$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc091a5c-1d82-3d91-abc1-a1cc0050c791.roa File: bc091a5c-1d82-3d91-abc1-a1cc0050c791.roa (raw, json) Hash identifier: YdTHaqQ/BhtsnbDfp2hJoqBO6KBTwq6lJl0fQlSuBfA= Subject key identifier: 9A:95:8F:B4:75:2D:2F:9A:32:69:85:C8:A7:BD:BB:AF:15:D7:88:67 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B3DB6F3516944612A40F688C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc091a5c-1d82-3d91-abc1-a1cc0050c791.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 63949 IP address blocks: 72.14.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b6:f3:51:69:44:61:2a:40:f6:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=6aad0446-42be-4180-8023-a71c4d4f42a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:66:53:c6:95:f9:19:2a:23:96:84:ee:25:4c: 10:8a:33:70:23:dd:06:2f:f7:cb:5d:4d:2a:1c:c7: 54:46:3c:47:0a:41:26:7f:60:d8:26:33:5e:4c:a4: ab:9c:bd:d5:df:aa:3a:be:94:10:77:85:30:73:e3: 27:a7:6b:d9:72:fe:c8:7f:55:31:ff:0d:19:03:ff: 08:af:33:2f:05:88:69:8f:cb:77:5d:98:10:2b:c5: de:1a:84:99:19:67:19:08:78:e0:79:2a:be:bd:3c: f8:f3:7d:68:fd:80:6d:2c:69:4d:cd:80:8e:13:51: 2f:82:14:b6:12:2f:ab:9c:dc:34:5a:43:93:b7:9f: fd:cc:5a:18:98:ad:50:a5:e4:0d:52:02:0b:da:76: 09:d9:ba:84:c3:e3:5e:b0:e8:40:4b:96:a4:7e:9e: 4d:c8:83:d5:09:0f:3f:a7:a7:19:e9:80:e0:24:4f: 3d:3f:2c:d5:28:26:89:74:6d:1a:df:ab:c0:e8:55: f3:a5:ef:0d:e2:20:bd:97:d8:d6:49:83:8e:58:4e: e9:6d:6a:a3:34:20:c0:63:e1:7d:c1:92:69:89:8a: 2c:0c:e7:32:a4:06:45:f3:f3:ed:ab:65:88:b8:68: 51:69:7d:74:53:d8:89:b5:ff:54:ad:14:78:bb:85: 1f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:95:8F:B4:75:2D:2F:9A:32:69:85:C8:A7:BD:BB:AF:15:D7:88:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc091a5c-1d82-3d91-abc1-a1cc0050c791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.14.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:c4:86:07:4d:5d:d7:f1:dd:f2:e8:f7:58:7b:94:c2:5b:d3: 7e:69:9b:7e:d9:b5:ac:a7:6e:e1:9f:c1:ca:30:64:6f:07:2d: a4:41:df:ef:89:01:9b:6f:70:48:52:2e:0f:93:a1:f4:f1:56: 06:72:c2:cd:3c:64:1a:74:75:66:ba:d9:4d:9c:5d:48:a2:f8: 4a:12:eb:b2:d1:6e:63:00:65:85:50:4c:04:2f:4b:ff:41:21: 74:fa:44:c1:5c:ba:29:7b:ae:42:46:30:9f:6a:d9:ca:c8:34: cf:0a:2b:dd:4b:8f:28:02:c2:d9:cd:93:c0:c5:88:ab:e9:b2: 13:bb:6c:75:2c:6d:04:8b:0d:75:d0:7a:f3:aa:34:b1:80:4e: 76:11:0f:30:5c:93:af:de:27:a4:ee:a6:c5:a0:d3:46:c3:02: da:aa:48:28:ff:47:51:2e:51:56:d7:79:7f:0b:46:b7:a2:c8: 67:48:bd:f4:14:fc:a1:e5:06:30:8a:b9:52:97:41:b4:cb:2a: 75:88:ae:5c:e3:f2:7c:97:75:4e:6f:2f:28:80:62:17:d3:09: 80:dd:11:54:71:a7:de:e2:1d:20:2a:05:70:4e:18:37:df:99: ed:6c:fa:9f:ad:e5:0d:b2:07:59:2f:08:cf:68:d9:33:b3:3e: 31:82:0f:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9tvNRaURhKkD2iMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NmFhZDA0NDYtNDJiZS00MTgwLTgwMjMtYTcxYzRkNGY0MmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2ZTxpX5GSojloTuJUwQijNwI90GL/fLXU0q HMdURjxHCkEmf2DYJjNeTKSrnL3V36o6vpQQd4Uwc+Mnp2vZcv7If1Ux/w0ZA/8I rzMvBYhpj8t3XZgQK8XeGoSZGWcZCHjgeSq+vTz4831o/YBtLGlNzYCOE1EvghS2 Ei+rnNw0WkOTt5/9zFoYmK1QpeQNUgIL2nYJ2bqEw+NesOhAS5akfp5NyIPVCQ8/ p6cZ6YDgJE89PyzVKCaJdG0a36vA6FXzpe8N4iC9l9jWSYOOWE7pbWqjNCDAY+F9 wZJpiYosDOcypAZF8/Ptq2WIuGhRaX10U9iJtf9UrRR4u4Uf+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqVj7R1LS+aMmmFyKe9u68V14hnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmMwOTFhNWMtMWQ4Mi0z ZDkxLWFiYzEtYTFjYzAwNTBjNzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESA6wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/EhgdNXdfx3fLo91h7lMJb035pm37ZtaynbuGfwcowZG8HLaRB3++J AZtvcEhSLg+TofTxVgZyws08ZBp0dWa62U2cXUii+EoS67LRbmMAZYVQTAQvS/9B IXT6RMFcuil7rkJGMJ9q2crINM8KK91LjygCwtnNk8DFiKvpshO7bHUsbQSLDXXQ evOqNLGATnYRDzBck6/eJ6TupsWg00bDAtqqSCj/R1EuUVbXeX8LRreiyGdIvfQU /KHlBjCKuVKXQbTLKnWIrlzj8nyXdU5vLyiAYhfTCYDdEVRxp97iHSAqBXBOGDff me1s+p+t5Q2yB1kvCM9o2TOzPjGCD5A= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:45 2025 by rpki-client