$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/ca9bc5f1-24ad-377d-a175-235bd349420c.roa File: ca9bc5f1-24ad-377d-a175-235bd349420c.roa (raw, json) Hash identifier: V89JkRfpbmdG8Ns/wRV+wU5dIKxVfIWBbetxvjTdiV0= Subject key identifier: 8D:6B:10:4B:FE:77:0E:7C:E2:62:71:14:27:1A:18:CE:A6:FE:B3:E8 Certificate issuer: /CN=174db496-399b-48c7-919e-3e6dfd4a5584 Certificate serial: 010D0C9F4328584B4B1D85E2E04025282833E1C0 Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/ca9bc5f1-24ad-377d-a175-235bd349420c.roa Signing time: Tue 23 Sep 2025 20:12:49 +0000 ROA not before: Tue 23 Sep 2025 20:12:49 +0000 ROA not after: Mon 22 Dec 2025 21:12:49 +0000 asID: 40934 IP address blocks: 72.1.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:1d:85:e2:e0:40:25:28:28:33:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584 Validity Not Before: Sep 23 20:12:49 2025 GMT Not After : Dec 22 21:12:49 2025 GMT Subject: CN=0ce42d80-441f-4069-a360-2e9812858ff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:83:d7:e8:6d:2b:b8:a8:78:9d:45:cf:9f:7d: ba:e8:64:8b:6a:6e:db:ba:f1:9d:73:2a:55:72:24: 3c:e6:42:7b:39:7a:c2:39:eb:0b:a0:73:46:65:b8: 1d:00:f7:eb:1e:b8:25:3f:83:fd:8b:49:88:49:2a: 5c:17:95:49:c9:f7:a0:34:cf:84:83:e5:0a:f9:df: 7d:4c:bc:22:70:b5:25:a1:7c:76:4b:58:2e:eb:d6: 55:7f:49:92:ad:b7:02:12:ed:b8:15:68:c5:94:4f: f8:1f:6f:7f:77:96:f5:2c:32:90:f3:ba:23:f4:ec: 4e:cb:a2:32:18:d3:13:6d:6c:df:be:ce:85:92:41: b1:75:8b:a2:03:56:b1:2a:d3:bf:86:02:d4:db:dd: f4:c3:2e:b4:5e:bf:7b:6a:0f:80:13:57:f6:fe:68: c0:31:e9:4b:31:61:93:62:58:20:cf:06:cc:93:c7: 02:4d:75:b6:6c:65:93:60:7a:ec:cd:e8:eb:4e:a9: 44:a0:83:99:66:da:9e:41:4c:83:63:51:56:90:47: e0:ab:72:19:c2:e3:34:07:4f:65:f1:63:eb:b1:b4: 08:fd:98:43:80:3e:b0:c1:95:cd:5b:1b:8a:ee:3b: 39:6c:2e:2d:35:6b:6d:03:63:36:43:c2:14:cb:c8: 95:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6B:10:4B:FE:77:0E:7C:E2:62:71:14:27:1A:18:CE:A6:FE:B3:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/ca9bc5f1-24ad-377d-a175-235bd349420c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl X509v3 Authority Key Identifier: keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer sbgp-ipAddrBlock: critical IPv4: 72.1.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:3a:d2:3f:09:fd:90:32:9e:94:a4:03:8d:aa:d1:74:92:51: a0:89:06:75:be:fb:4b:17:69:a1:78:00:64:00:59:d4:1e:06: a7:7a:47:eb:03:00:15:c2:02:29:92:67:0e:7a:cb:a0:23:33: 2b:1d:70:fa:f0:68:d0:b2:7e:f8:83:eb:18:02:6c:a5:06:11: cc:74:c2:c7:b8:82:28:95:49:bf:15:ad:ba:0f:0c:32:97:b1: f4:7b:54:85:ae:a4:df:89:7e:9f:ef:44:fe:34:9e:7f:9f:3a: 3a:4f:59:33:49:d6:d2:1c:6e:6f:46:0a:07:5a:d4:bc:ca:6d: 83:b0:76:9e:e6:16:a8:a2:83:2a:07:99:de:46:fa:ef:d5:db: d3:be:7c:a7:f1:ef:d3:30:2c:eb:68:59:16:99:dd:b0:29:4a: 59:9d:eb:e4:c5:10:b3:19:1d:c9:67:e7:0b:ba:89:ee:f1:8f: 18:cb:2e:9b:57:27:2d:b8:8d:ef:cc:a7:8b:1c:81:ba:80:65: 1a:1c:fc:37:3a:d9:9a:c9:f3:0b:83:6d:cf:ee:af:43:ee:b2: c1:e2:5f:e4:53:31:b8:5d:be:2e:0f:a6:27:c2:d0:f7:68:88: 37:6e:ea:cc:60:b5:26:04:8a:3d:29:d1:e1:d8:33:93:24:4b: a1:f8:4f:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtLHYXi4EAlKCgz4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1 NTg0MB4XDTI1MDkyMzIwMTI0OVoXDTI1MTIyMjIxMTI0OVowLzEtMCsGA1UEAxMk MGNlNDJkODAtNDQxZi00MDY5LWEzNjAtMmU5ODEyODU4ZmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYPX6G0ruKh4nUXPn3266GSLam7buvGdcypV ciQ85kJ7OXrCOesLoHNGZbgdAPfrHrglP4P9i0mISSpcF5VJyfegNM+Eg+UK+d99 TLwicLUloXx2S1gu69ZVf0mSrbcCEu24FWjFlE/4H29/d5b1LDKQ87oj9OxOy6Iy GNMTbWzfvs6FkkGxdYuiA1axKtO/hgLU2930wy60Xr97ag+AE1f2/mjAMelLMWGT YlggzwbMk8cCTXW2bGWTYHrszejrTqlEoIOZZtqeQUyDY1FWkEfgq3IZwuM0B09l 8WPrsbQI/ZhDgD6wwZXNWxuK7js5bC4tNWttA2M2Q8IUy8iVyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1rEEv+dw584mJxFCcaGM6m/rPoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRk YjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvY2E5YmM1ZjEtMjRhZC0z NzdkLWExNzUtMjM1YmQzNDk0MjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc0ZGI0OTYtMzk5Yi00OGM3LTkx OWUtM2U2ZGZkNGE1NTg0LzE3NGRiNDk2LTM5OWItNDhjNy05MTllLTNlNmRmZDRh NTU4NC5jcmwwHwYDVR0jBBgwFoAUnbYvqwyEv+F7kStHMMc1sXqvgNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZk ZmQ0YTU1ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSAFWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGY60j8J/ZAynpSkA42q0XSSUaCJBnW++0sXaaF4AGQAWdQeBqd6R+sD ABXCAimSZw56y6AjMysdcPrwaNCyfviD6xgCbKUGEcx0wse4giiVSb8VrboPDDKX sfR7VIWupN+Jfp/vRP40nn+fOjpPWTNJ1tIcbm9GCgda1LzKbYOwdp7mFqiigyoH md5G+u/V29O+fKfx79MwLOtoWRaZ3bApSlmd6+TFELMZHcln5wu6ie7xjxjLLptX Jy24je/Mp4scgbqAZRoc/Dc62ZrJ8wuDbc/ur0PussHiX+RTMbhdvi4PpifC0Pdo iDdu6sxgtSYEij0p0eHYM5MkS6H4T88= -----END CERTIFICATE-----Generated at Sat Oct 11 02:25:50 2025 by rpki-client