$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d966d503-7893-3029-a31a-2ca439bfc75d.roa File: d966d503-7893-3029-a31a-2ca439bfc75d.roa (raw, json) Hash identifier: CTib/KEnwGo7lu22BY1+r7qsN5kWuQP0bl2hikQ4FgE= Subject key identifier: 10:0D:CD:FF:19:6A:82:02:90:A2:17:5B:FB:F7:5D:89:B5:1C:5A:37 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F524966E53B4269E1ED5080 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d966d503-7893-3029-a31a-2ca439bfc75d.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 71.44.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:49:66:e5:3b:42:69:e1:ed:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=162afeeb-be87-4eab-9bb1-a7e58d68398b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:50:58:0a:15:9b:31:b9:5e:88:90:0c:e3:db: 47:36:f4:b8:c2:c4:15:a7:9f:f9:c2:35:f8:68:e6: db:d7:cf:0c:af:47:bc:b5:c3:81:81:e0:64:0a:f5: 61:ac:06:b8:f7:1f:8e:4b:99:6b:03:7f:80:dc:40: 4a:1b:4b:7d:1a:fe:9f:8d:ee:1c:53:4b:95:f9:19: 23:87:7b:5a:41:5c:70:e1:da:63:7d:c0:74:27:3b: 67:53:b2:14:22:3a:f5:80:f3:19:5c:87:7a:89:16: fa:3e:aa:20:67:ad:e0:13:d6:fa:22:ea:7a:df:06: c5:3d:1b:6f:16:93:32:f6:19:b9:8e:d3:c5:07:a9: bf:40:f5:47:22:25:47:dd:dd:58:b4:6f:14:7e:fb: eb:b7:c3:e4:1d:79:f5:36:54:56:ce:b5:eb:be:f1: 95:74:f2:cc:48:fe:1b:3c:25:f5:54:cd:2d:9c:b9: ed:32:a9:75:d1:fd:f4:9d:22:64:ab:f9:0a:38:ff: 79:6e:1a:0c:f3:f7:62:71:4a:c4:71:06:04:2e:5c: 5b:ea:d0:b0:14:40:1f:93:b8:1f:a9:cd:20:69:c9: b7:56:8d:f0:e2:c0:d8:98:16:51:e4:01:61:b3:ea: 5f:62:73:ac:ac:80:36:14:78:4d:22:70:f9:8b:d2: 6c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0D:CD:FF:19:6A:82:02:90:A2:17:5B:FB:F7:5D:89:B5:1C:5A:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d966d503-7893-3029-a31a-2ca439bfc75d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 71.44.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:25:15:fd:c4:97:3d:20:50:8c:35:84:86:77:82:68:c3:99: 69:84:64:30:fa:72:d3:c9:ab:c9:a1:cd:72:b3:82:4c:e5:39: e2:79:b0:b7:ff:5d:e1:69:72:e3:86:38:75:10:cf:95:e4:c9: 84:17:c8:6b:8f:5c:60:e0:4e:4f:83:cb:36:a3:9c:d3:0e:84: f4:1d:43:29:c4:62:a2:93:45:74:cd:2d:08:06:87:93:53:c8: 04:be:a2:73:41:01:5c:81:5c:0b:88:98:4d:d3:7d:19:e0:2c: fa:16:ba:e5:d8:7d:12:6c:c7:43:af:16:a9:8b:86:89:d0:75: b6:de:c1:5a:35:48:f9:6a:50:27:3a:7d:48:d4:a2:48:1a:80: 9f:54:f0:00:bb:4a:a6:18:23:8f:80:89:d5:70:64:98:97:b9: 4f:53:a0:b3:3a:e6:e6:f2:b8:4d:bb:2e:2a:94:9a:49:f4:bb: f8:3e:bd:60:27:15:7d:b1:34:a7:19:dc:08:d8:14:8b:b0:bf: 2e:14:e5:fb:e6:0a:50:7f:a1:56:39:10:df:e0:33:d2:1f:1e: d3:58:3e:7e:a5:a1:4e:5b:b2:0c:b9:2c:b1:0c:17:33:ef:95: 12:d2:55:3a:6c:3b:3b:60:26:6d:67:7b:78:34:29:eb:7d:51: 17:6f:8b:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Uklm5TtCaeHtUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MTYyYWZlZWItYmU4Ny00ZWFiLTliYjEtYTdlNThkNjgzOThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1BYChWbMbleiJAM49tHNvS4wsQVp5/5wjX4 aObb188Mr0e8tcOBgeBkCvVhrAa49x+OS5lrA3+A3EBKG0t9Gv6fje4cU0uV+Rkj h3taQVxw4dpjfcB0JztnU7IUIjr1gPMZXId6iRb6PqogZ63gE9b6Iup63wbFPRtv FpMy9hm5jtPFB6m/QPVHIiVH3d1YtG8Ufvvrt8PkHXn1NlRWzrXrvvGVdPLMSP4b PCX1VM0tnLntMql10f30nSJkq/kKOP95bhoM8/dicUrEcQYELlxb6tCwFEAfk7gf qc0gacm3Vo3w4sDYmBZR5AFhs+pfYnOsrIA2FHhNInD5i9JsqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBANzf8ZaoICkKIXW/v3XYm1HFo3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZDk2NmQ1MDMtNzg5My0z MDI5LWEzMWEtMmNhNDM5YmZjNzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERyzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIlFf3Elz0gUIw1hIZ3gmjDmWmEZDD6ctPJq8mhzXKzgkzlOeJ5sLf/ XeFpcuOGOHUQz5XkyYQXyGuPXGDgTk+DyzajnNMOhPQdQynEYqKTRXTNLQgGh5NT yAS+onNBAVyBXAuImE3TfRngLPoWuuXYfRJsx0OvFqmLhonQdbbewVo1SPlqUCc6 fUjUokgagJ9U8AC7SqYYI4+AidVwZJiXuU9ToLM65ubyuE27LiqUmkn0u/g+vWAn FX2xNKcZ3AjYFIuwvy4U5fvmClB/oVY5EN/gM9IfHtNYPn6loU5bsgy5LLEMFzPv lRLSVTpsOztgJm1ne3g0Ket9URdvixo= -----END CERTIFICATE-----Generated at Mon Oct 20 08:12:37 2025 by rpki-client