$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9ded18be-1aa1-3992-8d45-fc366627f4ae.roa File: 9ded18be-1aa1-3992-8d45-fc366627f4ae.roa (raw, json) Hash identifier: dqvAr4+I68ur9fF9sNH4sC8+NnxjZtaX5wcuTJp5pAs= Subject key identifier: 84:60:9B:1C:48:19:40:5E:D1:96:58:D9:D7:7B:B1:0C:10:C3:44:DF Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F4974E771CF1DF64E45D14D40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9ded18be-1aa1-3992-8d45-fc366627f4ae.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 9304 IP address blocks: 72.244.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:e7:71:cf:1d:f6:4e:45:d1:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c4e336ea-9552-40ba-b0b5-428ce7163f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:29:3f:75:35:03:48:d4:c0:76:af:ea:d7:e7: a7:a6:ba:dc:fc:b6:95:95:ce:bd:2d:e9:98:c9:63: 4d:e3:47:7f:e3:16:0a:88:80:5e:f9:5a:20:83:d6: 96:3c:36:e6:14:5e:54:31:8d:4e:61:b8:1f:f7:c5: 6f:59:a7:e6:42:6d:18:a5:94:ed:d6:64:71:fa:24: 54:9f:3a:75:49:e0:7d:c7:87:61:9d:20:18:de:57: 98:30:91:df:43:6b:23:3f:70:32:3a:77:e5:93:3a: da:84:32:79:f4:cc:23:2f:d1:1e:6d:4a:46:2a:51: 97:5a:b4:e3:b2:88:c4:0c:f1:4f:56:09:0c:d2:ea: e1:5c:9c:e7:f4:e0:e4:d6:aa:b4:75:aa:ef:00:78: ba:5e:30:98:a3:eb:70:fd:01:9d:44:39:2a:36:24: e4:a2:c8:99:4d:fe:19:4e:c4:89:3a:cc:be:34:47: 3f:32:ca:eb:a6:79:6f:ce:72:ec:be:da:b1:5c:df: 28:19:c7:c7:67:c5:d4:0b:3f:14:8e:8b:c5:1d:54: ed:e6:f9:1c:f5:58:27:b9:d9:6a:2e:6d:16:22:32: ca:79:a9:8e:11:62:5b:48:f8:0e:a4:2d:61:d8:62: 5b:92:36:99:76:fd:f0:7f:6d:09:61:0b:a5:c6:e7: 4a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:60:9B:1C:48:19:40:5E:D1:96:58:D9:D7:7B:B1:0C:10:C3:44:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9ded18be-1aa1-3992-8d45-fc366627f4ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:9f:00:99:2a:93:2e:64:32:56:74:1d:98:d3:b9:7c:b3:c5: bb:d6:50:2a:ae:cc:53:5c:2b:54:4e:bf:76:75:a9:9e:4d:23: 30:43:c4:2f:0b:a3:49:54:f1:54:20:f3:3d:4b:78:ed:fd:cc: 73:eb:15:64:28:dc:10:bb:97:04:2b:9a:16:bc:fb:9d:c3:51: 1a:42:d9:7b:5e:1a:83:ff:8f:1a:a6:78:71:9c:6e:b2:e6:70: b3:64:f7:04:82:7c:22:c7:5c:d2:c7:5a:ef:82:06:87:7b:94: de:55:bf:78:85:fa:e9:08:f4:39:64:e3:fb:8e:8e:fe:22:bb: ab:db:a4:7a:33:74:ce:18:73:ff:b9:c7:51:fd:89:0d:72:24: 91:3b:2c:55:4a:cd:d0:0e:4a:71:98:81:2f:21:eb:b9:0b:f4: 5a:e0:bd:fa:05:10:c8:68:e7:89:ab:45:67:e3:a9:99:4e:b3: 49:bb:a0:9b:a1:82:66:32:42:31:d7:22:3b:65:57:d0:e1:d0: 76:98:df:41:54:c5:35:8a:2f:9d:fc:42:41:88:59:1a:69:39: 74:0f:63:d4:2c:2e:f1:a4:78:5a:a3:ad:23:c2:7c:ff:4d:1a: 5c:ff:2d:79:53:5f:64:c7:b5:aa:1c:02:ab:cf:17:b5:60:3c: fe:fd:1c:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdOdxzx32TkXRTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzRlMzM2ZWEtOTU1Mi00MGJhLWIwYjUtNDI4Y2U3MTYzZjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ck/dTUDSNTAdq/q1+enprrc/LaVlc69LemY yWNN40d/4xYKiIBe+Vogg9aWPDbmFF5UMY1OYbgf98VvWafmQm0YpZTt1mRx+iRU nzp1SeB9x4dhnSAY3leYMJHfQ2sjP3AyOnflkzrahDJ59MwjL9EebUpGKlGXWrTj sojEDPFPVgkM0urhXJzn9ODk1qq0darvAHi6XjCYo+tw/QGdRDkqNiTkosiZTf4Z TsSJOsy+NEc/MsrrpnlvznLsvtqxXN8oGcfHZ8XUCz8UjovFHVTt5vkc9Vgnudlq Lm0WIjLKeamOEWJbSPgOpC1h2GJbkjaZdv3wf20JYQulxudKdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRgmxxIGUBe0ZZY2dd7sQwQw0TfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWRlZDE4YmUtMWFhMS0z OTkyLThkNDUtZmMzNjY2MjdmNGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPRvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWfAJkqky5kMlZ0HZjTuXyzxbvWUCquzFNcK1ROv3Z1qZ5NIzBDxC8L o0lU8VQg8z1LeO39zHPrFWQo3BC7lwQrmha8+53DURpC2XteGoP/jxqmeHGcbrLm cLNk9wSCfCLHXNLHWu+CBod7lN5Vv3iF+ukI9Dlk4/uOjv4iu6vbpHozdM4Yc/+5 x1H9iQ1yJJE7LFVKzdAOSnGYgS8h67kL9FrgvfoFEMho54mrRWfjqZlOs0m7oJuh gmYyQjHXIjtlV9Dh0HaY30FUxTWKL538QkGIWRppOXQPY9QsLvGkeFqjrSPCfP9N Glz/LXlTX2THtaocAqvPF7VgPP79HJ0= -----END CERTIFICATE-----Generated at Sat Oct 10 14:45:57 2026 by rpki-client