$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/df8b8ccf-e7be-30e9-83a7-b20422bf6ce1.roa File: df8b8ccf-e7be-30e9-83a7-b20422bf6ce1.roa (raw, json) Hash identifier: RePf1cH7OT0iFT6EZTFdtzTSm1XTqgOQIZEPKU1S2bU= Subject key identifier: 81:E4:80:7F:E4:8A:84:DA:01:60:47:A4:94:A1:9F:9B:5B:99:CE:A1 Certificate issuer: /CN=7cbcff68-23bb-4d4e-a703-bab3115bf054 Certificate serial: 010D0C9F4328584B6797448D2D84FF73A2BDCE00 Authority key identifier: 41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/df8b8ccf-e7be-30e9-83a7-b20422bf6ce1.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 16509 IP address blocks: 72.13.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:44:8d:2d:84:ff:73:a2:bd:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cbcff68-23bb-4d4e-a703-bab3115bf054 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=e243b273-a6d9-4ddb-b3fd-6ada8c809cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e1:9b:1d:45:c5:fe:43:d2:52:c0:0c:e3:31: d3:e2:13:f3:a8:5a:c9:4c:14:d5:87:86:8e:7e:21: f5:04:05:a8:0f:d5:ac:c8:75:e3:3b:47:ff:38:06: f7:a7:d0:72:26:03:03:e7:ab:99:bd:9b:dd:9d:5e: b2:8b:2f:ac:48:69:15:9e:5b:83:f3:ed:34:c0:15: 6b:ae:58:79:9d:4b:1c:d2:73:06:eb:7b:64:2f:ec: 3b:36:48:d5:56:76:b9:e6:5e:89:5e:57:2f:da:0d: ee:bc:bb:e7:93:21:77:b4:b2:d2:e2:9c:de:12:a8: b5:66:8f:18:9c:89:09:ba:c3:2a:33:5a:c2:7e:22: 3f:0d:0d:69:b8:56:3d:41:2a:2d:5b:82:b5:15:6a: 18:ce:b7:1f:d0:f6:6f:4c:9b:05:e8:2f:10:b7:b1: 82:f0:6a:a5:8d:ed:08:3f:a9:ca:49:58:2a:c5:b0: 9f:05:5e:be:f4:86:f7:cf:ba:cd:b5:37:54:97:f8: 07:89:03:98:8f:70:d2:f9:50:be:cf:d6:76:1f:28: 74:35:e1:8a:93:f5:1e:cd:a2:83:a2:94:00:8c:52: d7:25:04:b5:37:56:d7:0a:f3:b5:b7:9c:2f:0a:ae: 99:d5:92:7a:13:ea:cc:45:1a:fd:c2:d9:da:ec:76: b0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E4:80:7F:E4:8A:84:DA:01:60:47:A4:94:A1:9F:9B:5B:99:CE:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/df8b8ccf-e7be-30e9-83a7-b20422bf6ce1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl X509v3 Authority Key Identifier: keyid:41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer sbgp-ipAddrBlock: critical IPv4: 72.13.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:eb:0d:f1:49:0b:ea:b2:83:54:b8:c4:b8:9c:a2:00:df:45: c2:85:26:be:2b:20:c4:fb:9f:ea:25:39:c0:5b:0a:5b:0a:1d: 80:8a:d3:84:b8:3a:1d:94:48:4b:d1:57:ce:82:e9:d1:ed:25: c7:b8:59:19:d6:fb:53:11:18:96:bf:3c:2e:ff:a2:b0:b3:3c: 4a:95:a5:7a:ac:d8:01:65:14:d3:35:49:90:5f:0b:38:ce:c0: 38:41:ad:53:e1:ed:6b:e0:98:1e:cd:7b:d3:d0:bb:d1:a8:a2: f9:db:10:9b:3c:93:b2:6d:bf:ee:49:b3:af:5e:00:e8:ce:76: 04:6f:8d:f6:10:af:c8:b8:70:be:3f:1d:3d:d3:f5:dc:e5:cf: 53:63:2f:0c:dd:60:5e:32:5c:9e:e4:d3:3a:c2:59:61:80:d1: 65:c1:bc:34:bc:54:4f:ab:17:91:5b:14:f9:8d:25:e9:a6:8f: 55:06:39:16:dc:81:88:ab:ed:e8:5f:e2:73:82:cb:27:d6:f0: 79:ef:5e:76:6f:06:4c:a5:64:db:08:d7:7d:d6:81:8f:78:04: 64:1a:04:7f:85:86:52:e8:bb:cb:1b:99:f8:59:26:fa:45:c5: d6:61:9b:2a:81:44:c6:29:9f:18:38:bc:30:77:5c:86:a3:2b: c0:7c:f9:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl0SNLYT/c6K9zgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2NiY2ZmNjgtMjNiYi00ZDRlLWE3MDMtYmFiMzExNWJm MDU0MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTI0M2IyNzMtYTZkOS00ZGRiLWIzZmQtNmFkYThjODA5Y2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+GbHUXF/kPSUsAM4zHT4hPzqFrJTBTVh4aO fiH1BAWoD9WsyHXjO0f/OAb3p9ByJgMD56uZvZvdnV6yiy+sSGkVnluD8+00wBVr rlh5nUsc0nMG63tkL+w7NkjVVna55l6JXlcv2g3uvLvnkyF3tLLS4pzeEqi1Zo8Y nIkJusMqM1rCfiI/DQ1puFY9QSotW4K1FWoYzrcf0PZvTJsF6C8Qt7GC8Gqlje0I P6nKSVgqxbCfBV6+9Ib3z7rNtTdUl/gHiQOYj3DS+VC+z9Z2Hyh0NeGKk/UezaKD opQAjFLXJQS1N1bXCvO1t5wvCq6Z1ZJ6E+rMRRr9wtna7HawWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHkgH/kioTaAWBHpJShn5tbmc6hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83Y2Jj ZmY2OC0yM2JiLTRkNGUtYTcwMy1iYWIzMTE1YmYwNTQvZGY4YjhjY2YtZTdiZS0z MGU5LTgzYTctYjIwNDIyYmY2Y2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2NiY2ZmNjgtMjNiYi00ZDRlLWE3 MDMtYmFiMzExNWJmMDU0LzdjYmNmZjY4LTIzYmItNGQ0ZS1hNzAzLWJhYjMxMTVi ZjA1NC5jcmwwHwYDVR0jBBgwFoAUQTLwjOuyBIwI1/fc1CVU2Xg9GGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83Y2JjZmY2OC0yM2JiLTRkNGUtYTcwMy1iYWIz MTE1YmYwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA19MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXrDfFJC+qyg1S4xLicogDfRcKFJr4rIMT7n+olOcBbClsKHYCK04S4 Oh2USEvRV86C6dHtJce4WRnW+1MRGJa/PC7/orCzPEqVpXqs2AFlFNM1SZBfCzjO wDhBrVPh7WvgmB7Ne9PQu9GoovnbEJs8k7Jtv+5Js69eAOjOdgRvjfYQr8i4cL4/ HT3T9dzlz1NjLwzdYF4yXJ7k0zrCWWGA0WXBvDS8VE+rF5FbFPmNJemmj1UGORbc gYir7ehf4nOCyyfW8HnvXnZvBkylZNsI133WgY94BGQaBH+FhlLou8sbmfhZJvpF xdZhmyqBRMYpnxg4vDB3XIajK8B8+bM= -----END CERTIFICATE-----Generated at Mon Oct 20 13:52:24 2025 by rpki-client