$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/e8fcd098-42de-324e-b4d3-16fc0cc7672d.roa File: e8fcd098-42de-324e-b4d3-16fc0cc7672d.roa (raw, json) Hash identifier: 5RkgEbIG4ERvLC7DTfrjflHVe8aHR7pBto0w8n39hxU= Subject key identifier: 63:2A:C6:68:15:5A:8F:33:56:03:79:BD:FA:42:B0:3E:EE:FB:C9:92 Certificate issuer: /CN=b794e507-3ed1-4151-855d-6305696fcb0c Certificate serial: 010D0C9F4328584B2496D04D5728B21D97030000 Authority key identifier: D1:67:3E:09:96:F9:3A:0A:2D:95:28:BE:75:72:9D:15:38:1C:F0:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/e8fcd098-42de-324e-b4d3-16fc0cc7672d.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 26464 IP address blocks: 72.2.112.0/20 maxlen: 20 72.2.112.0/21 maxlen: 21 72.2.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/b794e507-3ed1-4151-855d-6305696fcb0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/b794e507-3ed1-4151-855d-6305696fcb0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:d0:4d:57:28:b2:1d:97:03:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b794e507-3ed1-4151-855d-6305696fcb0c Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=041ca447-7eab-4a4c-b1e0-46518ba41a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:90:4a:90:21:db:c2:b0:2e:6f:59:b5:ec:27: f8:0d:42:0b:02:c1:53:c0:70:43:d1:fd:5d:d6:33: d2:04:88:f4:87:4c:d6:c6:34:90:5a:cf:5f:68:5b: b0:00:ae:72:dc:85:d3:55:cf:0e:22:96:d0:66:3f: d8:56:6a:a7:43:50:bb:9c:b9:f6:8b:27:f4:ca:7e: b2:0e:12:c2:9f:a0:d3:cf:c2:de:04:a1:18:07:63: a9:34:8a:c1:c6:5c:33:b0:24:98:ed:12:46:e0:ef: 70:62:36:da:51:df:c5:d0:ac:11:b6:f5:ac:76:14: 26:da:c3:31:03:8c:e6:92:db:58:66:4b:65:93:56: 48:de:b0:ed:1b:fa:0b:49:35:8f:f2:e0:aa:01:77: 2d:7d:f1:7a:17:36:94:9c:c1:00:8b:62:41:57:01: 11:1b:4b:34:35:35:ce:41:ed:8b:41:6b:fb:90:d8: 60:03:3d:9d:4b:64:ce:02:99:46:90:d3:11:ac:9a: 90:b1:66:c6:3e:fb:a9:dc:9c:7a:84:10:e3:eb:b1: 40:d6:66:72:ce:58:4b:9d:2b:35:5b:5f:11:eb:fb: 92:87:5b:7d:18:71:ad:e3:78:cf:01:48:9b:e4:c7: d6:85:97:61:6f:c9:5a:39:41:b3:57:c2:01:9e:f0: 0d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2A:C6:68:15:5A:8F:33:56:03:79:BD:FA:42:B0:3E:EE:FB:C9:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/e8fcd098-42de-324e-b4d3-16fc0cc7672d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/b794e507-3ed1-4151-855d-6305696fcb0c.crl X509v3 Authority Key Identifier: keyid:D1:67:3E:09:96:F9:3A:0A:2D:95:28:BE:75:72:9D:15:38:1C:F0:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c.cer sbgp-ipAddrBlock: critical IPv4: 72.2.