$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cb66ba19-bbb0-3be7-a5f7-272c420f8c5c.roa File: cb66ba19-bbb0-3be7-a5f7-272c420f8c5c.roa (raw, json) Hash identifier: 4SHGQYC+oOPCV5RQf7Dc6dLra+pxA/4AazOb4sER3CE= Subject key identifier: E3:63:90:BF:EB:0E:05:6E:93:5B:C2:60:5B:C2:ED:4D:13:E9:F6:3B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F6F2316D86881C9343FB5C900 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cb66ba19-bbb0-3be7-a5f7-272c420f8c5c.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 53581 IP address blocks: 72.244.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:16:d8:68:81:c9:34:3f:b5:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=4116ab0c-3c1e-4846-8d8f-88cae94bcbc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:56:f2:0a:0f:93:ef:ee:e3:0b:9c:3a:be:58: b9:f2:11:fd:d8:52:80:8c:5d:57:1f:5c:a9:3c:0e: 24:93:bc:48:71:42:d6:22:97:3c:91:e4:58:cf:31: 5f:d3:1f:b0:68:21:c5:ee:e1:a7:34:1e:f8:01:26: 95:3d:61:e4:8f:87:8e:11:b8:8c:74:0f:87:ab:70: d5:d3:5c:d4:f4:32:d7:6c:22:75:f8:8f:4b:4f:93: 69:42:19:b2:71:6a:78:ff:ef:72:cf:46:07:a9:0e: 7b:69:e7:9c:78:79:1f:00:51:37:23:32:82:b1:8a: f1:09:7f:67:81:e6:b8:9e:de:dc:aa:a5:df:5b:6e: b1:48:bc:d2:d2:28:d7:83:e3:ae:ce:ea:32:e3:6e: b8:00:26:90:c4:0b:74:14:45:e1:40:84:7d:d3:f4: 93:c2:08:ec:77:b7:11:73:a9:76:93:a0:83:1b:73: 76:cd:02:11:7b:fc:42:70:42:5a:a9:6d:76:87:de: aa:97:8e:29:df:18:35:f4:87:36:ec:75:e7:e2:4c: 36:2c:a4:ff:b5:07:fa:8a:31:e9:dd:86:3e:ad:fd: 48:1d:23:bc:7d:99:d8:19:c9:72:c5:b4:4d:46:41: 87:47:d3:e9:76:39:96:77:f1:66:17:36:fe:7b:75: cd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:63:90:BF:EB:0E:05:6E:93:5B:C2:60:5B:C2:ED:4D:13:E9:F6:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cb66ba19-bbb0-3be7-a5f7-272c420f8c5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:90:f1:64:94:09:2d:3d:a4:66:69:f5:03:9e:a5:25:f0:bc: 12:60:04:86:1f:9d:c0:a7:6b:bb:05:fe:0f:71:d6:7a:b1:9d: a5:ef:6f:81:13:b6:18:13:f4:3b:ad:f2:90:b3:40:0a:a6:20: 06:69:20:fc:a3:1f:dd:72:f2:d5:d2:aa:0f:6b:5d:f1:e8:13: 46:85:d0:fd:26:6c:35:69:10:b6:b6:b9:6c:62:f4:9b:21:a6: bd:66:56:59:3d:7e:a7:07:c6:25:b0:2d:85:d8:20:fa:b4:c6: ea:90:cf:3e:c2:a5:ea:33:eb:b3:f1:c5:f4:34:03:dd:4f:98: d3:b0:ae:89:58:b1:cd:87:2d:94:75:6d:33:c5:d0:62:51:9e: c1:e7:cc:a2:b8:0a:88:1a:03:d4:88:aa:e5:2c:2e:b3:3c:32: 5d:0d:49:1d:25:ef:a2:69:0b:20:b5:ca:95:14:56:cf:26:63: 12:e3:8c:2a:59:2f:40:5e:60:de:6f:eb:ac:4a:2a:45:98:df: c2:8e:c4:7c:23:45:ed:47:97:5a:3e:0e:fd:8c:d5:9e:be:30: 6c:f4:32:3f:b7:d7:84:f6:93:05:c2:a4:41:11:5c:75:3f:fd: ec:64:54:fc:9a:44:65:02:d7:3e:c0:c5:45:d3:e5:24:4e:d0: 78:0d:d3:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIxbYaIHJND+1yQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk NDExNmFiMGMtM2MxZS00ODQ2LThkOGYtODhjYWU5NGJjYmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFbyCg+T7+7jC5w6vli58hH92FKAjF1XH1yp PA4kk7xIcULWIpc8keRYzzFf0x+waCHF7uGnNB74ASaVPWHkj4eOEbiMdA+Hq3DV 01zU9DLXbCJ1+I9LT5NpQhmycWp4/+9yz0YHqQ57aeeceHkfAFE3IzKCsYrxCX9n gea4nt7cqqXfW26xSLzS0ijXg+Ouzuoy4264ACaQxAt0FEXhQIR90/STwgjsd7cR c6l2k6CDG3N2zQIRe/xCcEJaqW12h96ql44p3xg19Ic27HXn4kw2LKT/tQf6ijHp 3YY+rf1IHSO8fZnYGclyxbRNRkGHR9PpdjmWd/FmFzb+e3XNcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONjkL/rDgVuk1vCYFvC7U0T6fY7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2I2NmJhMTktYmJiMC0z YmU3LWE1ZjctMjcyYzQyMGY4YzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPSeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWQ8WSUCS09pGZp9QOepSXwvBJgBIYfncCna7sF/g9x1nqxnaXvb4ET thgT9Dut8pCzQAqmIAZpIPyjH91y8tXSqg9rXfHoE0aF0P0mbDVpELa2uWxi9Jsh pr1mVlk9fqcHxiWwLYXYIPq0xuqQzz7Cpeoz67PxxfQ0A91PmNOwrolYsc2HLZR1 bTPF0GJRnsHnzKK4CogaA9SIquUsLrM8Ml0NSR0l76JpCyC1ypUUVs8mYxLjjCpZ L0BeYN5v66xKKkWY38KOxHwjRe1Hl1o+Dv2M1Z6+MGz0Mj+314T2kwXCpEERXHU/ /exkVPyaRGUC1z7AxUXT5SRO0HgN0xQ= -----END CERTIFICATE-----Generated at Sun Oct 11 14:55:42 2026 by rpki-client