$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5d2714ce-14fc-34c2-9ac9-e7c3620e5ba1.roa File: 5d2714ce-14fc-34c2-9ac9-e7c3620e5ba1.roa (raw, json) Hash identifier: yOulkTy1nslmVkp9Rdm/Gee7RgxYl7/jkXtC0azxkfQ= Subject key identifier: 0E:1F:93:17:BD:6F:B6:11:C9:34:D4:04:74:7D:CC:40:0D:26:43:DC Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584B64CE417FF24378E0AE927BE0 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5d2714ce-14fc-34c2-9ac9-e7c3620e5ba1.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 14813 IP address blocks: 72.22.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:41:7f:f2:43:78:e0:ae:92:7b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=e4fa1b67-6e63-496d-bd8e-8de6cc1637db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ee:69:68:17:b7:9e:f0:18:a4:18:90:38:8d: b8:4d:b7:f4:5b:36:15:94:35:69:87:0a:e1:23:3a: fa:2b:cd:38:4b:77:19:d4:16:30:a8:a2:00:2d:35: 90:63:a4:fa:dd:07:d8:9a:9e:45:d8:53:59:ef:39: f5:a0:a9:e0:64:8e:fb:3c:e2:ee:99:cf:c8:e5:f7: 3c:dc:f4:f9:83:01:ce:88:b6:22:c3:5e:15:b4:9f: 5f:01:e6:2f:e1:c2:c6:e1:cd:b4:bf:f3:14:59:bb: 93:10:87:26:f6:55:70:15:2e:45:a5:50:44:eb:67: e9:9a:41:fc:8b:56:bf:bf:d0:46:a0:94:e8:f9:48: 28:64:1f:f7:9d:58:b7:8f:21:c4:98:6e:22:53:2b: c9:99:a5:f9:1b:ab:7a:99:b0:f8:a7:7d:fc:44:92: 7c:ed:83:9a:5b:79:53:c2:5d:4e:d6:00:d6:0f:c2: 56:6f:78:05:9d:55:07:59:9b:da:e0:84:c1:f2:b5: 6d:e2:59:f6:34:a6:4d:28:97:a0:17:8c:18:95:29: 44:a0:bb:68:e8:d0:b1:e0:55:5e:a3:06:c9:ec:12: f7:96:bd:dd:06:89:28:33:9c:41:58:f0:14:3a:a9: 75:63:b1:90:c5:f6:50:93:94:f4:c9:bc:7b:48:d1: f8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1F:93:17:BD:6F:B6:11:C9:34:D4:04:74:7D:CC:40:0D:26:43:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5d2714ce-14fc-34c2-9ac9-e7c3620e5ba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:1f:ab:74:1e:49:35:16:67:a0:20:bb:1b:c9:b0:1a:63:3d: b8:38:0f:f1:b4:af:72:64:1b:4c:b5:35:56:30:98:88:01:34: 00:62:5c:60:09:50:45:e5:69:59:80:0f:6e:bc:32:61:ff:44: 39:18:37:be:7a:84:a8:77:64:46:d7:d3:ef:5c:15:6f:e4:7a: d4:96:fa:94:9e:6a:91:e8:68:32:ed:0a:4a:3f:f0:ac:a6:08: 6e:85:19:a0:1e:97:f7:8c:3b:48:80:ba:69:f9:a4:6a:44:30: f5:b0:03:53:50:17:9a:e7:10:cf:d9:d6:66:8b:f4:12:ae:34: 7a:aa:4d:c1:4f:80:60:6c:5c:55:25:3c:46:50:78:6b:cb:c0: 3f:46:75:33:c0:a1:df:74:2b:8c:40:c9:0f:db:04:2a:2e:5f: 77:23:d4:49:1d:1e:6a:ed:b1:11:45:0f:65:99:0a:ba:1b:25: 9c:51:85:ee:ec:9a:6e:20:26:8e:dd:cb:5e:f2:c5:ed:68:69: f6:44:81:22:8f:f8:fe:43:79:e9:3e:4d:96:08:bc:2b:00:c4: e3:86:ef:5d:fb:4e:e2:7a:a2:91:ab:83:55:4c:4b:95:7c:d1: 03:7b:dd:be:d8:45:ec:9d:96:b1:53:a5:53:77:da:d0:b5:41: d7:75:51:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzkF/8kN44K6Se+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZTRmYTFiNjctNmU2My00OTZkLWJkOGUtOGRlNmNjMTYzN2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO5paBe3nvAYpBiQOI24Tbf0WzYVlDVphwrh Izr6K804S3cZ1BYwqKIALTWQY6T63QfYmp5F2FNZ7zn1oKngZI77POLumc/I5fc8 3PT5gwHOiLYiw14VtJ9fAeYv4cLG4c20v/MUWbuTEIcm9lVwFS5FpVBE62fpmkH8 i1a/v9BGoJTo+UgoZB/3nVi3jyHEmG4iUyvJmaX5G6t6mbD4p338RJJ87YOaW3lT wl1O1gDWD8JWb3gFnVUHWZva4ITB8rVt4ln2NKZNKJegF4wYlSlEoLto6NCx4FVe owbJ7BL3lr3dBokoM5xBWPAUOql1Y7GQxfZQk5T0ybx7SNH4nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4fkxe9b7YRyTTUBHR9zEANJkPcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvNWQyNzE0Y2UtMTRmYy0z NGMyLTlhYzktZTdjMzYyMGU1YmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgfq3QeSTUWZ6AguxvJsBpjPbg4D/G0r3JkG0y1NVYwmIgBNABiXGAJ UEXlaVmAD268MmH/RDkYN756hKh3ZEbX0+9cFW/ketSW+pSeapHoaDLtCko/8Kym CG6FGaAel/eMO0iAumn5pGpEMPWwA1NQF5rnEM/Z1maL9BKuNHqqTcFPgGBsXFUl PEZQeGvLwD9GdTPAod90K4xAyQ/bBCouX3cj1EkdHmrtsRFFD2WZCrobJZxRhe7s mm4gJo7dy17yxe1oafZEgSKP+P5Deek+TZYIvCsAxOOG7137TuJ6opGrg1VMS5V8 0QN73b7YReydlrFTpVN32tC1Qdd1UU4= -----END CERTIFICATE-----Generated at Mon Oct 20 19:07:27 2025 by rpki-client