$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/4cadbfff-1166-3847-89b2-eaf5064d23a7.roa File: 4cadbfff-1166-3847-89b2-eaf5064d23a7.roa (raw, json) Hash identifier: icJ91YHZpkVSW8E+hFqRFUq9iknQMCCMDeWlHOE2IwA= Subject key identifier: 9C:57:BD:50:93:5C:59:6E:D0:BF:6C:03:5B:5F:49:76:1B:05:18:64 Certificate issuer: /CN=7cbcff68-23bb-4d4e-a703-bab3115bf054 Certificate serial: 010D0C9F4328584B679744A36260E4DF29FC7E40 Authority key identifier: 41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/4cadbfff-1166-3847-89b2-eaf5064d23a7.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 14618 IP address blocks: 72.13.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:44:a3:62:60:e4:df:29:fc:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cbcff68-23bb-4d4e-a703-bab3115bf054 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=f3350aab-d528-45d9-8e24-2a564b1adf3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:27:30:2a:48:a7:8a:59:dc:ee:d3:fc:66:dc: 16:b3:ea:1e:0e:82:a1:aa:e1:6f:8f:a6:c2:c2:ed: 54:2d:25:18:34:04:24:30:f1:f7:90:28:b1:bb:16: d8:59:76:e7:0e:e2:ab:db:0b:ab:8f:7f:0e:46:54: 8f:57:07:a8:88:a2:7e:55:08:8d:2e:ed:99:37:61: 73:9b:ed:3c:8a:5e:5d:9a:d1:fc:f7:a2:30:bd:28: 6d:83:45:55:c4:b4:5a:03:fa:e5:03:18:c5:48:3e: e5:6b:81:cd:d4:ed:81:50:45:13:ac:27:bf:1d:da: d6:e3:47:6c:96:84:ad:34:9a:e3:b8:2c:2e:a7:f2: d5:a2:68:6f:2c:22:e8:00:bf:d7:b6:4f:8e:40:89: 2f:e9:22:1e:20:e4:aa:0f:5f:24:b1:fc:5a:85:65: ef:b7:7a:e5:ca:ed:b5:34:e4:b9:1c:36:6c:25:bb: 62:90:00:48:e2:34:93:fa:76:26:d7:0f:91:b5:ee: 63:3f:a0:33:21:dd:3a:41:b7:fe:70:13:11:f5:dd: 3a:d6:b9:49:1a:f0:35:e1:48:26:6c:0d:ab:28:49: 75:73:b8:2f:1e:c2:01:65:56:9b:44:6b:a6:98:89: 5e:c9:0d:53:7e:e5:0f:4b:d1:72:02:fd:75:0d:d5: 3a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:57:BD:50:93:5C:59:6E:D0:BF:6C:03:5B:5F:49:76:1B:05:18:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/4cadbfff-1166-3847-89b2-eaf5064d23a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl X509v3 Authority Key Identifier: keyid:41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer sbgp-ipAddrBlock: critical IPv4: 72.13.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:5b:74:5b:cd:4c:b4:bf:26:22:a8:6e:a9:c0:11:32:6e:a2: ec:7d:65:35:1d:f0:b9:cf:e3:12:29:c6:45:b7:8c:5f:28:62: 36:e4:f6:09:31:ea:83:e0:4b:db:57:e1:dc:84:bd:08:7b:12: 2d:98:c7:18:b4:47:77:aa:a9:92:b0:e9:af:88:ff:f0:ee:f9: f7:6b:66:8d:5b:f3:10:8f:b4:46:99:37:ca:ae:e8:16:aa:ac: 6c:ab:ec:a9:a2:4b:60:29:d7:8b:dd:a1:fe:4c:6d:6c:c0:c0: d2:ff:b0:d3:d6:62:6f:03:52:d5:7e:4a:5d:aa:74:ae:01:bd: 17:f3:60:ce:e2:ce:8f:69:fd:3b:5d:86:e4:ab:d2:cf:cb:80: 36:0d:79:d2:a0:cf:0a:b6:c3:07:fb:21:23:22:c4:b2:e5:1d: 88:97:13:6a:a7:cd:bc:28:47:d1:11:d6:bd:61:00:22:04:2a: e1:f0:19:7f:9d:1b:3b:8a:ac:16:4e:98:26:58:82:1a:c1:af: 48:0e:df:77:7f:6b:df:9d:71:54:86:68:f2:b4:d7:a5:56:2a: 9d:25:27:16:b6:2f:a3:45:fc:57:c4:62:ec:64:5c:09:33:4c: 4b:a3:ab:ef:8a:60:b7:87:05:f5:47:80:db:53:e9:9a:6f:84: d5:9c:ae:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl0SjYmDk3yn8fkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2NiY2ZmNjgtMjNiYi00ZDRlLWE3MDMtYmFiMzExNWJm MDU0MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjMzNTBhYWItZDUyOC00NWQ5LThlMjQtMmE1NjRiMWFkZjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ycwKkinilnc7tP8ZtwWs+oeDoKhquFvj6bC wu1ULSUYNAQkMPH3kCixuxbYWXbnDuKr2wurj38ORlSPVweoiKJ+VQiNLu2ZN2Fz m+08il5dmtH896IwvShtg0VVxLRaA/rlAxjFSD7la4HN1O2BUEUTrCe/HdrW40ds loStNJrjuCwup/LVomhvLCLoAL/Xtk+OQIkv6SIeIOSqD18ksfxahWXvt3rlyu21 NOS5HDZsJbtikABI4jST+nYm1w+Rte5jP6AzId06Qbf+cBMR9d061rlJGvA14Ugm bA2rKEl1c7gvHsIBZVabRGummIleyQ1TfuUPS9FyAv11DdU6aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxXvVCTXFlu0L9sA1tfSXYbBRhkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83Y2Jj ZmY2OC0yM2JiLTRkNGUtYTcwMy1iYWIzMTE1YmYwNTQvNGNhZGJmZmYtMTE2Ni0z ODQ3LTg5YjItZWFmNTA2NGQyM2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2NiY2ZmNjgtMjNiYi00ZDRlLWE3 MDMtYmFiMzExNWJmMDU0LzdjYmNmZjY4LTIzYmItNGQ0ZS1hNzAzLWJhYjMxMTVi ZjA1NC5jcmwwHwYDVR0jBBgwFoAUQTLwjOuyBIwI1/fc1CVU2Xg9GGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83Y2JjZmY2OC0yM2JiLTRkNGUtYTcwMy1iYWIz MTE1YmYwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA19MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlbdFvNTLS/JiKobqnAETJuoux9ZTUd8LnP4xIpxkW3jF8oYjbk9gkx 6oPgS9tX4dyEvQh7Ei2Yxxi0R3eqqZKw6a+I//Du+fdrZo1b8xCPtEaZN8qu6Baq rGyr7KmiS2Ap14vdof5MbWzAwNL/sNPWYm8DUtV+Sl2qdK4BvRfzYM7izo9p/Ttd huSr0s/LgDYNedKgzwq2wwf7ISMixLLlHYiXE2qnzbwoR9ER1r1hACIEKuHwGX+d GzuKrBZOmCZYghrBr0gO33d/a9+dcVSGaPK016VWKp0lJxa2L6NF/FfEYuxkXAkz TEujq++KYLeHBfVHgNtT6ZpvhNWcrrQ= -----END CERTIFICATE-----Generated at Sun Oct 19 23:34:08 2025 by rpki-client