$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5af33709-1f6c-3c8c-9294-6f80a56247c6.roa File: 5af33709-1f6c-3c8c-9294-6f80a56247c6.roa (raw, json) Hash identifier: 5niNJlrypQm9bn5A0yikG61btuZLQ+jrWhu5tSeqSKI= Subject key identifier: 6B:FC:9F:C3:82:DA:1E:10:21:8E:A2:50:13:FF:A2:D6:9C:42:7F:B6 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584BA9326E5CF2C5DF4ACB1F7680 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5af33709-1f6c-3c8c-9294-6f80a56247c6.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 35793 IP address blocks: 72.14.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:6e:5c:f2:c5:df:4a:cb:1f:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=1cf9b181-9ef0-4205-af7d-9aaa78be69f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:82:12:5c:c4:8e:e3:e5:00:fa:11:4e:31:2b: 53:a9:67:dd:a2:26:aa:50:8c:36:e9:76:47:d7:ae: f9:7a:e5:1b:e9:f8:51:d3:97:09:5a:d1:57:49:47: 9e:ea:fb:3a:4a:35:dc:e0:8d:73:f0:c2:86:c2:6b: 44:ee:14:44:c6:5b:11:2b:2e:af:07:b5:bb:dd:25: 22:04:9e:87:72:fb:09:2a:fc:59:5e:93:b0:17:74: ed:59:87:ca:f4:ab:bb:13:b7:ec:9a:40:13:26:87: 6a:db:ff:28:3f:6f:fa:99:88:87:3b:13:cf:5a:fe: da:23:64:a6:97:07:85:94:82:38:42:cf:ca:1e:64: 70:66:8b:5f:1e:c5:de:8a:e5:fd:b5:11:39:4d:c5: 67:14:07:7d:c2:43:2e:a1:a2:72:41:8e:9b:d5:07: 34:d1:a8:24:ca:c8:54:aa:10:f7:a4:62:6b:9a:33: 26:9a:fa:bb:82:8e:53:40:9a:a3:76:b5:fb:a6:e4: 3c:de:3f:66:e7:8e:0b:87:cd:3c:73:ee:6e:b9:c3: a1:04:f8:e6:ac:e8:11:90:b7:09:dc:cc:ea:ee:28: 37:0d:34:da:43:20:9d:51:94:5e:55:80:ab:5d:7f: e6:80:9b:16:ee:c3:0e:76:36:eb:43:fe:a6:3c:d9: 72:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FC:9F:C3:82:DA:1E:10:21:8E:A2:50:13:FF:A2:D6:9C:42:7F:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5af33709-1f6c-3c8c-9294-6f80a56247c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:ac:b8:21:52:e2:0e:33:c1:05:2b:68:d4:8f:28:ff:1d:f3: 66:50:8c:9a:10:c5:84:eb:42:63:05:5a:a0:22:7c:be:8a:ec: 0c:36:fa:0d:1d:3f:b0:ad:6f:08:fa:87:29:cd:10:e3:ff:45: e4:a2:6c:f9:83:ea:6b:8a:3f:e5:23:c8:1f:86:78:94:c6:68: 45:a9:7e:71:35:3c:a6:8c:93:7d:78:8a:a0:1d:c7:73:28:35: fe:19:48:10:63:fe:84:48:9c:2b:23:8c:46:ca:5a:06:84:b2: 62:a1:1b:40:fa:2d:62:c8:b6:79:76:ba:a7:bc:76:61:db:b6: 95:c7:7b:c9:02:5f:82:f1:ff:ba:bf:d6:e3:7c:65:7c:74:6d: db:b9:9d:93:f9:d6:ea:e7:b2:7d:5d:4d:73:af:b6:a8:28:d5: 2b:39:9f:02:73:de:d5:b0:3c:b6:de:10:cb:d5:f6:99:6e:f6: 48:01:9b:ac:ce:86:ed:f1:e2:ed:13:91:f0:54:28:9b:bc:d6: 3c:ae:e3:70:21:41:b8:18:87:0c:18:f7:53:60:36:e7:d7:be: 0a:1d:6d:76:41:03:33:09:8f:34:54:a6:37:55:74:70:15:76: 38:37:46:20:e5:19:ad:62:4d:e9:7b:0e:e3:5b:de:1b:d8:e5: 82:84:07:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMm5c8sXfSssfdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MWNmOWIxODEtOWVmMC00MjA1LWFmN2QtOWFhYTc4YmU2OWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYISXMSO4+UA+hFOMStTqWfdoiaqUIw26XZH 1675euUb6fhR05cJWtFXSUee6vs6SjXc4I1z8MKGwmtE7hRExlsRKy6vB7W73SUi BJ6HcvsJKvxZXpOwF3TtWYfK9Ku7E7fsmkATJodq2/8oP2/6mYiHOxPPWv7aI2Sm lweFlII4Qs/KHmRwZotfHsXeiuX9tRE5TcVnFAd9wkMuoaJyQY6b1Qc00agkyshU qhD3pGJrmjMmmvq7go5TQJqjdrX7puQ83j9m544Lh808c+5uucOhBPjmrOgRkLcJ 3Mzq7ig3DTTaQyCdUZReVYCrXX/mgJsW7sMOdjbrQ/6mPNlyiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGv8n8OC2h4QIY6iUBP/otacQn+2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvNWFmMzM3MDktMWY2Yy0z YzhjLTkyOTQtNmY4MGE1NjI0N2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6suCFS4g4zwQUraNSPKP8d82ZQjJoQxYTrQmMFWqAifL6K7Aw2+g0d P7Ctbwj6hynNEOP/ReSibPmD6muKP+UjyB+GeJTGaEWpfnE1PKaMk314iqAdx3Mo Nf4ZSBBj/oRInCsjjEbKWgaEsmKhG0D6LWLItnl2uqe8dmHbtpXHe8kCX4Lx/7q/ 1uN8ZXx0bdu5nZP51urnsn1dTXOvtqgo1Ss5nwJz3tWwPLbeEMvV9plu9kgBm6zO hu3x4u0TkfBUKJu81jyu43AhQbgYhwwY91NgNufXvgodbXZBAzMJjzRUpjdVdHAV djg3RiDlGa1iTel7DuNb3hvY5YKEBzU= -----END CERTIFICATE-----Generated at Mon Nov 3 23:22:46 2025 by rpki-client