$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b6f08d70-b98f-3232-bf02-aa49267e5045.roa File: b6f08d70-b98f-3232-bf02-aa49267e5045.roa (raw, json) Hash identifier: QzMN6a6I6aTuWlbiAMOfvDFoXN6DvSJ3yfLhFst8ih8= Subject key identifier: AF:29:85:4D:EB:27:40:32:9A:08:68:8F:26:64:8B:20:FE:F0:63:95 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584B64CC990CB2B8BBD50A261A80 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b6f08d70-b98f-3232-bf02-aa49267e5045.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 14813 IP address blocks: 72.22.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:99:0c:b2:b8:bb:d5:0a:26:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=d4815570-4804-44f0-a72c-72ac1f56a709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:09:3f:19:70:46:fe:56:1e:75:bf:bb:66:c8: 31:5b:61:c6:d8:32:e7:f2:ae:45:b3:01:63:31:2c: e1:1f:bc:f4:ce:2f:ca:45:81:1f:70:0c:9a:9d:78: 39:11:a6:81:99:a3:1d:45:85:36:07:1e:6c:42:04: b4:5b:a1:f6:83:8c:14:e2:d6:89:14:ca:63:a8:df: 54:47:e8:f9:0d:7c:22:fd:91:1c:19:7c:ec:08:3b: 63:78:5c:9c:69:0b:c9:39:fd:ec:f1:8e:07:41:56: 94:e2:35:4c:11:52:74:3d:61:cd:7d:da:e1:4f:6e: ef:9d:80:dd:65:49:01:ae:74:dc:6a:b8:2c:3d:0c: eb:d9:a2:03:8c:3b:c7:e1:2b:c6:25:9f:4f:6f:73: e0:11:bd:b8:1f:c7:2c:64:d3:ad:94:e1:08:5e:a1: c1:09:a5:c2:aa:03:39:2e:58:41:b1:73:91:cb:70: f5:ca:7b:9e:35:3a:d2:3a:a3:71:eb:34:c6:9d:6d: 2f:1a:c4:c3:fa:12:e9:ce:0c:46:50:27:c7:e6:43: a9:a7:7b:72:6e:38:a6:95:02:56:d0:bc:67:c6:4c: a2:3e:bf:c9:90:7f:97:61:3d:8f:d6:71:8a:95:8b: da:66:e8:14:fb:2f:71:c5:7b:e7:45:1b:7f:9f:d8: cc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:29:85:4D:EB:27:40:32:9A:08:68:8F:26:64:8B:20:FE:F0:63:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b6f08d70-b98f-3232-bf02-aa49267e5045.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:8b:5a:79:a2:1e:55:f2:0d:52:ab:d8:12:fc:86:87:24:38: 94:2f:97:79:cf:79:46:e9:02:e1:66:2d:0e:c9:b3:31:db:65: 23:28:8c:bf:3f:3c:96:89:b8:cd:26:9f:a3:a4:f9:a0:9e:ba: 8d:ed:a7:2f:3d:9f:5a:1d:3c:51:1b:a9:6e:0b:af:f3:c2:25: 5d:d0:9a:31:7b:58:b2:8f:fe:97:14:9b:76:c2:15:89:5d:bd: ab:be:4d:94:86:db:68:91:90:d8:ea:92:d5:56:b9:90:4a:89: e7:87:56:90:2b:63:fa:a2:91:a5:da:92:ac:b7:e1:2e:4d:ee: 15:68:e6:cc:2f:df:3d:74:47:1e:6a:9d:05:5d:5c:a4:38:c4: fa:79:2d:55:03:74:61:3b:ee:59:53:32:af:a3:7b:d7:88:78: 54:24:a1:1d:5d:7a:ed:2b:99:84:d7:b0:c3:0c:a3:32:f6:67: cb:d0:87:4c:1d:00:e9:8a:bb:bf:eb:d8:00:a7:48:7a:f1:7f: a1:c2:7a:74:30:ab:99:d6:f1:de:f4:ca:fc:26:d7:de:da:26: 51:65:0a:5a:87:1c:60:f0:5c:e6:ce:43:ab:c2:de:4b:06:17: 3d:78:0b:76:98:01:20:c3:80:9d:50:ca:15:51:7b:bb:9e:01: 5c:c3:ed:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzJkMsri71QomGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZDQ4MTU1NzAtNDgwNC00NGYwLWE3MmMtNzJhYzFmNTZhNzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogk/GXBG/lYedb+7ZsgxW2HG2DLn8q5FswFj MSzhH7z0zi/KRYEfcAyanXg5EaaBmaMdRYU2Bx5sQgS0W6H2g4wU4taJFMpjqN9U R+j5DXwi/ZEcGXzsCDtjeFycaQvJOf3s8Y4HQVaU4jVMEVJ0PWHNfdrhT27vnYDd ZUkBrnTcargsPQzr2aIDjDvH4SvGJZ9Pb3PgEb24H8csZNOtlOEIXqHBCaXCqgM5 LlhBsXORy3D1ynueNTrSOqNx6zTGnW0vGsTD+hLpzgxGUCfH5kOpp3tybjimlQJW 0LxnxkyiPr/JkH+XYT2P1nGKlYvaZugU+y9xxXvnRRt/n9jM7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8phU3rJ0AymghojyZkiyD+8GOVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvYjZmMDhkNzAtYjk4Zi0z MjMyLWJmMDItYWE0OTI2N2U1MDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeLWnmiHlXyDVKr2BL8hockOJQvl3nPeUbpAuFmLQ7JszHbZSMojL8/ PJaJuM0mn6Ok+aCeuo3tpy89n1odPFEbqW4Lr/PCJV3QmjF7WLKP/pcUm3bCFYld vau+TZSG22iRkNjqktVWuZBKieeHVpArY/qikaXakqy34S5N7hVo5swv3z10Rx5q nQVdXKQ4xPp5LVUDdGE77llTMq+je9eIeFQkoR1deu0rmYTXsMMMozL2Z8vQh0wd AOmKu7/r2ACnSHrxf6HCenQwq5nW8d70yvwm197aJlFlClqHHGDwXObOQ6vC3ksG Fz14C3aYASDDgJ1QyhVRe7ueAVzD7c0= -----END CERTIFICATE-----Generated at Tue Oct 21 02:52:12 2025 by rpki-client