$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/2fc77bf6-af57-3456-a0a3-021ff15b5fb6.roa File: 2fc77bf6-af57-3456-a0a3-021ff15b5fb6.roa (raw, json) Hash identifier: t+I8o0SpqEETOiEk3v2oRxuxS5ETVBPIud9RnkUSdAk= Subject key identifier: 1C:EE:F2:E8:4C:C1:BF:7D:DD:87:7F:A1:55:C9:F7:1B:F0:71:AC:11 Certificate issuer: /CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Certificate serial: 010D0C9F4328584B328C63685E393D188A723E80 Authority key identifier: 46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/2fc77bf6-af57-3456-a0a3-021ff15b5fb6.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 27455 IP address blocks: 72.21.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:63:68:5e:39:3d:18:8a:72:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=fdd5c650-c1ca-4a7f-9619-cb919cc6d2b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:43:ff:16:64:4c:87:6b:e6:33:2f:6a:83:f0: eb:01:c2:79:29:16:52:6a:4b:3c:97:16:b4:ea:3c: 17:d3:e3:3e:f6:b2:57:8e:9b:f4:08:90:31:50:06: 4f:30:be:93:27:b2:b7:23:27:4a:d8:7b:dc:31:0a: e8:53:2e:99:27:af:ed:7a:91:98:da:3f:97:70:79: f0:a5:a8:31:90:2c:7a:68:43:46:3c:26:1a:cb:53: eb:51:55:ef:74:1b:a1:11:22:3d:67:5d:38:22:15: 85:89:6c:61:b3:f0:10:28:df:12:7b:9d:fe:92:f5: d6:a7:b0:bf:c1:90:aa:bc:6f:5f:ca:6e:6e:f9:32: 26:b1:a7:bf:1b:19:19:ea:b0:b0:4e:10:2a:fb:a8: 12:26:d2:4f:10:2d:1e:a4:c4:13:01:40:c2:63:8d: 0a:59:5f:cc:81:61:b8:6e:d7:88:73:74:37:4f:f2: 22:25:10:18:e5:50:0b:30:6c:7a:3b:da:ae:29:37: e5:a5:1a:3b:90:4e:55:22:4c:65:dd:6c:aa:db:44: d7:79:a4:5a:e0:82:0d:53:72:b4:9a:81:1b:63:b5: 1e:28:72:28:c9:c3:10:2d:9a:ec:b1:54:b8:7f:52: 60:dd:de:d0:fd:9a:44:13:79:67:97:28:a6:bc:8f: 46:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EE:F2:E8:4C:C1:BF:7D:DD:87:7F:A1:55:C9:F7:1B:F0:71:AC:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/2fc77bf6-af57-3456-a0a3-021ff15b5fb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl X509v3 Authority Key Identifier: keyid:46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer sbgp-ipAddrBlock: critical IPv4: 72.21.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:3f:3a:df:b6:e5:83:c3:aa:b7:17:aa:54:50:48:65:59:0a: 93:fd:6b:90:84:51:e9:5a:97:c0:e0:8b:b8:cd:af:cc:72:af: d4:e6:38:77:f1:96:1a:f8:af:bf:9e:0a:09:5a:5e:8a:fe:ed: 6f:51:2d:40:a6:8a:b6:79:16:4d:17:0d:a7:0f:63:f4:75:e9: ac:54:b7:c0:18:75:dc:3c:66:86:20:07:c6:7e:39:a8:37:6e: 0f:a4:c6:c1:a8:d4:c0:2e:ce:bf:b9:9d:6d:93:b1:0c:1a:b0: b8:db:d7:0d:ca:01:4d:73:f6:93:7e:3b:4d:5f:d1:c0:58:21: d3:3a:9f:92:13:3f:50:5b:0b:e7:82:69:46:41:96:8a:db:65: 03:4a:45:78:4f:84:df:6a:a3:c4:e2:38:3d:5c:f4:a0:08:a8: 71:b7:65:53:26:3b:bd:2d:5d:24:6c:67:19:ad:fb:bd:43:e4: 5d:bb:a1:fb:6b:0e:15:fb:fb:65:72:14:5a:50:de:7f:4f:1b: b7:22:14:b6:62:e0:4a:b1:16:ca:43:af:06:03:ab:71:20:ce: 22:4a:11:67:85:12:3e:2e:89:d7:e9:46:3b:83:aa:4b:5c:1e: cb:2d:c7:90:13:2b:bd:21:6c:c0:fa:a9:d2:46:c1:2c:a4:46: e1:a7:da:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjGNoXjk9GIpyPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFkNWJkMjUtOGFmYS00ZTUwLWJiMDItZjYzMTdlYWM3 ZTA1MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk ZmRkNWM2NTAtYzFjYS00YTdmLTk2MTktY2I5MTljYzZkMmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0P/FmRMh2vmMy9qg/DrAcJ5KRZSaks8lxa0 6jwX0+M+9rJXjpv0CJAxUAZPML6TJ7K3IydK2HvcMQroUy6ZJ6/tepGY2j+XcHnw pagxkCx6aENGPCYay1PrUVXvdBuhESI9Z104IhWFiWxhs/AQKN8Se53+kvXWp7C/ wZCqvG9fym5u+TImsae/GxkZ6rCwThAq+6gSJtJPEC0epMQTAUDCY40KWV/MgWG4 bteIc3Q3T/IiJRAY5VALMGx6O9quKTflpRo7kE5VIkxl3Wyq20TXeaRa4IINU3K0 moEbY7UeKHIoycMQLZrssVS4f1Jg3d7Q/ZpEE3lnlyimvI9GNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzu8uhMwb993Yd/oVXJ9xvwcawRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1 YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMxN2VhYzdlMDUvMmZjNzdiZjYtYWY1Ny0z NDU2LWEwYTMtMDIxZmYxNWI1ZmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkNWJkMjUtOGFmYS00ZTUwLWJi MDItZjYzMTdlYWM3ZTA1LzRhZDViZDI1LThhZmEtNGU1MC1iYjAyLWY2MzE3ZWFj N2UwNS5jcmwwHwYDVR0jBBgwFoAURruHeu2z6puPCZYhgAjpLO1NwtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMx N2VhYzdlMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBWuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADE/Ot+25YPDqrcXqlRQSGVZCpP9a5CEUelal8Dgi7jNr8xyr9TmOHfx lhr4r7+eCglaXor+7W9RLUCmirZ5Fk0XDacPY/R16axUt8AYddw8ZoYgB8Z+Oag3 bg+kxsGo1MAuzr+5nW2TsQwasLjb1w3KAU1z9pN+O01f0cBYIdM6n5ITP1BbC+eC aUZBlorbZQNKRXhPhN9qo8TiOD1c9KAIqHG3ZVMmO70tXSRsZxmt+71D5F27oftr DhX7+2VyFFpQ3n9PG7ciFLZi4EqxFspDrwYDq3EgziJKEWeFEj4uidfpRjuDqktc Hsstx5ATK70hbMD6qdJGwSykRuGn2lo= -----END CERTIFICATE-----Generated at Mon Oct 20 18:16:31 2025 by rpki-client