$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/93579c5a-1fbb-393d-942f-b4c14c01265d.roa File: 93579c5a-1fbb-393d-942f-b4c14c01265d.roa (raw, json) Hash identifier: gsYmob0aYFyigp4+Zprz+oADh57YCKu3s57ygfcekSc= Subject key identifier: 7F:52:7B:96:04:8D:8C:E8:2C:D8:9D:70:EC:EF:05:48:9B:55:47:54 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584B6A61E1158A0C60C682F44180 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/93579c5a-1fbb-393d-942f-b4c14c01265d.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 16433 IP address blocks: 72.22.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:e1:15:8a:0c:60:c6:82:f4:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=6585aa32-bd5c-4742-9d4b-0a8dd9fdb2ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ec:d3:85:3d:2a:99:64:d1:52:65:cd:cc:28: c3:d2:33:0f:78:9c:94:3b:32:81:8e:5b:a2:6a:a4: f2:4c:c4:73:e2:a1:17:6e:0e:0a:6a:6e:67:a2:76: 38:4b:07:98:ac:fd:0d:1b:e3:2a:00:a4:3f:d5:5b: 73:cb:2e:46:c0:09:2b:75:81:74:8c:99:dc:1d:56: a0:ef:7e:e1:e5:45:67:56:0f:b3:14:2e:30:ea:68: 78:22:1b:8a:10:8a:2a:fd:bd:a7:37:93:51:03:bd: 2f:93:2c:c9:96:69:41:eb:e7:40:fb:a6:a8:06:f5: a8:86:a9:f0:44:31:ae:e7:b6:fe:24:9a:e6:3d:2f: 0a:95:a1:08:9d:df:b2:99:ca:cf:c9:90:57:8d:67: f4:20:91:85:3c:8c:55:03:e4:5b:54:51:70:66:38: 97:8f:ef:a6:e1:d1:40:9c:48:2c:79:4b:30:c5:13: f9:dd:d5:67:8d:7a:5d:13:73:d6:72:5f:03:1b:94: 47:9f:72:b6:2a:e2:10:3a:cf:a3:a5:ae:eb:5b:b4: ae:c0:0e:f1:35:c7:c9:c2:bf:59:f7:9d:aa:84:28: 08:97:dd:a4:5a:f4:4f:c3:7c:f8:27:89:d3:4c:f4: 77:13:85:51:bc:54:7f:7b:60:3d:32:2f:3e:92:46: d2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:52:7B:96:04:8D:8C:E8:2C:D8:9D:70:EC:EF:05:48:9B:55:47:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/93579c5a-1fbb-393d-942f-b4c14c01265d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 72.22.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:57:f1:bb:f4:b4:a5:32:d2:11:ef:11:12:97:fc:49:f5:b2: eb:ff:a4:e9:d7:ab:d1:55:df:17:12:c9:fe:5b:fa:b5:a4:10: e6:00:6d:7d:c7:aa:5c:ff:9f:b2:cf:2e:20:c3:2e:88:d4:cf: 86:24:dd:2d:5d:2e:92:a4:31:f4:a3:25:65:ee:2c:f2:08:bb: 6f:6a:8d:b0:ab:4a:6b:d1:42:fc:98:a7:92:f9:08:ce:5c:49: e2:e2:45:93:39:b5:93:ab:99:d1:76:24:63:b5:1d:86:50:70: ea:1f:3a:06:08:69:fe:92:25:89:3b:c4:59:62:e8:21:18:dc: 9b:44:7e:f7:73:08:62:ac:a5:ea:5c:59:7f:ef:7f:ad:bc:18: 03:7f:aa:2a:2f:c2:a3:09:e9:2b:c1:d4:44:46:83:16:03:bb: a8:0a:7c:f0:05:c2:18:9b:7c:c9:29:6d:0a:33:ee:cb:e4:d7: 51:c2:7b:7f:44:4e:5c:55:79:40:14:14:c2:4c:53:29:1d:6b: c8:00:bd:12:bc:ac:c4:d0:34:76:d6:71:85:0b:92:82:a8:0d: 10:be:f9:0d:38:58:87:1d:35:a9:b5:0c:44:4d:f2:03:69:74: 5d:10:b1:d2:ff:e0:93:7a:81:fa:4f:b5:a4:e1:a6:56:61:89: 83:71:bd:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYeEVigxgxoL0QYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk NjU4NWFhMzItYmQ1Yy00NzQyLTlkNGItMGE4ZGQ5ZmRiMmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8uzThT0qmWTRUmXNzCjD0jMPeJyUOzKBjlui aqTyTMRz4qEXbg4Kam5nonY4SweYrP0NG+MqAKQ/1Vtzyy5GwAkrdYF0jJncHVag 737h5UVnVg+zFC4w6mh4IhuKEIoq/b2nN5NRA70vkyzJlmlB6+dA+6aoBvWohqnw RDGu57b+JJrmPS8KlaEInd+ymcrPyZBXjWf0IJGFPIxVA+RbVFFwZjiXj++m4dFA nEgseUswxRP53dVnjXpdE3PWcl8DG5RHn3K2KuIQOs+jpa7rW7SuwA7xNcfJwr9Z 952qhCgIl92kWvRPw3z4J4nTTPR3E4VRvFR/e2A9Mi8+kkbS8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9Se5YEjYzoLNidcOzvBUibVUdUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvOTM1NzljNWEtMWZiYi0z OTNkLTk0MmYtYjRjMTRjMDEyNjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESBZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtX8bv0tKUy0hHvERKX/En1suv/pOnXq9FV3xcSyf5b+rWkEOYAbX3H qlz/n7LPLiDDLojUz4Yk3S1dLpKkMfSjJWXuLPIIu29qjbCrSmvRQvyYp5L5CM5c SeLiRZM5tZOrmdF2JGO1HYZQcOofOgYIaf6SJYk7xFli6CEY3JtEfvdzCGKspepc WX/vf628GAN/qiovwqMJ6SvB1ERGgxYDu6gKfPAFwhibfMkpbQoz7svk11HCe39E TlxVeUAUFMJMUykda8gAvRK8rMTQNHbWcYULkoKoDRC++Q04WIcdNam1DERN8gNp dF0QsdL/4JN6gfpPtaThplZhiYNxvbs= -----END CERTIFICATE-----Generated at Sun Oct 19 01:01:02 2025 by rpki-client