$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f01dc7f-2dce-3390-98a2-60f4931614d2.roa File: 7f01dc7f-2dce-3390-98a2-60f4931614d2.roa (raw, json) Hash identifier: UmqnjB92fG/1eJfRXwn5RVAVIYuocdTCvZ6m7zOAf4E= Subject key identifier: 16:77:E8:75:6F:79:52:ED:F3:34:25:66:55:8F:AB:92:3B:DE:50:FA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B87A33FF37DD9D53B0520E4C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f01dc7f-2dce-3390-98a2-60f4931614d2.roa Signing time: Wed 15 Oct 2025 12:30:45 +0000 ROA not before: Wed 15 Oct 2025 12:30:45 +0000 ROA not after: Tue 13 Jan 2026 13:30:45 +0000 asID: 26134 IP address blocks: 72.13.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:a3:3f:f3:7d:d9:d5:3b:05:20:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 15 12:30:45 2025 GMT Not After : Jan 13 13:30:45 2026 GMT Subject: CN=cef4ec8c-3154-4a82-9551-3fe799d512f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4a:6b:1a:ab:1d:eb:08:16:c4:e6:c6:a8:9f: ca:4f:51:22:83:35:30:d3:70:6c:ef:2c:cc:2f:1f: dd:97:7f:d3:ea:5d:e0:53:5e:b1:98:49:8d:0a:08: 1c:7a:3b:a6:e8:97:8d:b0:89:5d:e5:46:b5:84:8a: f5:68:97:b0:a8:fa:c2:f3:55:67:d5:3c:ad:ae:bd: db:7e:07:b1:b1:a2:13:a4:4c:07:63:08:47:ac:ef: df:d2:0c:09:84:43:57:1a:63:fa:c1:45:40:35:1f: c7:cd:e3:8a:dd:8f:48:51:d9:8d:44:20:3c:92:e1: 74:9f:88:ad:25:0b:50:cf:ac:76:eb:ec:af:0b:71: c4:bf:24:ef:ba:9c:c4:99:b8:44:61:2f:57:4e:14: 27:49:ad:cc:9f:13:f0:11:19:7e:0d:ca:b7:85:bf: 24:32:53:ef:7c:a6:9d:d3:6b:16:c1:d9:91:eb:b3: 72:34:34:1a:8a:ff:a6:11:e7:8c:c7:86:54:da:f1: 53:e6:b8:1b:6e:b2:d0:98:46:ac:a8:47:5f:61:36: aa:6b:95:13:9a:20:b6:71:b0:8f:20:e3:59:50:4c: 0b:fe:73:e9:95:ea:71:d5:c0:95:1e:5c:df:eb:e0: 53:0a:26:89:46:ca:a8:2e:9e:4c:2c:f1:99:0b:02: 57:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:77:E8:75:6F:79:52:ED:F3:34:25:66:55:8F:AB:92:3B:DE:50:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f01dc7f-2dce-3390-98a2-60f4931614d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 72.13.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:83:34:61:5f:f3:e8:e6:cb:78:1c:8d:bb:c4:86:33:4d:44: cc:41:99:b2:0d:c3:a3:61:66:40:bb:92:cf:84:de:12:ff:8f: 5b:8a:ab:b0:3b:1e:77:67:e0:74:61:c5:75:ef:2d:ba:15:8b: 69:30:d2:f3:82:16:c9:95:1f:5b:50:39:44:af:49:f4:03:e2: d9:21:92:f9:5a:ee:17:fb:57:74:ab:30:fd:2e:1a:67:c0:c9: 8e:07:59:6f:50:59:2b:9c:9e:fa:22:95:78:09:99:1a:5b:d9: 04:02:a6:32:a8:64:30:b0:dc:97:00:aa:91:90:1c:8d:1a:a8: d1:64:c4:d2:dd:5e:9d:cc:f2:9e:3f:56:35:22:46:40:33:6d: 34:d8:e6:27:eb:c0:4f:f1:8c:0a:22:8c:76:7b:6a:e7:19:d9: 06:af:7f:79:57:c5:30:63:f5:1e:d5:d6:c0:bc:99:79:9a:0e: 15:ff:d0:46:84:0d:4b:78:98:0a:8a:aa:ef:dd:83:d8:58:18: 23:b6:52:f9:2a:2e:b0:a0:f0:1f:ac:96:d8:7f:6b:16:43:2e: ed:3f:70:d7:d5:45:db:d7:d3:6c:a0:43:7a:89:c9:cc:a0:b1: 3c:8d:b2:28:eb:03:9e:09:e7:a0:05:40:06:c1:2c:1f:ec:11: 23:8f:a5:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHoz/zfdnVOwUg5MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNTEyMzA0NVoXDTI2MDExMzEzMzA0NVowLzEtMCsGA1UEAxMk Y2VmNGVjOGMtMzE1NC00YTgyLTk1NTEtM2ZlNzk5ZDUxMmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20prGqsd6wgWxObGqJ/KT1EigzUw03Bs7yzM Lx/dl3/T6l3gU16xmEmNCggcejum6JeNsIld5Ua1hIr1aJewqPrC81Vn1Tytrr3b fgexsaITpEwHYwhHrO/f0gwJhENXGmP6wUVANR/HzeOK3Y9IUdmNRCA8kuF0n4it JQtQz6x26+yvC3HEvyTvupzEmbhEYS9XThQnSa3MnxPwERl+Dcq3hb8kMlPvfKad 02sWwdmR67NyNDQaiv+mEeeMx4ZU2vFT5rgbbrLQmEasqEdfYTaqa5UTmiC2cbCP IONZUEwL/nPplepx1cCVHlzf6+BTCiaJRsqoLp5MLPGZCwJXLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZ36HVveVLt8zQlZlWPq5I73lD6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2YwMWRjN2YtMmRjZS0z MzkwLTk4YTItNjBmNDkzMTYxNGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA04MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiDNGFf8+jmy3gcjbvEhjNNRMxBmbINw6NhZkC7ks+E3hL/j1uKq7A7 Hndn4HRhxXXvLboVi2kw0vOCFsmVH1tQOUSvSfQD4tkhkvla7hf7V3SrMP0uGmfA yY4HWW9QWSucnvoilXgJmRpb2QQCpjKoZDCw3JcAqpGQHI0aqNFkxNLdXp3M8p4/ VjUiRkAzbTTY5ifrwE/xjAoijHZ7aucZ2Qavf3lXxTBj9R7V1sC8mXmaDhX/0EaE DUt4mAqKqu/dg9hYGCO2UvkqLrCg8B+slth/axZDLu0/cNfVRdvX02ygQ3qJycyg sTyNsijrA54J56AFQAbBLB/sESOPpTo= -----END CERTIFICATE-----Generated at Mon Oct 20 20:50:07 2025 by rpki-client