$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/36413b25-1d6c-34fc-a218-245b7e7991ae.roa File: 36413b25-1d6c-34fc-a218-245b7e7991ae.roa (raw, json) Hash identifier: 0De+DiHaI86UjMjeuGb+FH010PU+caW3C3ds1WOTEJ0= Subject key identifier: 44:73:B0:04:C6:CA:99:04:B7:67:11:23:25:52:41:34:C1:F6:3E:07 Certificate issuer: /CN=9b502c27-b722-427c-af11-f9048a06a1a5 Certificate serial: 010D0C9F4328584BAEC7BF7F2D5F5031F24B1440 Authority key identifier: 96:08:82:21:79:62:80:AC:80:02:9B:E4:86:F6:AB:C9:64:1A:F2:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/36413b25-1d6c-34fc-a218-245b7e7991ae.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 21699 IP address blocks: 72.21.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:bf:7f:2d:5f:50:31:f2:4b:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b502c27-b722-427c-af11-f9048a06a1a5 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=0926604b-58d2-4243-a7d6-7d3924ab07f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4d:65:9e:e5:2f:65:82:36:e8:68:c6:90:79: 36:0e:9d:83:eb:8a:a3:9d:5c:ae:b6:22:25:5b:d9: 43:4f:a9:74:c9:6d:ae:c4:80:f5:fe:42:6e:8d:86: 17:f7:0c:e8:a9:37:89:c5:c1:7d:c3:62:69:e5:f2: 66:55:2f:bc:ec:01:a6:7b:38:88:cc:f9:d2:e6:84: 55:ad:ab:44:64:8b:93:99:3c:2a:63:99:fa:fe:b9: 73:1b:1a:e0:5c:1f:40:8b:47:5d:8e:57:a3:34:03: 4d:07:5b:b4:e5:ee:a2:d0:7f:da:11:6d:15:22:5c: 6e:3f:ef:97:8f:73:40:33:31:ce:02:9c:d8:33:c5: cb:49:4e:1c:9d:87:9f:5d:6e:63:e2:b1:2f:b3:35: 83:e7:de:a1:35:cf:d0:98:29:69:03:2d:4f:5d:9d: b3:da:39:37:f0:ff:40:be:8e:e4:85:81:c1:5f:52: d6:a9:06:d1:f5:e9:0b:23:d8:90:4a:e9:6c:55:52: d6:bf:07:46:c5:63:c6:0d:2a:92:13:16:f5:4c:7f: 9f:c6:c6:d0:1c:5b:c6:83:2d:c6:62:42:6b:ca:a0: a1:6c:66:81:05:7e:bd:48:6f:6e:19:ce:aa:bb:95: f6:9b:d2:8a:d6:9d:95:4e:74:7e:5b:29:4d:db:d9: 00:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:73:B0:04:C6:CA:99:04:B7:67:11:23:25:52:41:34:C1:F6:3E:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/36413b25-1d6c-34fc-a218-245b7e7991ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.crl X509v3 Authority Key Identifier: keyid:96:08:82:21:79:62:80:AC:80:02:9B:E4:86:F6:AB:C9:64:1A:F2:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer sbgp-ipAddrBlock: critical IPv4: 72.21.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:8a:6e:b3:11:c3:f3:97:16:55:73:54:82:a5:65:c3:ab:c3: 9e:e3:72:4d:48:68:d6:bf:fd:78:41:c9:aa:c1:fc:d9:94:c6: a0:1c:87:67:b5:d9:3a:26:73:e0:14:a8:4b:e0:79:85:c0:0d: 62:ef:ce:2c:f9:b9:40:a3:3e:a9:bf:91:29:49:2b:53:85:76: 8e:a9:7d:de:01:ea:eb:36:18:8c:19:b6:aa:fa:50:ac:0c:32: 15:fe:81:b0:64:38:58:bc:59:6f:1b:7f:df:9d:27:23:7a:5e: 72:25:89:52:2f:c6:03:9c:73:fe:da:96:34:3d:dd:3e:a6:43: b6:5f:cd:9b:f9:2c:c0:0a:2f:40:9f:0d:0f:60:5f:f5:91:61: 38:6d:20:04:e4:d9:40:90:6a:25:20:a9:40:c8:ec:23:8c:62: d7:e6:52:43:55:b8:64:1e:c3:11:8a:ea:43:fd:09:01:25:d2: c7:d2:c1:75:43:d1:d8:30:cf:ef:30:02:bd:2b:c9:08:95:9f: 76:dd:60:c6:79:7a:dd:41:f0:e5:92:ae:54:83:3a:20:b4:22: eb:9f:d0:79:ff:b2:bb:b4:61:b0:ad:37:88:de:08:78:f4:dc: 01:62:6e:79:12:be:99:a5:a8:b7:d9:19:55:9a:3f:82:16:7b: e0:ef:94:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux79/LV9QMfJLFEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI1MDJjMjctYjcyMi00MjdjLWFmMTEtZjkwNDhhMDZh MWE1MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk MDkyNjYwNGItNThkMi00MjQzLWE3ZDYtN2QzOTI0YWIwN2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk01lnuUvZYI26GjGkHk2Dp2D64qjnVyutiIl W9lDT6l0yW2uxID1/kJujYYX9wzoqTeJxcF9w2Jp5fJmVS+87AGmeziIzPnS5oRV ratEZIuTmTwqY5n6/rlzGxrgXB9Ai0ddjlejNANNB1u05e6i0H/aEW0VIlxuP++X j3NAMzHOApzYM8XLSU4cnYefXW5j4rEvszWD596hNc/QmClpAy1PXZ2z2jk38P9A vo7khYHBX1LWqQbR9ekLI9iQSulsVVLWvwdGxWPGDSqSExb1TH+fxsbQHFvGgy3G YkJryqChbGaBBX69SG9uGc6qu5X2m9KK1p2VTnR+WylN29kAJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERzsATGypkEt2cRIyVSQTTB9j4HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YjUw MmMyNy1iNzIyLTQyN2MtYWYxMS1mOTA0OGEwNmExYTUvMzY0MTNiMjUtMWQ2Yy0z NGZjLWEyMTgtMjQ1YjdlNzk5MWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWI1MDJjMjctYjcyMi00MjdjLWFm MTEtZjkwNDhhMDZhMWE1LzliNTAyYzI3LWI3MjItNDI3Yy1hZjExLWY5MDQ4YTA2 YTFhNS5jcmwwHwYDVR0jBBgwFoAUlgiCIXligKyAApvkhvaryWQa8lIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85YjUwMmMyNy1iNzIyLTQyN2MtYWYxMS1mOTA0 OGEwNmExYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKKbrMRw/OXFlVzVIKlZcOrw57jck1IaNa//XhByarB/NmUxqAch2e1 2Tomc+AUqEvgeYXADWLvziz5uUCjPqm/kSlJK1OFdo6pfd4B6us2GIwZtqr6UKwM MhX+gbBkOFi8WW8bf9+dJyN6XnIliVIvxgOcc/7aljQ93T6mQ7ZfzZv5LMAKL0Cf DQ9gX/WRYThtIATk2UCQaiUgqUDI7COMYtfmUkNVuGQewxGK6kP9CQEl0sfSwXVD 0dgwz+8wAr0ryQiVn3bdYMZ5et1B8OWSrlSDOiC0Iuuf0Hn/sru0YbCtN4jeCHj0 3AFibnkSvpmlqLfZGVWaP4IWe+DvlPI= -----END CERTIFICATE-----Generated at Wed Nov 5 11:25:49 2025 by rpki-client