$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/f9ef45c4-b067-3aba-ad8c-9697f3f7c1d1.roa File: f9ef45c4-b067-3aba-ad8c-9697f3f7c1d1.roa (raw, json) Hash identifier: wHp6XU/anPg57LPqUpM94pIicPIrjEI/GftzTiWScxw= Subject key identifier: D0:E2:4F:23:E1:C3:29:20:6F:C8:01:68:B0:66:AF:B7:70:6B:1A:47 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584B891779362A7659CF110C5020 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/f9ef45c4-b067-3aba-ad8c-9697f3f7c1d1.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 54032 IP address blocks: 72.233.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:79:36:2a:76:59:cf:11:0c:50:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=cccafd25-c39a-4ed2-8ce0-b50c0536b345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:88:69:a9:bc:b6:92:f3:2e:35:87:70:4b:7a: e2:76:11:04:d7:12:23:3d:d0:3d:31:5d:e8:31:90: 99:98:4f:24:89:f9:7d:ae:b3:13:b6:15:19:c6:1e: 33:7a:81:18:b9:a9:72:17:29:82:6c:a9:7a:85:df: e9:d1:b0:9a:5f:86:62:ae:94:56:5f:34:6d:50:f9: c5:37:e4:3a:1f:1f:37:f6:fd:20:ba:59:46:75:86: 23:c6:42:1a:9e:5a:bb:9c:c8:f1:98:2b:e7:d5:03: 5b:24:37:3b:9d:3c:94:2d:89:74:fa:06:a8:1f:e8: a9:91:85:08:45:82:1c:15:9d:fa:b1:f4:1c:84:02: 58:ed:9c:a7:81:c4:90:d6:2a:c0:1e:67:56:56:29: c3:1b:d9:79:cd:6d:6e:b1:d2:94:51:2a:ee:61:7f: b2:79:d1:1e:c2:f9:2a:1a:46:d9:82:10:a1:ea:c2: 5f:d0:e0:09:19:3b:05:c4:d9:ac:61:5d:b7:4a:ac: 1c:ed:d0:8d:c8:2b:5f:9d:95:7a:6d:05:a4:9c:e5: 81:30:0d:dc:c4:a8:84:20:2b:1d:e7:fd:8c:71:f8: 14:d3:5f:a2:d5:09:21:e1:94:e0:28:ed:72:88:fc: af:5b:c3:37:db:a6:64:ef:b3:9a:28:eb:f1:98:f3: fd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E2:4F:23:E1:C3:29:20:6F:C8:01:68:B0:66:AF:B7:70:6B:1A:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/f9ef45c4-b067-3aba-ad8c-9697f3f7c1d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:ca:7d:2a:4d:ef:b6:5a:a7:4c:a9:8a:27:58:d1:80:b3:2d: 68:14:88:88:a8:94:87:a3:d1:68:e4:a5:dd:09:bd:a6:46:e3: 38:34:cd:aa:d3:61:01:fa:0a:11:7d:e8:b1:43:87:7d:09:7e: e4:53:2c:ab:45:13:79:6a:7c:bc:37:c3:ad:88:e0:38:d0:b4: 4e:28:7f:a5:10:60:28:fe:c4:13:47:ec:32:d1:91:15:35:92: 9e:3a:5e:97:ae:ca:42:01:69:ed:44:0d:a5:6d:6f:99:74:9d: 37:44:0d:a4:f1:a0:50:3e:34:29:1e:cc:7f:92:99:a3:d6:7e: 41:42:89:de:10:14:26:bd:ff:f7:58:f5:e1:8d:b6:23:15:b3: f4:9c:47:64:a4:6a:24:43:63:d1:ca:62:6a:30:05:3c:3a:f3: 3c:2c:b7:6e:2f:c1:79:c7:10:fd:23:87:52:2d:39:34:6e:8d: 21:54:a0:da:08:71:39:2d:44:0e:45:67:da:2c:27:8c:26:c0: 23:2d:ea:0c:7e:de:6f:c6:0b:ff:26:cc:c3:d5:5e:77:08:4d: 46:ce:eb:6d:f9:42:12:ee:1c:cb:50:de:4a:86:a2:0d:39:ca: 25:68:6f:6a:3d:d2:3d:06:f9:be:fe:c0:b7:69:98:31:3c:92: a3:49:f2:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3k2KnZZzxEMUCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk Y2NjYWZkMjUtYzM5YS00ZWQyLThjZTAtYjUwYzA1MzZiMzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ihpqby2kvMuNYdwS3ridhEE1xIjPdA9MV3o MZCZmE8kifl9rrMTthUZxh4zeoEYualyFymCbKl6hd/p0bCaX4ZirpRWXzRtUPnF N+Q6Hx839v0gullGdYYjxkIanlq7nMjxmCvn1QNbJDc7nTyULYl0+gaoH+ipkYUI RYIcFZ36sfQchAJY7ZyngcSQ1irAHmdWVinDG9l5zW1usdKUUSruYX+yedEewvkq GkbZghCh6sJf0OAJGTsFxNmsYV23Sqwc7dCNyCtfnZV6bQWknOWBMA3cxKiEICsd 5/2McfgU01+i1Qkh4ZTgKO1yiPyvW8M326Zk77OaKOvxmPP95QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDiTyPhwykgb8gBaLBmr7dwaxpHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvZjllZjQ1YzQtYjA2Ny0z YWJhLWFkOGMtOTY5N2YzZjdjMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESOmwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXKfSpN77Zap0ypiidY0YCzLWgUiIiolIej0Wjkpd0JvaZG4zg0zarT YQH6ChF96LFDh30JfuRTLKtFE3lqfLw3w62I4DjQtE4of6UQYCj+xBNH7DLRkRU1 kp46XpeuykIBae1EDaVtb5l0nTdEDaTxoFA+NCkezH+SmaPWfkFCid4QFCa9//dY 9eGNtiMVs/ScR2SkaiRDY9HKYmowBTw68zwst24vwXnHEP0jh1ItOTRujSFUoNoI cTktRA5FZ9osJ4wmwCMt6gx+3m/GC/8mzMPVXncITUbO6235QhLuHMtQ3kqGog05 yiVob2o90j0G+b7+wLdpmDE8kqNJ8rk= -----END CERTIFICATE-----Generated at Tue Oct 21 08:16:06 2025 by rpki-client