$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aa03c1cb-1998-3f51-ae2f-85c9acdccc91.roa File: aa03c1cb-1998-3f51-ae2f-85c9acdccc91.roa (raw, json) Hash identifier: oTDRPn5MJS52SmYx2obrdWMKcQE2cCSlDvmL7GOyoQs= Subject key identifier: 3A:0E:CE:94:40:09:0B:8A:9A:17:D4:8C:06:08:E9:79:92:53:4C:BF Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B97D143D686124BBC0BC17380 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aa03c1cb-1998-3f51-ae2f-85c9acdccc91.roa Signing time: Tue 21 Oct 2025 07:36:24 +0000 ROA not before: Tue 21 Oct 2025 07:36:24 +0000 ROA not after: Mon 19 Jan 2026 08:36:24 +0000 asID: 63199 IP address blocks: 72.244.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:d1:43:d6:86:12:4b:bc:0b:c1:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 21 07:36:24 2025 GMT Not After : Jan 19 08:36:24 2026 GMT Subject: CN=5ecafc84-b514-42fe-972e-496ead15ee32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2a:63:cd:e1:70:c8:dd:bb:8c:22:45:46:a0: 71:01:19:f6:b6:b0:5e:ce:72:a7:c7:7d:4f:2f:7c: 8c:33:4a:be:36:c1:cb:1e:97:5b:cb:54:d8:e9:06: b7:91:fe:2b:a4:e0:fa:25:4d:fe:22:27:3e:3a:42: e6:65:5e:26:db:6e:59:68:4e:f9:44:ff:b0:75:4f: a1:5e:0f:8a:ad:ab:78:80:c4:59:8c:31:5a:5c:ef: 5e:1f:e2:ab:e2:7e:55:e5:3a:e0:64:f0:36:d7:78: 4e:64:17:74:c4:87:9f:74:c1:4a:43:19:d7:21:15: 86:67:65:a3:f6:f6:dc:6c:cc:86:3e:94:27:be:1b: d6:70:30:04:c3:8e:2d:e7:8f:79:c5:31:7c:2a:42: 67:ec:12:13:cc:fe:5f:32:f1:64:e7:41:67:04:d8: e5:22:73:9c:8f:6c:bf:f1:34:e0:1a:41:fe:9f:fd: 6b:02:10:c0:c2:0f:1d:2d:d9:4f:6a:ac:c7:cf:e6: 46:54:a2:98:ee:71:7f:5b:8e:f4:fa:89:7a:99:cb: f2:8c:66:3a:be:1f:84:df:55:7f:03:76:df:c3:5a: 83:a5:63:f8:1b:9f:cf:89:8d:d8:f7:d3:11:e8:cd: 3a:f7:11:e8:78:e4:85:e1:b1:40:e6:97:1e:ae:e5: c2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0E:CE:94:40:09:0B:8A:9A:17:D4:8C:06:08:E9:79:92:53:4C:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aa03c1cb-1998-3f51-ae2f-85c9acdccc91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:f5:0d:a3:9a:ff:42:6b:2e:69:f6:ed:a7:1f:4b:77:28:85: 59:76:f1:0c:c5:ac:1b:5a:40:e6:4c:d4:74:6f:6e:d2:57:6d: 50:fb:fd:8c:34:84:72:65:ac:84:80:8c:2e:fd:60:15:22:3a: d2:d5:1a:17:e3:24:d5:fa:14:e2:2a:ac:cd:56:49:9b:10:db: ad:f9:44:e1:34:f9:6d:6b:db:6c:29:db:f4:6e:d7:6f:18:33: fc:70:02:c8:5d:17:65:1f:1c:9d:fe:b6:2f:44:cd:c1:2d:75: 8c:3a:b9:fa:8b:6c:60:9c:ae:72:3f:0f:41:81:fc:d3:c0:31: d7:b2:ec:ee:15:bc:25:8d:77:77:b3:68:c0:40:92:98:f8:29: 02:11:a4:cc:05:11:91:f4:ea:1d:dc:77:1d:52:d9:c1:00:47: 89:5a:84:91:b0:6c:15:19:30:cf:cf:de:07:92:3a:3b:be:c6: 46:d2:03:d8:81:5f:82:42:ec:21:8e:e5:86:ce:a8:5d:49:26: 85:c6:31:ad:3b:56:1b:db:6c:58:72:a1:bd:46:00:53:5d:cd: 75:d2:9f:8d:ce:e2:5e:1a:40:ea:d4:16:85:a8:f4:b2:a5:8f: 79:7e:9f:5d:25:8d:b1:a6:a0:ab:1d:80:d6:5a:e9:8d:89:e8: c4:a7:82:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuX0UPWhhJLvAvBc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyMTA3MzYyNFoXDTI2MDExOTA4MzYyNFowLzEtMCsGA1UEAxMk NWVjYWZjODQtYjUxNC00MmZlLTk3MmUtNDk2ZWFkMTVlZTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSpjzeFwyN27jCJFRqBxARn2trBeznKnx31P L3yMM0q+NsHLHpdby1TY6Qa3kf4rpOD6JU3+Iic+OkLmZV4m225ZaE75RP+wdU+h Xg+Krat4gMRZjDFaXO9eH+Kr4n5V5TrgZPA213hOZBd0xIefdMFKQxnXIRWGZ2Wj 9vbcbMyGPpQnvhvWcDAEw44t5495xTF8KkJn7BITzP5fMvFk50FnBNjlInOcj2y/ 8TTgGkH+n/1rAhDAwg8dLdlPaqzHz+ZGVKKY7nF/W470+ol6mcvyjGY6vh+E31V/ A3bfw1qDpWP4G5/PiY3Y99MR6M069xHoeOSF4bFA5pceruXCnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoOzpRACQuKmhfUjAYI6XmSU0y/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWEwM2MxY2ItMTk5OC0z ZjUxLWFlMmYtODVjOWFjZGNjYzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPSIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKX1DaOa/0JrLmn27acfS3cohVl28QzFrBtaQOZM1HRvbtJXbVD7/Yw0 hHJlrISAjC79YBUiOtLVGhfjJNX6FOIqrM1WSZsQ2635ROE0+W1r22wp2/Ru128Y M/xwAshdF2UfHJ3+ti9EzcEtdYw6ufqLbGCcrnI/D0GB/NPAMdey7O4VvCWNd3ez aMBAkpj4KQIRpMwFEZH06h3cdx1S2cEAR4lahJGwbBUZMM/P3geSOju+xkbSA9iB X4JC7CGO5YbOqF1JJoXGMa07VhvbbFhyob1GAFNdzXXSn43O4l4aQOrUFoWo9LKl j3l+n10ljbGmoKsdgNZa6Y2J6MSnghA= -----END CERTIFICATE-----Generated at Wed Nov 5 03:08:09 2025 by rpki-client