$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3f5ad176-de0f-38fb-86ff-0e27fcba9291.roa File: 3f5ad176-de0f-38fb-86ff-0e27fcba9291.roa (raw, json) Hash identifier: YCfsE9dizO/Ldp+Ufo+EAW8+AGZlA4bQVRgzbThOS0c= Subject key identifier: 64:BE:9A:F2:F1:EC:8A:85:8B:1A:67:1F:D2:B9:4A:29:1F:1E:4A:B4 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B6E91FB0DEAA7036BB04B39F0 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3f5ad176-de0f-38fb-86ff-0e27fcba9291.roa Signing time: Mon 06 Oct 2025 13:00:41 +0000 ROA not before: Mon 06 Oct 2025 13:00:41 +0000 ROA not after: Sun 04 Jan 2026 14:00:41 +0000 asID: 397630 IP address blocks: 72.14.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:91:fb:0d:ea:a7:03:6b:b0:4b:39:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Oct 6 13:00:41 2025 GMT Not After : Jan 4 14:00:41 2026 GMT Subject: CN=abb22b4c-11e4-46f8-9d5b-36e73227abc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:12:a2:ae:7e:f6:1d:f9:87:38:17:e2:98:03: 00:ba:e1:3b:dd:32:60:3d:aa:e9:14:16:ae:68:b8: 42:c5:4b:18:39:7a:c2:48:23:61:68:4f:30:98:3d: 9a:21:e9:b0:4d:e3:ec:eb:4a:64:ef:1b:3c:01:1b: 2a:09:c2:2d:ee:81:eb:eb:4b:02:a5:79:67:7c:04: c2:4e:51:94:71:28:3c:15:94:72:ff:57:ef:4c:51: b1:94:96:96:1c:a0:92:45:e2:03:fb:d3:cc:a6:14: ce:81:e6:1a:0c:8e:c1:99:0c:29:42:9c:72:62:d6: 85:f0:3a:b2:c9:a0:57:32:07:00:4a:62:18:29:1a: 79:84:d0:0e:37:9b:6b:59:ce:67:ae:2c:a7:28:61: 96:16:75:a7:c2:86:2d:d6:a1:74:03:92:46:d5:5a: b5:19:d7:e4:15:e7:0e:db:6e:e4:13:d9:af:2c:40: e4:f6:f0:ca:79:e3:c2:89:ad:53:fd:09:f3:9a:55: 2e:23:e7:81:f3:4e:41:3b:25:4c:e0:34:0b:c7:84: 0e:40:e2:08:d3:dc:67:63:ed:7c:44:50:66:ed:8f: 7b:b2:ed:e8:c9:b6:d4:e7:eb:42:6a:14:df:22:5a: af:39:d3:46:6e:47:4b:7c:cb:e6:69:5e:15:93:27: 29:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BE:9A:F2:F1:EC:8A:85:8B:1A:67:1F:D2:B9:4A:29:1F:1E:4A:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3f5ad176-de0f-38fb-86ff-0e27fcba9291.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 72.14.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:d4:b1:85:68:44:da:9c:61:73:fe:8c:a2:79:93:ee:25:17: b2:db:f3:d3:43:f0:1f:68:cb:34:ce:df:52:98:10:4d:bf:e1: 9f:ea:7e:6e:34:8b:7a:7c:c1:a6:4e:13:f8:96:08:4a:3a:f5: dc:d2:52:61:df:b2:be:ea:b5:b0:79:07:5b:e9:40:0b:ca:2e: 2a:40:aa:e7:85:73:cd:7f:0f:05:48:11:9d:e1:5d:42:5a:5e: 08:9d:5b:85:db:cd:2f:4b:40:52:bb:5c:96:d6:a8:40:66:74: eb:f0:2e:99:c1:01:e9:46:3f:9c:4f:72:70:a8:dc:2f:62:03: 60:ae:6a:be:40:c8:eb:bd:a5:bd:e4:d7:4d:b1:ee:7c:14:31: a5:61:9b:8e:54:e8:76:16:ca:97:15:8c:0a:d1:9a:6c:ff:a4: 4c:fd:04:83:84:99:1a:b1:0e:d0:be:2f:06:b2:3b:32:fb:4f: 7e:54:39:71:21:08:d0:fe:14:62:08:06:99:6f:fc:5d:9f:f4: 44:cc:99:4e:3d:c6:6d:e4:a2:20:22:6f:34:9b:ff:62:f1:9a: d0:48:81:9c:ce:b6:ce:da:50:b1:89:35:f8:42:55:76:52:d4: f2:e1:9f:e5:1e:d0:00:77:7e:ce:dc:21:2c:98:52:6f:5f:81: b8:db:dc:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtukfsN6qcDa7BLOfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk YWJiMjJiNGMtMTFlNC00NmY4LTlkNWItMzZlNzMyMjdhYmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxKirn72HfmHOBfimAMAuuE73TJgParpFBau aLhCxUsYOXrCSCNhaE8wmD2aIemwTePs60pk7xs8ARsqCcIt7oHr60sCpXlnfATC TlGUcSg8FZRy/1fvTFGxlJaWHKCSReID+9PMphTOgeYaDI7BmQwpQpxyYtaF8Dqy yaBXMgcASmIYKRp5hNAON5trWc5nriynKGGWFnWnwoYt1qF0A5JG1Vq1GdfkFecO 227kE9mvLEDk9vDKeePCia1T/QnzmlUuI+eB805BOyVM4DQLx4QOQOII09xnY+18 RFBm7Y97su3oybbU5+tCahTfIlqvOdNGbkdLfMvmaV4VkycpHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGS+mvLx7IqFixpnH9K5SikfHkq0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvM2Y1YWQxNzYtZGUwZi0z OGZiLTg2ZmYtMGUyN2ZjYmE5MjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA5eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALzUsYVoRNqcYXP+jKJ5k+4lF7Lb89ND8B9oyzTO31KYEE2/4Z/qfm40 i3p8waZOE/iWCEo69dzSUmHfsr7qtbB5B1vpQAvKLipAqueFc81/DwVIEZ3hXUJa XgidW4XbzS9LQFK7XJbWqEBmdOvwLpnBAelGP5xPcnCo3C9iA2Cuar5AyOu9pb3k 102x7nwUMaVhm45U6HYWypcVjArRmmz/pEz9BIOEmRqxDtC+LwayOzL7T35UOXEh CND+FGIIBplv/F2f9ETMmU49xm3koiAibzSb/2LxmtBIgZzOts7aULGJNfhCVXZS 1PLhn+Ue0AB3fs7cISyYUm9fgbjb3EM= -----END CERTIFICATE-----Generated at Mon Oct 20 03:57:01 2025 by rpki-client