$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/0417f438-d3c0-35d0-b3a7-54518b9fe85f.roa File: 0417f438-d3c0-35d0-b3a7-54518b9fe85f.roa (raw, json) Hash identifier: aeeul+ZCZE1ucRIjxLTCpNAt/+O8vz2iKxmzGdv5cnM= Subject key identifier: 85:32:07:02:46:5C:F4:1F:50:52:3F:CD:D4:D9:1C:09:33:9F:8E:B7 Certificate issuer: /CN=7cbcff68-23bb-4d4e-a703-bab3115bf054 Certificate serial: 010D0C9F4328584B821CC2A30095B04339C29B00 Authority key identifier: 41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/0417f438-d3c0-35d0-b3a7-54518b9fe85f.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 16509 IP address blocks: 72.13.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:c2:a3:00:95:b0:43:39:c2:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cbcff68-23bb-4d4e-a703-bab3115bf054 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=ddb3e3cc-1963-46a2-81f7-db3a51850745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:08:db:49:a2:b3:58:cd:6e:04:7e:bc:ea:51: 8a:76:ca:1b:4b:5d:c3:4e:04:13:68:3f:3b:b2:c4: 41:32:4e:d6:d5:09:9c:5c:51:c0:19:0c:e2:65:e9: a6:8c:6d:fd:60:94:a7:85:c3:d5:48:b2:d9:bb:06: dc:4a:52:84:88:c6:7b:40:01:9a:db:73:28:82:70: 44:34:cc:fa:ea:8f:ba:9d:46:ca:d6:37:34:97:cc: cf:30:c2:df:57:ae:d6:72:22:f4:ce:8a:c8:7d:d4: 4f:f6:dc:ed:89:bd:80:d0:98:28:e5:e5:7b:66:c7: fc:b2:83:db:3e:01:ee:ab:60:c0:16:46:e5:e3:b6: 0d:db:7e:06:9c:06:92:81:9e:9e:7c:87:de:1b:11: 68:c8:30:2a:39:ab:51:b5:22:64:e5:f3:22:d9:35: 2e:f1:a6:2f:ef:74:d9:bb:91:9c:ad:1b:2b:56:70: b7:5b:05:19:fd:49:05:c5:39:9c:de:61:d6:23:af: b9:40:4a:85:14:eb:49:f4:3f:12:07:7f:68:0f:dc: 7e:50:d1:ae:15:5f:ed:ba:cb:66:06:c6:e6:2b:b5: 38:f9:64:68:9e:87:f6:f8:10:ea:bb:36:d6:88:85: eb:f7:f0:2e:e5:16:28:49:e9:7a:85:53:ac:34:c8: e4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:32:07:02:46:5C:F4:1F:50:52:3F:CD:D4:D9:1C:09:33:9F:8E:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/0417f438-d3c0-35d0-b3a7-54518b9fe85f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl X509v3 Authority Key Identifier: keyid:41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer sbgp-ipAddrBlock: critical IPv4: 72.13.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:d3:7b:43:99:78:d9:1a:ba:6c:4d:8f:df:b9:42:dd:2a:1f: fe:a6:c8:7e:a2:37:31:06:d3:a2:48:5c:12:b6:8b:91:76:23: 5d:96:9f:08:7a:65:de:8c:f4:53:93:9e:b2:66:88:af:4b:15: 16:40:de:45:44:ac:77:26:e1:f8:4e:f1:1e:e3:b3:97:bc:73: c6:7a:77:de:22:3c:69:9d:28:d7:0c:10:ab:d1:c2:3d:13:b5: 7e:22:55:fd:6f:3b:fc:89:c7:c8:f2:97:c1:26:fb:04:b3:db: f6:4e:6f:0c:75:2f:7b:49:66:0f:00:d2:47:4b:d5:ab:10:e4: 6d:6a:46:99:56:3a:17:fb:9d:bf:36:86:bf:f6:ea:0a:cc:b4: 5b:ed:27:27:2f:5a:ce:5e:63:db:d7:3f:64:b8:f1:7b:f0:bc: 7a:4c:26:23:85:a4:2e:5b:95:d6:4f:f5:8b:72:ed:8a:fb:5e: b4:39:5b:3f:3d:ef:3f:0c:54:4d:de:f7:84:64:a4:9d:84:4a: 25:d8:8f:f1:bc:9d:ae:7d:f0:97:02:55:d6:44:1b:b6:4c:19: 91:f5:49:f5:17:97:a6:45:9c:4f:29:f4:39:9e:89:be:e7:ee: db:1c:86:ae:0d:3f:33:30:3d:27:2c:ae:76:25:33:71:47:b7: 79:64:f0:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHMKjAJWwQznCmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2NiY2ZmNjgtMjNiYi00ZDRlLWE3MDMtYmFiMzExNWJm MDU0MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZGRiM2UzY2MtMTk2My00NmEyLTgxZjctZGIzYTUxODUwNzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAjbSaKzWM1uBH686lGKdsobS13DTgQTaD87 ssRBMk7W1QmcXFHAGQziZemmjG39YJSnhcPVSLLZuwbcSlKEiMZ7QAGa23MognBE NMz66o+6nUbK1jc0l8zPMMLfV67WciL0zorIfdRP9tztib2A0Jgo5eV7Zsf8soPb PgHuq2DAFkbl47YN234GnAaSgZ6efIfeGxFoyDAqOatRtSJk5fMi2TUu8aYv73TZ u5GcrRsrVnC3WwUZ/UkFxTmc3mHWI6+5QEqFFOtJ9D8SB39oD9x+UNGuFV/tustm BsbmK7U4+WRonof2+BDquzbWiIXr9/Au5RYoSel6hVOsNMjkdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUyBwJGXPQfUFI/zdTZHAkzn463MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83Y2Jj ZmY2OC0yM2JiLTRkNGUtYTcwMy1iYWIzMTE1YmYwNTQvMDQxN2Y0MzgtZDNjMC0z NWQwLWIzYTctNTQ1MThiOWZlODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2NiY2ZmNjgtMjNiYi00ZDRlLWE3 MDMtYmFiMzExNWJmMDU0LzdjYmNmZjY4LTIzYmItNGQ0ZS1hNzAzLWJhYjMxMTVi ZjA1NC5jcmwwHwYDVR0jBBgwFoAUQTLwjOuyBIwI1/fc1CVU2Xg9GGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83Y2JjZmY2OC0yM2JiLTRkNGUtYTcwMy1iYWIz MTE1YmYwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvTe0OZeNkaumxNj9+5Qt0qH/6myH6iNzEG06JIXBK2i5F2I12Wnwh6 Zd6M9FOTnrJmiK9LFRZA3kVErHcm4fhO8R7js5e8c8Z6d94iPGmdKNcMEKvRwj0T tX4iVf1vO/yJx8jyl8Em+wSz2/ZObwx1L3tJZg8A0kdL1asQ5G1qRplWOhf7nb82 hr/26grMtFvtJycvWs5eY9vXP2S48XvwvHpMJiOFpC5bldZP9Yty7Yr7XrQ5Wz89 7z8MVE3e94RkpJ2ESiXYj/G8na598JcCVdZEG7ZMGZH1SfUXl6ZFnE8p9Dmeib7n 7tschq4NPzMwPScsrnYlM3FHt3lk8NE= -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:18 2025 by rpki-client