$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/4dc41826-c2f5-3673-b947-f97fd3be3e7f.roa File: 4dc41826-c2f5-3673-b947-f97fd3be3e7f.roa (raw, json) Hash identifier: X4SmU6BzYFwOGh3jim7OtK/6ps1UrvWIRfULEAy8f3Q= Subject key identifier: 6D:C6:F4:A9:61:63:A6:8E:80:0A:A1:72:43:7B:ED:78:66:3A:09:28 Certificate issuer: /CN=c9a96b03-6960-4655-8e34-04473ec1768f Certificate serial: 010D0C9F4328584B94421EC26B719F130405BE00 Authority key identifier: AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/4dc41826-c2f5-3673-b947-f97fd3be3e7f.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 40232 IP address blocks: 69.72.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:1e:c2:6b:71:9f:13:04:05:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9a96b03-6960-4655-8e34-04473ec1768f Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=7713aae9-352a-48c4-bc38-ed8ac2e44c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:98:1b:57:b4:30:b8:e5:5c:dc:0f:b7:66:6b: 3f:3d:01:bb:24:4e:aa:37:3c:8f:45:a0:45:86:d3: 7c:ee:a5:69:e8:56:2b:6e:1a:ac:2c:54:84:9f:fe: 54:c7:11:0f:da:6e:28:76:e8:cf:20:06:12:d4:c8: 2a:5a:54:43:a9:2a:65:f1:15:63:64:99:16:7a:50: 64:8e:9b:0f:2d:1b:1d:04:48:51:c3:dc:0f:24:16: c5:0a:b2:02:e4:0e:76:49:ea:6d:19:c1:f4:82:8a: f3:58:77:20:67:3c:73:bd:c5:a5:0b:57:1d:8e:6a: 4a:00:a8:59:a5:66:df:db:ff:80:69:03:3a:95:c9: 4b:54:5a:12:ae:1a:77:bc:f2:d1:c7:96:54:9d:b1: bc:31:7b:e6:fb:1b:53:06:9a:b5:13:20:ac:6a:53: 04:da:af:ef:9c:66:9e:ce:77:27:43:4a:dd:cb:d7: 11:3e:d1:ab:24:84:06:84:45:14:64:11:1b:56:74: 36:e5:0e:ca:73:10:99:4c:1f:82:18:6b:fb:b2:1a: 8b:50:30:94:d2:97:62:3b:cf:a2:f3:37:fb:9c:f5: 6b:e7:d3:f1:c0:cd:09:df:fa:c6:7e:31:4c:3f:4f: cd:cf:4d:9c:5b:9a:f0:05:6e:7a:f9:7c:ed:05:95: 04:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C6:F4:A9:61:63:A6:8E:80:0A:A1:72:43:7B:ED:78:66:3A:09:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/4dc41826-c2f5-3673-b947-f97fd3be3e7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.crl X509v3 Authority Key Identifier: keyid:AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer sbgp-ipAddrBlock: critical IPv4: 69.72.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:35:88:8c:91:c9:9d:5c:c8:d4:da:3e:d1:82:8c:f2:62:29: 85:8f:47:03:1c:70:50:c9:9b:eb:45:70:4e:7f:d9:10:c0:a6: b6:20:f2:42:1d:96:c6:65:4c:e6:3e:24:65:ac:4e:3c:a4:00: 9c:fb:79:75:19:83:10:66:24:65:34:fe:35:91:b3:93:01:f4: d8:89:57:96:3b:4e:a6:0a:64:14:51:2f:88:e0:c8:ac:dc:a7: 37:72:b6:92:81:a2:1a:4f:cb:6f:f5:02:a4:ff:9d:60:8e:0d: b1:31:b5:56:37:1a:74:f5:b4:3a:6f:5b:3c:b2:2e:48:76:a6: 36:20:ec:89:77:0d:e3:37:c1:3d:fe:40:2e:26:17:94:05:cb: 26:b9:d3:f1:e6:88:5d:1f:17:8f:1c:9a:54:2c:a4:1d:7d:f8: 87:66:03:8f:86:f9:20:34:a1:bb:05:32:b7:07:fa:49:2d:6d: 65:53:cd:f2:f4:cb:6c:4a:93:3f:f1:4a:48:9a:3a:1d:8a:ff: 80:fd:f3:94:e2:7f:db:15:98:2d:f7:d9:c1:1a:dd:2d:c6:be: 8a:11:a5:b7:82:cc:8f:c4:8d:6f:9c:bc:d0:e3:12:d8:a7:a3: 7f:fc:df:bc:1a:13:f5:b5:60:38:60:42:60:85:fb:8e:82:03: ca:2e:8d:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQh7Ca3GfEwQFvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlhOTZiMDMtNjk2MC00NjU1LThlMzQtMDQ0NzNlYzE3 NjhmMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk NzcxM2FhZTktMzUyYS00OGM0LWJjMzgtZWQ4YWMyZTQ0Yzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5gbV7QwuOVc3A+3Zms/PQG7JE6qNzyPRaBF htN87qVp6FYrbhqsLFSEn/5UxxEP2m4odujPIAYS1MgqWlRDqSpl8RVjZJkWelBk jpsPLRsdBEhRw9wPJBbFCrIC5A52SeptGcH0gorzWHcgZzxzvcWlC1cdjmpKAKhZ pWbf2/+AaQM6lclLVFoSrhp3vPLRx5ZUnbG8MXvm+xtTBpq1EyCsalME2q/vnGae zncnQ0rdy9cRPtGrJIQGhEUUZBEbVnQ25Q7KcxCZTB+CGGv7shqLUDCU0pdiO8+i 8zf7nPVr59PxwM0J3/rGfjFMP0/Nz02cW5rwBW56+XztBZUE6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3G9KlhY6aOgAqhckN77XhmOgkoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jOWE5 NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3M2VjMTc2OGYvNGRjNDE4MjYtYzJmNS0z NjczLWI5NDctZjk3ZmQzYmUzZTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzlhOTZiMDMtNjk2MC00NjU1LThl MzQtMDQ0NzNlYzE3NjhmL2M5YTk2YjAzLTY5NjAtNDY1NS04ZTM0LTA0NDczZWMx NzY4Zi5jcmwwHwYDVR0jBBgwFoAUrwgS6wZw8Ya91DVYitUl5c6ErVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jOWE5NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3 M2VjMTc2OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRUgIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIE1iIyRyZ1cyNTaPtGCjPJiKYWPRwMccFDJm+tFcE5/2RDAprYg8kId lsZlTOY+JGWsTjykAJz7eXUZgxBmJGU0/jWRs5MB9NiJV5Y7TqYKZBRRL4jgyKzc pzdytpKBohpPy2/1AqT/nWCODbExtVY3GnT1tDpvWzyyLkh2pjYg7Il3DeM3wT3+ QC4mF5QFyya50/HmiF0fF48cmlQspB19+IdmA4+G+SA0obsFMrcH+kktbWVTzfL0 y2xKkz/xSkiaOh2K/4D985Tif9sVmC332cEa3S3GvooRpbeCzI/EjW+cvNDjEtin o3/837waE/W1YDhgQmCF+46CA8oujSU= -----END CERTIFICATE-----Generated at Mon Oct 20 08:46:30 2025 by rpki-client