$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/4931962f-9845-3178-a5e1-2dfe784bd128.roa File: 4931962f-9845-3178-a5e1-2dfe784bd128.roa (raw, json) Hash identifier: yVjSTkMyy1UaU7aKdLDkW+mIi6tKvUTu4ZJtxi2xCt0= Subject key identifier: 16:2B:5D:46:92:0C:78:1C:BC:ED:49:4F:D5:1B:2F:4C:59:28:40:45 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584B8917723A5BF457C0EC2C0700 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/4931962f-9845-3178-a5e1-2dfe784bd128.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 394391 IP address blocks: 72.233.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:72:3a:5b:f4:57:c0:ec:2c:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=2dbf715c-e792-4979-b074-6474eb5fb1a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:13:8c:20:6c:2b:19:29:36:a2:5e:40:29:44: 09:dc:f4:d6:18:1f:59:60:e9:bd:ac:31:b1:cb:ad: 5f:db:42:48:19:1b:f9:4b:ff:08:19:cf:e2:38:99: 38:4c:de:93:79:33:42:fd:b3:ea:d6:4a:75:e7:60: 05:f8:6e:73:a3:11:3a:ef:08:50:b0:62:79:10:d0: b1:f7:88:17:15:54:db:de:7a:23:5f:f3:3a:20:5a: d6:80:fd:40:34:dd:41:ff:bb:9b:35:cf:a8:e3:ff: cc:71:bd:7e:ed:ce:8d:5a:84:da:7a:b0:f9:e3:25: 99:35:0e:9f:17:f6:7c:ee:90:c7:c9:6a:05:21:67: 9e:30:08:b2:13:07:d5:e1:34:24:42:21:85:dc:89: a4:6f:fc:7f:d6:d8:66:e0:ed:e9:12:e0:40:f6:25: 79:c8:60:fe:fc:89:de:95:b3:98:60:ab:1d:9a:0d: e1:90:6e:ad:d9:0d:f3:05:11:86:06:70:0a:a2:0a: 8c:2f:3d:40:f1:5f:96:80:97:f1:42:81:ab:a4:c8: 25:2b:63:b6:d1:18:b4:20:06:8c:e4:75:d0:ac:d5: fd:23:e6:e1:3c:6a:3c:ee:0c:83:46:b3:2e:16:0f: 20:57:5c:3a:b8:e7:e6:b0:e2:56:00:74:8a:e4:56: 87:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2B:5D:46:92:0C:78:1C:BC:ED:49:4F:D5:1B:2F:4C:59:28:40:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/4931962f-9845-3178-a5e1-2dfe784bd128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:01:4d:f6:f7:f7:65:f8:9b:37:78:f0:ab:b9:97:3c:f5:28: 13:b7:36:c3:a9:2d:fd:1f:00:a0:c3:c6:b2:d2:78:ae:18:37: 8e:d4:16:f1:72:db:7f:c1:b5:54:8a:00:02:ff:97:e7:11:ab: 4e:0e:ec:56:7e:1a:41:d5:2d:94:f9:ea:0a:e2:0c:10:f6:f3: b2:79:e9:06:0b:0f:70:5d:71:9a:4e:47:26:2d:11:32:1e:29: a6:30:79:25:e9:e3:b8:4a:56:ba:da:6e:cc:35:af:73:f5:2d: 96:9e:22:85:9a:d9:fe:88:b8:b4:a3:99:b5:3f:f9:14:6c:32: c2:58:91:16:1f:6b:77:2c:f9:d2:c5:33:2b:6d:8d:9c:f0:75: ef:1b:b0:d3:d3:f6:54:2b:97:ae:62:7b:c1:c1:8f:f8:e0:76: 61:99:eb:38:17:37:bf:04:45:79:23:bd:bf:99:c3:06:a8:83: 3c:d8:df:b3:c3:de:5b:f5:15:82:4c:74:00:3d:56:96:59:84: 2e:1a:39:17:5a:da:eb:09:c5:cb:ab:b5:9c:74:26:6d:0f:7a: a9:79:33:06:b3:63:00:cd:26:77:59:05:88:78:b5:81:4a:ec: 8d:52:95:99:38:86:ce:1a:28:21:ae:86:2c:12:64:55:76:85: 78:90:e7:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3I6W/RXwOwsBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk MmRiZjcxNWMtZTc5Mi00OTc5LWIwNzQtNjQ3NGViNWZiMWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhOMIGwrGSk2ol5AKUQJ3PTWGB9ZYOm9rDGx y61f20JIGRv5S/8IGc/iOJk4TN6TeTNC/bPq1kp152AF+G5zoxE67whQsGJ5ENCx 94gXFVTb3nojX/M6IFrWgP1ANN1B/7ubNc+o4//Mcb1+7c6NWoTaerD54yWZNQ6f F/Z87pDHyWoFIWeeMAiyEwfV4TQkQiGF3Imkb/x/1thm4O3pEuBA9iV5yGD+/Ine lbOYYKsdmg3hkG6t2Q3zBRGGBnAKogqMLz1A8V+WgJfxQoGrpMglK2O20Ri0IAaM 5HXQrNX9I+bhPGo87gyDRrMuFg8gV1w6uOfmsOJWAHSK5FaHNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYrXUaSDHgcvO1JT9UbL0xZKEBFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvNDkzMTk2MmYtOTg0NS0z MTc4LWE1ZTEtMmRmZTc4NGJkMTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSOnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwBTfb392X4mzd48Ku5lzz1KBO3NsOpLf0fAKDDxrLSeK4YN47UFvFy 23/BtVSKAAL/l+cRq04O7FZ+GkHVLZT56griDBD287J56QYLD3BdcZpORyYtETIe KaYweSXp47hKVrrabsw1r3P1LZaeIoWa2f6IuLSjmbU/+RRsMsJYkRYfa3cs+dLF MyttjZzwde8bsNPT9lQrl65ie8HBj/jgdmGZ6zgXN78ERXkjvb+ZwwaogzzY37PD 3lv1FYJMdAA9VpZZhC4aORda2usJxcurtZx0Jm0Peql5MwazYwDNJndZBYh4tYFK 7I1SlZk4hs4aKCGuhiwSZFV2hXiQ580= -----END CERTIFICATE-----Generated at Tue Oct 21 08:26:42 2025 by rpki-client