$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/7184dd74-89fd-3c6e-b115-5d35ea6e0349.roa File: 7184dd74-89fd-3c6e-b115-5d35ea6e0349.roa (raw, json) Hash identifier: WzQc6YmLtg/9Fhdm63mqAT1Jib4D7wbzC9tYhseKtEc= Subject key identifier: CF:EE:C0:24:B9:21:F7:97:65:18:5F:98:DE:2B:B6:E1:C9:3D:75:71 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584B8B433C39E6272D38409BF340 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/7184dd74-89fd-3c6e-b115-5d35ea6e0349.roa Signing time: Thu 16 Oct 2025 19:40:32 +0000 ROA not before: Thu 16 Oct 2025 19:40:32 +0000 ROA not after: Wed 14 Jan 2026 20:40:32 +0000 asID: 6079 IP address blocks: 72.57.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:43:3c:39:e6:27:2d:38:40:9b:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Oct 16 19:40:32 2025 GMT Not After : Jan 14 20:40:32 2026 GMT Subject: CN=c0147898-0ab3-4577-8a82-6e3e2a102be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5a:47:b7:90:d0:d8:0a:ed:1f:ca:87:3c:45: d4:72:1a:f1:1b:cb:a8:b6:5d:ea:2e:ab:b3:e9:dd: 6f:45:62:bb:3a:75:14:56:82:fd:66:76:6a:eb:b8: 2e:12:8a:72:5b:c9:6b:97:1f:56:8f:9d:ff:5f:cb: 3e:a7:ee:41:54:2d:27:c5:35:6c:0a:54:21:71:37: 34:e9:36:4f:91:96:7e:dd:a9:67:44:9c:b5:17:d6: 35:da:2f:76:29:0e:20:9d:79:18:aa:1a:39:d2:1b: a6:62:b9:c8:6b:91:b3:1a:ad:a8:b0:2b:94:de:39: 92:cd:d2:24:01:81:30:d8:d5:5b:d9:35:2c:94:d3: 35:f7:87:ac:3f:7f:db:45:84:da:e5:cc:de:62:fb: 0a:8d:cf:55:19:57:80:4f:20:ff:55:ba:e6:73:fc: 8f:f9:9d:1e:43:25:82:a2:49:97:ce:ce:45:73:bb: 66:b0:d7:83:60:2b:dd:7b:f2:35:2c:02:5d:f7:a7: 7b:1d:ce:37:17:24:6a:ab:41:f3:e9:a4:c1:b4:17: 41:9c:55:ce:4e:4e:74:70:c9:b8:26:88:4c:63:ca: 17:f4:a9:1f:d9:db:09:2b:bb:71:94:c2:3b:f4:fc: 3f:7b:48:b5:e7:93:db:70:9c:47:97:2f:84:44:cf: e6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:EE:C0:24:B9:21:F7:97:65:18:5F:98:DE:2B:B6:E1:C9:3D:75:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/7184dd74-89fd-3c6e-b115-5d35ea6e0349.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 72.57.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:a8:1d:d4:7a:ad:e4:07:fb:44:32:b7:8e:28:f1:18:1f:1e: a8:4e:6b:b6:34:e5:43:84:b9:80:29:50:b5:ba:05:3e:56:2c: d1:da:d4:41:42:ff:b2:9f:93:0c:b3:87:b6:4f:e1:23:41:e7: a5:61:8b:2e:dc:0f:b1:a0:fb:04:f8:48:48:14:bc:f2:92:54: 69:20:bf:e7:e5:08:dd:6b:f8:df:80:17:7e:f2:ac:af:fa:56: 89:0b:03:ad:0d:37:6b:8b:a1:04:69:7a:bd:bf:9b:4a:a7:fc: 26:e1:6c:90:04:99:65:15:79:8b:d6:84:bb:db:e7:82:5b:5d: 06:8d:4c:6e:09:61:30:2d:55:68:fe:62:65:aa:c6:72:58:ba: 0e:4f:3e:9b:06:8b:b4:b6:7b:d7:07:43:d0:89:19:ed:38:49: 31:d1:77:e8:00:94:5a:bf:06:5e:0e:69:99:70:0e:f9:29:de: bf:f9:4f:a9:81:6a:09:57:03:4a:05:e8:69:45:15:2b:d3:82: 25:8a:09:36:43:f7:84:b3:f3:35:d1:b2:02:e3:c5:65:ec:c6: a3:ac:cc:2e:ac:9c:1e:69:b7:ee:b6:96:95:15:25:44:30:3b: 84:e1:a3:ca:ea:2d:e3:90:63:f9:30:59:47:f9:df:ab:2f:78: 61:1b:1f:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuLQzw55ictOECb80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MTAxNjE5NDAzMloXDTI2MDExNDIwNDAzMlowLzEtMCsGA1UEAxMk YzAxNDc4OTgtMGFiMy00NTc3LThhODItNmUzZTJhMTAyYmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1pHt5DQ2ArtH8qHPEXUchrxG8uotl3qLquz 6d1vRWK7OnUUVoL9ZnZq67guEopyW8lrlx9Wj53/X8s+p+5BVC0nxTVsClQhcTc0 6TZPkZZ+3alnRJy1F9Y12i92KQ4gnXkYqho50humYrnIa5GzGq2osCuU3jmSzdIk AYEw2NVb2TUslNM194esP3/bRYTa5czeYvsKjc9VGVeATyD/Vbrmc/yP+Z0eQyWC okmXzs5Fc7tmsNeDYCvde/I1LAJd96d7Hc43FyRqq0Hz6aTBtBdBnFXOTk50cMm4 JohMY8oX9Kkf2dsJK7txlMI79Pw/e0i155PbcJxHly+ERM/mdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/uwCS5IfeXZRhfmN4rtuHJPXVxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvNzE4NGRkNzQtODlmZC0z YzZlLWIxMTUtNWQzNWVhNmUwMzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESDlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM+oHdR6reQH+0Qyt44o8RgfHqhOa7Y05UOEuYApULW6BT5WLNHa1EFC /7Kfkwyzh7ZP4SNB56Vhiy7cD7Gg+wT4SEgUvPKSVGkgv+flCN1r+N+AF37yrK/6 VokLA60NN2uLoQRper2/m0qn/CbhbJAEmWUVeYvWhLvb54JbXQaNTG4JYTAtVWj+ YmWqxnJYug5PPpsGi7S2e9cHQ9CJGe04STHRd+gAlFq/Bl4OaZlwDvkp3r/5T6mB aglXA0oF6GlFFSvTgiWKCTZD94Sz8zXRsgLjxWXsxqOszC6snB5pt+62lpUVJUQw O4Tho8rqLeOQY/kwWUf536sveGEbH1c= -----END CERTIFICATE-----Generated at Mon Oct 20 01:55:37 2025 by rpki-client