$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/33082064-85d3-3c03-a35c-1e9c0356d330.roa File: 33082064-85d3-3c03-a35c-1e9c0356d330.roa (raw, json) Hash identifier: W3StLFwVZkfEdfK1MI5DjjC9qwDUZVWRxezAWkelY/c= Subject key identifier: 2B:F7:88:28:3D:9B:FC:87:72:60:85:B5:00:4B:A7:FD:D6:18:26:F4 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584B9739A9574A073D5C80CD2700 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/33082064-85d3-3c03-a35c-1e9c0356d330.roa Signing time: Tue 21 Oct 2025 02:30:56 +0000 ROA not before: Tue 21 Oct 2025 02:30:56 +0000 ROA not after: Mon 19 Jan 2026 03:30:56 +0000 asID: 29752 IP address blocks: 128.14.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:39:a9:57:4a:07:3d:5c:80:cd:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Oct 21 02:30:56 2025 GMT Not After : Jan 19 03:30:56 2026 GMT Subject: CN=a0d12fad-8b83-4b71-b92a-877cfe5e0de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4f:dd:05:f1:58:a0:81:ee:49:92:b7:14:1c: ed:4d:cb:61:e5:51:82:e1:ab:5a:54:1e:d7:dc:ba: 3e:ca:98:b5:b7:c3:aa:9c:0e:9a:ee:d8:aa:d9:bf: db:fb:5c:02:bb:d0:c1:85:e4:93:7c:c1:eb:66:b3: 77:18:04:d7:f4:fb:b7:0c:01:6e:fb:e4:ed:d4:d3: aa:0b:b8:ce:9a:0b:da:62:08:fb:53:29:2b:91:a1: e3:7f:91:eb:e6:cd:ed:95:97:08:7c:ab:f4:77:98: 32:6e:63:75:52:62:f7:8c:dd:ee:68:57:dd:0b:f6: 9a:58:2f:7d:50:5b:35:fe:f5:8f:f9:05:eb:0a:48: a2:02:34:0a:f6:78:75:ec:13:ae:c8:8c:80:08:9d: d5:37:2e:06:c9:7a:98:1a:db:69:2e:aa:a5:a5:76: 54:34:ea:53:41:b1:de:70:91:df:02:0e:fa:38:b1: 6d:23:4b:5c:91:a9:87:8f:1f:26:1d:15:55:e0:00: 6c:3d:66:0d:88:48:24:bc:dc:1d:fe:e0:45:b2:fb: 35:d4:07:8c:a7:f1:3b:e0:fc:a2:bc:91:c7:83:ea: de:15:46:7c:19:13:e2:9c:5b:03:3b:ee:1f:4b:77: 8b:5f:63:0f:c4:4f:5c:12:d5:59:37:f7:21:d8:fa: d1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F7:88:28:3D:9B:FC:87:72:60:85:B5:00:4B:A7:FD:D6:18:26:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/33082064-85d3-3c03-a35c-1e9c0356d330.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.14.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:98:1e:cc:ef:ac:b9:9f:3b:87:b5:f1:ce:64:25:a9:d7:f7: 8f:14:64:f6:65:78:be:3d:26:f8:03:4f:9f:5b:2a:4a:68:47: c9:2b:19:92:49:41:27:80:3a:46:c4:2b:4e:ad:c9:b5:4f:0b: cc:db:16:0d:6d:b5:72:52:b0:a6:67:63:5f:bb:a0:d4:14:c2: 09:52:43:c7:1e:f3:1a:2f:5a:6f:e5:bf:ab:59:6f:61:31:4f: 35:f2:f2:ee:ba:b7:97:17:db:b5:a8:89:e7:d2:ae:64:84:08: b6:51:61:1a:0f:4d:46:e3:16:f2:88:bd:69:31:74:50:4c:88: ee:ac:2d:1c:77:bd:cb:fe:ca:db:5f:d7:41:93:09:64:9a:6a: 8e:64:4c:a3:65:ae:3d:2f:10:92:84:8f:71:e3:30:a2:f1:28: 49:bf:92:ed:47:36:be:e5:a0:a9:0d:76:32:84:4a:ed:16:27: 97:4f:45:c5:ce:ce:63:a4:95:f2:00:9a:8b:a8:9a:5f:ad:e0: 17:82:22:02:d2:c7:86:85:31:19:9a:2c:05:5e:08:a3:3c:17: 1d:ec:9e:29:c1:1c:08:61:31:75:c1:79:d1:01:79:f8:02:f0: 9a:e9:04:93:30:d9:f5:ad:05:da:19:d3:89:0f:ca:1a:0b:07: 39:47:30:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXOalXSgc9XIDNJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MTAyMTAyMzA1NloXDTI2MDExOTAzMzA1NlowLzEtMCsGA1UEAxMk YTBkMTJmYWQtOGI4My00YjcxLWI5MmEtODc3Y2ZlNWUwZGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3E/dBfFYoIHuSZK3FBztTcth5VGC4ataVB7X 3Lo+ypi1t8OqnA6a7tiq2b/b+1wCu9DBheSTfMHrZrN3GATX9Pu3DAFu++Tt1NOq C7jOmgvaYgj7UykrkaHjf5Hr5s3tlZcIfKv0d5gybmN1UmL3jN3uaFfdC/aaWC99 UFs1/vWP+QXrCkiiAjQK9nh17BOuyIyACJ3VNy4GyXqYGttpLqqlpXZUNOpTQbHe cJHfAg76OLFtI0tckamHjx8mHRVV4ABsPWYNiEgkvNwd/uBFsvs11AeMp/E74Pyi vJHHg+reFUZ8GRPinFsDO+4fS3eLX2MPxE9cEtVZN/ch2PrRXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCv3iCg9m/yHcmCFtQBLp/3WGCb0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMzMwODIwNjQtODVkMy0z YzAzLWEzNWMtMWU5YzAzNTZkMzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgA6hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISYHszvrLmfO4e18c5kJanX948UZPZleL49JvgDT59bKkpoR8krGZJJ QSeAOkbEK06tybVPC8zbFg1ttXJSsKZnY1+7oNQUwglSQ8ce8xovWm/lv6tZb2Ex TzXy8u66t5cX27WoiefSrmSECLZRYRoPTUbjFvKIvWkxdFBMiO6sLRx3vcv+yttf 10GTCWSaao5kTKNlrj0vEJKEj3HjMKLxKEm/ku1HNr7loKkNdjKESu0WJ5dPRcXO zmOklfIAmouoml+t4BeCIgLSx4aFMRmaLAVeCKM8Fx3sninBHAhhMXXBedEBefgC 8JrpBJMw2fWtBdoZ04kPyhoLBzlHMIM= -----END CERTIFICATE-----Generated at Wed Oct 22 16:18:07 2025 by rpki-client