$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dfb8af4d-8599-3110-b0a9-0be151cef18f.roa File: dfb8af4d-8599-3110-b0a9-0be151cef18f.roa (raw, json) Hash identifier: wef7b8XW5KZB34vKb7Nt3Gyt2XDT3uso89t8r289YZ0= Subject key identifier: 21:58:5F:09:9A:D5:9E:38:6B:81:DA:1E:FD:97:4A:8E:85:37:53:9C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B8533FCFD7590D7C9F5E65C20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dfb8af4d-8599-3110-b0a9-0be151cef18f.roa Signing time: Tue 14 Oct 2025 15:34:58 +0000 ROA not before: Tue 14 Oct 2025 15:34:58 +0000 ROA not after: Mon 12 Jan 2026 16:34:58 +0000 asID: 26134 IP address blocks: 72.13.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:33:fc:fd:75:90:d7:c9:f5:e6:5c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 15:34:58 2025 GMT Not After : Jan 12 16:34:58 2026 GMT Subject: CN=6a2d6759-6ce4-4b24-b4c5-7048f5328f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f5:0c:ca:dc:04:f1:93:86:0d:5f:59:c5:dd: 99:eb:33:b5:b1:e3:c7:c8:fc:c3:55:b3:d9:a7:b2: 83:39:54:ba:37:23:12:ac:62:c9:ae:4b:7a:16:b7: d2:c3:49:87:4f:18:bb:ba:85:c7:c8:d4:a2:f8:65: 6e:29:fa:e1:52:a4:39:e5:81:7b:3a:32:c7:51:be: 15:6a:07:64:9e:5f:81:5e:02:8d:a3:e7:0d:11:45: c0:3b:e0:eb:b2:06:b0:ba:82:95:46:1b:b9:14:6f: eb:13:ba:ca:3f:0a:29:30:ca:31:72:60:5a:7e:94: 0d:57:7b:96:9c:86:44:d3:63:33:8f:8a:00:d6:28: 06:60:f0:ac:c4:5b:79:5c:49:94:91:3f:ef:8e:5c: 3f:71:b6:b3:b0:a8:d6:14:c4:76:4b:62:69:34:bf: 7b:78:65:10:d0:53:7e:29:fc:99:ec:e2:8e:60:a5: 0e:d2:3e:a9:4d:6b:c2:80:9a:52:22:b5:de:68:9e: 6c:85:06:bc:c6:9d:20:9f:8b:3e:3b:ab:1e:74:fc: e8:7e:f2:83:b8:4a:38:32:38:cc:3d:f9:e6:de:c0: 34:7c:96:77:e1:07:98:51:36:39:be:8b:01:f9:55: 52:97:fa:d1:7c:7c:5c:5a:c8:cf:4b:5d:cb:2f:f3: 9e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:58:5F:09:9A:D5:9E:38:6B:81:DA:1E:FD:97:4A:8E:85:37:53:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dfb8af4d-8599-3110-b0a9-0be151cef18f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 72.13.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:8f:18:54:91:4c:b5:d6:6c:59:ba:31:00:87:0c:1a:71:a8: 90:02:4a:cc:b2:e0:2b:65:03:0d:8d:12:89:c3:54:6a:66:c8: 27:4f:42:aa:6d:0d:5c:30:1a:18:df:ec:2a:82:f0:dd:cb:0a: 15:01:c9:79:7d:a1:5a:a0:38:2c:7e:d1:e4:d6:7e:76:1d:d0: e8:0a:86:b2:5e:e0:fc:c7:19:ca:94:78:f0:3d:78:11:da:e4: 68:e9:18:80:15:cc:4f:19:80:3b:38:13:56:b2:6e:a7:b3:f0: 03:39:ec:99:bc:e7:4c:6f:d8:37:4e:fd:a0:2f:4a:b2:c3:f9: c9:af:37:5d:ba:fc:11:04:6b:28:52:1e:72:40:9c:73:58:fd: 84:b8:23:ad:7b:f8:b5:b2:4e:e4:f2:21:b8:06:40:7a:f7:01: 53:82:b7:6e:48:73:4f:b8:be:48:3d:63:2e:ff:c0:c9:93:3a: 18:49:43:ff:8d:25:37:d5:d7:00:90:45:7d:d4:6e:46:68:4b: 96:d5:66:1f:22:ee:40:d1:63:a6:b7:20:93:c0:1c:98:1e:24: f8:e8:98:6a:26:5b:c3:40:e8:b1:74:c7:ad:1e:fc:51:53:f9: 4b:f0:d7:81:5f:18:93:39:a4:d9:59:3c:e1:bd:c0:a9:b4:e1: 8e:fd:dc:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFM/z9dZDXyfXmXCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDE1MzQ1OFoXDTI2MDExMjE2MzQ1OFowLzEtMCsGA1UEAxMk NmEyZDY3NTktNmNlNC00YjI0LWI0YzUtNzA0OGY1MzI4ZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/UMytwE8ZOGDV9Zxd2Z6zO1sePHyPzDVbPZ p7KDOVS6NyMSrGLJrkt6FrfSw0mHTxi7uoXHyNSi+GVuKfrhUqQ55YF7OjLHUb4V agdknl+BXgKNo+cNEUXAO+DrsgawuoKVRhu5FG/rE7rKPwopMMoxcmBafpQNV3uW nIZE02Mzj4oA1igGYPCsxFt5XEmUkT/vjlw/cbazsKjWFMR2S2JpNL97eGUQ0FN+ KfyZ7OKOYKUO0j6pTWvCgJpSIrXeaJ5shQa8xp0gn4s+O6sedPzofvKDuEo4MjjM Pfnm3sA0fJZ34QeYUTY5vosB+VVSl/rRfHxcWsjPS13LL/OelQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFYXwma1Z44a4HaHv2XSo6FN1OcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGZiOGFmNGQtODU5OS0z MTEwLWIwYTktMGJlMTUxY2VmMThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOPGFSRTLXWbFm6MQCHDBpxqJACSsyy4CtlAw2NEonDVGpmyCdPQqpt DVwwGhjf7CqC8N3LChUByXl9oVqgOCx+0eTWfnYd0OgKhrJe4PzHGcqUePA9eBHa 5GjpGIAVzE8ZgDs4E1aybqez8AM57Jm850xv2DdO/aAvSrLD+cmvN126/BEEayhS HnJAnHNY/YS4I617+LWyTuTyIbgGQHr3AVOCt25Ic0+4vkg9Yy7/wMmTOhhJQ/+N JTfV1wCQRX3UbkZoS5bVZh8i7kDRY6a3IJPAHJgeJPjomGomW8NA6LF0x60e/FFT +Uvw14FfGJM5pNlZPOG9wKm04Y793OA= -----END CERTIFICATE-----Generated at Mon Oct 20 10:21:37 2025 by rpki-client