$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/af4a70ed-4978-37ac-9bc6-a3c7bea2416b.roa File: af4a70ed-4978-37ac-9bc6-a3c7bea2416b.roa (raw, json) Hash identifier: X8k0wadHmI3ctWaDnyBOlL7vcGuel5R9UeYJNlXk7nU= Subject key identifier: 43:52:88:28:FD:41:79:DB:02:0A:04:0D:4B:62:78:A3:1A:53:1C:46 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584B891771BB7A5538C549EE9440 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/af4a70ed-4978-37ac-9bc6-a3c7bea2416b.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 54032 IP address blocks: 72.233.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:71:bb:7a:55:38:c5:49:ee:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=cf76deba-f006-4af1-8bb3-2b3b88ae4c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5c:8a:7d:6a:d9:b4:ac:75:67:15:ad:2a:11: 13:04:3d:07:31:e5:34:d0:2e:84:a9:9b:0e:6b:53: 61:cd:42:e0:6d:2f:66:8e:33:3c:c4:42:b0:8a:bf: 0d:77:e9:ae:40:f3:a7:f6:45:47:a9:4a:fb:45:2c: a0:f7:30:12:7e:2f:dd:1a:9d:47:d3:9c:12:91:32: 34:b9:0c:83:2d:9a:d9:fd:b5:d6:12:34:0f:8e:64: a0:39:65:45:97:7e:a7:30:95:61:a1:47:2b:1d:e1: cd:74:f4:8f:16:45:96:b1:4e:ce:83:5b:fa:a8:75: 36:2e:9b:90:97:f0:a4:14:03:a6:ed:6f:47:d2:4f: 16:4b:18:b0:c0:63:9a:d9:c6:da:ea:e7:3e:f1:37: d0:00:f3:8a:2c:df:e3:f8:33:1e:b9:60:7c:d9:b0: 97:a3:9b:92:05:0c:44:0d:84:75:7a:b8:fa:f9:0c: 40:0b:db:d6:3a:ee:ae:50:db:f9:9d:23:1a:15:77: 3c:d0:ba:4e:0e:13:8b:ca:81:61:e5:fb:f2:fe:79: ed:0b:b8:2a:3a:94:c2:98:bf:e7:a5:d2:dd:e9:af: 0d:3c:10:f3:63:50:29:06:ad:44:17:97:f7:ce:c9: 23:3b:2d:7f:ce:1e:ea:7d:25:b8:2e:17:c5:1c:3d: b4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:52:88:28:FD:41:79:DB:02:0A:04:0D:4B:62:78:A3:1A:53:1C:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/af4a70ed-4978-37ac-9bc6-a3c7bea2416b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:11:ae:80:05:1c:fe:fc:da:52:d9:b6:94:53:5b:3e:38:4e: cc:16:76:0e:ef:36:41:7e:f2:ea:77:de:a3:78:40:79:dc:aa: 90:e6:c6:b2:80:e7:a4:bb:26:22:a8:43:df:6b:03:a6:36:89: a6:0a:cf:c5:fe:84:28:86:1d:d5:1d:fe:8a:0c:00:2e:b3:0e: 17:d3:9b:50:e5:c0:d1:d0:d0:df:4d:8a:88:c8:94:11:18:c0: df:6e:37:0a:ea:f7:97:8f:f1:dc:c5:be:c5:46:04:23:68:ab: 8d:1f:3b:61:5c:cf:d0:39:bf:15:ba:eb:e4:50:d3:bc:8c:95: 0c:ad:61:0a:38:4c:cf:56:bf:c2:62:f9:61:13:e7:17:f7:85: 1c:12:09:ce:8d:c4:df:89:52:a9:ff:f1:18:2e:3f:68:c6:77: c4:dc:21:90:75:de:80:87:49:39:b4:8a:b7:3d:ac:5f:01:cf: 9a:01:9c:4c:27:fb:16:97:45:11:2d:05:77:59:4a:68:f6:e4: c6:5b:67:43:ab:fd:4a:28:45:a6:45:0c:a6:19:5e:3b:4e:8b: 85:ed:fe:9b:29:88:bd:43:4d:55:9a:24:fe:a9:4d:9f:09:d0: ea:29:e0:f1:5a:e8:05:dc:7f:a7:78:f5:0d:1d:d2:ba:94:f2: 2c:d3:32:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3G7elU4xUnulEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk Y2Y3NmRlYmEtZjAwNi00YWYxLThiYjMtMmIzYjg4YWU0YzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylyKfWrZtKx1ZxWtKhETBD0HMeU00C6EqZsO a1NhzULgbS9mjjM8xEKwir8Nd+muQPOn9kVHqUr7RSyg9zASfi/dGp1H05wSkTI0 uQyDLZrZ/bXWEjQPjmSgOWVFl36nMJVhoUcrHeHNdPSPFkWWsU7Og1v6qHU2LpuQ l/CkFAOm7W9H0k8WSxiwwGOa2cba6uc+8TfQAPOKLN/j+DMeuWB82bCXo5uSBQxE DYR1erj6+QxAC9vWOu6uUNv5nSMaFXc80LpODhOLyoFh5fvy/nntC7gqOpTCmL/n pdLd6a8NPBDzY1ApBq1EF5f3zskjOy1/zh7qfSW4LhfFHD20eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENSiCj9QXnbAgoEDUtieKMaUxxGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvYWY0YTcwZWQtNDk3OC0z N2FjLTliYzYtYTNjN2JlYTI0MTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSOmUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8RroAFHP782lLZtpRTWz44TswWdg7vNkF+8up33qN4QHncqpDmxrKA 56S7JiKoQ99rA6Y2iaYKz8X+hCiGHdUd/ooMAC6zDhfTm1DlwNHQ0N9NiojIlBEY wN9uNwrq95eP8dzFvsVGBCNoq40fO2Fcz9A5vxW66+RQ07yMlQytYQo4TM9Wv8Ji +WET5xf3hRwSCc6NxN+JUqn/8RguP2jGd8TcIZB13oCHSTm0irc9rF8Bz5oBnEwn +xaXRREtBXdZSmj25MZbZ0Or/UooRaZFDKYZXjtOi4Xt/pspiL1DTVWaJP6pTZ8J 0Oop4PFa6AXcf6d49Q0d0rqU8izTMgA= -----END CERTIFICATE-----Generated at Tue Oct 21 08:23:38 2025 by rpki-client