$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/1acb3e17-b2a2-32de-a5b1-fbd7bfa56870.roa File: 1acb3e17-b2a2-32de-a5b1-fbd7bfa56870.roa (raw, json) Hash identifier: kx272B1G7tZ2oxx3dTzVla6s/vacE23znMk+628r1Xc= Subject key identifier: 30:AC:C2:55:A5:F4:DC:1A:35:6D:78:54:8A:B2:1E:93:64:2E:1C:98 Certificate issuer: /CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f Certificate serial: 010D0C9F4328584AF0F14BD1EA56FBA4CF0FF500 Authority key identifier: 5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/1acb3e17-b2a2-32de-a5b1-fbd7bfa56870.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 398781 IP address blocks: 165.140.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:4b:d1:ea:56:fb:a4:cf:0f:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=b7808a69-c037-47c2-aa3b-f9748571293f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9c:56:fe:17:6d:22:71:02:2f:0a:8d:2a:6a: 6f:12:d0:af:af:8e:8f:9b:34:c0:52:ee:6c:5f:c9: 30:d2:a3:b8:bd:2e:bc:13:3e:13:12:b4:93:99:a0: fe:6c:4f:81:03:dd:01:de:ff:f0:1b:fe:b2:33:c5: ee:98:c3:61:46:c5:38:80:11:64:9a:05:73:d7:bf: 7b:11:08:47:8b:d6:1a:3e:30:8e:6a:4e:e6:40:5d: 93:79:42:9a:5d:30:66:ef:63:e6:c7:1e:23:9e:96: 60:3a:e2:cd:f6:de:4b:51:92:d6:11:e5:ad:23:49: 0a:1f:ec:0a:6e:20:df:84:10:1e:f8:32:a7:a9:1d: 08:79:ba:7e:43:4a:25:ed:63:20:5d:af:eb:82:a7: 3f:e5:78:1d:4f:3c:47:93:5b:77:90:2e:9e:cb:ec: fd:95:bd:0b:82:3e:cb:dc:bc:7e:c7:b4:08:56:62: ad:7d:bd:29:42:0a:97:6b:c6:fd:0d:07:20:37:28: 4a:64:ae:1b:4b:c6:9e:e8:c5:6d:07:a2:b3:81:04: 6d:56:35:99:92:a5:78:65:39:2d:8f:4b:ff:5b:11: 62:29:5f:85:35:fd:19:50:f1:bc:6d:ee:1d:03:2f: 57:4b:a4:e5:ff:8b:f1:55:49:75:e8:0b:35:18:65: 96:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AC:C2:55:A5:F4:DC:1A:35:6D:78:54:8A:B2:1E:93:64:2E:1C:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/1acb3e17-b2a2-32de-a5b1-fbd7bfa56870.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl X509v3 Authority Key Identifier: keyid:5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer sbgp-ipAddrBlock: critical IPv4: 165.140.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:74:42:4f:d2:3e:8e:65:bd:44:19:fc:6a:d0:f5:d9:32:8c: 56:ac:8c:fe:ad:84:68:66:f3:cf:20:8d:d3:b7:8e:e6:3d:ec: c7:bd:12:e6:77:fe:7d:d8:6a:2c:63:7f:98:29:b5:65:ec:aa: 04:6e:32:3c:ca:6d:01:90:70:65:73:43:94:6d:98:2a:7f:46: aa:e8:ef:2d:82:b7:af:d9:b8:2c:00:4a:36:15:5e:77:4a:35: b4:82:44:78:05:bc:d0:a6:0a:35:16:b7:4f:8e:ec:4e:6f:e5: ff:e9:bd:a2:36:85:ac:f7:97:c1:2a:08:d6:7b:5f:d4:bd:2d: 81:80:55:3d:57:4a:30:67:be:15:f9:15:a8:60:48:57:38:4f: 28:69:99:54:f2:22:35:e0:31:45:56:15:d5:6a:8c:f3:a8:64: 9c:ab:0a:93:41:73:99:77:04:33:6a:e4:7f:0c:25:6f:88:18: 17:fe:fa:45:f2:60:03:0e:9f:66:32:fe:c5:ff:82:e8:28:b4: a9:be:09:59:f8:6e:37:97:1a:67:e7:46:43:48:3d:b1:7c:db: 9f:eb:a2:5c:18:c9:db:d4:b1:60:a2:41:f4:e4:55:5f:eb:ec: ff:52:7d:f7:96:14:8c:09:04:12:b3:77:b1:05:49:f8:03:bc: 03:34:24:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8UvR6lb7pM8P9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcyOGI0ZmQtNmU4Yi00NmM3LWI1OGUtODFmZGVhNmJl NjFmMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk Yjc4MDhhNjktYzAzNy00N2MyLWFhM2ItZjk3NDg1NzEyOTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJxW/hdtInECLwqNKmpvEtCvr46PmzTAUu5s X8kw0qO4vS68Ez4TErSTmaD+bE+BA90B3v/wG/6yM8XumMNhRsU4gBFkmgVz1797 EQhHi9YaPjCOak7mQF2TeUKaXTBm72Pmxx4jnpZgOuLN9t5LUZLWEeWtI0kKH+wK biDfhBAe+DKnqR0Iebp+Q0ol7WMgXa/rgqc/5XgdTzxHk1t3kC6ey+z9lb0Lgj7L 3Lx+x7QIVmKtfb0pQgqXa8b9DQcgNyhKZK4bS8ae6MVtB6KzgQRtVjWZkqV4ZTkt j0v/WxFiKV+FNf0ZUPG8be4dAy9XS6Tl/4vxVUl16As1GGWWxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCswlWl9NwaNW14VIqyHpNkLhyYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNzI4 YjRmZC02ZThiLTQ2YzctYjU4ZS04MWZkZWE2YmU2MWYvMWFjYjNlMTctYjJhMi0z MmRlLWE1YjEtZmJkN2JmYTU2ODcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDcyOGI0ZmQtNmU4Yi00NmM3LWI1 OGUtODFmZGVhNmJlNjFmL2Q3MjhiNGZkLTZlOGItNDZjNy1iNThlLTgxZmRlYTZi ZTYxZi5jcmwwHwYDVR0jBBgwFoAUXqu5H8cB3u5KLUAgcnl0o/4JsCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNzI4YjRmZC02ZThiLTQ2YzctYjU4ZS04MWZk ZWE2YmU2MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADx0Qk/SPo5lvUQZ/GrQ9dkyjFasjP6thGhm888gjdO3juY97Me9EuZ3 /n3Yaixjf5gptWXsqgRuMjzKbQGQcGVzQ5RtmCp/Rqro7y2Ct6/ZuCwASjYVXndK NbSCRHgFvNCmCjUWt0+O7E5v5f/pvaI2haz3l8EqCNZ7X9S9LYGAVT1XSjBnvhX5 FahgSFc4TyhpmVTyIjXgMUVWFdVqjPOoZJyrCpNBc5l3BDNq5H8MJW+IGBf++kXy YAMOn2Yy/sX/gugotKm+CVn4bjeXGmfnRkNIPbF825/rolwYydvUsWCiQfTkVV/r 7P9SffeWFIwJBBKzd7EFSfgDvAM0JJE= -----END CERTIFICATE-----Generated at Mon Nov 3 11:26:19 2025 by rpki-client