$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/4f32bdd6-c862-39c9-bfbe-0f0c7171a6e4.roa File: 4f32bdd6-c862-39c9-bfbe-0f0c7171a6e4.roa (raw, json) Hash identifier: s23oQCtJwRSMd7b0sXcDFb6E1GR3SRMSxnll77jcKfM= Subject key identifier: 83:17:7F:00:18:DB:60:4F:B5:1C:7D:15:37:89:A6:4B:50:A7:76:43 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584B64CE4899A412B8EB4B86B680 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/4f32bdd6-c862-39c9-bfbe-0f0c7171a6e4.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 14813 IP address blocks: 72.22.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:48:99:a4:12:b8:eb:4b:86:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=8944c709-a42a-48c3-a76c-00bfd4823245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e0:68:93:50:37:49:4a:01:08:4c:ac:b5:43: 9c:f9:33:3d:3a:ac:49:76:04:60:25:09:40:1f:f0: 81:97:2f:46:91:07:c4:bb:73:51:84:ad:cd:a3:63: af:d1:48:9f:49:fc:eb:0b:9f:1b:f8:c5:c3:bb:80: ec:b2:0f:e1:d7:57:e2:84:bf:ef:c2:b3:b8:1f:60: f8:27:b7:b1:05:db:73:b4:54:45:00:23:ed:40:a2: 17:fe:0f:4a:08:62:80:b5:83:38:91:6e:12:62:2a: c3:d6:01:33:1c:ee:d6:b7:8e:dd:0f:d9:80:f2:28: da:4f:ba:44:51:ea:0a:d6:de:bb:55:a1:3e:f1:be: 7a:ec:23:34:65:d2:41:0a:e6:3b:5c:29:e4:4e:96: 4d:a6:49:99:9e:83:f9:ec:ed:53:46:25:a7:8e:45: 31:0c:a2:2c:1b:26:45:a6:5c:bb:e2:a7:d1:08:7b: 6f:e8:3e:64:92:24:67:c0:29:26:c1:1c:11:21:fd: 19:f4:3c:92:0a:58:c1:1c:af:05:42:be:ae:73:fc: bf:a3:d3:20:e3:e1:c8:9b:2d:e1:11:e7:dc:b2:f8: 6e:c2:8b:15:b5:3e:b3:3e:f4:10:c4:b5:48:2c:21: 6b:05:a7:8a:0c:a9:c6:56:ff:b0:00:6c:dd:4b:39: 3c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:17:7F:00:18:DB:60:4F:B5:1C:7D:15:37:89:A6:4B:50:A7:76:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/4f32bdd6-c862-39c9-bfbe-0f0c7171a6e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:04:9a:67:d0:15:0f:9f:de:95:e8:81:88:a5:00:4c:14:80: 96:12:5e:28:ec:e5:dc:56:18:a4:25:93:d5:f5:87:48:8b:15: 54:d8:ff:7c:df:8d:6f:1e:98:86:5b:3d:cd:59:6f:27:ae:5a: 7b:61:55:02:28:09:d7:ee:8f:9d:0f:bf:e4:66:d8:3b:86:6d: 38:20:dc:b6:88:15:9b:9e:7f:57:ae:ae:f3:3f:ef:99:c0:8b: ba:41:db:58:63:15:7a:d4:1f:cc:49:60:da:a3:17:84:3e:13: 51:c9:26:4d:2f:c8:99:77:07:53:ca:08:76:45:6e:3e:94:d2: 64:5c:3e:ef:3a:5c:a3:55:6a:a6:f9:e1:51:bd:13:c5:f6:ff: 43:77:56:ae:6e:ea:8d:b0:2a:a4:ab:d0:38:ae:7c:f7:53:88: 60:20:9c:6a:e3:5f:45:39:75:58:62:e4:ef:5d:bb:58:f3:01: 95:26:a2:0f:af:87:7b:fa:e3:90:3f:b6:97:b5:ce:c3:3d:e3: 54:ab:ef:94:d0:87:98:b4:0c:5d:15:13:f5:5e:3f:85:6a:dc: 4f:44:4b:42:cf:2a:45:8c:64:2f:a2:c6:d1:df:26:46:ba:c3: 87:bc:2c:b1:4b:23:90:28:05:db:0d:ab:ad:01:26:5f:97:5b: 10:ec:aa:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzkiZpBK460uGtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ODk0NGM3MDktYTQyYS00OGMzLWE3NmMtMDBiZmQ0ODIzMjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreBok1A3SUoBCEystUOc+TM9OqxJdgRgJQlA H/CBly9GkQfEu3NRhK3No2Ov0UifSfzrC58b+MXDu4Dssg/h11fihL/vwrO4H2D4 J7exBdtztFRFACPtQKIX/g9KCGKAtYM4kW4SYirD1gEzHO7Wt47dD9mA8ijaT7pE UeoK1t67VaE+8b567CM0ZdJBCuY7XCnkTpZNpkmZnoP57O1TRiWnjkUxDKIsGyZF ply74qfRCHtv6D5kkiRnwCkmwRwRIf0Z9DySCljBHK8FQr6uc/y/o9Mg4+HImy3h EefcsvhuwosVtT6zPvQQxLVILCFrBaeKDKnGVv+wAGzdSzk8fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMXfwAY22BPtRx9FTeJpktQp3ZDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvNGYzMmJkZDYtYzg2Mi0z OWM5LWJmYmUtMGYwYzcxNzFhNmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBafMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkEmmfQFQ+f3pXogYilAEwUgJYSXijs5dxWGKQlk9X1h0iLFVTY/3zf jW8emIZbPc1ZbyeuWnthVQIoCdfuj50Pv+Rm2DuGbTgg3LaIFZuef1eurvM/75nA i7pB21hjFXrUH8xJYNqjF4Q+E1HJJk0vyJl3B1PKCHZFbj6U0mRcPu86XKNVaqb5 4VG9E8X2/0N3Vq5u6o2wKqSr0DiufPdTiGAgnGrjX0U5dVhi5O9du1jzAZUmog+v h3v645A/tpe1zsM941Sr75TQh5i0DF0VE/VeP4Vq3E9ES0LPKkWMZC+ixtHfJka6 w4e8LLFLI5AoBdsNq60BJl+XWxDsqgY= -----END CERTIFICATE-----Generated at Mon Oct 20 19:08:52 2025 by rpki-client