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:a3:c0:67:a0:65:73:0a:32:1e:8a:53:54:7a:bf:38:a4:8d: b3:08:b5:99:c9:97:d2:85:ea:66:31:2f:b0:bf:33:3d:a2:da: 84:30:4d:d4:9b:b7:dc:b1:d6:60:90:b7:0b:85:80:4a:2b:2c: 03:8f:fe:93:18:41:23:1c:3e:fd:d9:a3:d1:6f:f5:7c:ae:e7: 55:47:f6:4b:3a:58:ae:b3:b1:f9:e6:f6:9d:c7:b9:af:08:70: 34:48:6e:2f:43:72:27:c1:ee:67:89:1b:a8:95:b2:cb:91:80: f9:16:cf:70:2c:8d:9e:ed:1b:3f:89:39:5b:ff:80:57:ce:72: 1e:48:c0:b2:61:59:4d:d6:67:53:a3:29:91:d8:a9:b6:bf:e6: 3b:0c:0b:bf:04:35:30:b1:49:4b:52:a1:3a:21:56:b8:45:63: e9:c8:33:3c:c0:b8:2b:60:ad:af:a2:a5:26:bf:cf:52:d6:32: f5:78:0d:49:50:eb:d9:9f:23:f1:06:46:f9:ca:92:a7:1b:c0: 52:35:9b:f8:b0:e2:36:18:ff:b0:39:86:73:dd:13:9c:7a:57: 77:7b:9c:50:98:81:e1:97:5d:30:47:a7:b7:3e:eb:fe:fb:63: 00:09:60:93:16:0b:f2:fa:b9:2a:0e:bd:eb:21:e2:ec:bb:6d: 9e:66:18:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskltBNVyiyHZcDAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc5NGU1MDctM2VkMS00MTUxLTg1NWQtNjMwNTY5NmZj YjBjMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk MDQxY2E0NDctN2VhYi00YTRjLWIxZTAtNDY1MThiYTQxYTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25BKkCHbwrAub1m17Cf4DUILAsFTwHBD0f1d 1jPSBIj0h0zWxjSQWs9faFuwAK5y3IXTVc8OIpbQZj/YVmqnQ1C7nLn2iyf0yn6y DhLCn6DTz8LeBKEYB2OpNIrBxlwzsCSY7RJG4O9wYjbaUd/F0KwRtvWsdhQm2sMx A4zmkttYZktlk1ZI3rDtG/oLSTWP8uCqAXctffF6FzaUnMEAi2JBVwERG0s0NTXO Qe2LQWv7kNhgAz2dS2TOAplGkNMRrJqQsWbGPvup3Jx6hBDj67FA1mZyzlhLnSs1 W18R6/uSh1t9GHGt43jPAUib5MfWhZdhb8laOUGzV8IBnvAN6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMqxmgVWo8zVgN5vfpCsD7u+8mSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzk0 ZTUwNy0zZWQxLTQxNTEtODU1ZC02MzA1Njk2ZmNiMGMvZThmY2QwOTgtNDJkZS0z MjRlLWI0ZDMtMTZmYzBjYzc2NzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjc5NGU1MDctM2VkMS00MTUxLTg1 NWQtNjMwNTY5NmZjYjBjL2I3OTRlNTA3LTNlZDEtNDE1MS04NTVkLTYzMDU2OTZm Y2IwYy5jcmwwHwYDVR0jBBgwFoAU0Wc+CZb5OgotlSi+dXKdFTgc8JAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzk0ZTUwNy0zZWQxLTQxNTEtODU1ZC02MzA1 Njk2ZmNiMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyjwGegZXMKMh6KU1R6vzikjbMItZnJl9KF6mYxL7C/Mz2i2oQwTdSb t9yx1mCQtwuFgEorLAOP/pMYQSMcPv3Zo9Fv9Xyu51VH9ks6WK6zsfnm9p3Hua8I cDRIbi9DcifB7meJG6iVssuRgPkWz3AsjZ7tGz+JOVv/gFfOch5IwLJhWU3WZ1Oj KZHYqba/5jsMC78ENTCxSUtSoTohVrhFY+nIMzzAuCtgra+ipSa/z1LWMvV4DUlQ 69mfI/EGRvnKkqcbwFI1m/iw4jYY/7A5hnPdE5x6V3d7nFCYgeGXXTBHp7c+6/77 YwAJYJMWC/L6uSoOvesh4uy7bZ5mGB0= -----END CERTIFICATE-----Generated at Sat Oct 11 03:13:42 2025 by rpki-client