$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/da39c732-e6ac-3b81-bd35-5cac090a4260.roa File: da39c732-e6ac-3b81-bd35-5cac090a4260.roa (raw, json) Hash identifier: cavMtxyi1zSosyAjDQexUWKy49gHyb/kMcbfLUcgMvo= Subject key identifier: D6:16:5A:B0:C5:26:64:A8:69:69:4A:2B:E9:C2:78:3E:44:D8:86:51 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584B64CE4FA0E1BF2D7773D45A80 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/da39c732-e6ac-3b81-bd35-5cac090a4260.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 14813 IP address blocks: 72.51.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:4f:a0:e1:bf:2d:77:73:d4:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=1de5b95f-c918-4131-9f52-4df6dcf59285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:12:40:78:20:db:4b:23:18:9c:61:b0:8d:46: 88:27:63:51:6c:0b:3d:4a:e3:9a:73:be:2c:c8:17: 0a:ad:05:3f:0f:29:b3:c1:e5:08:e9:ac:95:3e:32: a3:9f:a0:9c:27:d1:9a:b3:54:f2:48:55:7d:23:79: bc:66:4e:79:14:64:32:2c:21:7f:4f:36:2a:2d:74: 9c:ae:1c:30:c6:56:f4:cd:38:6b:bb:01:54:fd:11: a9:72:32:6b:89:0a:d0:4d:0e:4e:ad:df:5b:ec:59: 35:a1:25:6b:c2:11:cb:2d:c0:8b:49:f7:20:82:48: 7a:bb:d7:a5:de:e8:18:1c:de:49:02:85:8e:8b:ab: d5:e6:5c:8f:f1:d6:a9:c1:39:cc:61:83:46:a7:b7: 40:6d:6c:e6:fe:49:9d:a9:52:25:90:57:3b:c2:cf: 9f:c6:41:2e:af:84:81:04:00:4f:91:8b:88:4b:ed: ef:ef:5d:bb:d2:ba:05:18:4b:e0:3a:9a:eb:40:94: 1f:8b:08:90:d0:62:aa:ee:05:58:a0:77:4d:b0:0e: 55:fc:fc:eb:af:ff:5d:49:46:5c:b2:33:fc:a3:5c: 45:28:4a:52:2e:a8:fc:53:ef:12:c1:29:e9:4a:db: 73:28:08:00:d2:a9:c2:38:83:ad:3d:c3:c1:dc:0b: 08:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:16:5A:B0:C5:26:64:A8:69:69:4A:2B:E9:C2:78:3E:44:D8:86:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/da39c732-e6ac-3b81-bd35-5cac090a4260.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.51.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:28:e6:7d:67:7b:c6:de:48:58:18:14:33:da:2b:6e:94:5a: a9:70:2c:e9:6b:0a:88:8a:9b:4b:c0:2e:b6:50:9a:6f:62:8c: 2a:1d:4b:f9:53:90:20:28:33:45:76:17:0a:9b:6d:12:02:2b: 72:61:d2:43:cf:06:7b:a7:9a:fb:71:48:b0:b2:3a:7a:1f:ec: dd:8c:f4:ee:64:4c:96:9f:f2:6e:76:bc:19:fe:a7:9b:ec:73: 8f:70:0b:15:ee:67:21:de:ab:b0:9d:d2:f1:78:56:cb:d0:b0: 13:2d:12:a9:47:b8:9b:ef:c2:f4:68:05:46:a2:61:ac:0d:ce: c2:f6:64:1b:7d:47:8d:01:80:df:ed:63:10:92:04:07:89:1a: 4e:82:e0:59:71:fb:27:fb:7e:07:38:51:e0:a4:b6:f2:e7:a3: 4f:6c:35:5d:f7:76:1c:d3:56:cf:e5:04:9a:6f:9f:71:05:1c: 6b:08:d4:b6:86:81:1d:a0:83:99:c6:02:19:ed:ac:6c:a6:d1: 48:c3:b0:e5:66:19:95:a2:40:e6:12:3c:1a:84:5e:45:ff:5a: 7e:8d:99:1c:71:d6:ac:2c:cf:87:a1:ac:57:24:f0:bf:a5:9a: 51:4a:3c:e1:ec:ee:d1:3b:a7:76:4b:94:5f:4a:1c:59:02:6b: f7:82:2b:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzk+g4b8td3PUWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MWRlNWI5NWYtYzkxOC00MTMxLTlmNTItNGRmNmRjZjU5Mjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthJAeCDbSyMYnGGwjUaIJ2NRbAs9SuOac74s yBcKrQU/DymzweUI6ayVPjKjn6CcJ9Gas1TySFV9I3m8Zk55FGQyLCF/TzYqLXSc rhwwxlb0zThruwFU/RGpcjJriQrQTQ5Ord9b7Fk1oSVrwhHLLcCLSfcggkh6u9el 3ugYHN5JAoWOi6vV5lyP8dapwTnMYYNGp7dAbWzm/kmdqVIlkFc7ws+fxkEur4SB BABPkYuIS+3v71270roFGEvgOprrQJQfiwiQ0GKq7gVYoHdNsA5V/Pzrr/9dSUZc sjP8o1xFKEpSLqj8U+8SwSnpSttzKAgA0qnCOIOtPcPB3AsI3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYWWrDFJmSoaWlKK+nCeD5E2IZRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvZGEzOWM3MzItZTZhYy0z YjgxLWJkMzUtNWNhYzA5MGE0MjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDNkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEso5n1ne8beSFgYFDPaK26UWqlwLOlrCoiKm0vALrZQmm9ijCodS/lT kCAoM0V2FwqbbRICK3Jh0kPPBnunmvtxSLCyOnof7N2M9O5kTJaf8m52vBn+p5vs c49wCxXuZyHeq7Cd0vF4VsvQsBMtEqlHuJvvwvRoBUaiYawNzsL2ZBt9R40BgN/t YxCSBAeJGk6C4Flx+yf7fgc4UeCktvLno09sNV33dhzTVs/lBJpvn3EFHGsI1LaG gR2gg5nGAhntrGym0UjDsOVmGZWiQOYSPBqEXkX/Wn6NmRxx1qwsz4ehrFck8L+l mlFKPOHs7tE7p3ZLlF9KHFkCa/eCK4E= -----END CERTIFICATE-----Generated at Mon Oct 20 21:09:31 2025 by rpki-client