$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/5d43ded9-5a0b-38ca-bc16-7e8d3bafa7f5.roa File: 5d43ded9-5a0b-38ca-bc16-7e8d3bafa7f5.roa (raw, json) Hash identifier: jgsCuIhCVo8A24hE5x2cdk/k75pdi0ngrhbQ3/9VE1o= Subject key identifier: 63:04:8B:C4:A2:D0:1C:E0:22:01:27:B8:DF:85:6B:DB:7A:27:B5:84 Certificate issuer: /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5 Certificate serial: 010D0C9F4328584B4081A46F9279CFA833843400 Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/5d43ded9-5a0b-38ca-bc16-7e8d3bafa7f5.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 399122 IP address blocks: 72.172.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:a4:6f:92:79:cf:a8:33:84:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=ea84ef43-3822-4ff6-a622-f4edf1b7e5e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bf:3b:3f:96:e2:58:5b:90:0a:5a:dc:83:d6: 8a:01:b5:a0:d7:56:f4:59:06:a0:b0:4c:52:3d:7d: 23:05:c3:58:d8:9a:9f:72:37:cb:af:a3:90:7b:de: ce:bf:30:29:db:48:34:d7:d4:64:17:79:3c:6c:bd: 11:4a:62:97:e0:a7:b7:99:18:af:30:96:2a:c2:3a: d1:8f:31:72:28:8a:7a:68:62:86:33:53:00:33:33: 76:ae:bd:69:ea:30:bc:4f:65:84:65:86:3f:8d:3e: 4c:03:d7:1f:f6:2c:94:fa:0d:0e:67:bd:44:61:84: d1:46:e6:98:e0:f1:3b:8f:fb:ec:7d:53:df:2e:5a: 4e:3f:38:a4:7a:50:68:af:a3:33:ac:82:bd:b6:83: c4:bc:8e:68:9a:97:f5:40:0e:64:5a:4c:a7:ad:28: ca:79:95:70:99:8f:fa:43:9e:84:98:2c:4b:bf:64: e2:54:ff:da:ce:86:2f:b6:c0:17:b7:9b:71:20:80: 05:23:96:ed:04:05:4b:5f:c5:8d:c3:28:72:a5:b1: db:c3:7e:db:c1:4b:28:7c:6c:d4:0a:fb:1d:80:2f: 96:71:f2:5c:54:16:9f:ab:d8:46:04:a2:56:04:82: 58:2d:74:a3:0c:45:de:b5:68:dd:a8:ba:c3:4b:0e: 71:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:04:8B:C4:A2:D0:1C:E0:22:01:27:B8:DF:85:6B:DB:7A:27:B5:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/5d43ded9-5a0b-38ca-bc16-7e8d3bafa7f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl X509v3 Authority Key Identifier: keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer sbgp-ipAddrBlock: critical IPv4: 72.172.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ec:2d:7f:3b:9b:5b:0f:7b:7f:11:4b:ef:a0:9f:a0:7f:2b: 8f:82:df:39:af:4c:bc:a2:47:58:49:c5:79:0c:b2:82:f9:c1: a7:23:3f:2a:26:1f:1b:75:99:cb:57:4c:00:7a:4a:76:a4:40: ea:8b:11:65:1d:c0:7e:fe:42:38:5e:58:16:d7:42:05:47:5c: 6d:a0:cc:e0:34:d0:ee:40:c0:90:33:bf:23:a4:c2:b6:76:e3: b1:0e:ec:a2:68:25:0b:84:96:d1:1e:e5:cc:97:e7:94:18:ff: 30:00:b9:b6:f9:66:87:67:b4:50:54:be:a5:e8:01:06:7f:f6: 8f:f3:3c:02:74:7c:90:17:46:01:78:79:55:b7:18:a4:e4:01: d1:f6:d2:0b:df:51:f4:b7:b8:f2:68:e6:df:82:03:7f:e5:74: df:30:8d:57:35:a7:44:95:8e:28:3b:e8:31:a9:02:cb:c6:98: e7:fe:79:0b:04:8f:cb:b1:f4:9e:00:dd:59:2a:7d:b0:c6:c7: a6:5d:97:53:fd:05:6d:49:be:f1:f6:5b:fd:6b:47:65:02:0c: d0:17:bc:df:e8:21:f8:6f:06:23:57:2b:66:33:54:3f:f5:af: 91:f8:c8:b3:bc:ca:ab:5e:9d:9c:9f:92:3e:82:76:46:b7:f7: d9:85:86:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgaRvknnPqDOENAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYyNjE4NzgtNWVmNC00Zjk5LThkMDktYjZkMjQ5MzQ0 NGM1MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk ZWE4NGVmNDMtMzgyMi00ZmY2LWE2MjItZjRlZGYxYjdlNWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb87P5biWFuQClrcg9aKAbWg11b0WQagsExS PX0jBcNY2JqfcjfLr6OQe97OvzAp20g019RkF3k8bL0RSmKX4Ke3mRivMJYqwjrR jzFyKIp6aGKGM1MAMzN2rr1p6jC8T2WEZYY/jT5MA9cf9iyU+g0OZ71EYYTRRuaY 4PE7j/vsfVPfLlpOPzikelBor6MzrIK9toPEvI5ompf1QA5kWkynrSjKeZVwmY/6 Q56EmCxLv2TiVP/azoYvtsAXt5txIIAFI5btBAVLX8WNwyhypbHbw37bwUsofGzU CvsdgC+WcfJcVBafq9hGBKJWBIJYLXSjDEXetWjdqLrDSw5xTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMEi8Si0BzgIgEnuN+Fa9t6J7WEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNjI2 MTg3OC01ZWY0LTRmOTktOGQwOS1iNmQyNDkzNDQ0YzUvNWQ0M2RlZDktNWEwYi0z OGNhLWJjMTYtN2U4ZDNiYWZhN2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTYyNjE4NzgtNWVmNC00Zjk5LThk MDktYjZkMjQ5MzQ0NGM1L2E2MjYxODc4LTVlZjQtNGY5OS04ZDA5LWI2ZDI0OTM0 NDRjNS5jcmwwHwYDVR0jBBgwFoAU5DgAsivRHURmtzlG/z1FUty+3BowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNjI2MTg3OC01ZWY0LTRmOTktOGQwOS1iNmQy NDkzNDQ0YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASKxIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7sLX87m1sPe38RS++gn6B/K4+C3zmvTLyiR1hJxXkMsoL5wacjPyom Hxt1mctXTAB6SnakQOqLEWUdwH7+QjheWBbXQgVHXG2gzOA00O5AwJAzvyOkwrZ2 47EO7KJoJQuEltEe5cyX55QY/zAAubb5ZodntFBUvqXoAQZ/9o/zPAJ0fJAXRgF4 eVW3GKTkAdH20gvfUfS3uPJo5t+CA3/ldN8wjVc1p0SVjig76DGpAsvGmOf+eQsE j8ux9J4A3VkqfbDGx6Zdl1P9BW1JvvH2W/1rR2UCDNAXvN/oIfhvBiNXK2YzVD/1 r5H4yLO8yqtenZyfkj6Cdka399mFhvA= -----END CERTIFICATE-----Generated at Sat Oct 25 22:10:11 2025 by rpki-client