$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/8627eb3e-2ada-3de9-b53c-c5df600e1058.roa File: 8627eb3e-2ada-3de9-b53c-c5df600e1058.roa (raw, json) Hash identifier: aptc80rI+73d7BhNMMoh+a2D6CxKjrIPUyAN2fPCwqA= Subject key identifier: 2B:D6:FC:95:67:30:9F:BF:E9:07:70:15:46:D4:78:5E:5B:52:93:7B Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584B89177A172339AB22790C6EA0 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/8627eb3e-2ada-3de9-b53c-c5df600e1058.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 174 IP address blocks: 72.14.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:7a:17:23:39:ab:22:79:0c:6e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=41a90538-0752-49b8-ac1b-1ff85e59e105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b2:a8:b3:ca:8e:95:38:af:e2:cf:cd:73:91: fd:f6:34:db:e3:d4:31:0e:94:97:b9:98:7a:dc:c4: 92:2e:92:34:2c:0d:b3:10:93:fe:48:4e:78:35:a9: 14:6e:19:9c:5b:09:57:10:9c:de:93:f0:55:da:4d: a9:e0:be:dc:71:59:38:33:48:4b:19:05:fe:2e:5e: 40:4d:78:b0:32:bb:5a:7a:25:00:bc:64:44:86:96: c8:5e:4e:da:18:d1:a6:92:63:54:2d:d8:49:48:95: b1:cf:82:45:85:55:b1:6f:5e:a2:00:13:c5:b7:b3: 66:06:0f:f3:bb:86:6b:cc:47:fa:8d:5e:cd:b0:4d: b0:45:85:eb:bb:62:01:21:bc:8a:be:c5:57:fd:26: 7f:9b:01:b8:eb:1f:d7:e6:0a:ae:fa:6d:b5:50:fd: 68:23:a3:13:94:62:23:47:aa:4d:ca:0e:be:b3:bc: 8a:5c:71:80:8c:e1:fc:ba:3c:8e:7d:d3:25:67:f6: 4a:c2:c7:ab:04:2f:a3:ad:f9:33:8c:40:cf:67:79: 89:e9:6f:bd:87:0d:f9:2b:ba:1d:0c:13:e4:6d:2b: 1b:81:ba:5c:59:16:af:5e:1e:47:db:3b:49:81:49: 17:78:a5:b0:c4:ca:5b:4a:c5:cf:fd:f3:c2:ab:57: 0e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D6:FC:95:67:30:9F:BF:E9:07:70:15:46:D4:78:5E:5B:52:93:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/8627eb3e-2ada-3de9-b53c-c5df600e1058.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:ce:34:65:77:a7:ca:b8:14:3f:9c:cf:83:c2:26:82:1c:87: bd:9d:4c:4e:41:91:a6:3c:be:e1:07:5c:8c:94:21:e8:61:fc: 0d:67:e4:9f:90:b3:26:ae:47:3f:82:c8:09:cb:57:2e:c0:54: ed:76:5c:e0:ab:83:9f:94:93:55:e3:4e:67:9e:9b:d5:a2:ed: f6:7a:56:02:3b:5f:d8:83:f4:03:6e:f2:0c:8b:7f:52:0e:3b: 25:e6:f0:47:df:7f:d1:c4:24:9f:64:36:c9:95:e6:a7:15:d6: 81:67:34:36:db:05:af:ae:20:cc:86:b3:72:d6:18:ac:50:c9: c0:39:e0:3d:8e:16:88:26:dc:9d:40:45:13:ae:ae:f4:5b:2e: 9b:e1:4d:80:c4:61:eb:e8:66:b4:fa:9d:6a:62:22:e7:e0:5b: 8e:be:ae:49:2d:63:61:af:4e:30:41:15:b6:44:95:e9:ac:77: 18:82:15:4f:b9:0b:6f:ee:58:34:a9:26:e8:8a:d4:1a:ff:ae: 3c:09:b9:d6:2b:58:67:ed:d8:cc:a3:2d:75:b7:47:96:e7:56: 09:75:b3:fc:1a:88:47:f9:e2:3a:eb:66:52:3d:18:9b:7c:93: 8e:a9:5d:d0:20:ad:9e:6a:35:99:3e:7b:85:2c:4a:42:2f:73: a7:5f:b3:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3oXIzmrInkMbqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk NDFhOTA1MzgtMDc1Mi00OWI4LWFjMWItMWZmODVlNTllMTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7Kos8qOlTiv4s/Nc5H99jTb49QxDpSXuZh6 3MSSLpI0LA2zEJP+SE54NakUbhmcWwlXEJzek/BV2k2p4L7ccVk4M0hLGQX+Ll5A TXiwMrtaeiUAvGREhpbIXk7aGNGmkmNULdhJSJWxz4JFhVWxb16iABPFt7NmBg/z u4ZrzEf6jV7NsE2wRYXru2IBIbyKvsVX/SZ/mwG46x/X5gqu+m21UP1oI6MTlGIj R6pNyg6+s7yKXHGAjOH8ujyOfdMlZ/ZKwserBC+jrfkzjEDPZ3mJ6W+9hw35K7od DBPkbSsbgbpcWRavXh5H2ztJgUkXeKWwxMpbSsXP/fPCq1cOtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvW/JVnMJ+/6QdwFUbUeF5bUpN7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvODYyN2ViM2UtMmFkYS0z ZGU5LWI1M2MtYzVkZjYwMGUxMDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjONGV3p8q4FD+cz4PCJoIch72dTE5BkaY8vuEHXIyUIehh/A1n5J+Q syauRz+CyAnLVy7AVO12XOCrg5+Uk1XjTmeem9Wi7fZ6VgI7X9iD9ANu8gyLf1IO OyXm8Efff9HEJJ9kNsmV5qcV1oFnNDbbBa+uIMyGs3LWGKxQycA54D2OFogm3J1A RROurvRbLpvhTYDEYevoZrT6nWpiIufgW46+rkktY2GvTjBBFbZElemsdxiCFU+5 C2/uWDSpJuiK1Br/rjwJudYrWGft2MyjLXW3R5bnVgl1s/waiEf54jrrZlI9GJt8 k46pXdAgrZ5qNZk+e4UsSkIvc6dfsxk= -----END CERTIFICATE-----Generated at Mon Oct 20 17:35:59 2025 by rpki-client