$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/420d506b-4ddd-3286-8bd2-ef4707b07bd0.roa File: 420d506b-4ddd-3286-8bd2-ef4707b07bd0.roa (raw, json) Hash identifier: TFhqu13xekKZ3UmYkwi3FvDnSdn8ft7DdA0LCQYHO/U= Subject key identifier: B9:C1:7D:6E:DD:D2:F2:70:E5:EE:29:12:F1:77:CD:58:B0:97:EB:D8 Certificate issuer: /CN=1246a6a7-1908-49e7-9777-16290e028fb7 Certificate serial: 010D0C9F4328584B8EACEB4EC6D8E8405BD69F10 Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/420d506b-4ddd-3286-8bd2-ef4707b07bd0.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 13638 IP address blocks: 72.11.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:eb:4e:c6:d8:e8:40:5b:d6:9f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=5eea773e-eb97-4a10-81b1-8fde8e146e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7e:ef:e6:a1:e9:a8:cd:49:29:76:5c:60:ea: e5:65:c8:5a:c4:79:e8:c7:17:4e:30:9f:45:3b:52: 77:f5:10:e6:fa:bb:69:ab:4a:ac:49:b7:57:23:a6: 6a:d3:50:84:43:1a:3d:fc:17:9a:1e:3d:a2:6e:e7: 06:63:cf:dc:d5:b3:1b:ca:6a:c7:a3:50:64:3d:5d: 7c:a7:f2:cd:a6:fb:3b:13:80:3b:3d:a8:07:ee:77: 3f:bd:a6:00:f8:1d:55:d7:ef:c8:df:4d:61:1b:32: a9:80:22:aa:26:35:0a:39:dd:c0:9a:ea:18:bb:f6: 6d:12:41:d1:bc:66:c3:57:33:52:8c:48:25:5b:1d: 0e:29:58:ab:2c:89:0e:a4:a9:c1:e9:ec:08:b8:01: 5b:ef:1a:5f:17:73:3e:74:5c:ab:79:08:fb:6c:47: 6a:c1:42:19:8f:29:03:b2:e1:37:70:af:c0:d5:60: 69:61:8e:a7:78:80:3d:66:cd:e2:b9:ef:69:83:fc: 5f:8f:b8:9a:a7:4b:6e:32:76:b5:b2:e2:f8:97:c1: 1f:c3:66:75:e8:61:0a:cb:86:6e:cd:f0:b5:3e:98: e6:27:83:ef:99:71:2e:86:54:d3:3b:29:93:53:ec: c3:1a:06:d4:08:ab:51:12:3f:6b:ba:88:52:d8:1a: 48:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C1:7D:6E:DD:D2:F2:70:E5:EE:29:12:F1:77:CD:58:B0:97:EB:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/420d506b-4ddd-3286-8bd2-ef4707b07bd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl X509v3 Authority Key Identifier: keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer sbgp-ipAddrBlock: critical IPv4: 72.11.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:b6:30:5d:0a:74:ca:4f:8c:b8:60:01:f4:59:43:4b:c5:d4: 90:65:80:e0:af:32:da:14:be:a6:ef:bf:2c:37:e3:56:c7:32: 2d:b0:65:94:19:21:95:42:e6:9d:02:49:b1:05:8d:8f:df:b2: c1:d0:4f:43:c8:75:cc:c6:e3:d1:5e:46:dd:b0:8e:4a:bb:39: c8:2f:f0:1e:f1:35:01:a0:99:5b:5f:f2:4f:61:89:28:17:13: 5e:48:59:8a:af:47:d7:55:ff:d6:ca:a8:c9:9a:1a:a4:a5:c4: 20:62:55:77:b6:4d:ac:7b:5d:e4:02:11:45:c6:eb:43:ba:2a: f0:1f:54:b9:29:66:a3:a9:ad:92:e9:f0:60:3f:4b:4f:93:f4: 97:b5:07:a1:48:b4:f5:7d:29:37:0a:75:3c:f8:bf:20:46:38: b6:4e:a8:29:99:d5:47:f5:80:0d:c1:a6:98:0e:be:1e:12:6e: 7d:e8:80:03:da:ee:b8:46:2c:c5:d1:69:0d:81:eb:5d:32:67: 1f:95:f3:2d:ab:ba:63:17:4c:a6:1c:ac:ac:f3:03:bb:2a:bf: 6c:23:89:b5:0d:0c:01:8e:1c:b1:f7:fc:4d:55:36:ca:36:90: 6d:3e:89:7e:3b:ca:29:6f:15:e9:70:46:46:b7:de:bc:71:fd: 35:6c:f9:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOtOxtjoQFvWnxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0NmE2YTctMTkwOC00OWU3LTk3NzctMTYyOTBlMDI4 ZmI3MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NWVlYTc3M2UtZWI5Ny00YTEwLTgxYjEtOGZkZThlMTQ2ZTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH7v5qHpqM1JKXZcYOrlZchaxHnoxxdOMJ9F O1J39RDm+rtpq0qsSbdXI6Zq01CEQxo9/BeaHj2ibucGY8/c1bMbymrHo1BkPV18 p/LNpvs7E4A7PagH7nc/vaYA+B1V1+/I301hGzKpgCKqJjUKOd3AmuoYu/ZtEkHR vGbDVzNSjEglWx0OKVirLIkOpKnB6ewIuAFb7xpfF3M+dFyreQj7bEdqwUIZjykD suE3cK/A1WBpYY6neIA9Zs3iue9pg/xfj7iap0tuMna1suL4l8Efw2Z16GEKy4Zu zfC1PpjmJ4PvmXEuhlTTOymTU+zDGgbUCKtREj9ruohS2BpIZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnBfW7d0vJw5e4pEvF3zViwl+vYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2 YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5MGUwMjhmYjcvNDIwZDUwNmItNGRkZC0z Mjg2LThiZDItZWY0NzA3YjA3YmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI0NmE2YTctMTkwOC00OWU3LTk3 NzctMTYyOTBlMDI4ZmI3LzEyNDZhNmE3LTE5MDgtNDllNy05Nzc3LTE2MjkwZTAy OGZiNy5jcmwwHwYDVR0jBBgwFoAUiHR7NSkK+xF7li5+uh5bOX3olmowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5 MGUwMjhmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSAsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAO2MF0KdMpPjLhgAfRZQ0vF1JBlgOCvMtoUvqbvvyw341bHMi2wZZQZ IZVC5p0CSbEFjY/fssHQT0PIdczG49FeRt2wjkq7Ocgv8B7xNQGgmVtf8k9hiSgX E15IWYqvR9dV/9bKqMmaGqSlxCBiVXe2Tax7XeQCEUXG60O6KvAfVLkpZqOprZLp 8GA/S0+T9Je1B6FItPV9KTcKdTz4vyBGOLZOqCmZ1Uf1gA3BppgOvh4Sbn3ogAPa 7rhGLMXRaQ2B610yZx+V8y2rumMXTKYcrKzzA7sqv2wjibUNDAGOHLH3/E1VNso2 kG0+iX47yilvFelwRka33rxx/TVs+d4= -----END CERTIFICATE-----Generated at Mon Oct 20 16:27:40 2025 by rpki-client