:c1: de:0d:9f:0c:41:73:a9:3c:0b:30:67:c2:ee:9a:ee:c8:83:3c: 3f:bb:bb:49:28:fa:6e:03:ca:c8:e7:da:a8:1a:bd:17:33:fa: 40:27:be:63:d8:2d:12:ac:1a:48:fe:71:da:63:75:7c:6e:e2: a5:d9:7d:b4:f6:65:57:30:49:09:06:52:b0:ec:59:ac:43:14: fa:78:76:a3:7d:78:5a:5c:ee:48:e0:32:9a:a2:85:59:48:6c: a6:85:df:0a:5a:d9:64:df:46:ab:79:81:3f:c0:0c:3b:81:31: 2f:bd:8d:18:45:e4:9f:69:ff:2e:56:67:cd:18:5c:e9:60:6a: da:1c:e8:e8:d1:fa:53:37:4b:60:a8:2b:bf:03:4d:fe:e9:df: 46:64:a6:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiTnFTUzPpn7ygQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmYzYzQ4NGUtMzM5Yy00MTNiLTk3NDMtMzI3ZTA2OWVjMGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlz1HX2hIDEUv3dca6TaF54rxLHa2BwUbPVU5 9IUMrgd5Q23tyhrSN9OrQTWLVZimO5ZeEW4BZzIgOSrnrYbGygS8ODjDnRKx3Jby 3erFrMQ2wHtlMnwYWsPjlTdQAFErVpIZJIqln133sHTnSZluX3W1wMv8xOSI7GVU uQO9Yc/XWRzygvFYZo3cT2izd8ThBkOKI3/ba+ekWx/FPI6tZhlB0md/378TcZf9 gW06K8lrl0n3imdpPpUS1L1jZRCuLM0UZTojUeOcZ43HQh4Ltt0u2zChJH5FL5XB pmwreKcpspgny2iqVx1z5wPdQzw+ajZCpf2z04284qZ9FRX3AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPO/TzvOtIsCi+c/xILWUr6I9E30MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTE3MzljZTEtMmY4MS0z MDQwLWI3YmYtOWM1MDc3ZDM0ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPT8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhfKsiYXouUkdhmTmxCNYuc5X3euJ2myQL4faQHOqWCk4Ilnyo5jy3t tJuCZozkunMWTiQEKy4NKH3IF8wrUC6l0Usm+3QficxXT3/l+q5CQgid7ZbcOh/b MaKgrmdENiL2c4ez6h0L+nz+wd4NnwxBc6k8CzBnwu6a7siDPD+7u0ko+m4Dysjn 2qgavRcz+kAnvmPYLRKsGkj+cdpjdXxu4qXZfbT2ZVcwSQkGUrDsWaxDFPp4dqN9 eFpc7kjgMpqihVlIbKaF3wpa2WTfRqt5gT/ADDuBMS+9jRhF5J9p/y5WZ80YXOlg atoc6OjR+lM3S2CoK78DTf7p30ZkptM= -----END CERTIFICATE-----Generated at Sun Oct 4 22:50:17 2026 by rpki-client