$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/42a9a961-bbc5-35d3-a5c8-2f205c4f80de.roa File: 42a9a961-bbc5-35d3-a5c8-2f205c4f80de.roa (raw, json) Hash identifier: URbMkm8nKWdMUd7aEYaHZhQC79ZPU2D5l7PDSZWnYQ8= Subject key identifier: 6C:5E:72:51:E9:74:6E:1B:EE:40:8A:10:14:A2:CA:E9:47:1B:1F:10 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584B4E7716D20631B499C1A1D0C0 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/42a9a961-bbc5-35d3-a5c8-2f205c4f80de.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 20454 IP address blocks: 72.14.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:16:d2:06:31:b4:99:c1:a1:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=e8f622a5-d9db-4f13-a94d-9f70761496ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3f:58:fb:35:e6:bb:6d:6e:df:66:fc:c8:69: 95:27:c3:fb:61:9f:bd:0c:e7:dd:51:eb:b6:07:98: 72:74:d4:f3:51:ca:f5:f7:d8:f7:0b:1b:2a:b9:e7: e8:a5:36:9a:1e:40:95:1c:ce:1c:68:48:3c:63:71: 5a:2a:dd:70:24:45:6a:77:b7:db:45:ef:a8:d5:31: 88:38:9d:08:5b:7e:a0:93:9f:2b:97:0a:b0:c8:ed: 25:c5:36:28:1f:85:99:d3:d2:81:55:77:48:a9:5e: ad:5c:c5:04:a5:8d:2d:d6:16:4c:e8:28:96:78:d1: fb:2c:f9:8a:a2:48:1b:a0:93:9f:4e:c8:bc:90:0b: e5:8b:ef:6c:bb:94:09:d8:9e:5f:d7:45:66:17:a9: cb:63:83:2f:34:6a:1d:b2:45:6e:c2:52:36:6c:1e: fd:9a:ac:d2:b1:94:88:c5:6f:10:2b:12:a8:36:2b: 21:8c:7d:4e:8c:77:27:19:9b:d4:54:e2:72:a9:9e: 6f:66:fe:f7:bc:dd:c6:b1:54:eb:2b:fc:54:6b:7a: ae:11:3a:0b:91:9b:2d:2e:82:b9:cb:77:95:a8:54: bf:ac:8a:e1:b2:03:fc:4d:a4:8b:de:1f:0e:69:e5: f6:84:45:90:ba:72:34:3b:37:13:8d:97:75:1c:67: 35:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5E:72:51:E9:74:6E:1B:EE:40:8A:10:14:A2:CA:E9:47:1B:1F:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/42a9a961-bbc5-35d3-a5c8-2f205c4f80de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:f4:fb:51:4c:13:01:5b:f9:c4:2c:b8:be:2b:10:13:7c:00: 42:e9:dd:98:2f:83:33:c7:68:41:cf:d1:ce:fb:1f:36:7c:63: d0:ad:0c:b7:ea:79:c8:79:9a:61:78:44:ed:6b:3e:61:38:22: 6c:58:57:e3:f7:e5:57:ed:0e:35:f6:21:1a:f5:5b:95:70:09: a7:7e:b5:dd:59:99:a1:20:04:2e:9e:92:18:f6:c4:61:82:62: 50:a8:50:6d:b7:d0:2d:e0:54:5a:93:6f:65:9f:9c:2d:94:74: fe:d0:23:fc:10:29:48:e2:a0:e2:fd:a1:fe:6d:c7:aa:12:24: 52:bb:36:16:4d:10:3d:fd:d5:62:dc:0c:c7:34:15:77:50:6a: 4e:69:2d:f5:ac:35:7a:c5:58:45:ee:5a:6e:3b:3a:87:2a:7b: 66:f6:48:fe:b8:5d:94:c6:c9:5f:06:3e:ae:f4:91:60:b4:56: 39:7f:eb:33:ad:4a:23:05:b9:6a:df:dd:da:9e:2c:45:88:53: 4a:00:1e:cd:ae:65:39:70:2d:c0:dc:16:37:4f:93:37:05:1e: 3e:66:87:46:e6:c6:6d:de:9f:77:31:6e:5f:99:0b:7b:a2:52: fa:7f:b8:25:8f:10:ca:6f:d6:f8:fe:35:0f:44:72:14:22:ed: 84:9b:fb:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdxbSBjG0mcGh0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk ZThmNjIyYTUtZDlkYi00ZjEzLWE5NGQtOWY3MDc2MTQ5NmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz9Y+zXmu21u32b8yGmVJ8P7YZ+9DOfdUeu2 B5hydNTzUcr199j3CxsquefopTaaHkCVHM4caEg8Y3FaKt1wJEVqd7fbRe+o1TGI OJ0IW36gk58rlwqwyO0lxTYoH4WZ09KBVXdIqV6tXMUEpY0t1hZM6CiWeNH7LPmK okgboJOfTsi8kAvli+9su5QJ2J5f10VmF6nLY4MvNGodskVuwlI2bB79mqzSsZSI xW8QKxKoNishjH1OjHcnGZvUVOJyqZ5vZv73vN3GsVTrK/xUa3quEToLkZstLoK5 y3eVqFS/rIrhsgP8TaSL3h8OaeX2hEWQunI0OzcTjZd1HGc1RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxeclHpdG4b7kCKEBSiyulHGx8QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvNDJhOWE5NjEtYmJjNS0z NWQzLWE1YzgtMmYyMDVjNGY4MGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGP0+1FMEwFb+cQsuL4rEBN8AELp3ZgvgzPHaEHP0c77HzZ8Y9CtDLfq ech5mmF4RO1rPmE4ImxYV+P35VftDjX2IRr1W5VwCad+td1ZmaEgBC6ekhj2xGGC YlCoUG230C3gVFqTb2WfnC2UdP7QI/wQKUjioOL9of5tx6oSJFK7NhZNED391WLc DMc0FXdQak5pLfWsNXrFWEXuWm47Oocqe2b2SP64XZTGyV8GPq70kWC0Vjl/6zOt SiMFuWrf3dqeLEWIU0oAHs2uZTlwLcDcFjdPkzcFHj5mh0bmxm3en3cxbl+ZC3ui Uvp/uCWPEMpv1vj+NQ9EchQi7YSb+24= -----END CERTIFICATE-----Generated at Mon Oct 20 04:04:33 2025 by rpki-client