$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/31c8bc35-faa3-3035-9823-b218dbe0b84a.roa File: 31c8bc35-faa3-3035-9823-b218dbe0b84a.roa (raw, json) Hash identifier: OfRdm2GvlAjHXLiLpdgenU83bwwxsvBQGAoUySrgzZc= Subject key identifier: 30:BB:C6:EA:A1:6C:36:FA:2B:AB:DC:13:35:15:FC:E3:84:A4:05:C1 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584B84E77A967928F5924A59B540 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/31c8bc35-faa3-3035-9823-b218dbe0b84a.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 54032 IP address blocks: 72.233.142.0/24 maxlen: 24 72.233.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:7a:96:79:28:f5:92:4a:59:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=dcd05850-36a0-4e23-bf8d-7aa9df11e2c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b5:7b:4e:a6:41:be:7a:c3:8a:55:44:4b:9b: c8:0a:26:60:34:39:aa:33:ab:0d:b1:ae:4e:6c:82: 21:b7:9d:e8:04:31:28:ee:86:e0:68:66:b7:04:a5: 41:0b:c3:78:72:6d:7f:aa:20:b9:5c:e4:e8:3a:71: d0:09:74:55:21:38:28:88:7a:0a:55:8b:91:6b:a5: 9f:95:98:5d:e3:fd:73:70:8d:b5:fe:07:74:4a:60: 43:d3:d6:9f:39:3e:96:9d:ff:a8:d8:28:3e:d2:f7: 01:3a:fb:b9:84:80:a6:ae:05:58:2a:60:dc:07:3d: 2e:b0:b2:c7:4f:a2:a1:85:38:68:9d:5f:b2:37:5c: ba:a6:53:ae:61:a2:8b:0c:98:35:7b:3d:04:76:8b: d4:cf:13:d5:76:80:a0:18:3e:e3:83:72:67:85:f8: a8:2e:c9:21:e3:a5:9d:fb:fa:85:ae:fa:f8:01:61: 6e:63:f8:18:78:d5:54:b0:f6:bd:c4:1b:91:d1:dd: 3a:28:e0:f4:8b:75:23:43:b7:5a:a7:95:71:a1:50: c7:00:ca:8f:fa:d2:68:c5:66:76:b1:92:cb:07:69: 57:5a:70:9d:8f:92:9d:6c:b2:82:6f:b1:e0:98:a9: 52:51:8e:a9:55:86:1f:4c:bd:f6:ec:58:f0:5d:e5: c2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:BB:C6:EA:A1:6C:36:FA:2B:AB:DC:13:35:15:FC:E3:84:A4:05:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/31c8bc35-faa3-3035-9823-b218dbe0b84a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:34:0c:62:10:0b:71:f0:b0:fb:91:55:e6:b6:df:a0:83:ab: ad:2a:10:90:8d:cc:c4:e2:c2:2c:a9:39:37:bf:74:da:98:71: ae:0b:b6:54:cc:35:98:89:73:56:5c:cf:e1:16:e3:86:fb:86: 3a:a4:16:3a:9a:76:31:10:c0:f0:94:1a:a4:c9:3f:87:a0:b1: 70:39:ef:ab:4d:d3:bd:7d:f8:42:ef:66:71:eb:99:62:f5:d4: 68:3c:13:e4:9e:d9:58:ef:de:8f:46:c6:d0:1e:a4:b2:02:e7: df:5e:96:81:7f:98:90:2f:90:0c:c9:97:f4:48:fb:0b:55:54: 84:fc:64:ba:64:cb:66:19:76:21:a6:27:6f:c5:d8:48:c2:ec: de:9d:f6:6f:10:d8:fa:1b:70:06:6c:ae:51:50:99:60:24:49: 07:1c:4b:eb:77:12:8b:61:de:ca:b9:2d:58:6d:11:13:6b:9c: b5:0b:23:0d:89:97:cd:39:11:d7:57:f1:ed:9c:94:bd:1e:1d: 96:3a:15:05:ad:3f:77:f0:d9:70:9c:77:93:74:1d:29:bd:af: a8:d6:d4:1c:ed:eb:07:29:72:57:59:9c:5d:10:ba:7a:c2:0a: 55:72:47:c8:30:12:81:4d:d2:9c:35:43:02:cf:50:26:a4:76: c7:82:62:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53qWeSj1kkpZtUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZGNkMDU4NTAtMzZhMC00ZTIzLWJmOGQtN2FhOWRmMTFlMmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibV7TqZBvnrDilVES5vICiZgNDmqM6sNsa5O bIIht53oBDEo7obgaGa3BKVBC8N4cm1/qiC5XOToOnHQCXRVITgoiHoKVYuRa6Wf lZhd4/1zcI21/gd0SmBD09afOT6Wnf+o2Cg+0vcBOvu5hICmrgVYKmDcBz0usLLH T6KhhThonV+yN1y6plOuYaKLDJg1ez0EdovUzxPVdoCgGD7jg3JnhfioLskh46Wd +/qFrvr4AWFuY/gYeNVUsPa9xBuR0d06KOD0i3UjQ7dap5VxoVDHAMqP+tJoxWZ2 sZLLB2lXWnCdj5KdbLKCb7HgmKlSUY6pVYYfTL327FjwXeXCMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDC7xuqhbDb6K6vcEzUV/OOEpAXBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvMzFjOGJjMzUtZmFhMy0z MDM1LTk4MjMtYjIxOGRiZTBiODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSOmOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGo0DGIQC3HwsPuRVea236CDq60qEJCNzMTiwiypOTe/dNqYca4LtlTM NZiJc1Zcz+EW44b7hjqkFjqadjEQwPCUGqTJP4egsXA576tN0719+ELvZnHrmWL1 1Gg8E+Se2Vjv3o9GxtAepLIC599eloF/mJAvkAzJl/RI+wtVVIT8ZLpky2YZdiGm J2/F2EjC7N6d9m8Q2PobcAZsrlFQmWAkSQccS+t3Eoth3sq5LVhtERNrnLULIw2J l805EddX8e2clL0eHZY6FQWtP3fw2XCcd5N0HSm9r6jW1Bzt6wcpcldZnF0QunrC ClVyR8gwEoFN0pw1QwLPUCakdseCYuc= -----END CERTIFICATE-----Generated at Tue Oct 21 08:26:42 2025 by rpki-client