$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/5a3099c6-e346-3491-bde9-84061b37cc95.roa File: 5a3099c6-e346-3491-bde9-84061b37cc95.roa (raw, json) Hash identifier: YHBJhPHg1vF+zZNCrrtIPZrkQ9Xtgf0WRIwRV+S8Jps= Subject key identifier: 03:C2:B3:FA:0C:65:74:0E:7C:3C:D1:5A:77:2F:AA:08:7A:08:63:B3 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584B4FDC74802E1C7F422252EEC0 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/5a3099c6-e346-3491-bde9-84061b37cc95.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 63062 IP address blocks: 72.170.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:74:80:2e:1c:7f:42:22:52:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=b9266080-871e-483a-9f19-cb8dfdf49645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a8:45:7e:22:13:aa:a5:49:7b:08:5c:58:19: dd:20:7e:53:d0:e5:54:30:e9:3c:77:c8:5a:66:e9: da:bb:84:90:fc:95:25:bc:1e:41:26:51:61:04:a8: 60:be:6b:68:be:da:2d:c2:52:bc:64:e3:4e:ae:5a: 36:f3:a9:bf:b7:93:40:f1:84:db:a4:86:fc:ad:26: 6f:ad:22:39:08:cf:f0:56:03:a2:5e:8c:3f:30:2a: 2e:08:8b:8e:52:15:2e:55:9b:ce:4a:f3:fe:30:13: ab:62:16:0f:f3:ab:29:14:b5:20:45:8e:4d:c1:19: 70:15:f5:4f:7b:a4:c8:95:cb:bb:39:56:f7:cc:25: 48:0e:5b:77:bc:5c:5c:5e:74:f6:da:93:de:e9:ab: a5:e8:7d:74:10:b3:10:e6:12:c9:44:2e:49:19:78: 32:95:19:3a:e2:0d:b5:1c:c0:3c:7f:40:b8:3a:30: 51:26:8a:26:8b:a8:b7:23:6b:0e:b6:85:e3:53:ce: b5:39:47:c7:04:d2:dd:39:22:3d:8c:87:66:fd:5e: 5b:b9:09:0e:51:3a:c0:53:cc:5c:af:25:fb:86:a1: e5:a9:70:0d:e8:33:8d:bc:bd:0c:75:a0:aa:77:2f: c3:fd:23:fb:78:a9:0f:6e:cb:e6:69:7e:8b:1b:70: d4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C2:B3:FA:0C:65:74:0E:7C:3C:D1:5A:77:2F:AA:08:7A:08:63:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/5a3099c6-e346-3491-bde9-84061b37cc95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 72.170.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:4c:4d:d2:3c:6f:ff:e9:08:43:51:de:3b:8e:eb:7a:23:36: 5a:06:c6:1e:c5:c3:1d:4c:01:1c:54:57:39:bc:e2:2a:75:bd: 6e:45:83:0a:1c:62:fd:49:da:19:e7:1f:29:d8:9e:ff:66:6e: 1c:27:35:8e:68:16:13:cf:76:73:db:1b:50:33:5b:3c:ca:17: 5a:be:40:e8:78:74:47:46:53:3b:e5:fe:d6:47:06:c1:1d:58: 79:3f:6f:f1:bf:e1:75:39:52:f2:18:c8:05:20:87:04:82:ae: 71:7d:84:e1:e4:0a:02:98:a1:9e:f1:cf:c1:c2:21:81:43:e6: b2:f6:5e:d2:b1:fc:63:f8:12:ab:45:ae:ec:48:41:76:b4:a7: fc:42:ee:73:08:8a:11:c5:28:57:81:e8:25:8c:a9:04:92:8e: 57:a9:8d:7b:2c:87:3e:96:7c:d6:f7:34:73:12:2c:94:4f:29: 31:ae:4e:df:15:72:b1:91:0f:30:93:b2:e4:8d:17:41:61:d8: e5:e6:a6:74:ce:77:1a:08:d3:76:ae:54:cc:d9:57:97:17:0d: 9a:6b:e8:27:e5:67:a6:7e:a2:c2:fe:e8:e8:a1:76:41:f1:c0: 0c:64:f3:26:be:9b:52:a2:5b:a0:1b:5d:61:f4:a7:d2:58:d0: 86:91:52:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3HSALhx/QiJS7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk YjkyNjYwODAtODcxZS00ODNhLTlmMTktY2I4ZGZkZjQ5NjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlahFfiITqqVJewhcWBndIH5T0OVUMOk8d8ha Zunau4SQ/JUlvB5BJlFhBKhgvmtovtotwlK8ZONOrlo286m/t5NA8YTbpIb8rSZv rSI5CM/wVgOiXow/MCouCIuOUhUuVZvOSvP+MBOrYhYP86spFLUgRY5NwRlwFfVP e6TIlcu7OVb3zCVIDlt3vFxcXnT22pPe6aul6H10ELMQ5hLJRC5JGXgylRk64g21 HMA8f0C4OjBRJoomi6i3I2sOtoXjU861OUfHBNLdOSI9jIdm/V5buQkOUTrAU8xc ryX7hqHlqXAN6DONvL0MdaCqdy/D/SP7eKkPbsvmaX6LG3DUTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPCs/oMZXQOfDzRWncvqgh6CGOzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvNWEzMDk5YzYtZTM0Ni0z NDkxLWJkZTktODQwNjFiMzdjYzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASKrfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJMTdI8b//pCENR3juO63ojNloGxh7Fwx1MARxUVzm84ip1vW5Fgwoc Yv1J2hnnHynYnv9mbhwnNY5oFhPPdnPbG1AzWzzKF1q+QOh4dEdGUzvl/tZHBsEd WHk/b/G/4XU5UvIYyAUghwSCrnF9hOHkCgKYoZ7xz8HCIYFD5rL2XtKx/GP4EqtF ruxIQXa0p/xC7nMIihHFKFeB6CWMqQSSjlepjXsshz6WfNb3NHMSLJRPKTGuTt8V crGRDzCTsuSNF0Fh2OXmpnTOdxoI03auVMzZV5cXDZpr6CflZ6Z+osL+6OihdkHx wAxk8ya+m1KiW6AbXWH0p9JY0IaRUms= -----END CERTIFICATE-----Generated at Sat Oct 11 20:01:20 2025 by rpki-client