$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d60f445f-0613-35a6-a4e8-9012a7eefde1.roa File: d60f445f-0613-35a6-a4e8-9012a7eefde1.roa (raw, json) Hash identifier: pU6GFheh9LI1r+PaENYwvk2RMjDfIszxc4y1nHac21w= Subject key identifier: 1C:AD:9A:7D:C5:5A:8E:CD:6C:7B:00:5B:F6:35:7E:B5:64:DA:74:27 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F1F924911F945AE20EDF6D780 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d60f445f-0613-35a6-a4e8-9012a7eefde1.roa Signing time: Thu 10 Sep 2026 01:00:12 +0000 ROA not before: Thu 10 Sep 2026 01:00:12 +0000 ROA not after: Wed 09 Dec 2026 02:00:12 +0000 asID: 6079 IP address blocks: 72.244.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1f:92:49:11:f9:45:ae:20:ed:f6:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 10 01:00:12 2026 GMT Not After : Dec 9 02:00:12 2026 GMT Subject: CN=8157a703-a6ae-41f8-a0ee-b35e202a3aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:12:e6:31:f6:a0:92:e5:75:45:4e:78:c5:85: 70:5f:64:f2:0a:0c:35:ca:74:15:5c:9d:ed:cf:43: 7a:32:30:23:fb:14:fe:a6:aa:1e:de:b7:23:61:14: d4:0c:c9:b0:55:04:a6:20:48:8f:98:8a:fd:6b:38: 21:0c:e1:05:91:1d:6e:dd:cf:ec:de:16:e7:ba:ef: ea:a4:e9:17:dd:2d:68:1a:3f:2a:61:7c:81:de:a6: 6c:f0:fd:7a:91:27:66:b6:52:ae:70:3c:af:c7:03: 58:ed:71:1b:be:4b:a8:ea:cc:e0:03:f4:11:ca:2a: 31:f7:74:30:5a:6b:e4:72:34:ec:bf:aa:10:bd:13: 2a:f6:8f:4d:29:f4:71:b1:1b:f1:54:73:76:63:08: 37:41:7f:3e:9e:a1:e7:61:ff:6f:b4:36:9e:3a:9f: 73:f9:38:af:b5:d0:a7:97:58:71:7e:f3:c0:bc:90: e2:fe:03:fc:7b:96:d5:32:b2:ae:ee:d0:4c:f2:38: 50:b8:3a:da:0d:d5:47:11:76:45:94:cd:b1:9e:78: 9d:d7:eb:8f:44:ec:ba:f0:eb:f9:7b:30:9f:c9:72: a4:60:c1:9e:27:43:f3:31:e6:ae:86:03:64:c0:36: b4:05:0e:ee:ca:37:47:23:15:da:f9:e8:43:ef:8e: 13:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AD:9A:7D:C5:5A:8E:CD:6C:7B:00:5B:F6:35:7E:B5:64:DA:74:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d60f445f-0613-35a6-a4e8-9012a7eefde1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:cb:50:b3:33:36:08:b6:46:26:c4:61:91:bc:7f:c1:58:96: ae:04:a1:b4:6a:15:5e:65:13:e8:aa:34:33:34:96:ef:97:8d: f7:9f:71:8d:73:b8:9a:0d:70:8e:c7:25:36:da:90:82:9a:66: 51:ab:b2:e6:e2:c3:32:9a:3f:57:d2:f9:f6:2e:27:b3:aa:e4: 8f:57:ff:2c:2e:b2:68:a3:bc:00:29:85:ba:0f:89:a7:23:cc: b1:62:26:33:ac:f6:9b:14:25:73:f8:2c:09:ae:88:b2:87:9e: 98:f8:72:b9:8b:fd:f6:38:41:d7:8d:e8:1c:02:0c:7b:d9:b0: 87:46:40:0d:01:1f:27:fa:02:51:e1:71:9e:f3:6e:5f:cc:e8: e6:cf:e2:a2:fb:2b:e0:c6:03:9d:62:97:00:74:8f:49:36:e9: 11:51:b2:19:a0:49:a0:17:4d:12:1f:63:14:20:27:a5:98:1d: 10:b9:c6:d5:48:c8:c6:16:a3:d1:89:77:6e:1f:4f:15:db:ed: 8f:1b:56:6f:01:f5:c0:62:73:5d:65:e7:3a:65:f8:66:36:78: 06:65:08:5c:af:f1:91:b2:97:c5:cd:f5:76:24:db:c5:5a:cc: e6:5f:62:eb:1d:ed:8c:bd:2c:b6:0a:e3:75:72:e7:e6:f8:3b: ab:98:61:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8fkkkR+UWuIO3214AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkxMDAxMDAxMloXDTI2MTIwOTAyMDAxMlowLzEtMCsGA1UEAxMk ODE1N2E3MDMtYTZhZS00MWY4LWEwZWUtYjM1ZTIwMmEzYWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRLmMfagkuV1RU54xYVwX2TyCgw1ynQVXJ3t z0N6MjAj+xT+pqoe3rcjYRTUDMmwVQSmIEiPmIr9azghDOEFkR1u3c/s3hbnuu/q pOkX3S1oGj8qYXyB3qZs8P16kSdmtlKucDyvxwNY7XEbvkuo6szgA/QRyiox93Qw WmvkcjTsv6oQvRMq9o9NKfRxsRvxVHN2Ywg3QX8+nqHnYf9vtDaeOp9z+TivtdCn l1hxfvPAvJDi/gP8e5bVMrKu7tBM8jhQuDraDdVHEXZFlM2xnnid1+uPROy68Ov5 ezCfyXKkYMGeJ0PzMeauhgNkwDa0BQ7uyjdHIxXa+ehD744TXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBytmn3FWo7NbHsAW/Y1frVk2nQnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDYwZjQ0NWYtMDYxMy0z NWE2LWE0ZTgtOTAxMmE3ZWVmZGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnLULMzNgi2RibEYZG8f8FYlq4EobRqFV5lE+iqNDM0lu+XjfefcY1z uJoNcI7HJTbakIKaZlGrsubiwzKaP1fS+fYuJ7Oq5I9X/ywusmijvAAphboPiacj zLFiJjOs9psUJXP4LAmuiLKHnpj4crmL/fY4QdeN6BwCDHvZsIdGQA0BHyf6AlHh cZ7zbl/M6ObP4qL7K+DGA51ilwB0j0k26RFRshmgSaAXTRIfYxQgJ6WYHRC5xtVI yMYWo9GJd24fTxXb7Y8bVm8B9cBic11l5zpl+GY2eAZlCFyv8ZGyl8XN9XYk28Va zOZfYusd7Yy9LLYK43Vy5+b4O6uYYS0= -----END CERTIFICATE-----Generated at Tue Sep 22 21:04:17 2026 by rpki-client