$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/5ef24ba0-53e4-39a4-9e82-2a1ff0078706.roa File: 5ef24ba0-53e4-39a4-9e82-2a1ff0078706.roa (raw, json) Hash identifier: CFjXcdJigMzhHw8ETHB9P4t5ms+vdVvd4R1ZUjUFPPM= Subject key identifier: 81:0F:5D:A5:2E:12:91:A8:6D:B8:53:E9:5A:D8:63:D0:8D:51:30:41 Certificate issuer: /CN=a4e67936-c857-487d-93df-2dff7fa79988 Certificate serial: 010D0C9F4328584B6A62066F22E19DD5D489AE00 Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/5ef24ba0-53e4-39a4-9e82-2a1ff0078706.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 16509 IP address blocks: 72.0.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:62:06:6f:22:e1:9d:d5:d4:89:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=5a3ca469-aede-4b04-9c99-2a787d8d6edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:10:f7:7a:59:56:ac:73:f2:3f:05:af:98:70: 60:7b:e4:84:db:ab:1a:91:9b:9c:84:04:db:23:04: 98:3a:2b:ad:e9:cd:2b:17:23:3d:86:f9:13:ac:c5: 07:c9:b3:44:63:b8:98:36:06:ec:95:46:60:87:e6: 85:1b:c1:5c:ca:13:6e:7f:ef:91:f5:73:26:22:f1: 5c:81:47:de:51:bf:e2:d8:db:c8:21:56:47:e2:cd: 9b:43:0c:92:15:bd:77:1c:03:21:2b:13:17:e7:fe: c2:80:4c:a3:5c:02:d1:d0:73:64:22:c1:f8:43:b6: 98:be:36:1c:29:82:32:dd:25:d0:af:4b:df:9a:f6: 3e:e9:57:03:ef:f3:37:3c:b8:18:04:9d:bf:55:b5: 0b:cf:76:be:0a:8b:d0:ef:d1:48:c4:ea:9d:57:a7: da:f4:62:bc:57:39:6c:36:7f:e6:af:61:e4:59:ce: 31:e4:2e:60:73:18:c8:62:df:e6:3d:bf:24:2c:f8: 9f:e1:61:f5:77:a0:6c:98:d7:f8:b7:91:15:3c:b6: 58:5b:86:f7:53:5a:91:2d:cd:fd:ce:b0:58:6e:93: 59:53:fd:a3:75:4f:e7:f6:5a:29:33:bf:e4:4b:46: 01:a1:7e:8c:13:91:94:53:fc:a1:1b:f2:f1:72:bc: 3d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0F:5D:A5:2E:12:91:A8:6D:B8:53:E9:5A:D8:63:D0:8D:51:30:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/5ef24ba0-53e4-39a4-9e82-2a1ff0078706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl X509v3 Authority Key Identifier: keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer sbgp-ipAddrBlock: critical IPv4: 72.0.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:51:6e:23:ff:7f:e1:a6:ef:1e:8a:77:cf:5f:25:e0:09:86: 55:c6:64:11:55:58:7b:9b:54:29:2f:30:b5:13:f7:58:3f:34: 3c:18:8c:10:76:98:b6:fa:ed:09:ce:4f:f2:9b:b3:33:e0:af: 4f:54:60:7b:ab:76:50:1f:a5:5b:49:60:77:5a:6b:f2:5b:cf: f0:25:af:89:80:a6:74:8d:9c:cf:63:6f:e3:40:83:87:60:c5: 80:b4:f1:4f:46:dc:3a:5c:de:95:ef:17:df:a0:33:13:55:08: f4:17:df:0d:e2:51:64:98:bb:95:96:b5:26:87:72:56:84:0c: ef:dc:c8:ef:fc:b2:e2:fc:d1:13:8a:26:81:75:23:71:8a:03: 18:06:1b:eb:75:ce:30:9e:9e:2d:f9:9d:c2:8a:59:77:a4:ae: 55:40:d5:5a:fd:82:82:30:25:75:09:f2:8f:08:b7:f0:bf:06: be:8e:e6:74:d2:0b:63:f5:c5:b5:56:d9:9a:c0:5f:aa:91:0d: 60:e4:bd:4f:18:1b:d2:d2:64:8a:c0:bf:4d:50:62:0a:cd:e4: 40:ae:5f:c6:7c:77:ec:58:30:25:f5:d7:48:07:dc:cf:fb:1b: 9e:bc:c0:7d:51:a8:d4:0d:ed:55:d7:0f:b3:f0:51:88:c4:5d: ca:63:89:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYgZvIuGd1dSJrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlNjc5MzYtYzg1Ny00ODdkLTkzZGYtMmRmZjdmYTc5 OTg4MB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk NWEzY2E0NjktYWVkZS00YjA0LTljOTktMmE3ODdkOGQ2ZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphD3ellWrHPyPwWvmHBge+SE26sakZuchATb IwSYOiut6c0rFyM9hvkTrMUHybNEY7iYNgbslUZgh+aFG8FcyhNuf++R9XMmIvFc gUfeUb/i2NvIIVZH4s2bQwySFb13HAMhKxMX5/7CgEyjXALR0HNkIsH4Q7aYvjYc KYIy3SXQr0vfmvY+6VcD7/M3PLgYBJ2/VbULz3a+CovQ79FIxOqdV6fa9GK8Vzls Nn/mr2HkWc4x5C5gcxjIYt/mPb8kLPif4WH1d6BsmNf4t5EVPLZYW4b3U1qRLc39 zrBYbpNZU/2jdU/n9lopM7/kS0YBoX6ME5GUU/yhG/Lxcrw9mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEPXaUuEpGobbhT6VrYY9CNUTBBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2 NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZmN2ZhNzk5ODgvNWVmMjRiYTAtNTNlNC0z OWE0LTllODItMmExZmYwMDc4NzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTRlNjc5MzYtYzg1Ny00ODdkLTkz ZGYtMmRmZjdmYTc5OTg4L2E0ZTY3OTM2LWM4NTctNDg3ZC05M2RmLTJkZmY3ZmE3 OTk4OC5jcmwwHwYDVR0jBBgwFoAUFqXjOhIoly6fUjQBp27hlpzf6Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZm N2ZhNzk5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASADsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElRbiP/f+Gm7x6Kd89fJeAJhlXGZBFVWHubVCkvMLUT91g/NDwYjBB2 mLb67QnOT/KbszPgr09UYHurdlAfpVtJYHdaa/Jbz/Alr4mApnSNnM9jb+NAg4dg xYC08U9G3Dpc3pXvF9+gMxNVCPQX3w3iUWSYu5WWtSaHclaEDO/cyO/8suL80ROK JoF1I3GKAxgGG+t1zjCeni35ncKKWXekrlVA1Vr9goIwJXUJ8o8It/C/Br6O5nTS C2P1xbVW2ZrAX6qRDWDkvU8YG9LSZIrAv01QYgrN5ECuX8Z8d+xYMCX110gH3M/7 G568wH1RqNQN7VXXD7PwUYjEXcpjidA= -----END CERTIFICATE-----Generated at Mon Oct 20 20:42:58 2025 by rpki-client