$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cacd0df1-5cdf-3769-98be-255e1d5de51d.roa File: cacd0df1-5cdf-3769-98be-255e1d5de51d.roa (raw, json) Hash identifier: vgjOz8815+Df5AJ3Ig0ooD8QVq6PWiy4cS3wHUmZNeI= Subject key identifier: 2F:4E:B4:30:4C:36:70:FD:D4:F4:73:49:AB:6D:62:77:B3:5A:3B:51 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584B64CCB664030B081D46322CC0 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cacd0df1-5cdf-3769-98be-255e1d5de51d.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 14813 IP address blocks: 72.22.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:b6:64:03:0b:08:1d:46:32:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=955808f2-c91e-47b9-938c-6a9c659f848d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bc:56:48:a6:40:ce:b5:cc:71:19:48:b5:a0: 66:37:3d:c3:7a:57:b4:54:ab:1e:a8:c6:b1:4f:c1: e1:95:90:c1:ba:2b:90:41:eb:64:9d:fe:59:b2:35: d4:08:44:ac:fd:93:c7:d6:ba:e0:46:09:bf:49:ff: 5f:24:7d:72:04:7d:89:35:ba:74:c2:e2:e7:75:da: d5:99:cd:9c:0a:cb:f0:fb:2f:7a:20:68:85:01:b2: 68:a2:97:a8:28:8e:6f:3d:ad:bb:b0:fb:96:5d:d8: cf:b4:fe:c7:6d:5b:ca:25:68:61:b0:a6:18:25:0e: 2c:1a:c3:1d:23:d8:af:43:19:d8:fd:0f:a7:b0:89: d0:c0:ab:4a:44:36:51:d3:c9:5a:25:ce:95:9d:c2: 2f:91:04:f3:52:c8:25:fe:8b:e7:f1:b7:4c:4c:0b: 6c:88:34:2b:11:28:a4:84:f5:07:74:af:19:69:1c: fe:5f:51:2b:6a:61:c2:66:c6:69:9a:94:95:09:d5: 75:bb:a9:ea:f7:c8:6e:5c:54:0e:5a:05:8e:5c:f1: 62:8c:6a:0a:dc:3f:e4:0c:e6:32:c9:03:a6:e2:ad: 2b:be:e7:9c:2e:9b:7d:8e:d0:46:83:90:c3:c0:f0: ab:00:46:f7:63:5a:fd:42:a0:b9:a9:a8:52:68:87: 8c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4E:B4:30:4C:36:70:FD:D4:F4:73:49:AB:6D:62:77:B3:5A:3B:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cacd0df1-5cdf-3769-98be-255e1d5de51d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:55:cd:f2:a0:07:74:b8:b2:57:73:ec:e5:20:9f:bf:72:de: c2:30:8c:15:ad:e3:11:4b:3c:bc:15:41:82:a0:b8:a8:ed:d4: cb:9e:d6:e3:ca:03:c0:33:0b:33:73:30:cd:c2:07:bb:9a:28: af:f8:ef:f5:1a:1c:3d:9d:4e:f1:3e:fe:b3:2b:4d:80:fd:34: 1f:01:6b:ff:54:07:ad:c2:1c:6c:fe:24:de:48:e8:12:d0:44: 0f:08:c8:88:e7:fa:58:f4:cc:2d:f7:03:17:7f:a8:29:cd:63: 2d:f8:d5:c9:b6:04:b8:8d:c3:4f:00:1a:a1:99:ed:79:4d:23: 35:a1:5f:11:59:99:b9:ef:9a:95:a8:62:d1:1f:79:74:17:af: b0:dc:71:4d:65:2b:20:ae:6a:20:c7:63:c3:e6:93:9e:c9:5b: 75:a7:6c:7e:c6:09:eb:d3:be:03:3b:23:1c:e9:f1:f1:25:34: 2d:10:b0:fa:ff:f6:17:7e:38:a9:3d:a1:e7:5e:db:6b:c4:d2: f6:72:3a:04:77:84:47:ad:61:00:09:53:f7:51:f1:93:3a:b5: 00:8d:c1:e2:84:6c:e1:49:e1:aa:10:68:4a:57:76:c6:10:70: 6c:a2:04:8b:24:92:90:24:dc:55:56:e1:aa:5b:45:ea:ce:47: 7f:1a:79:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzLZkAwsIHUYyLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OTU1ODA4ZjItYzkxZS00N2I5LTkzOGMtNmE5YzY1OWY4NDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubxWSKZAzrXMcRlItaBmNz3Dele0VKseqMax T8HhlZDBuiuQQetknf5ZsjXUCESs/ZPH1rrgRgm/Sf9fJH1yBH2JNbp0wuLnddrV mc2cCsvw+y96IGiFAbJoopeoKI5vPa27sPuWXdjPtP7HbVvKJWhhsKYYJQ4sGsMd I9ivQxnY/Q+nsInQwKtKRDZR08laJc6VncIvkQTzUsgl/ovn8bdMTAtsiDQrESik hPUHdK8ZaRz+X1EramHCZsZpmpSVCdV1u6nq98huXFQOWgWOXPFijGoK3D/kDOYy yQOm4q0rvuecLpt9jtBGg5DDwPCrAEb3Y1r9QqC5qahSaIeMOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9OtDBMNnD91PRzSattYnezWjtRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvY2FjZDBkZjEtNWNkZi0z NzY5LTk4YmUtMjU1ZTFkNWRlNTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRVzfKgB3S4sldz7OUgn79y3sIwjBWt4xFLPLwVQYKguKjt1Mue1uPK A8AzCzNzMM3CB7uaKK/47/UaHD2dTvE+/rMrTYD9NB8Ba/9UB63CHGz+JN5I6BLQ RA8IyIjn+lj0zC33Axd/qCnNYy341cm2BLiNw08AGqGZ7XlNIzWhXxFZmbnvmpWo YtEfeXQXr7DccU1lKyCuaiDHY8Pmk57JW3WnbH7GCevTvgM7Ixzp8fElNC0QsPr/ 9hd+OKk9oede22vE0vZyOgR3hEetYQAJU/dR8ZM6tQCNweKEbOFJ4aoQaEpXdsYQ cGyiBIskkpAk3FVW4apbRerOR38aeTI= -----END CERTIFICATE-----Generated at Mon Oct 20 19:06:53 2025 by rpki-client