$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cb4f9b9f-6446-3603-82b5-3ca3d80b40fe.roa File: cb4f9b9f-6446-3603-82b5-3ca3d80b40fe.roa (raw, json) Hash identifier: nXUaytDZb4A1SiwNc12LQx/It68qzawhnzCdDGYIXLo= Subject key identifier: A7:CD:57:56:C5:24:D4:18:12:E2:F1:67:85:37:23:CA:FE:07:B2:34 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584B64CC885D79BF7FFE46B58180 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cb4f9b9f-6446-3603-82b5-3ca3d80b40fe.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 14813 IP address blocks: 72.22.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:88:5d:79:bf:7f:fe:46:b5:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=2c3f15d8-8827-45fe-b9f6-79af13800bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a8:4c:1e:79:e6:f4:49:bc:5e:e3:7f:63:40: b2:86:49:c5:e2:d1:5c:13:2e:54:06:4a:ad:2b:56: 6a:58:10:41:07:48:6c:63:0f:fe:74:dd:d9:e1:89: 94:7f:49:50:9c:ee:cd:79:bc:44:18:e9:d3:aa:b6: 4b:28:46:af:5c:89:ec:9e:a4:dc:43:65:ea:9d:eb: c6:85:05:3f:9b:3a:ec:e2:64:88:2a:b7:29:2a:bb: b6:a3:14:5f:a2:21:fc:8a:75:b6:9e:a9:75:49:bf: c7:5d:e6:73:f0:87:77:3f:f5:82:ad:9b:0d:fb:3d: 2b:07:84:06:bb:76:e2:b1:66:4a:cc:bb:cf:c0:ea: 00:da:bc:6a:fa:36:74:91:0a:e3:c6:63:78:59:28: 4b:ba:7d:dc:d5:a4:2e:6b:06:fb:bb:b3:7f:f2:1f: d2:7c:be:af:0c:22:a5:8f:c3:6c:fe:ec:95:2d:ba: 2d:d9:c0:ac:08:cb:e3:d4:76:32:3c:03:2e:d1:d6: 18:3e:b7:54:5c:65:30:bb:d3:21:b9:32:d4:d3:3e: 76:59:1b:5e:ea:24:4a:aa:90:98:a9:68:fc:67:1a: 74:3d:cf:82:93:2f:ea:a0:2b:60:0c:8c:2e:c7:73: 5d:b1:35:db:71:23:da:76:28:71:de:fe:70:cf:ea: a3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:CD:57:56:C5:24:D4:18:12:E2:F1:67:85:37:23:CA:FE:07:B2:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cb4f9b9f-6446-3603-82b5-3ca3d80b40fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:80:62:f7:e3:bb:87:41:1e:d2:5c:4a:a4:b0:45:14:f4:c7: 85:f5:0f:bd:a1:69:c9:28:ea:36:ea:95:0d:43:46:7e:9a:13: 42:2c:95:f0:57:ef:39:f6:e5:a2:83:3a:3d:be:cc:35:54:1b: 10:00:90:a7:7a:9c:5d:1d:51:05:bf:1f:0b:4a:a4:7e:30:6a: 81:ef:df:d9:3f:ee:0c:f2:ce:a6:ad:0b:49:d1:d9:8a:98:1a: ae:82:6d:e1:51:2a:13:db:1c:b1:a4:5f:1e:84:de:65:df:ac: d0:58:53:8c:a5:af:f5:a9:0c:3e:b8:d5:f3:5d:bd:70:33:49: ee:3c:07:82:25:30:fc:9a:2a:92:33:3a:72:84:96:5c:bc:e7: 30:66:54:3f:4d:38:55:08:04:1b:bd:72:6d:ee:8a:db:84:53: 3f:51:3b:b3:13:2f:ba:62:fa:c3:1a:1e:3d:aa:4f:b1:8f:f5: fa:e9:a7:29:58:ff:76:2e:50:43:f0:e0:9e:ce:0c:e8:04:8a: 83:85:f2:89:b8:0b:d1:df:a0:46:5f:d6:5f:f9:16:34:98:63: b0:6b:0d:e9:d0:8d:55:d3:9a:69:bf:4a:95:d9:13:56:dc:bc: 0a:73:32:05:04:c6:18:46:7b:7b:bb:5c:24:fd:b8:fe:db:81: c0:37:1e:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzIhdeb9//ka1gYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MmMzZjE1ZDgtODgyNy00NWZlLWI5ZjYtNzlhZjEzODAwYmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qhMHnnm9Em8XuN/Y0CyhknF4tFcEy5UBkqt K1ZqWBBBB0hsYw/+dN3Z4YmUf0lQnO7NebxEGOnTqrZLKEavXInsnqTcQ2XqnevG hQU/mzrs4mSIKrcpKru2oxRfoiH8inW2nql1Sb/HXeZz8Id3P/WCrZsN+z0rB4QG u3bisWZKzLvPwOoA2rxq+jZ0kQrjxmN4WShLun3c1aQuawb7u7N/8h/SfL6vDCKl j8Ns/uyVLbot2cCsCMvj1HYyPAMu0dYYPrdUXGUwu9MhuTLU0z52WRte6iRKqpCY qWj8Zxp0Pc+Cky/qoCtgDIwux3NdsTXbcSPadihx3v5wz+qjRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfNV1bFJNQYEuLxZ4U3I8r+B7I0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvY2I0ZjliOWYtNjQ0Ni0z NjAzLTgyYjUtM2NhM2Q4MGI0MGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaAYvfju4dBHtJcSqSwRRT0x4X1D72hacko6jbqlQ1DRn6aE0IslfBX 7zn25aKDOj2+zDVUGxAAkKd6nF0dUQW/HwtKpH4waoHv39k/7gzyzqatC0nR2YqY Gq6CbeFRKhPbHLGkXx6E3mXfrNBYU4ylr/WpDD641fNdvXAzSe48B4IlMPyaKpIz OnKElly85zBmVD9NOFUIBBu9cm3uituEUz9RO7MTL7pi+sMaHj2qT7GP9frppylY /3YuUEPw4J7ODOgEioOF8om4C9HfoEZf1l/5FjSYY7BrDenQjVXTmmm/SpXZE1bc vApzMgUExhhGe3u7XCT9uP7bgcA3Hgw= -----END CERTIFICATE-----Generated at Mon Oct 20 19:08:24 2025 by rpki-client