$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/744260df-d6fd-3e8a-82b1-552fb861d0ec.roa File: 744260df-d6fd-3e8a-82b1-552fb861d0ec.roa (raw, json) Hash identifier: hFV7/sp4IlQnST5W1dF8eeOiBbnMoF3wVi/sIR8j3gk= Subject key identifier: 0A:A2:B2:62:F8:7B:0D:7A:FE:FB:D7:24:72:7C:9E:1D:A5:C8:63:C6 Certificate issuer: /CN=9b51b96b-674e-4350-82f7-7b884151238a Certificate serial: 010D0C9F4328584B95A7934D1D9E96B9F90E6580 Authority key identifier: 93:25:DD:83:88:43:05:29:7A:B1:A8:37:23:B2:07:06:D3:17:A3:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/744260df-d6fd-3e8a-82b1-552fb861d0ec.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 394151 IP address blocks: 72.21.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/9b51b96b-674e-4350-82f7-7b884151238a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/9b51b96b-674e-4350-82f7-7b884151238a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:93:4d:1d:9e:96:b9:f9:0e:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b51b96b-674e-4350-82f7-7b884151238a Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=7b60e055-b1fe-475b-9435-8451b75d675f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b9:aa:27:c2:24:79:63:f4:b7:34:bf:82:2f: 0e:3a:ba:13:f5:51:f2:39:8e:80:6d:39:1a:26:24: 7e:22:32:ab:4e:b0:51:0c:af:0a:df:f4:05:b5:9c: 26:10:27:c2:2e:90:18:1b:cf:0a:8c:35:cf:9a:41: fb:8c:c7:78:22:26:5b:05:b3:14:63:e8:19:9c:be: 97:4a:4c:33:87:50:05:8e:26:45:1f:9c:9b:97:9f: 75:b5:67:ac:16:e8:02:1d:17:d7:1e:c4:19:a0:89: 78:c5:7c:98:b8:12:c1:b2:e5:52:4b:dd:81:e6:f4: 76:61:a1:f4:38:a8:46:31:fe:a2:37:29:a1:90:c4: 66:16:7a:83:f9:65:6a:c0:9b:98:bc:e8:88:17:18: 5a:69:16:12:65:a2:dd:aa:18:c8:60:7a:8b:10:94: 58:76:0d:2d:69:69:8f:de:31:d2:50:19:09:38:b8: ed:08:b6:d1:9c:57:33:5d:e3:82:d5:7c:e4:5d:be: d5:51:a7:5b:66:54:c5:77:b8:94:9b:71:38:46:c1: 7e:7d:35:3f:b9:47:27:31:3a:35:9c:fb:da:1f:56: de:87:59:cb:08:73:54:9c:90:4a:ea:aa:7e:19:2c: fa:72:55:1f:46:da:d1:66:fe:31:21:b6:35:d6:0e: 1d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A2:B2:62:F8:7B:0D:7A:FE:FB:D7:24:72:7C:9E:1D:A5:C8:63:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/744260df-d6fd-3e8a-82b1-552fb861d0ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/9b51b96b-674e-4350-82f7-7b884151238a.crl X509v3 Authority Key Identifier: keyid:93:25:DD:83:88:43:05:29:7A:B1:A8:37:23:B2:07:06:D3:17:A3:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a.cer sbgp-ipAddrBlock: critical IPv4: 72.21.