$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c814f056-b6f8-3d38-bca1-53524829f2b8.roa File: c814f056-b6f8-3d38-bca1-53524829f2b8.roa (raw, json) Hash identifier: 8uZp4BwYS7tsIX5USBYwbHQtRO20VWkgpn4nZi58+JA= Subject key identifier: 63:EC:24:F8:DC:26:4D:8B:88:F1:ED:A5:41:B5:4A:6E:FA:3B:20:40 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B3FC752577D4C07488DD7414E Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c814f056-b6f8-3d38-bca1-53524829f2b8.roa Signing time: Fri 19 Sep 2025 18:45:14 +0000 ROA not before: Fri 19 Sep 2025 18:45:14 +0000 ROA not after: Thu 18 Dec 2025 19:45:14 +0000 asID: 0 IP address blocks: 72.17.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:c7:52:57:7d:4c:07:48:8d:d7:41:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Sep 19 18:45:14 2025 GMT Not After : Dec 18 19:45:14 2025 GMT Subject: CN=3831f4fb-ebf9-4355-a910-a32d81cb3efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a9:ae:cc:17:3c:24:ed:24:52:42:d4:39:08: 3e:d7:31:b6:a4:89:9d:5f:a6:21:69:c3:81:47:49: e5:45:be:64:00:05:6b:a6:e7:39:0f:60:65:3f:c2: 97:0b:f8:39:7c:18:ca:07:90:a0:c4:05:3b:92:d9: b0:30:59:b8:39:96:71:bb:86:52:75:f6:e7:d1:ea: 06:67:cc:f7:f3:46:f9:90:d9:4b:b0:a0:f7:88:15: 0c:41:7b:6c:a5:a9:91:57:3b:cf:bf:32:9b:6b:89: 60:76:d5:ad:6d:07:bc:6e:37:0d:21:7a:03:fd:f1: 3a:1c:db:32:5e:e2:12:de:5d:a1:7e:40:0c:bc:f5: 53:49:66:ec:da:51:69:0a:b3:cf:78:35:98:7c:61: 75:c4:d2:1f:31:23:36:c5:cf:e6:6a:1b:8e:7a:e4: 15:a2:71:1c:57:a3:94:c7:f0:ef:2c:4d:91:3d:fd: 5b:d7:69:d3:ab:2b:49:a9:ac:07:a4:fb:bb:0a:73: e3:2d:a6:c6:e6:5d:8f:1a:f2:8b:18:f4:6a:41:5f: ba:bf:a7:51:d1:c5:10:48:85:9f:51:10:3c:70:a9: 1e:13:df:f8:ea:9d:da:f1:13:5c:c4:75:ca:f2:f6: 3c:6c:50:62:39:11:18:c8:d3:db:f0:6f:13:e4:65: 13:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:EC:24:F8:DC:26:4D:8B:88:F1:ED:A5:41:B5:4A:6E:FA:3B:20:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c814f056-b6f8-3d38-bca1-53524829f2b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.17.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:24:9f:9c:9f:76:00:53:6c:28:ef:6b:30:98:bf:54:84:76: 9a:ff:1a:d0:e6:e8:1e:32:3b:b3:ef:0b:33:13:87:bf:5b:77: 52:5f:41:7b:ed:16:1a:00:42:37:9f:49:a6:7f:52:90:7f:34: fd:c2:ba:86:4f:5a:b5:04:d5:fe:20:84:44:de:b1:b7:19:ba: 7e:e5:32:c2:96:77:01:66:7b:b7:ec:83:18:ab:0c:12:12:f6: 2e:68:37:b3:32:db:bd:a4:88:9c:47:a3:43:d7:b6:e1:d2:7e: 6e:dc:3f:1b:d6:68:20:43:2f:7a:fe:12:ef:b4:b0:9c:9a:ad: 07:07:3d:21:c3:71:04:c9:1d:29:4d:ed:af:80:3d:23:cb:e6: 75:cf:33:b8:0e:91:fe:01:38:19:bb:e4:dc:c8:07:96:a1:32: b7:75:53:40:f6:ce:dc:3f:eb:f2:54:fc:d3:2a:3f:1e:24:d4: f8:c1:ca:72:52:35:f6:a1:3b:bd:32:2f:0c:8e:c1:40:e3:01: 53:6c:ad:f6:31:9f:36:d8:c9:9b:f5:bd:ac:6e:0f:ee:fb:d1: 7c:ba:8c:83:b1:17:2c:f2:c8:e8:c8:9d:db:c5:34:b4:de:ba: 85:d2:d4:1c:6e:a1:03:a1:5e:55:7b:aa:6e:d6:93:63:a2:52: d3:df:24:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/x1JXfUwHSI3XQU4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDkxOTE4NDUxNFoXDTI1MTIxODE5NDUxNFowLzEtMCsGA1UEAxMk MzgzMWY0ZmItZWJmOS00MzU1LWE5MTAtYTMyZDgxY2IzZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgamuzBc8JO0kUkLUOQg+1zG2pImdX6YhacOB R0nlRb5kAAVrpuc5D2BlP8KXC/g5fBjKB5CgxAU7ktmwMFm4OZZxu4ZSdfbn0eoG Z8z380b5kNlLsKD3iBUMQXtspamRVzvPvzKba4lgdtWtbQe8bjcNIXoD/fE6HNsy XuIS3l2hfkAMvPVTSWbs2lFpCrPPeDWYfGF1xNIfMSM2xc/mahuOeuQVonEcV6OU x/DvLE2RPf1b12nTqytJqawHpPu7CnPjLabG5l2PGvKLGPRqQV+6v6dR0cUQSIWf URA8cKkeE9/46p3a8RNcxHXK8vY8bFBiOREYyNPb8G8T5GUT3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPsJPjcJk2LiPHtpUG1Sm76OyBAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYzgxNGYwNTYtYjZmOC0z ZDM4LWJjYTEtNTM1MjQ4MjlmMmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSBEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0kn5yfdgBTbCjvazCYv1SEdpr/GtDm6B4yO7PvCzMTh79bd1JfQXvt FhoAQjefSaZ/UpB/NP3CuoZPWrUE1f4ghETesbcZun7lMsKWdwFme7fsgxirDBIS 9i5oN7My272kiJxHo0PXtuHSfm7cPxvWaCBDL3r+Eu+0sJyarQcHPSHDcQTJHSlN 7a+APSPL5nXPM7gOkf4BOBm75NzIB5ahMrd1U0D2ztw/6/JU/NMqPx4k1PjBynJS NfahO70yLwyOwUDjAVNsrfYxnzbYyZv1vaxuD+770Xy6jIOxFyzyyOjIndvFNLTe uoXS1BxuoQOhXlV7qm7Wk2OiUtPfJPQ= -----END CERTIFICATE-----Generated at Wed Oct 8 13:57:46 2025 by rpki-client