$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/8bd5665c-f6f7-3013-925e-d7f67f871f97.roa File: 8bd5665c-f6f7-3013-925e-d7f67f871f97.roa (raw, json) Hash identifier: m7IyOdwzs9jMBpH0P8+u/Tw1S86ODkRhqhtpRNO3Gz0= Subject key identifier: AC:FA:C4:17:70:BE:D6:74:97:71:0C:A6:CE:0A:17:25:60:EE:14:C1 Certificate issuer: /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9 Certificate serial: 010D0C9F4328584B68FC99981077F43BF4471640 Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/8bd5665c-f6f7-3013-925e-d7f67f871f97.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 16509 IP address blocks: 72.19.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:99:98:10:77:f4:3b:f4:47:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=bcaaa205-20b7-4e84-8738-4c24d0cb73be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e2:36:c4:7d:28:a4:a3:c9:67:6f:2f:b6:2a: de:7e:7a:b6:7a:78:49:4c:38:73:1d:32:f5:81:92: dc:38:9f:3b:0a:fc:c5:43:5c:8f:1a:36:9b:a9:d7: 8c:c2:9f:f9:e9:a8:d5:84:af:64:ff:b4:89:64:a7: c0:fc:1f:be:0b:d2:11:0b:45:a1:72:ff:0a:9a:08: ce:2c:f7:7e:fd:12:67:51:be:f7:00:94:30:1d:a3: 49:09:2a:e5:86:4b:fd:a2:b3:07:11:13:ca:1f:79: ec:49:90:d1:ad:c7:a9:91:5a:5f:a0:25:83:c2:b2: bc:1c:a1:10:3b:b0:b4:ac:0f:84:9d:fc:1c:c3:73: f6:34:86:b9:2a:d1:c9:ba:32:17:35:7a:0f:a8:c7: e4:9e:7d:dc:f6:88:09:18:8f:c7:81:3d:b4:bf:df: ba:19:a4:41:e5:a3:f6:ce:a2:cd:8a:c8:70:25:ac: 6d:45:fe:23:d7:8d:a5:ee:ba:af:31:21:d8:49:69: 6c:58:58:c3:f5:3c:8e:cd:3e:26:71:11:07:b1:a4: 9b:c4:fe:cc:92:5e:aa:dc:47:1b:11:22:65:1e:08: f9:be:cc:c9:48:cc:de:06:1c:3a:ef:3a:a3:e1:1f: a3:f9:1e:b7:ad:af:86:4f:19:bb:d7:36:f1:3a:e8: fb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FA:C4:17:70:BE:D6:74:97:71:0C:A6:CE:0A:17:25:60:EE:14:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/8bd5665c-f6f7-3013-925e-d7f67f871f97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl X509v3 Authority Key Identifier: keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer sbgp-ipAddrBlock: critical IPv4: 72.19.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:c2:68:8f:6a:47:89:47:f5:8c:d5:49:b0:f9:66:aa:d2:0e: 51:92:32:b4:c0:77:44:85:a3:31:22:96:7f:15:af:ca:10:ac: 61:19:11:ef:38:e5:b1:0b:4e:22:0a:72:47:e2:04:cf:f7:c2: ae:94:9e:59:00:cc:23:0a:df:19:57:f0:35:72:a3:7a:e0:a1: dd:ec:8d:14:6a:01:a8:2d:41:28:d5:50:89:89:01:1f:8a:90: c2:48:29:0c:a2:ac:a3:01:f1:ef:38:4c:63:07:ae:85:a0:8c: 75:0f:cb:0d:36:6c:97:d2:0b:af:e9:0a:f6:7a:d7:b7:33:2b: e1:8a:b4:e2:4c:85:df:2b:a5:61:02:16:6b:20:2f:07:ce:77: a0:71:fc:54:d4:97:62:4a:2c:67:e7:d9:f6:2f:44:c2:68:ab: 92:79:b8:14:72:d8:e1:07:a1:e0:76:8b:8b:1d:c9:58:86:79: 54:36:fc:d3:c9:57:2f:78:86:1a:0e:96:66:bc:47:b4:ac:56: a1:fa:b1:ca:6b:d8:11:87:2c:2a:e8:29:62:8c:4c:2e:5a:eb: a7:13:ce:d0:db:db:3b:ff:cb:0f:bf:03:7c:d5:a5:f9:a9:fa: 87:bb:1c:77:7a:38:5b:88:3e:7e:13:ee:5b:5b:30:d7:25:b2: 49:90:d4:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/JmYEHf0O/RHFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxY2I2YWQtNmNkNi00NTgxLWE1YWMtNWE2ZmQ3NDQ5 NWM5MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk YmNhYWEyMDUtMjBiNy00ZTg0LTg3MzgtNGMyNGQwY2I3M2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOI2xH0opKPJZ28vtirefnq2enhJTDhzHTL1 gZLcOJ87CvzFQ1yPGjabqdeMwp/56ajVhK9k/7SJZKfA/B++C9IRC0Whcv8KmgjO LPd+/RJnUb73AJQwHaNJCSrlhkv9orMHERPKH3nsSZDRrcepkVpfoCWDwrK8HKEQ O7C0rA+Enfwcw3P2NIa5KtHJujIXNXoPqMfknn3c9ogJGI/HgT20v9+6GaRB5aP2 zqLNishwJaxtRf4j142l7rqvMSHYSWlsWFjD9TyOzT4mcREHsaSbxP7Mkl6q3Ecb ESJlHgj5vszJSMzeBhw67zqj4R+j+R63ra+GTxm71zbxOuj75wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKz6xBdwvtZ0l3EMps4KFyVg7hTBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NzFj YjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZmZDc0NDk1YzkvOGJkNTY2NWMtZjZmNy0z MDEzLTkyNWUtZDdmNjdmODcxZjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODcxY2I2YWQtNmNkNi00NTgxLWE1 YWMtNWE2ZmQ3NDQ5NWM5Lzg3MWNiNmFkLTZjZDYtNDU4MS1hNWFjLTVhNmZkNzQ0 OTVjOS5jcmwwHwYDVR0jBBgwFoAUntBlR2d0sGuDPxz+dPUN9EuFl7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NzFjYjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZm ZDc0NDk1YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSBPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHCaI9qR4lH9YzVSbD5ZqrSDlGSMrTAd0SFozEiln8Vr8oQrGEZEe84 5bELTiIKckfiBM/3wq6UnlkAzCMK3xlX8DVyo3rgod3sjRRqAagtQSjVUImJAR+K kMJIKQyirKMB8e84TGMHroWgjHUPyw02bJfSC6/pCvZ617czK+GKtOJMhd8rpWEC FmsgLwfOd6Bx/FTUl2JKLGfn2fYvRMJoq5J5uBRy2OEHoeB2i4sdyViGeVQ2/NPJ Vy94hhoOlma8R7SsVqH6scpr2BGHLCroKWKMTC5a66cTztDb2zv/yw+/A3zVpfmp +oe7HHd6OFuIPn4T7ltbMNclskmQ1Ks= -----END CERTIFICATE-----Generated at Mon Oct 20 05:23:17 2025 by rpki-client