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:77:fe:b8:20:74:4b:cf:79:2b:61:e7:d7:85:de:ca:d6:f4: d0:d4:a1:37:71:20:e1:cb:a1:a3:cb:9b:4c:88:1b:2f:c3:15: 10:e0:89:19:04:f9:a6:57:68:75:2b:ba:4e:14:d1:0d:7a:e4: 39:ba:18:3d:76:fc:b1:28:f2:10:98:99:37:db:e0:24:f5:a6: 19:41:3b:2a:ff:95:4f:26:19:16:55:f2:ba:f2:aa:aa:79:63: 15:f9:19:a7:aa:9c:67:7c:ed:cd:df:68:d9:27:7b:ab:de:9d: 5b:13:1f:2a:be:06:ba:cf:01:49:bb:c7:69:da:4d:26:41:85: 9b:6e:6e:d8:52:9b:24:bc:08:c0:d6:a7:44:f7:13:5f:9d:2f: 77:10:a1:64:b9:78:ea:17:7c:3d:54:f3:8d:89:d1:69:fb:36: 36:10:fc:03:d7:41:8e:7c:db:74:cb:f8:6f:22:b8:8b:3d:03: 04:2e:7d:3d:f6:3c:37:db:c6:bb:dd:96:47:4d:dc:58:91:d3: b9:06:f5:ba:95:40:b2:12:a5:b5:1c:e2:4e:ed:b1:94:3e:64: d8:7a:0b:70:86:14:a8:9f:95:d4:16:63:2d:96:51:70:c9:1c: 4b:1a:c1:fd:2c:29:4c:0e:90:22:82:6e:79:1f:ca:b2:23:a5: 5f:d1:fb:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5NNHZ6WufkOZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI1MWI5NmItNjc0ZS00MzUwLTgyZjctN2I4ODQxNTEy MzhhMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk N2I2MGUwNTUtYjFmZS00NzViLTk0MzUtODQ1MWI3NWQ2NzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7mqJ8IkeWP0tzS/gi8OOroT9VHyOY6AbTka JiR+IjKrTrBRDK8K3/QFtZwmECfCLpAYG88KjDXPmkH7jMd4IiZbBbMUY+gZnL6X Skwzh1AFjiZFH5ybl591tWesFugCHRfXHsQZoIl4xXyYuBLBsuVSS92B5vR2YaH0 OKhGMf6iNymhkMRmFnqD+WVqwJuYvOiIFxhaaRYSZaLdqhjIYHqLEJRYdg0taWmP 3jHSUBkJOLjtCLbRnFczXeOC1XzkXb7VUadbZlTFd7iUm3E4RsF+fTU/uUcnMTo1 nPvaH1beh1nLCHNUnJBK6qp+GSz6clUfRtrRZv4xIbY11g4dowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqismL4ew16/vvXJHJ8nh2lyGPGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85YjUx Yjk2Yi02NzRlLTQzNTAtODJmNy03Yjg4NDE1MTIzOGEvNzQ0MjYwZGYtZDZmZC0z ZThhLTgyYjEtNTUyZmI4NjFkMGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOWI1MWI5NmItNjc0ZS00MzUwLTgy ZjctN2I4ODQxNTEyMzhhLzliNTFiOTZiLTY3NGUtNDM1MC04MmY3LTdiODg0MTUx MjM4YS5jcmwwHwYDVR0jBBgwFoAUkyXdg4hDBSl6sag3I7IHBtMXozEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy85YjUxYjk2Yi02NzRlLTQzNTAtODJmNy03Yjg4 NDE1MTIzOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABt3/rggdEvPeSth59eF3srW9NDUoTdxIOHLoaPLm0yIGy/DFRDgiRkE +aZXaHUruk4U0Q165Dm6GD12/LEo8hCYmTfb4CT1phlBOyr/lU8mGRZV8rryqqp5 YxX5GaeqnGd87c3faNkne6venVsTHyq+BrrPAUm7x2naTSZBhZtubthSmyS8CMDW p0T3E1+dL3cQoWS5eOoXfD1U842J0Wn7NjYQ/APXQY5823TL+G8iuIs9AwQufT32 PDfbxrvdlkdN3FiR07kG9bqVQLISpbUc4k7tsZQ+ZNh6C3CGFKifldQWYy2WUXDJ HEsawf0sKUwOkCKCbnkfyrIjpV/R+50= -----END CERTIFICATE-----Generated at Mon Oct 20 20:40:22 2025 by rpki-client