$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5a606c1-0af4-3bc0-882f-1bb7ada852e9.roa File: c5a606c1-0af4-3bc0-882f-1bb7ada852e9.roa (raw, json) Hash identifier: HHGZq7qh0z7cb/utbC5n8S30IuYyQGQ4jns266eWBAI= Subject key identifier: E7:A8:FD:5F:9A:09:37:CC:FC:19:11:08:FB:D0:0A:91:EB:87:E5:E7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B8EACFF874B855E81BCB8C498 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5a606c1-0af4-3bc0-882f-1bb7ada852e9.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 0 IP address blocks: 72.13.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:ff:87:4b:85:5e:81:bc:b8:c4:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=262181d2-1780-4b7c-8e83-91cf3986cee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:58:6a:94:42:5b:5f:0c:1a:5b:f6:19:78:ba: 36:20:c3:9a:4d:c3:ec:16:19:cf:5f:e6:8b:a3:b0: d3:33:49:3b:5f:4b:a0:66:2d:d1:90:c8:66:a2:1e: c2:e4:14:dd:3b:71:66:56:f0:b6:01:63:c7:b1:ee: 84:5a:d5:e8:0e:ea:d3:9a:92:81:9d:35:8e:1f:ac: 99:ad:55:e4:12:ac:4c:17:c1:c5:e3:50:3c:ad:96: 02:82:7a:f8:69:53:f3:a1:95:c5:f1:5c:30:5e:cd: a1:08:19:51:9e:86:45:26:65:5e:01:c7:27:1f:26: 7b:ce:96:2e:7c:ac:41:55:35:ac:92:30:da:f0:9d: 25:f7:21:8f:83:24:7e:b0:0f:6e:9d:32:80:4f:94: 78:b5:18:86:a0:ef:74:f8:52:ab:6c:02:95:fe:95: 9c:fa:06:39:44:b0:f4:64:16:86:6e:6b:96:48:53: e8:5f:eb:0d:9b:1e:b7:e7:69:11:8f:93:78:c5:21: 70:83:e7:80:28:3c:fa:f0:ba:67:6f:6e:20:6a:e9: 8d:35:28:58:ab:72:ee:03:8d:cf:1b:05:20:08:21: 1c:4b:90:2b:b4:31:89:91:ea:af:10:f3:6b:5e:17: cd:bd:aa:ed:1a:a6:e3:24:25:6a:42:f3:d4:03:29: 80:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A8:FD:5F:9A:09:37:CC:FC:19:11:08:FB:D0:0A:91:EB:87:E5:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5a606c1-0af4-3bc0-882f-1bb7ada852e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 72.13.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:3d:b5:ec:ef:6f:7b:31:e1:ae:86:ab:23:f9:82:41:06:14: 04:dc:99:87:57:65:27:6f:ce:d7:3f:31:1d:58:74:23:ae:6f: 2e:56:8d:ae:d0:f5:0b:30:29:08:6f:37:c4:e2:94:45:d1:1b: 4d:82:31:f2:fc:7c:d0:5e:e4:26:25:57:6d:4b:13:61:60:2a: 0b:d8:e1:56:ed:2d:be:fc:66:da:7d:70:c4:34:46:b0:a9:ca: c7:da:fd:18:16:79:e2:df:e7:37:51:86:9e:54:5f:63:9a:4e: 31:ec:27:67:47:f5:56:47:ed:e7:7b:b0:8b:b9:55:1f:63:27: 3f:ce:85:9a:96:d0:ea:23:72:68:af:65:9b:00:a4:93:55:68: 1c:b2:5b:02:a7:3c:aa:50:b8:de:44:04:25:0b:e2:75:4a:62: dc:fb:95:95:4f:c4:a4:cc:ee:31:68:a3:8f:09:86:09:9c:30: ef:82:b5:6d:18:34:98:ac:50:d8:c4:6e:c9:4d:71:af:cc:91: af:18:4e:1a:83:26:fe:0a:2d:23:78:80:5e:e3:33:d8:e0:42: ec:4b:c9:dd:71:98:3d:04:ea:8c:1e:9c:4c:b4:6c:d3:d2:b3: 95:87:15:f1:24:11:ed:71:40:44:69:e3:6d:75:76:0b:4c:26: da:7f:01:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrP+HS4Vegby4xJgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MjYyMTgxZDItMTc4MC00YjdjLThlODMtOTFjZjM5ODZjZWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFhqlEJbXwwaW/YZeLo2IMOaTcPsFhnPX+aL o7DTM0k7X0ugZi3RkMhmoh7C5BTdO3FmVvC2AWPHse6EWtXoDurTmpKBnTWOH6yZ rVXkEqxMF8HF41A8rZYCgnr4aVPzoZXF8VwwXs2hCBlRnoZFJmVeAccnHyZ7zpYu fKxBVTWskjDa8J0l9yGPgyR+sA9unTKAT5R4tRiGoO90+FKrbAKV/pWc+gY5RLD0 ZBaGbmuWSFPoX+sNmx6352kRj5N4xSFwg+eAKDz68Lpnb24gaumNNShYq3LuA43P GwUgCCEcS5ArtDGJkeqvEPNrXhfNvartGqbjJCVqQvPUAymAjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeo/V+aCTfM/BkRCPvQCpHrh+XnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzVhNjA2YzEtMGFmNC0z YmMwLTg4MmYtMWJiN2FkYTg1MmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA0jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACc9tezvb3sx4a6GqyP5gkEGFATcmYdXZSdvztc/MR1YdCOuby5Wja7Q 9QswKQhvN8TilEXRG02CMfL8fNBe5CYlV21LE2FgKgvY4VbtLb78Ztp9cMQ0RrCp ysfa/RgWeeLf5zdRhp5UX2OaTjHsJ2dH9VZH7ed7sIu5VR9jJz/OhZqW0Oojcmiv ZZsApJNVaByyWwKnPKpQuN5EBCUL4nVKYtz7lZVPxKTM7jFoo48JhgmcMO+CtW0Y NJisUNjEbslNca/Mka8YThqDJv4KLSN4gF7jM9jgQuxLyd1xmD0E6owenEy0bNPS s5WHFfEkEe1xQERp4211dgtMJtp/AaA= -----END CERTIFICATE-----Generated at Thu Oct 30 03:19:31 2025 by rpki-client