$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/01c00e7f-6f75-39cf-8a6f-0e53566512de.roa File: 01c00e7f-6f75-39cf-8a6f-0e53566512de.roa (raw, json) Hash identifier: KS18pIl98J4RblWmjn8V7SzCiU6mkA4qSmwcxNMnFxI= Subject key identifier: 17:30:B8:12:C9:EA:C2:CF:37:A1:15:1C:7E:56:66:86:8F:CC:7A:86 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584B64CE5DF4B40DCF12823660C0 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/01c00e7f-6f75-39cf-8a6f-0e53566512de.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 14813 IP address blocks: 72.22.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:5d:f4:b4:0d:cf:12:82:36:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=63c036eb-843d-4de3-b64f-af46d4d28470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4e:0f:c9:79:2a:f1:f1:b6:dc:81:fe:ef:4e: f5:af:3f:71:a4:64:8d:56:07:06:01:26:96:b2:7b: 55:01:f3:d5:c9:d0:e0:33:67:fc:76:54:e8:f2:97: bb:7d:0e:ca:17:4e:ba:fd:d6:56:32:5a:98:31:98: a5:47:4a:20:cb:86:03:e5:1d:e9:47:b5:08:98:12: 5a:66:85:4f:16:b6:70:5d:e1:d8:ee:ba:73:05:b0: b8:c4:b1:3c:f6:a7:42:c5:88:a0:43:25:59:8e:e2: 80:a3:bf:42:90:d2:d1:0c:83:25:86:8d:8c:5e:f5: 29:80:7b:d9:20:64:97:db:f6:aa:7b:78:a8:d2:8f: f1:1d:75:17:d3:04:58:c4:3e:f6:c1:33:14:45:61: bf:3d:bc:58:e8:0b:01:24:64:48:c9:ff:01:f7:52: 5e:26:f5:d4:72:f7:3d:c8:a2:43:65:9e:45:a3:d3: 4e:27:02:ea:4b:e4:0c:1f:8e:3e:ad:94:cb:3e:98: 55:30:1e:8a:59:96:31:e1:7c:41:e9:f9:6d:f1:f6: 56:f4:97:85:ab:fa:d4:6d:40:ac:95:c7:c8:da:fd: e3:fa:12:e2:08:66:00:e5:91:d0:f2:e6:2f:5d:c7: af:55:7c:61:ef:0b:f1:55:3d:4c:6f:af:80:6e:42: ce:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:30:B8:12:C9:EA:C2:CF:37:A1:15:1C:7E:56:66:86:8F:CC:7A:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/01c00e7f-6f75-39cf-8a6f-0e53566512de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:22:ed:6a:27:27:51:c6:8d:82:ff:ff:54:e0:68:27:77:be: 40:d3:8b:68:96:11:2a:78:0d:64:16:9a:ab:13:e0:18:5f:b5: f0:92:3e:08:2c:c0:4b:d5:d2:5b:0e:14:d6:e2:f2:47:16:a2: 94:0c:76:c5:48:8f:ed:84:0e:6d:6c:7a:5a:19:59:2e:e1:06: 74:e7:c9:4a:b7:ec:1c:19:6c:9d:f1:d0:1c:df:a8:d4:75:1c: b2:37:d9:3b:c7:e3:d3:43:71:09:3b:6b:ee:a7:51:4d:07:36: e3:b0:a3:fe:d3:30:ac:ad:da:f7:b8:de:98:d6:1e:b4:e3:93: 23:93:91:0a:bc:e8:3f:2d:d2:ec:3c:44:29:db:bd:c0:a8:c2: 3d:12:47:04:2f:bb:12:db:46:57:6d:17:e3:f6:76:dc:8c:f1: 6d:0a:cd:d8:ef:c7:3b:8d:8f:34:90:a5:5f:65:68:89:86:bb: 38:06:8f:61:61:9a:84:db:f6:e4:8a:b1:42:01:9f:05:17:9f: be:82:3d:8d:3e:e9:5e:48:ef:b9:a9:1f:1c:c3:69:06:58:24: 62:2d:ff:9e:d4:14:58:e9:1a:08:67:90:ea:27:4b:9f:88:aa: 79:a7:7f:fc:8d:bc:7a:6a:aa:09:19:27:0b:09:39:fd:4a:e3: ae:c7:7e:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzl30tA3PEoI2YMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NjNjMDM2ZWItODQzZC00ZGUzLWI2NGYtYWY0NmQ0ZDI4NDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu04PyXkq8fG23IH+7071rz9xpGSNVgcGASaW sntVAfPVydDgM2f8dlTo8pe7fQ7KF066/dZWMlqYMZilR0ogy4YD5R3pR7UImBJa ZoVPFrZwXeHY7rpzBbC4xLE89qdCxYigQyVZjuKAo79CkNLRDIMlho2MXvUpgHvZ IGSX2/aqe3io0o/xHXUX0wRYxD72wTMURWG/PbxY6AsBJGRIyf8B91JeJvXUcvc9 yKJDZZ5Fo9NOJwLqS+QMH44+rZTLPphVMB6KWZYx4XxB6flt8fZW9JeFq/rUbUCs lcfI2v3j+hLiCGYA5ZHQ8uYvXcevVXxh7wvxVT1Mb6+AbkLOdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcwuBLJ6sLPN6EVHH5WZoaPzHqGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvMDFjMDBlN2YtNmY3NS0z OWNmLThhNmYtMGU1MzU2NjUxMmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgi7WonJ1HGjYL//1TgaCd3vkDTi2iWESp4DWQWmqsT4BhftfCSPggs wEvV0lsOFNbi8kcWopQMdsVIj+2EDm1seloZWS7hBnTnyUq37BwZbJ3x0BzfqNR1 HLI32TvH49NDcQk7a+6nUU0HNuOwo/7TMKyt2ve43pjWHrTjkyOTkQq86D8t0uw8 RCnbvcCowj0SRwQvuxLbRldtF+P2dtyM8W0KzdjvxzuNjzSQpV9laImGuzgGj2Fh moTb9uSKsUIBnwUXn76CPY0+6V5I77mpHxzDaQZYJGIt/57UFFjpGghnkOonS5+I qnmnf/yNvHpqqgkZJwsJOf1K467Hfkc= -----END CERTIFICATE-----Generated at Mon Oct 20 19:07:10 2025 by rpki-client