$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa File: 0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa (raw, json) Hash identifier: 4XhOkmAphQJ1RvZumYUFY7eHt9K5cd3aN8ebxk2HuBQ= Subject key identifier: 94:15:BE:B4:2A:76:FF:AE:D5:61:E4:14:16:82:6C:D9:E8:91:6F:33 Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F4328584B64CCBF0F6B4B7A1A9D5EF900 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 33322 IP address blocks: 72.1.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:bf:0f:6b:4b:7a:1a:9d:5e:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=c69f4c21-9dff-4d95-afec-12020ae4aa81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:38:39:8c:7e:c2:2e:fa:10:4b:37:77:4a:1d: e0:19:90:4c:6b:6e:32:fa:1c:20:c6:4c:2f:c9:f1: ba:ca:83:e5:e1:4d:65:6c:7e:e0:0c:7e:82:e8:fa: 91:4a:5a:d2:a7:5a:96:37:5a:9c:53:7d:29:2f:b0: 3c:b5:b7:82:0a:10:3f:b5:37:e8:df:45:b9:e3:25: f1:e8:35:10:9e:10:24:70:e2:98:5f:49:ce:96:95: 74:12:8e:d0:56:58:01:a8:f6:59:ab:52:b9:fd:f8: e4:62:bc:45:41:b2:05:1d:a3:1b:43:c4:d6:82:79: a0:3b:2a:b6:66:32:a8:26:7d:e8:0e:f7:51:d4:c9: 17:fc:c2:2f:b8:61:f6:b5:c0:f7:b4:4e:80:5a:7f: a5:9d:a8:8d:d1:52:c4:cf:4e:42:b8:24:4c:fd:42: 66:c6:cb:07:e4:52:61:ec:2c:e2:3b:fc:12:35:31: b6:a1:55:d6:32:21:db:b1:44:27:1e:fe:98:97:03: f1:d9:34:d2:50:70:9f:0a:c6:20:73:ad:03:fd:45: 47:2c:bb:6f:8f:26:43:81:bd:f0:d8:42:1d:53:86: 96:9d:b5:ef:a6:fa:ef:a1:3d:dd:f9:15:cd:9d:5b: df:0a:01:88:41:50:a2:a1:65:be:4c:84:eb:90:b0: cb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:15:BE:B4:2A:76:FF:AE:D5:61:E4:14:16:82:6C:D9:E8:91:6F:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv4: 72.1.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:5a:00:2f:af:c7:ed:fc:35:c1:f0:72:8c:e7:a9:a1:5d:90: 13:b2:69:d3:07:2c:49:76:97:51:62:42:a4:4a:d1:b6:b9:09: bf:28:fa:18:eb:41:7b:7c:4b:03:77:41:54:83:c2:ba:e2:7c: f4:41:f2:7b:17:99:ee:9e:54:30:15:2a:4c:8c:a7:c7:e9:04: 4d:e1:90:64:18:90:6f:6f:fb:1e:a6:c7:d2:5b:76:12:be:7c: 02:0e:e3:ac:e0:22:67:7e:47:05:4a:29:ee:50:53:2e:48:73: 21:fe:e5:99:af:87:71:1c:33:3c:e2:1a:8f:d9:4e:90:95:00: d0:84:40:46:22:76:7c:13:3d:ac:f0:49:4b:54:1e:29:dd:4e: c5:46:a3:9e:8d:56:e9:b1:44:b0:70:47:6a:af:cb:e3:db:40: 34:2b:e7:89:f2:5d:1c:9f:4f:f6:b1:8d:f9:8f:cc:c5:e9:ee: c3:5d:95:e2:61:4c:4e:f6:2a:86:8e:2e:0a:9e:d2:da:a0:58: b6:ce:1e:43:1a:cc:ad:94:27:b6:00:98:02:c9:9e:0d:8c:56: aa:95:8c:af:f9:29:a4:be:b2:bc:21:08:68:86:16:63:ae:bc: a0:2e:4a:76:73:a7:cf:db:65:dd:13:f4:30:b4:40:0a:ad:9c: 06:a2:80:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzL8Pa0t6Gp1e+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YzY5ZjRjMjEtOWRmZi00ZDk1LWFmZWMtMTIwMjBhZTRhYTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjg5jH7CLvoQSzd3Sh3gGZBMa24y+hwgxkwv yfG6yoPl4U1lbH7gDH6C6PqRSlrSp1qWN1qcU30pL7A8tbeCChA/tTfo30W54yXx 6DUQnhAkcOKYX0nOlpV0Eo7QVlgBqPZZq1K5/fjkYrxFQbIFHaMbQ8TWgnmgOyq2 ZjKoJn3oDvdR1MkX/MIvuGH2tcD3tE6AWn+lnaiN0VLEz05CuCRM/UJmxssH5FJh 7CziO/wSNTG2oVXWMiHbsUQnHv6YlwPx2TTSUHCfCsYgc60D/UVHLLtvjyZDgb3w 2EIdU4aWnbXvpvrvoT3d+RXNnVvfCgGIQVCioWW+TITrkLDLGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQVvrQqdv+u1WHkFBaCbNnokW8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvMGRlOGE5ZWMtYmZjNC0z ZTgwLWI4ZmEtNjdkNzhiNWIxODRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdaAC+vx+38NcHwcoznqaFdkBOyadMHLEl2l1FiQqRK0ba5Cb8o+hjr QXt8SwN3QVSDwrrifPRB8nsXme6eVDAVKkyMp8fpBE3hkGQYkG9v+x6mx9JbdhK+ fAIO46zgImd+RwVKKe5QUy5IcyH+5Zmvh3EcMzziGo/ZTpCVANCEQEYidnwTPazw SUtUHindTsVGo56NVumxRLBwR2qvy+PbQDQr54nyXRyfT/axjfmPzMXp7sNdleJh TE72KoaOLgqe0tqgWLbOHkMazK2UJ7YAmALJng2MVqqVjK/5KaS+srwhCGiGFmOu vKAuSnZzp8/bZd0T9DC0QAqtnAaigPA= -----END CERTIFICATE-----Generated at Mon Oct 20 04:40:32 2025 by rpki-client