$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/7f63f76b-5d8a-3c3e-9bd3-907f975a11fd.roa File: 7f63f76b-5d8a-3c3e-9bd3-907f975a11fd.roa (raw, json) Hash identifier: AEtCPHyIbB5QIj87R1+6Q9NWe7et/QXrapjWTL+5AV4= Subject key identifier: EA:AF:4C:D0:A0:56:20:7D:D5:95:AB:B4:4D:8B:70:E8:D1:10:3D:8D Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584B67236F7B78C6BFFB0EBEEF00 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/7f63f76b-5d8a-3c3e-9bd3-907f975a11fd.roa Signing time: Fri 03 Oct 2025 21:07:21 +0000 ROA not before: Fri 03 Oct 2025 21:07:21 +0000 ROA not after: Thu 01 Jan 2026 22:07:21 +0000 asID: 55286 IP address blocks: 72.57.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:23:6f:7b:78:c6:bf:fb:0e:be:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Oct 3 21:07:21 2025 GMT Not After : Jan 1 22:07:21 2026 GMT Subject: CN=c9ea9de0-476e-4bf2-9a0f-c7a4a21304f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:01:19:c1:5c:e8:f0:01:de:15:c0:f9:45:dd: 7f:97:7d:3a:63:80:a7:fe:70:fe:ce:bc:3a:a6:38: f7:ed:19:4e:37:8e:65:51:13:67:c0:36:8d:01:c7: 7a:75:f0:53:1b:d5:8c:2d:7c:88:b2:c3:b0:33:bb: 14:92:d8:d5:f9:41:ef:2e:93:ec:1a:e0:50:df:4c: 38:4c:16:32:c3:fe:77:74:81:fd:b2:ad:c8:a1:8b: c1:75:a3:a5:95:8c:75:01:68:ec:a8:91:6f:45:6e: fa:1f:62:12:96:32:46:32:7a:69:a5:7c:0b:c8:71: 81:cb:b4:31:51:df:67:ba:6b:e9:d2:3d:df:6e:8f: d2:a1:16:de:90:11:bf:ba:60:e4:29:2d:6a:1c:9e: 48:90:9b:53:4d:8b:80:bc:dc:24:9a:84:32:34:ca: 32:eb:4d:50:a1:6a:a4:15:e5:27:5f:77:51:cf:55: bb:47:a4:13:e2:98:7d:05:48:52:d3:58:85:f5:00: c3:d6:dc:70:9a:ec:68:af:d5:9a:bc:37:9c:ff:0a: c2:ed:cb:3f:10:98:d4:ee:42:c8:c2:c7:7d:cb:ca: 49:06:2a:04:ea:32:05:9a:6e:93:07:66:f3:b7:57: 84:4c:af:da:59:5c:11:fd:36:c2:c5:07:0e:26:aa: 04:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AF:4C:D0:A0:56:20:7D:D5:95:AB:B4:4D:8B:70:E8:D1:10:3D:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/7f63f76b-5d8a-3c3e-9bd3-907f975a11fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 72.57.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:c9:6b:83:72:ca:ac:56:ad:db:52:73:48:55:e8:44:7a:96: af:27:2b:97:fe:c0:7b:09:23:90:fd:dd:80:ea:42:66:4b:ed: 1b:8e:77:1a:8d:1c:8b:2b:60:31:24:28:7e:bd:b3:50:fb:2e: 4f:9e:5c:44:b7:f8:da:ba:ad:e8:93:ca:02:0e:c3:41:3d:e0: 8b:1d:ba:ca:56:05:30:30:13:aa:a5:1d:3f:10:15:31:18:05: 03:57:9f:56:bf:dc:47:ef:3a:ae:8c:65:19:b7:18:6d:c4:91: a9:87:d9:2e:b3:87:63:7b:f4:fa:56:d8:c0:aa:7f:af:d1:d8: 5a:78:22:90:fa:ec:b6:88:e3:cf:8d:fa:a0:7b:38:02:5a:a1: 53:22:5f:bb:ac:b2:38:59:be:8e:26:d6:6e:2a:1a:ed:28:12: fe:15:78:d2:15:db:dc:1a:f7:8b:cd:2f:42:a1:d6:e6:7f:7c: 4a:b0:f5:2e:b3:86:cf:15:03:6e:c3:5e:78:40:57:54:ac:64: 7e:2d:f3:14:ed:ae:3d:f9:31:76:d8:2f:20:35:1b:ff:d4:fe: 07:94:c4:0b:ec:33:5e:31:fc:1b:10:dc:e2:ca:2d:62:c8:47: 9f:98:52:70:56:3f:de:4e:f5:b5:41:f4:ba:af:46:1f:91:20: c4:b8:da:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnI297eMa/+w6+7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MTAwMzIxMDcyMVoXDTI2MDEwMTIyMDcyMVowLzEtMCsGA1UEAxMk YzllYTlkZTAtNDc2ZS00YmYyLTlhMGYtYzdhNGEyMTMwNGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQEZwVzo8AHeFcD5Rd1/l306Y4Cn/nD+zrw6 pjj37RlON45lURNnwDaNAcd6dfBTG9WMLXyIssOwM7sUktjV+UHvLpPsGuBQ30w4 TBYyw/53dIH9sq3IoYvBdaOllYx1AWjsqJFvRW76H2ISljJGMnpppXwLyHGBy7Qx Ud9numvp0j3fbo/SoRbekBG/umDkKS1qHJ5IkJtTTYuAvNwkmoQyNMoy601QoWqk FeUnX3dRz1W7R6QT4ph9BUhS01iF9QDD1txwmuxor9WavDec/wrC7cs/EJjU7kLI wsd9y8pJBioE6jIFmm6TB2bzt1eETK/aWVwR/TbCxQcOJqoEfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqvTNCgViB91ZWrtE2LcOjRED2NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvN2Y2M2Y3NmItNWQ4YS0z YzNlLTliZDMtOTA3Zjk3NWExMWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzJa4NyyqxWrdtSc0hV6ER6lq8nK5f+wHsJI5D93YDqQmZL7RuOdxqN HIsrYDEkKH69s1D7Lk+eXES3+Nq6reiTygIOw0E94IsduspWBTAwE6qlHT8QFTEY BQNXn1a/3EfvOq6MZRm3GG3EkamH2S6zh2N79PpW2MCqf6/R2Fp4IpD67LaI48+N +qB7OAJaoVMiX7ussjhZvo4m1m4qGu0oEv4VeNIV29wa94vNL0Kh1uZ/fEqw9S6z hs8VA27DXnhAV1SsZH4t8xTtrj35MXbYLyA1G//U/geUxAvsM14x/BsQ3OLKLWLI R5+YUnBWP95O9bVB9LqvRh+RIMS42jA= -----END CERTIFICATE-----Generated at Thu Oct 9 07:33:31 2025 by rpki-client