$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/d6e40a07-1968-3c10-9e42-aa8d86b9f665.roa File: d6e40a07-1968-3c10-9e42-aa8d86b9f665.roa (raw, json) Hash identifier: q4AEAWx5VPqKmNnB3qeaEZr9ZbFbdCgs8yzcy3LQMRY= Subject key identifier: FB:55:46:36:7D:96:0F:60:12:C3:0D:7D:44:32:43:D1:4C:32:A8:2D Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584B64CE51120DD2ED32C3E04680 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/d6e40a07-1968-3c10-9e42-aa8d86b9f665.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 14813 IP address blocks: 72.22.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:51:12:0d:d2:ed:32:c3:e0:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=69a5cb51-dcfb-4a90-8a8a-9be6ed9e7e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:29:be:8f:42:0d:b0:6d:dd:f9:46:fe:f8:1b: 55:c5:6f:fe:c2:3a:0c:f4:1e:06:c9:2b:4d:47:12: 54:66:25:f1:84:41:88:34:ef:de:cd:cd:b7:c3:1a: 24:36:34:5a:c6:e3:60:28:1c:2c:e3:0e:b7:9c:b4: 36:c6:07:c4:ca:8e:c4:c6:f8:eb:5f:c8:6d:c6:20: ac:53:41:85:f4:4f:35:15:10:1a:2c:e5:6d:9f:46: 67:e2:5a:ac:36:3f:10:14:44:17:8f:f5:d2:bc:bd: 81:fc:60:41:99:a2:65:ef:a1:72:ef:38:c7:bb:da: cc:87:96:e0:8e:7c:5c:d1:a3:28:4b:19:d2:ad:b6: b5:a2:eb:4e:d0:ae:2b:d5:a8:dd:e7:a9:3b:d6:ac: 25:97:6f:51:d2:4c:87:2b:fb:ba:e9:4c:0a:4e:2a: 85:eb:41:25:a8:f7:6f:92:6a:6c:a1:1e:1b:3e:39: d7:78:7f:04:24:76:6c:d3:03:90:ff:e0:cf:11:8b: bb:f0:71:7a:00:9e:0a:82:52:17:6d:16:01:5b:41: ce:71:98:4a:75:6e:1c:b9:b1:f3:76:cd:94:0b:f3: da:04:b2:72:6c:2a:21:1c:09:ca:b9:2c:3a:d3:23: 56:49:96:6d:ff:b3:8a:4e:4d:d4:c4:34:d1:e5:0b: 8b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:55:46:36:7D:96:0F:60:12:C3:0D:7D:44:32:43:D1:4C:32:A8:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/d6e40a07-1968-3c10-9e42-aa8d86b9f665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:dc:3e:94:d2:c0:07:2a:81:fb:c8:f6:f4:ac:07:1e:7d:9f: 26:c2:dd:c5:d3:08:a8:dd:f5:ab:45:9d:a5:bf:ab:b6:7a:b0: 89:bb:05:7c:29:c0:9f:39:5b:00:72:c4:80:85:2b:b8:ad:c7: d8:dd:c1:85:ba:85:0f:b0:db:10:d2:4a:91:0b:8a:91:10:d6: 70:3b:44:3f:62:79:80:f5:41:5a:4b:58:2b:d8:2d:e3:48:2d: 78:46:a2:aa:14:53:d4:96:84:84:96:89:38:4b:17:23:c8:07: 8a:22:b4:b8:db:ca:e5:ea:07:ff:77:cc:2a:21:3b:a5:e0:bc: f5:9d:6d:00:2c:17:90:ed:cf:15:d3:25:98:8f:7d:aa:57:45: e6:5b:6e:29:e0:36:28:e4:0c:90:b9:2a:9f:46:ef:5e:ad:a1: 93:e2:b3:b3:72:a3:f3:ec:ef:5e:87:25:50:ae:68:c4:8b:c5: ac:e7:50:37:20:f5:68:fa:8b:f6:6e:18:1c:40:0b:14:68:3c: 8c:05:32:de:d4:76:ef:ad:1b:c1:92:42:1e:f1:6d:79:82:de: 30:9b:fc:66:19:53:f3:7b:0b:05:c5:f2:49:3b:1a:fa:4c:50: 69:85:95:c0:7c:03:45:c5:b6:73:be:40:58:39:ca:4b:ce:ad: a3:ed:35:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzlESDdLtMsPgRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NjlhNWNiNTEtZGNmYi00YTkwLThhOGEtOWJlNmVkOWU3ZTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Sm+j0INsG3d+Ub++BtVxW/+wjoM9B4GyStN RxJUZiXxhEGINO/ezc23wxokNjRaxuNgKBws4w63nLQ2xgfEyo7ExvjrX8htxiCs U0GF9E81FRAaLOVtn0Zn4lqsNj8QFEQXj/XSvL2B/GBBmaJl76Fy7zjHu9rMh5bg jnxc0aMoSxnSrba1outO0K4r1ajd56k71qwll29R0kyHK/u66UwKTiqF60ElqPdv kmpsoR4bPjnXeH8EJHZs0wOQ/+DPEYu78HF6AJ4KglIXbRYBW0HOcZhKdW4cubHz ds2UC/PaBLJybCohHAnKuSw60yNWSZZt/7OKTk3UxDTR5QuLGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtVRjZ9lg9gEsMNfUQyQ9FMMqgtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvZDZlNDBhMDctMTk2OC0z YzEwLTllNDItYWE4ZDg2YjlmNjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLcPpTSwAcqgfvI9vSsBx59nybC3cXTCKjd9atFnaW/q7Z6sIm7BXwp wJ85WwByxICFK7itx9jdwYW6hQ+w2xDSSpELipEQ1nA7RD9ieYD1QVpLWCvYLeNI LXhGoqoUU9SWhISWiThLFyPIB4oitLjbyuXqB/93zCohO6XgvPWdbQAsF5DtzxXT JZiPfapXReZbbingNijkDJC5Kp9G716toZPis7Nyo/Ps716HJVCuaMSLxaznUDcg 9Wj6i/ZuGBxACxRoPIwFMt7Udu+tG8GSQh7xbXmC3jCb/GYZU/N7CwXF8kk7GvpM UGmFlcB8A0XFtnO+QFg5ykvOraPtNTg= -----END CERTIFICATE-----Generated at Mon Oct 20 19:08:25 2025 by rpki-client