$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9d6428ca-458c-35b1-b04a-f4c37e354a5a.roa File: 9d6428ca-458c-35b1-b04a-f4c37e354a5a.roa (raw, json) Hash identifier: 3opUABWZzwRpxvwQXR6bbi7nQ9jr96znraEWB0rUW9s= Subject key identifier: CD:99:46:0B:B3:10:7A:A8:3F:45:BE:ED:56:E2:F3:62:C8:9B:88:14 Certificate issuer: /CN=9b502c27-b722-427c-af11-f9048a06a1a5 Certificate serial: 010D0C9F4328584B7C875E432950823A3619D580 Authority key identifier: 96:08:82:21:79:62:80:AC:80:02:9B:E4:86:F6:AB:C9:64:1A:F2:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9d6428ca-458c-35b1-b04a-f4c37e354a5a.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 6939 IP address blocks: 72.21.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:5e:43:29:50:82:3a:36:19:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b502c27-b722-427c-af11-f9048a06a1a5 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=1443049a-f1d2-4e25-a2a6-a624f3b3098f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:83:25:d2:ba:3d:a6:87:53:a4:a6:c4:ad:5e: 99:b8:21:95:1f:17:2b:82:09:16:fc:e5:a7:f5:24: b7:bd:0d:bb:d1:62:31:15:90:9d:b1:be:09:48:73: 95:83:2b:6d:27:85:6d:0a:65:2f:ff:c0:19:34:b2: 48:99:3e:62:69:94:34:ec:5c:a9:75:92:4e:13:fc: 8a:9d:33:9f:96:bf:1d:7b:a8:3b:29:b1:df:cf:df: 03:66:74:ae:d7:0b:52:d5:43:24:d7:3b:b4:c2:c1: 97:7a:a0:44:c0:79:25:83:99:86:b3:4a:b1:fc:3a: 7f:59:4a:4b:e5:94:92:70:a2:de:a3:4d:f8:55:cd: fe:9c:a3:d3:fd:ec:fa:d1:56:2f:f8:4d:e4:74:36: 8f:6c:98:ed:64:83:9f:d3:13:fc:d2:9e:41:53:32: 45:64:c4:c8:8b:c6:2c:bc:1b:6a:fc:3c:20:89:8b: 6e:f7:2d:94:9c:32:e2:69:26:5c:5d:79:1f:da:44: e2:5b:9b:1f:ee:9c:34:2f:bf:e0:bc:3a:b2:a5:40: 6b:47:8c:f9:f7:9b:bc:a5:80:9e:6c:8f:5f:fd:6e: a3:23:3f:ba:43:2b:87:52:16:7e:6e:f9:6b:ba:84: 59:ef:c4:42:ec:36:0a:3c:a3:fe:e4:d1:81:fb:82: 46:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:99:46:0B:B3:10:7A:A8:3F:45:BE:ED:56:E2:F3:62:C8:9B:88:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9d6428ca-458c-35b1-b04a-f4c37e354a5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.crl X509v3 Authority Key Identifier: keyid:96:08:82:21:79:62:80:AC:80:02:9B:E4:86:F6:AB:C9:64:1A:F2:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer sbgp-ipAddrBlock: critical IPv4: 72.21.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:48:e0:5e:ac:c3:e1:f4:c8:bb:95:db:d2:60:b2:9e:de:9a: 01:49:7a:c6:d8:d5:5d:1d:6d:11:18:dd:5a:71:0b:e7:37:37: 4a:90:b4:7b:54:25:bf:ee:b5:3e:40:56:03:af:4f:fd:47:ae: b8:33:6a:7f:91:ab:fc:13:f9:78:9e:a8:ac:89:d9:a5:f3:06: c6:24:88:9d:78:bd:f7:ba:19:b0:6b:9e:a8:28:4e:83:db:76: 14:d1:49:71:e2:32:77:e1:a8:cd:e2:ba:aa:ea:11:93:71:26: a4:3f:1c:3e:f5:70:78:88:31:e4:68:63:67:31:8a:6d:8d:f6: 8e:25:b9:a5:b8:85:a4:ee:0e:ee:4f:c1:71:9a:b6:3d:5d:d2: f4:93:25:91:cf:f5:14:18:c9:61:5a:31:de:a5:73:e9:e7:1a: f7:07:19:ec:d8:ad:42:50:0a:fd:7c:f1:45:4c:e5:84:41:7c: 5a:c5:03:31:92:98:a4:84:88:54:82:63:1b:b9:d5:6f:c0:20: 58:d4:55:4f:60:b0:d0:27:b6:81:62:45:d7:0d:cc:06:8f:c5: f4:c4:1a:1c:8d:00:02:ca:41:5f:63:e1:fd:e7:54:44:55:a0: 42:08:4c:28:ec:d7:35:78:0d:72:cb:45:97:71:7f:ab:55:f5: 76:73:bf:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h15DKVCCOjYZ1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI1MDJjMjctYjcyMi00MjdjLWFmMTEtZjkwNDhhMDZh MWE1MB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk MTQ0MzA0OWEtZjFkMi00ZTI1LWEyYTYtYTYyNGYzYjMwOThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YMl0ro9podTpKbErV6ZuCGVHxcrggkW/OWn 9SS3vQ270WIxFZCdsb4JSHOVgyttJ4VtCmUv/8AZNLJImT5iaZQ07FypdZJOE/yK nTOflr8de6g7KbHfz98DZnSu1wtS1UMk1zu0wsGXeqBEwHklg5mGs0qx/Dp/WUpL 5ZSScKLeo034Vc3+nKPT/ez60VYv+E3kdDaPbJjtZIOf0xP80p5BUzJFZMTIi8Ys vBtq/DwgiYtu9y2UnDLiaSZcXXkf2kTiW5sf7pw0L7/gvDqypUBrR4z595u8pYCe bI9f/W6jIz+6QyuHUhZ+bvlruoRZ78RC7DYKPKP+5NGB+4JGGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2ZRguzEHqoP0W+7Vbi82LIm4gUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YjUw MmMyNy1iNzIyLTQyN2MtYWYxMS1mOTA0OGEwNmExYTUvOWQ2NDI4Y2EtNDU4Yy0z NWIxLWIwNGEtZjRjMzdlMzU0YTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWI1MDJjMjctYjcyMi00MjdjLWFm MTEtZjkwNDhhMDZhMWE1LzliNTAyYzI3LWI3MjItNDI3Yy1hZjExLWY5MDQ4YTA2 YTFhNS5jcmwwHwYDVR0jBBgwFoAUlgiCIXligKyAApvkhvaryWQa8lIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85YjUwMmMyNy1iNzIyLTQyN2MtYWYxMS1mOTA0 OGEwNmExYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJI4F6sw+H0yLuV29Jgsp7emgFJesbY1V0dbREY3VpxC+c3N0qQtHtU Jb/utT5AVgOvT/1Hrrgzan+Rq/wT+XieqKyJ2aXzBsYkiJ14vfe6GbBrnqgoToPb dhTRSXHiMnfhqM3iuqrqEZNxJqQ/HD71cHiIMeRoY2cxim2N9o4luaW4haTuDu5P wXGatj1d0vSTJZHP9RQYyWFaMd6lc+nnGvcHGezYrUJQCv188UVM5YRBfFrFAzGS mKSEiFSCYxu51W/AIFjUVU9gsNAntoFiRdcNzAaPxfTEGhyNAALKQV9j4f3nVERV oEIITCjs1zV4DXLLRZdxf6tV9XZzvwA= -----END CERTIFICATE-----Generated at Mon Oct 20 06:50:01 2025 by rpki-client