$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d10b2ef6-9388-3f66-85b4-aa58a9df344b.roa File: d10b2ef6-9388-3f66-85b4-aa58a9df344b.roa (raw, json) Hash identifier: 4WmrLzhJCH6geTuEKkoBEI76VA4T0SCpqbIQ1gEfVKQ= Subject key identifier: 4F:AD:77:5D:56:8F:29:69:16:8E:B7:55:D5:1B:9D:2F:2F:2D:54:39 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F5BBAAA0C701BD1D633580A60 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d10b2ef6-9388-3f66-85b4-aa58a9df344b.roa Signing time: Thu 01 Oct 2026 14:10:07 +0000 ROA not before: Thu 01 Oct 2026 14:10:07 +0000 ROA not after: Wed 30 Dec 2026 15:10:07 +0000 asID: 6079 IP address blocks: 72.244.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:ba:aa:0c:70:1b:d1:d6:33:58:0a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 1 14:10:07 2026 GMT Not After : Dec 30 15:10:07 2026 GMT Subject: CN=d5446613-6f48-4108-adcd-7740a5dbbc00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:bd:98:43:cb:ba:e5:19:fc:ce:a9:cd:64:e8: 97:8f:62:81:d7:55:0b:8f:c4:ce:8d:29:bf:1c:28: 6f:23:2e:f9:da:90:99:79:6b:af:d4:9c:a1:84:3e: 7d:ae:7c:2e:54:07:aa:7b:67:bb:e3:04:92:ef:31: 42:5e:c0:71:a7:88:53:28:3c:66:3f:60:6f:b7:7d: ca:06:27:59:10:b6:97:ec:1a:74:98:70:d7:ec:d3: ae:79:8d:cd:e9:31:b9:16:7f:f8:44:07:0f:63:23: 87:a1:75:2f:3c:05:be:8c:49:07:94:e7:76:a8:39: cf:f2:16:65:6e:55:09:24:d8:3e:a7:73:6a:ca:2c: 3f:25:d2:4f:b1:e9:1e:ca:42:4b:92:46:cb:2b:29: 0e:bd:2b:d2:e7:02:6e:9d:ba:b6:80:2f:b9:51:6b: 9c:64:09:ad:a4:74:0b:98:d1:f5:c6:fd:0f:ba:84: 96:d1:bd:36:24:4b:bd:2c:06:40:17:69:e8:20:da: ad:da:7b:b7:6f:28:68:be:78:ac:4b:8c:fe:ef:9d: a9:70:3f:79:a8:3d:a5:e2:c8:8c:59:5f:20:b9:c1: b6:62:69:f3:54:b3:3a:3d:d3:41:9e:37:65:a0:64: a0:7e:7e:bb:f9:fc:a6:eb:c1:1e:86:82:4f:5d:4c: 12:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AD:77:5D:56:8F:29:69:16:8E:B7:55:D5:1B:9D:2F:2F:2D:54:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d10b2ef6-9388-3f66-85b4-aa58a9df344b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:e9:8a:d7:6f:52:8c:47:3e:b4:ec:9e:84:c7:7b:90:f4:8b: 40:cf:06:7c:17:19:dd:c8:2f:89:59:26:20:c2:a9:98:72:78: 78:82:53:28:67:37:06:6d:25:e9:4f:d8:18:5d:02:12:5b:b9: ae:d3:84:71:71:ee:56:5a:38:08:da:6e:30:25:1b:07:25:b6: 4e:32:af:b6:96:3d:cc:44:0e:19:b6:59:cb:c2:69:f7:20:00: e9:e0:eb:16:0d:0b:d3:63:9a:82:09:06:89:ed:ae:a3:fd:b0: 36:0b:f7:c8:0f:85:0b:f9:69:20:67:57:50:44:e3:6c:da:b8: 2e:ed:76:6d:d2:a9:cf:e8:5a:07:07:49:ce:52:1b:97:65:8f: 54:36:1c:ff:92:6c:31:99:a4:71:2c:43:43:bf:75:72:e3:07: 2e:72:f8:6c:f3:37:1c:59:1c:62:b2:4b:ee:5b:7b:38:92:1c: 17:82:13:88:d5:86:a2:0b:63:10:99:46:20:1b:d3:f0:f7:13: 55:6d:33:08:d3:8b:e8:40:b9:ad:19:ed:43:45:3d:14:aa:a4: 90:98:6e:62:d5:46:cd:6b:b2:9a:b5:c6:50:7e:9c:d7:87:3c: 7e:6b:ab:d3:b4:75:b4:24:31:6a:18:f8:e2:ce:cc:34:df:dc: ec:e4:2f:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9buqoMcBvR1jNYCmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAwMTE0MTAwN1oXDTI2MTIzMDE1MTAwN1owLzEtMCsGA1UEAxMk ZDU0NDY2MTMtNmY0OC00MTA4LWFkY2QtNzc0MGE1ZGJiYzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8r2YQ8u65Rn8zqnNZOiXj2KB11ULj8TOjSm/ HChvIy752pCZeWuv1JyhhD59rnwuVAeqe2e74wSS7zFCXsBxp4hTKDxmP2Bvt33K BidZELaX7Bp0mHDX7NOueY3N6TG5Fn/4RAcPYyOHoXUvPAW+jEkHlOd2qDnP8hZl blUJJNg+p3Nqyiw/JdJPsekeykJLkkbLKykOvSvS5wJunbq2gC+5UWucZAmtpHQL mNH1xv0PuoSW0b02JEu9LAZAF2noINqt2nu3byhovnisS4z+752pcD95qD2l4siM WV8gucG2YmnzVLM6PdNBnjdloGSgfn67+fym68EehoJPXUwSwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+td11WjylpFo63VdUbnS8vLVQ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDEwYjJlZjYtOTM4OC0z ZjY2LTg1YjQtYWE1OGE5ZGYzNDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvpitdvUoxHPrTsnoTHe5D0i0DPBnwXGd3IL4lZJiDCqZhyeHiCUyhn NwZtJelP2BhdAhJbua7ThHFx7lZaOAjabjAlGwcltk4yr7aWPcxEDhm2WcvCafcg AOng6xYNC9NjmoIJBontrqP9sDYL98gPhQv5aSBnV1BE42zauC7tdm3Sqc/oWgcH Sc5SG5dlj1Q2HP+SbDGZpHEsQ0O/dXLjBy5y+GzzNxxZHGKyS+5beziSHBeCE4jV hqILYxCZRiAb0/D3E1VtMwjTi+hAua0Z7UNFPRSqpJCYbmLVRs1rspq1xlB+nNeH PH5rq9O0dbQkMWoY+OLOzDTf3OzkL2k= -----END CERTIFICATE-----Generated at Sat Oct 10 15:40:12 2026 by rpki-client