$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/afb66b1c-4c26-3945-b917-6f62e119b9c6.roa File: afb66b1c-4c26-3945-b917-6f62e119b9c6.roa (raw, json) Hash identifier: iHR1fFAsXB4Z7Mnyfw2HUIYIkH5ufTqw/bK2WMtDWts= Subject key identifier: EC:52:E2:D5:9C:AC:AF:F8:4C:75:C7:58:88:F4:C3:A4:70:C3:09:19 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584B583C8090ADFC83FA8B4EB480 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/afb66b1c-4c26-3945-b917-6f62e119b9c6.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 62610 IP address blocks: 128.1.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:80:90:ad:fc:83:fa:8b:4e:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=39abc209-9a2e-4947-bb68-660d90ea5ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7b:cf:bd:d4:b5:0c:15:d8:bb:3c:1e:ee:5b: 53:f0:1e:62:e8:66:0b:ff:84:2a:17:bf:c1:e2:5a: b5:39:e9:db:15:02:14:2f:33:32:53:aa:41:b1:c5: 8f:67:f0:e4:05:90:b1:50:b5:95:fa:e8:3f:00:ea: 91:54:41:1f:a2:98:73:27:bd:d5:7f:f8:36:75:84: 04:3f:01:cb:f0:23:fd:e0:8a:55:8b:c6:45:59:16: a5:40:bf:c3:4f:81:17:1b:b5:95:12:d4:8c:05:dc: 5b:40:86:56:27:9b:e7:8d:9a:dd:24:2a:ee:b0:4e: 49:1a:d0:12:4b:09:61:f4:19:be:35:ce:e8:cc:94: 75:25:3a:1c:5c:24:e7:f7:4d:0f:40:49:53:ac:e4: 34:eb:5d:70:d2:7c:e3:03:6a:50:02:5e:b1:79:d3: c0:e0:aa:cf:0f:b8:2b:ff:1d:c7:ad:09:60:37:ab: 18:c3:f5:5c:8d:91:40:19:97:6a:82:18:a7:73:f4: b4:53:4f:20:8e:38:a9:16:da:70:3e:16:e7:cf:13: 90:f7:a3:f3:5e:a1:37:43:a3:9b:ea:35:30:01:50: 8d:2f:27:3b:54:00:fc:a7:38:57:b9:01:0e:dd:8d: 6e:3d:dd:b7:48:a7:6a:dc:d6:7e:43:67:a2:4d:0c: dd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:52:E2:D5:9C:AC:AF:F8:4C:75:C7:58:88:F4:C3:A4:70:C3:09:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/afb66b1c-4c26-3945-b917-6f62e119b9c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:f9:d4:19:30:c5:a8:78:34:c2:66:e6:0d:02:91:da:99:88: 27:63:74:93:fb:fe:6f:ae:f4:49:50:6d:35:4d:63:26:a6:fa: f4:23:c0:24:23:af:aa:d9:1f:fb:c0:3e:b5:83:ae:9e:e9:52: ab:c5:cf:93:92:a5:e4:2b:84:5b:a3:7b:1a:de:5d:ba:e9:c8: 7a:d3:29:c9:72:18:24:36:2f:79:f5:66:83:f3:45:8e:31:13: f9:88:89:bd:b8:ff:8d:15:f2:5e:7b:1f:54:23:c5:75:8f:fe: ba:9e:a0:9c:5e:eb:0d:97:a2:b8:de:eb:3a:27:ee:49:d8:58: 55:93:5a:04:e6:98:da:8e:c7:9a:de:91:ff:07:47:47:62:87: 9e:93:f8:5b:be:15:61:a9:76:60:26:ab:68:b5:70:1e:35:82: fc:cb:fb:72:de:a4:90:ef:e1:46:1e:89:cf:11:77:de:06:c6: a1:7d:65:d1:89:63:07:e4:6b:15:c6:0a:a2:00:2b:d6:9c:d1: c0:c9:9d:a7:e0:3a:74:8a:e9:42:58:bf:0f:ed:2d:79:b0:09: 93:e2:69:81:71:1f:8d:83:fa:ec:b7:be:4a:e3:8c:1d:b2:b6: a0:ce:3e:67:6f:d9:37:f7:0d:73:3a:0b:50:2c:9a:fb:4a:45: 5c:51:d8:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPICQrfyD+otOtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MzlhYmMyMDktOWEyZS00OTQ3LWJiNjgtNjYwZDkwZWE1YWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXvPvdS1DBXYuzwe7ltT8B5i6GYL/4QqF7/B 4lq1OenbFQIULzMyU6pBscWPZ/DkBZCxULWV+ug/AOqRVEEfophzJ73Vf/g2dYQE PwHL8CP94IpVi8ZFWRalQL/DT4EXG7WVEtSMBdxbQIZWJ5vnjZrdJCrusE5JGtAS Swlh9Bm+Nc7ozJR1JTocXCTn900PQElTrOQ0611w0nzjA2pQAl6xedPA4KrPD7gr /x3HrQlgN6sYw/VcjZFAGZdqghinc/S0U08gjjipFtpwPhbnzxOQ96PzXqE3Q6Ob 6jUwAVCNLyc7VAD8pzhXuQEO3Y1uPd23SKdq3NZ+Q2eiTQzdjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxS4tWcrK/4THXHWIj0w6RwwwkZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvYWZiNjZiMWMtNGMyNi0z OTQ1LWI5MTctNmY2MmUxMTliOWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGL51Bkwxah4NMJm5g0CkdqZiCdjdJP7/m+u9ElQbTVNYyam+vQjwCQj r6rZH/vAPrWDrp7pUqvFz5OSpeQrhFujexreXbrpyHrTKclyGCQ2L3n1ZoPzRY4x E/mIib24/40V8l57H1QjxXWP/rqeoJxe6w2Xorje6zon7knYWFWTWgTmmNqOx5re kf8HR0dih56T+Fu+FWGpdmAmq2i1cB41gvzL+3LepJDv4UYeic8Rd94GxqF9ZdGJ YwfkaxXGCqIAK9ac0cDJnafgOnSK6UJYvw/tLXmwCZPiaYFxH42D+uy3vkrjjB2y tqDOPmdv2Tf3DXM6C1AsmvtKRVxR2AQ= -----END CERTIFICATE-----Generated at Mon Oct 20 02:22:26 2025 by rpki-client