$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e33a6c8c-d7b1-34fc-b4d0-79a522cbe3bd.roa File: e33a6c8c-d7b1-34fc-b4d0-79a522cbe3bd.roa (raw, json) Hash identifier: wLbHjnYLKVZk0PkeKoaTeUaO9SwSEP7ogcDiCQ9ewEU= Subject key identifier: 0A:4A:45:05:21:03:A4:1D:79:5A:2D:F4:95:A7:26:C7:CC:E1:A5:A1 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584B821CE330B071A213D6EF3B40 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e33a6c8c-d7b1-34fc-b4d0-79a522cbe3bd.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 10796 IP address blocks: 72.133.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:e3:30:b0:71:a2:13:d6:ef:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=beef78e2-c9af-40aa-b411-6025ca4bf409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e7:2c:3a:a2:8f:6a:84:3b:7b:5e:7d:31:76: 68:92:a1:09:6e:41:fa:09:93:86:9e:9f:c3:dc:80: 54:87:92:79:af:0d:3f:e5:dc:cb:b9:68:bb:7d:a3: 63:20:d8:38:38:3d:bb:a7:5b:b5:82:17:1e:0c:0f: d4:f4:d7:81:56:84:69:59:c5:5c:b9:f2:b7:f4:d6: 07:4f:e9:40:fd:f9:33:09:49:b7:60:1b:02:93:80: a6:b4:ed:5c:01:be:d6:60:1d:69:9c:b0:77:57:f1: ba:03:27:c6:aa:cb:39:8b:46:0c:ad:02:db:4a:42: e6:17:4a:fa:e1:2c:9b:92:ec:cb:95:70:48:c1:25: 88:71:58:9d:e3:4e:dd:09:44:79:74:11:d9:3d:61: a7:b1:b6:69:7e:fa:f8:8b:50:8e:ed:c1:7b:8a:99: 0c:2c:06:f6:7c:6b:7e:d5:90:e9:66:72:0b:f5:bd: 62:cd:c9:44:55:e9:ab:55:d6:c8:bb:cd:4f:04:b5: 20:df:d8:10:a8:24:2d:05:74:86:16:bd:6d:4b:61: 8a:ed:37:a1:1a:46:f3:d0:9b:b6:70:c0:96:f1:1d: 23:78:19:92:35:7b:23:4b:5b:ed:4e:24:6c:9b:30: 0a:b5:5e:31:db:54:05:28:68:f5:f8:17:c7:11:ac: a0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4A:45:05:21:03:A4:1D:79:5A:2D:F4:95:A7:26:C7:CC:E1:A5:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e33a6c8c-d7b1-34fc-b4d0-79a522cbe3bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 72.133.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:01:04:20:e9:2c:19:92:9f:8b:31:bd:26:25:87:1d:e1:3e: 0a:c2:ce:80:fb:d7:1e:d4:74:2f:42:f1:65:1d:26:32:22:e4: 37:87:dc:06:c6:82:60:d4:b8:a4:a9:59:fb:e1:4e:06:e1:1a: 5e:f7:a0:e3:cc:b6:7b:20:13:96:02:3e:0f:b0:80:c9:fa:de: 74:48:81:08:74:f2:b0:19:1d:96:61:eb:b0:30:28:f8:a5:e6: 35:33:ad:c3:99:ea:72:b5:c2:28:84:ae:0d:7a:53:bf:1f:3a: db:1d:96:89:c6:1a:f0:d7:a5:21:53:83:1b:b6:b8:13:39:cc: 26:15:1b:d8:16:42:c4:4c:16:50:e8:1a:00:3c:ae:6c:56:1f: 0e:92:8d:84:54:a8:cb:83:16:51:85:61:67:1f:54:f2:78:63: 83:45:84:3a:c8:ad:2d:46:cb:95:de:fc:77:93:e0:56:ec:82: cb:31:25:63:48:c2:23:a3:fd:6d:bb:09:d9:50:5b:5f:0e:a3: 8e:8a:42:e1:8b:f7:17:9b:0b:c4:dc:eb:ae:69:69:f1:80:e6: 3e:b4:f1:44:71:a7:68:df:24:3c:1c:ff:c9:29:a2:6d:9d:34: 6d:3a:e1:63:76:f9:69:15:9a:4a:98:e5:90:95:e9:95:4f:ab: 54:f3:ff:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHOMwsHGiE9bvO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk YmVlZjc4ZTItYzlhZi00MGFhLWI0MTEtNjAyNWNhNGJmNDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+csOqKPaoQ7e159MXZokqEJbkH6CZOGnp/D 3IBUh5J5rw0/5dzLuWi7faNjINg4OD27p1u1ghceDA/U9NeBVoRpWcVcufK39NYH T+lA/fkzCUm3YBsCk4CmtO1cAb7WYB1pnLB3V/G6AyfGqss5i0YMrQLbSkLmF0r6 4SybkuzLlXBIwSWIcVid407dCUR5dBHZPWGnsbZpfvr4i1CO7cF7ipkMLAb2fGt+ 1ZDpZnIL9b1izclEVemrVdbIu81PBLUg39gQqCQtBXSGFr1tS2GK7TehGkbz0Ju2 cMCW8R0jeBmSNXsjS1vtTiRsmzAKtV4x21QFKGj1+BfHEaygzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApKRQUhA6QdeVot9JWnJsfM4aWhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZTMzYTZjOGMtZDdiMS0z NGZjLWI0ZDAtNzlhNTIyY2JlM2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESIXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEBBCDpLBmSn4sxvSYlhx3hPgrCzoD71x7UdC9C8WUdJjIi5DeH3AbG gmDUuKSpWfvhTgbhGl73oOPMtnsgE5YCPg+wgMn63nRIgQh08rAZHZZh67AwKPil 5jUzrcOZ6nK1wiiErg16U78fOtsdlonGGvDXpSFTgxu2uBM5zCYVG9gWQsRMFlDo GgA8rmxWHw6SjYRUqMuDFlGFYWcfVPJ4Y4NFhDrIrS1Gy5Xe/HeT4FbsgssxJWNI wiOj/W27CdlQW18Oo46KQuGL9xebC8Tc665pafGA5j608URxp2jfJDwc/8kpom2d NG064WN2+WkVmkqY5ZCV6ZVPq1Tz/38= -----END CERTIFICATE-----Generated at Mon Oct 20 12:14:27 2025 by rpki-client