$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/a72132db-d78f-356a-8864-94bcb97cca83.roa File: a72132db-d78f-356a-8864-94bcb97cca83.roa (raw, json) Hash identifier: GU4xeJZ6PfvQq6Im5o3YKAbw/2d5NjMIxUSf47d/Mr8= Subject key identifier: 18:E7:37:AA:7D:50:FD:57:CC:30:F8:61:16:23:6D:F4:42:77:11:87 Certificate issuer: /CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea Certificate serial: 010D0C9F4328584B477C7BF06B8DE7563EC73F60 Authority key identifier: 54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/a72132db-d78f-356a-8864-94bcb97cca83.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 10753 IP address blocks: 66.128.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:7b:f0:6b:8d:e7:56:3e:c7:3f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72a39293-5ddb-4cc0-8353-2b258e2e78ea Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=e1bd32f2-2c8d-43b7-af4c-523e97f1807d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:86:db:cd:5c:32:d7:40:9b:5e:08:d0:be:da: 89:7e:d9:4d:22:4d:3a:be:b9:a9:0f:6a:95:f4:09: ac:08:7c:5f:50:73:43:22:03:51:17:dc:ac:a0:ab: 05:d9:95:04:80:a3:e7:29:e8:d1:11:bf:5d:b9:af: 9e:c9:54:bb:be:b6:ee:e0:c5:c5:61:b3:c5:e2:f1: ca:f8:76:bf:33:44:cd:74:7f:90:47:53:13:01:36: 46:e4:f2:db:56:00:e4:00:4e:83:25:79:ba:1a:93: b3:dd:4c:0c:4c:c5:be:a2:a9:13:8d:c7:78:b2:54: e0:70:f7:c0:d8:a3:04:c2:93:ac:ec:1a:c9:48:d7: 9d:bf:7d:7f:bd:78:5d:3a:f7:2a:f0:24:02:96:f2: 60:ad:d9:a7:8c:35:39:f5:d8:60:f0:de:06:26:3e: fc:04:35:48:53:99:51:47:a8:e2:ff:63:a2:1c:a6: d0:47:dc:91:63:d4:5e:6d:11:42:c7:08:81:40:03: d7:91:c3:ef:d5:83:c4:80:92:30:89:62:52:71:60: ab:45:08:af:18:de:e3:d0:be:5e:a9:5a:b7:79:48: 83:c5:fd:af:62:41:25:57:d8:d7:c0:41:0f:2e:73: 5d:b0:47:4e:57:32:74:31:82:16:3d:41:04:5f:e5: 55:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E7:37:AA:7D:50:FD:57:CC:30:F8:61:16:23:6D:F4:42:77:11:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/a72132db-d78f-356a-8864-94bcb97cca83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea/72a39293-5ddb-4cc0-8353-2b258e2e78ea.crl X509v3 Authority Key Identifier: keyid:54:EA:23:CA:05:20:B8:CA:42:80:7D:29:67:F8:3E:A1:F9:EE:DB:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/72a39293-5ddb-4cc0-8353-2b258e2e78ea.cer sbgp-ipAddrBlock: critical IPv4: 66.128.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:a4:f7:3e:fb:bf:39:e0:2b:03:70:af:d6:30:72:50:ee:ec: a6:98:5f:04:79:e3:b9:3a:b5:9e:76:2d:4b:67:b6:77:bc:94: 85:15:14:31:71:8f:b3:a6:e1:2e:5a:7c:21:1d:5c:e7:9a:94: 65:c8:4a:8c:9d:0e:05:77:b2:dc:2d:45:75:55:3d:a6:da:ed: 4e:53:81:dc:61:bb:25:69:ff:54:0d:f3:42:51:75:85:a3:79: 09:7d:77:ad:72:17:b1:0a:f3:af:05:c6:35:88:8a:ea:ce:83: 99:1c:3d:a7:b6:b9:6c:ff:51:57:3e:a8:73:b2:11:d0:2d:1e: 61:59:1a:b8:1f:52:36:d4:81:67:3a:d2:b1:ac:92:cd:7d:42: 6a:1b:85:0b:17:eb:b3:a1:5f:0c:59:21:4c:60:9e:2e:06:01: 8e:ea:89:5c:99:e4:f9:21:96:0e:34:72:ed:cb:9c:a8:b1:b0: b6:16:b1:4f:20:bb:2a:59:76:88:6e:9f:8a:09:1d:51:bc:02: 12:76:af:3f:a3:3a:8b:34:10:bf:97:15:50:70:11:c4:99:a4: 95:40:c4:66:c6:13:90:63:e3:45:c2:c9:cc:1e:11:87:d0:32: d3:f4:6c:00:1a:40:4b:20:e8:fd:32:d5:3c:ad:13:7d:6d:12: d0:ac:49:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfHvwa43nVj7HP2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzJhMzkyOTMtNWRkYi00Y2MwLTgzNTMtMmIyNThlMmU3 OGVhMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk ZTFiZDMyZjItMmM4ZC00M2I3LWFmNGMtNTIzZTk3ZjE4MDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoobbzVwy10CbXgjQvtqJftlNIk06vrmpD2qV 9AmsCHxfUHNDIgNRF9ysoKsF2ZUEgKPnKejREb9dua+eyVS7vrbu4MXFYbPF4vHK +Ha/M0TNdH+QR1MTATZG5PLbVgDkAE6DJXm6GpOz3UwMTMW+oqkTjcd4slTgcPfA 2KMEwpOs7BrJSNedv31/vXhdOvcq8CQClvJgrdmnjDU59dhg8N4GJj78BDVIU5lR R6ji/2OiHKbQR9yRY9RebRFCxwiBQAPXkcPv1YPEgJIwiWJScWCrRQivGN7j0L5e qVq3eUiDxf2vYkElV9jXwEEPLnNdsEdOVzJ0MYIWPUEEX+VV0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjnN6p9UP1XzDD4YRYjbfRCdxGHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MmEz OTI5My01ZGRiLTRjYzAtODM1My0yYjI1OGUyZTc4ZWEvYTcyMTMyZGItZDc4Zi0z NTZhLTg4NjQtOTRiY2I5N2NjYTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzJhMzkyOTMtNWRkYi00Y2MwLTgz NTMtMmIyNThlMmU3OGVhLzcyYTM5MjkzLTVkZGItNGNjMC04MzUzLTJiMjU4ZTJl NzhlYS5jcmwwHwYDVR0jBBgwFoAUVOojygUguMpCgH0pZ/g+ofnu28MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83MmEzOTI5My01ZGRiLTRjYzAtODM1My0yYjI1 OGUyZTc4ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQoDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL6k9z77vzngKwNwr9YwclDu7KaYXwR547k6tZ52LUtntne8lIUVFDFx j7Om4S5afCEdXOealGXISoydDgV3stwtRXVVPaba7U5TgdxhuyVp/1QN80JRdYWj eQl9d61yF7EK868FxjWIiurOg5kcPae2uWz/UVc+qHOyEdAtHmFZGrgfUjbUgWc6 0rGsks19QmobhQsX67OhXwxZIUxgni4GAY7qiVyZ5Pkhlg40cu3LnKixsLYWsU8g uypZdohun4oJHVG8AhJ2rz+jOos0EL+XFVBwEcSZpJVAxGbGE5Bj40XCycweEYfQ MtP0bAAaQEsg6P0y1TytE31tEtCsSbI= -----END CERTIFICATE-----Generated at Sat Oct 11 19:07:05 2025 by rpki-client