$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/fa4fef0a-8ab3-3eca-a2d6-a572c0a46033.roa File: fa4fef0a-8ab3-3eca-a2d6-a572c0a46033.roa (raw, json) Hash identifier: duXyjRY8j7tMSzVF/lBzAAqXJ9+G6D9U1RAyqwPGo78= Subject key identifier: 62:65:33:D7:76:36:55:37:6C:95:92:E6:5C:38:3C:0A:76:F3:D1:3A Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584B8917792702F2702D8DB7A240 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/fa4fef0a-8ab3-3eca-a2d6-a572c0a46033.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 54032 IP address blocks: 72.233.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:79:27:02:f2:70:2d:8d:b7:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=d5c54c6a-84f1-47b4-9312-748c2a9aed99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1f:a6:d1:ff:20:fa:4c:02:75:16:0e:b0:94: 49:ef:50:a7:45:31:e6:13:82:4e:48:bc:b8:d8:bf: 91:44:c1:cf:1e:dc:12:54:d1:49:51:49:17:79:cf: 08:5b:2f:52:f8:12:b5:ae:ec:3b:54:24:2d:cd:59: 75:fc:fa:3b:cf:81:4e:38:ea:3a:00:ce:48:2f:53: 85:53:f1:d5:86:e6:0b:26:20:69:8d:fc:12:b7:dc: ef:34:3c:ee:0e:5f:ce:70:17:f5:0b:12:88:12:4f: 5b:7a:18:fd:dc:f8:25:f8:f7:b9:83:5d:5e:af:64: 69:a2:fb:60:92:cb:b1:59:fa:76:68:8f:7c:3e:27: f6:48:bc:5e:9b:ee:8b:7e:e3:c1:00:42:3e:a2:82: 21:35:ec:be:2b:7f:c6:4f:e7:38:b2:1e:98:a4:77: 8a:c2:bf:89:91:ff:81:fb:75:1e:3e:75:29:eb:31: 90:be:0a:38:f3:51:08:bf:60:71:00:93:bd:2c:9d: 1b:06:0e:63:4c:5d:61:4f:37:2b:d6:27:97:ef:ee: 35:16:37:07:21:28:c1:90:d3:9b:f3:8c:ee:11:ee: dd:42:5c:11:be:e6:41:8e:81:36:da:05:8f:16:eb: fd:18:83:a4:7f:75:eb:81:c8:8d:1c:7b:bf:34:37: c1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:65:33:D7:76:36:55:37:6C:95:92:E6:5C:38:3C:0A:76:F3:D1:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/fa4fef0a-8ab3-3eca-a2d6-a572c0a46033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:96:ec:26:ec:d5:14:0c:f7:9c:68:f2:08:d2:47:5a:67:0c: e1:b7:15:7c:8e:ea:e6:49:1a:f5:9f:82:13:d6:44:47:ec:5c: 68:9c:d2:ad:01:6a:7c:c0:08:7c:d2:1f:c8:a5:81:11:6c:e1: a4:64:1f:bd:49:69:05:95:9b:49:ee:79:ca:f0:c6:80:e9:d6: d2:16:f2:a0:7b:a6:6a:23:d3:75:c1:05:0a:1f:60:13:93:98: 17:25:2d:a3:66:7c:57:d6:e5:c2:ed:33:cd:37:6c:d3:b6:9d: 16:3b:94:f6:3f:8f:59:d0:1b:6d:7d:54:48:6b:37:87:c2:73: 20:44:ee:24:5a:91:a9:d8:2f:5c:09:48:1c:cc:7f:f8:ce:86: 01:bd:c2:26:a3:52:53:5f:3f:3d:45:bf:b4:c4:ad:d4:57:a7: a0:4c:a2:a1:81:cb:b0:d5:86:e4:b6:71:1f:40:11:04:d4:37: 39:a8:1d:ef:fa:9e:ce:02:80:c9:c8:c9:14:25:07:26:1f:24: 52:c1:bc:3c:2c:ff:4c:df:2d:16:7e:63:3d:ca:71:0f:b7:86: 38:83:3a:bf:d0:92:99:34:0f:c4:6a:10:e2:ef:27:53:10:64: 36:9b:93:20:83:9e:57:b5:d7:50:10:95:ed:b3:1d:34:c9:d9: 1b:0c:4b:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3knAvJwLY23okAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk ZDVjNTRjNmEtODRmMS00N2I0LTkzMTItNzQ4YzJhOWFlZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6x+m0f8g+kwCdRYOsJRJ71CnRTHmE4JOSLy4 2L+RRMHPHtwSVNFJUUkXec8IWy9S+BK1ruw7VCQtzVl1/Po7z4FOOOo6AM5IL1OF U/HVhuYLJiBpjfwSt9zvNDzuDl/OcBf1CxKIEk9behj93Pgl+Pe5g11er2Rpovtg ksuxWfp2aI98Pif2SLxem+6LfuPBAEI+ooIhNey+K3/GT+c4sh6YpHeKwr+Jkf+B +3UePnUp6zGQvgo481EIv2BxAJO9LJ0bBg5jTF1hTzcr1ieX7+41FjcHISjBkNOb 84zuEe7dQlwRvuZBjoE22gWPFuv9GIOkf3XrgciNHHu/NDfB0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJlM9d2NlU3bJWS5lw4PAp289E6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvZmE0ZmVmMGEtOGFiMy0z ZWNhLWEyZDYtYTU3MmMwYTQ2MDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESOmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyW7Cbs1RQM95xo8gjSR1pnDOG3FXyO6uZJGvWfghPWREfsXGic0q0B anzACHzSH8ilgRFs4aRkH71JaQWVm0nuecrwxoDp1tIW8qB7pmoj03XBBQofYBOT mBclLaNmfFfW5cLtM803bNO2nRY7lPY/j1nQG219VEhrN4fCcyBE7iRakanYL1wJ SBzMf/jOhgG9wiajUlNfPz1Fv7TErdRXp6BMoqGBy7DVhuS2cR9AEQTUNzmoHe/6 ns4CgMnIyRQlByYfJFLBvDws/0zfLRZ+Yz3KcQ+3hjiDOr/Qkpk0D8RqEOLvJ1MQ ZDabkyCDnle111AQle2zHTTJ2RsMSwA= -----END CERTIFICATE-----Generated at Tue Oct 21 08:23:40 2025 by rpki-client