$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/c4d953b3-7c7f-365a-8946-e94b12d360e2.roa File: c4d953b3-7c7f-365a-8946-e94b12d360e2.roa (raw, json) Hash identifier: Ym/pznr2EKTzdcVyjLwIQ2U5sJ3BMrQPYc0FyuHUWQ8= Subject key identifier: 29:2F:77:07:AF:7C:42:A5:A1:DC:46:36:9F:B8:DB:C8:2E:E8:47:2B Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584B89177A2AACEC137A0E1BD240 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/c4d953b3-7c7f-365a-8946-e94b12d360e2.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 1239 IP address blocks: 72.14.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:7a:2a:ac:ec:13:7a:0e:1b:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=af79af55-5485-4087-bc6b-e091fe6efb7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:99:29:a2:5f:0f:b3:ef:13:2b:c6:43:ea:a4: b6:b4:f7:17:fa:20:8f:44:76:5d:0e:a4:74:cc:9c: 77:5a:fe:f8:67:30:10:30:0f:53:13:12:39:b9:76: b8:fe:0f:fa:6a:b9:de:7d:60:bf:3b:fc:3a:5a:b9: 9d:45:23:45:8e:d6:94:a1:2a:9f:a5:08:11:7c:4e: 66:0c:ed:e2:02:73:0d:d9:30:ee:94:d1:f4:54:d4: cb:2e:72:0f:ab:e0:aa:f9:0a:2a:a6:b9:e3:08:42: 81:ec:b9:2d:f9:3d:75:6d:95:d3:db:88:13:69:75: c2:69:70:d0:06:9f:32:49:02:21:74:4a:10:92:cb: 9c:e5:9e:06:b1:50:67:8c:84:75:59:0b:bb:10:33: fc:6a:68:16:20:ad:55:22:42:7e:31:b7:8b:9d:ba: fd:77:80:77:9f:54:8d:7c:b8:dd:e1:2e:d0:54:66: 6c:74:f9:a2:e7:d2:15:69:80:76:7a:9c:39:6c:09: a4:c9:ee:f2:7c:ae:21:a8:53:55:7e:e5:57:9a:22: e0:69:db:ca:4b:b6:54:e5:e0:b2:01:71:92:06:c5: 20:97:95:c4:5a:20:b1:06:ea:6d:e4:9f:c2:63:d0: 10:9f:d0:76:7e:d9:42:dc:95:b6:23:03:b6:fb:9f: fd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2F:77:07:AF:7C:42:A5:A1:DC:46:36:9F:B8:DB:C8:2E:E8:47:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/c4d953b3-7c7f-365a-8946-e94b12d360e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:fe:6c:53:4b:d1:02:ca:9f:ab:02:53:a5:ce:99:df:11:2e: 73:bb:50:90:67:95:38:ce:8a:0e:1a:47:b6:59:7f:54:29:fb: de:3b:e1:41:46:cd:a9:c3:d7:f9:aa:0a:f7:86:b6:ad:f5:80: e4:36:3a:f4:f5:0b:20:ce:b0:73:d0:c9:6c:c9:6d:ff:6c:36: f7:ee:ce:35:a4:77:46:74:63:81:14:ab:ca:09:4e:e3:a0:fe: a5:0b:e5:86:fa:29:b0:46:48:61:18:bf:10:82:c4:33:66:b2: 1f:8c:e0:54:d5:dc:7d:4c:cd:a6:87:c9:c6:43:d6:25:a0:ef: 61:25:f3:e2:3c:09:eb:92:85:32:8b:f6:8a:9c:b2:8b:44:5d: 67:62:11:20:3e:b7:63:bf:18:7b:63:15:3d:ce:af:62:67:6c: 09:87:dc:6d:7d:60:6f:91:c1:2c:43:9d:0a:22:f5:86:84:6a: 2b:7c:d5:a3:e4:e8:15:eb:f7:c6:26:c3:51:fe:a5:98:a8:27: e5:c9:88:af:f7:91:a9:0a:01:e2:ce:30:ef:3b:2f:01:c3:05: 1a:5e:82:fe:30:39:7a:4b:ae:13:ec:93:7b:63:80:e5:ec:32: ec:3b:38:94:94:aa:6b:ef:a2:68:7a:64:70:80:d7:1c:4f:69: 7d:99:c9:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3oqrOwTeg4b0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk YWY3OWFmNTUtNTQ4NS00MDg3LWJjNmItZTA5MWZlNmVmYjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZkpol8Ps+8TK8ZD6qS2tPcX+iCPRHZdDqR0 zJx3Wv74ZzAQMA9TExI5uXa4/g/6arnefWC/O/w6WrmdRSNFjtaUoSqfpQgRfE5m DO3iAnMN2TDulNH0VNTLLnIPq+Cq+QoqprnjCEKB7Lkt+T11bZXT24gTaXXCaXDQ Bp8ySQIhdEoQksuc5Z4GsVBnjIR1WQu7EDP8amgWIK1VIkJ+MbeLnbr9d4B3n1SN fLjd4S7QVGZsdPmi59IVaYB2epw5bAmkye7yfK4hqFNVfuVXmiLgadvKS7ZU5eCy AXGSBsUgl5XEWiCxBupt5J/CY9AQn9B2ftlC3JW2IwO2+5/9kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkvdwevfEKlodxGNp+428gu6EcrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvYzRkOTUzYjMtN2M3Zi0z NjVhLTg5NDYtZTk0YjEyZDM2MGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADP+bFNL0QLKn6sCU6XOmd8RLnO7UJBnlTjOig4aR7ZZf1Qp+9474UFG zanD1/mqCveGtq31gOQ2OvT1CyDOsHPQyWzJbf9sNvfuzjWkd0Z0Y4EUq8oJTuOg /qUL5Yb6KbBGSGEYvxCCxDNmsh+M4FTV3H1MzaaHycZD1iWg72El8+I8CeuShTKL 9oqcsotEXWdiESA+t2O/GHtjFT3Or2JnbAmH3G19YG+RwSxDnQoi9YaEait81aPk 6BXr98Ymw1H+pZioJ+XJiK/3kakKAeLOMO87LwHDBRpegv4wOXpLrhPsk3tjgOXs Muw7OJSUqmvvomh6ZHCA1xxPaX2ZyW0= -----END CERTIFICATE-----Generated at Mon Oct 20 04:57:10 2025 by rpki-client