$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/bbb3df94-40f9-327d-84f4-c5c6d59c4cd5.roa File: bbb3df94-40f9-327d-84f4-c5c6d59c4cd5.roa (raw, json) Hash identifier: GX3q7ItYry0uQoeBd/EUFbn4hvIWdhVqIeT/EmhFo4Y= Subject key identifier: 65:76:19:BA:6C:0B:1D:E1:ED:06:E5:B1:BC:58:78:6F:79:96:BF:8C Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584B64CC8493A1899D0B4A614680 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/bbb3df94-40f9-327d-84f4-c5c6d59c4cd5.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 14813 IP address blocks: 72.22.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:84:93:a1:89:9d:0b:4a:61:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=2f40055d-281f-4962-a455-0809475e65db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:21:2a:4f:17:63:76:24:ee:46:82:b5:a6:33: 0e:bf:95:d7:c0:60:d2:71:6e:8d:ee:73:2a:e7:32: c7:1f:a5:65:d8:4e:8b:3f:1f:3b:15:78:e1:cd:28: a6:f7:af:dd:36:22:6e:74:f3:04:31:45:f7:a9:e3: c3:9c:d6:47:85:8d:fb:34:0e:7b:b3:01:8d:c0:8b: 06:06:97:bb:f9:a4:dc:6e:d8:c5:85:9b:d1:18:6d: a6:0e:7d:d2:36:9c:73:14:b3:8c:c9:74:7c:55:44: cf:51:5d:03:0b:88:73:28:e0:66:b4:5d:c8:51:00: bc:53:7b:db:26:9a:02:1a:45:4f:b9:21:28:0e:6d: 43:84:74:3d:90:c2:ab:05:fc:62:68:72:68:1b:9b: a4:f9:4f:8a:ae:2c:52:6c:ef:c4:03:db:a3:35:5f: 85:e2:a0:3c:21:1f:d7:2e:82:9e:34:5d:82:0a:22: 7c:04:35:06:f5:7b:40:e7:fe:1d:9b:35:5d:dd:fd: c8:7a:22:eb:39:1f:1f:8e:f0:48:67:a4:7d:70:ff: 36:2c:ac:21:5b:f3:ae:96:01:a3:57:2e:f1:04:ab: a0:4a:be:98:1b:4b:00:a3:bf:2d:11:be:80:2f:db: 6b:ba:ea:62:4b:60:5e:92:44:5d:a0:c6:43:0f:bd: 85:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:76:19:BA:6C:0B:1D:E1:ED:06:E5:B1:BC:58:78:6F:79:96:BF:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/bbb3df94-40f9-327d-84f4-c5c6d59c4cd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:a1:27:62:9d:08:9a:bc:89:b2:7a:0a:50:ab:c8:3c:c1:28: 62:ab:98:79:88:38:f9:71:4c:e3:aa:02:4e:77:95:ed:a5:0e: 6c:79:d3:e3:6a:98:1b:38:ad:f6:d9:61:1c:f5:87:a9:ad:78: 0e:e7:57:24:62:6c:fc:c3:73:44:2c:c5:b7:6a:6f:3f:5d:07: 08:4e:06:25:f0:40:46:fb:bf:50:06:ec:79:c8:88:61:9a:cd: fe:32:db:19:1c:5e:78:b6:a7:bb:4e:fc:0f:93:cc:6f:85:56: 07:36:e0:d6:ed:3b:9c:6f:89:e2:7b:67:d7:9e:a6:4c:5f:f5: 0b:e8:28:68:dd:07:c8:e8:c8:0a:e8:75:95:46:cc:be:f1:c1: b4:cc:01:ae:e0:e2:61:71:3c:82:e2:3a:13:b9:44:87:25:4d: e9:64:fa:0d:83:f2:b2:04:3f:19:c3:fd:9d:0a:9a:8f:bf:c8: f2:ca:b8:37:bc:e4:34:03:b8:f8:8e:0e:7e:0a:62:f6:0d:2d: 87:26:5c:1c:ca:a2:c3:31:a8:5c:ef:06:8e:e1:17:37:2f:0d: 84:5b:33:45:f3:cc:f5:4e:8d:e7:a5:9d:e0:50:cb:5d:aa:6a: 78:46:0f:39:8b:c6:69:2c:80:dc:ad:d9:25:ba:97:f0:f8:09: b5:97:ae:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzISToYmdC0phRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MmY0MDA1NWQtMjgxZi00OTYyLWE0NTUtMDgwOTQ3NWU2NWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSEqTxdjdiTuRoK1pjMOv5XXwGDScW6N7nMq 5zLHH6Vl2E6LPx87FXjhzSim96/dNiJudPMEMUX3qePDnNZHhY37NA57swGNwIsG Bpe7+aTcbtjFhZvRGG2mDn3SNpxzFLOMyXR8VUTPUV0DC4hzKOBmtF3IUQC8U3vb JpoCGkVPuSEoDm1DhHQ9kMKrBfxiaHJoG5uk+U+KrixSbO/EA9ujNV+F4qA8IR/X LoKeNF2CCiJ8BDUG9XtA5/4dmzVd3f3IeiLrOR8fjvBIZ6R9cP82LKwhW/OulgGj Vy7xBKugSr6YG0sAo78tEb6AL9truupiS2BekkRdoMZDD72F+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGV2GbpsCx3h7QblsbxYeG95lr+MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvYmJiM2RmOTQtNDBmOS0z MjdkLTg0ZjQtYzVjNmQ1OWM0Y2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGhJ2KdCJq8ibJ6ClCryDzBKGKrmHmIOPlxTOOqAk53le2lDmx50+Nq mBs4rfbZYRz1h6mteA7nVyRibPzDc0Qsxbdqbz9dBwhOBiXwQEb7v1AG7HnIiGGa zf4y2xkcXni2p7tO/A+TzG+FVgc24NbtO5xvieJ7Z9eepkxf9QvoKGjdB8joyAro dZVGzL7xwbTMAa7g4mFxPILiOhO5RIclTelk+g2D8rIEPxnD/Z0Kmo+/yPLKuDe8 5DQDuPiODn4KYvYNLYcmXBzKosMxqFzvBo7hFzcvDYRbM0XzzPVOjeelneBQy12q anhGDzmLxmksgNyt2SW6l/D4CbWXrqk= -----END CERTIFICATE-----Generated at Mon Oct 20 19:06:09 2025 by rpki-client