$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a72eea3e-9e90-38bc-9e8a-67182ad56a31.roa File: a72eea3e-9e90-38bc-9e8a-67182ad56a31.roa (raw, json) Hash identifier: R42BjFWtXSiXxOjWp2cmn1MmKNk4DRbfLxYWYngfJSU= Subject key identifier: 48:D1:E6:DB:BF:26:5C:3C:2A:F5:86:9B:7F:48:A1:67:6C:27:45:C6 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584B970CE643225AD83CF317B500 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a72eea3e-9e90-38bc-9e8a-67182ad56a31.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 198148 IP address blocks: 65.72.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e6:43:22:5a:d8:3c:f3:17:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=5b4325f2-7dfc-46a0-8fc2-2b2e9371e0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fc:d1:4a:dd:ba:ac:40:67:f6:3e:ee:88:9d: e9:79:1b:b7:56:ef:e3:77:6c:f4:38:c1:46:db:f4: 18:ac:3a:b7:69:60:db:6a:2b:25:65:51:ac:80:ba: f3:93:9b:f9:31:5b:af:54:1f:fb:90:24:82:b4:3d: 51:1a:f4:a0:7b:b7:1d:c9:9a:8c:c4:e4:5d:df:c0: ed:46:02:40:aa:e1:f8:a7:85:3f:f2:2b:7e:63:f2: 95:79:c4:5a:07:f5:26:67:8e:19:e7:b6:88:24:6a: d0:11:f1:49:38:d1:dd:51:60:b1:d7:4c:b1:49:b3: 18:26:54:e3:35:df:36:f2:79:a2:6c:ff:71:e9:bb: 9e:34:d2:52:43:fe:9f:03:e0:a5:c3:25:cb:97:50: ff:3f:55:7e:54:07:7c:8a:60:f1:68:d0:d6:dc:cb: d8:e5:9b:77:98:63:c5:40:4f:65:7c:4e:c6:46:8f: ea:8a:d2:b7:4f:d7:e7:a2:53:22:c5:0f:0a:ac:f5: a3:f4:d6:e4:21:96:76:71:5d:a5:ce:a5:02:c9:6b: 88:07:a9:fa:c4:18:40:4d:11:e4:64:4b:91:e0:72: e7:e3:26:07:95:c4:87:7d:fe:ea:2b:de:39:9b:05: 45:c2:c2:fb:24:c7:31:35:57:b4:db:ad:ad:fc:d5: 32:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D1:E6:DB:BF:26:5C:3C:2A:F5:86:9B:7F:48:A1:67:6C:27:45:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a72eea3e-9e90-38bc-9e8a-67182ad56a31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 65.72.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:69:24:43:38:08:09:4a:aa:fe:a8:9d:99:de:c3:0b:07:0b: 20:21:2e:3c:aa:08:dc:ce:2c:6e:61:3b:02:8c:a5:78:a2:60: 1c:de:ae:8a:51:80:fe:0c:5a:6c:c0:12:b4:6c:ea:43:51:15: 68:12:b0:72:b7:a7:28:9c:25:2d:81:89:39:5c:88:fb:b0:7f: 59:12:af:4f:c3:f8:26:e6:a3:7c:b8:44:b5:55:b2:7f:f3:57: 09:88:7e:ee:dd:b9:4b:69:20:7f:f7:72:b3:a9:fa:49:cd:6d: cd:28:ec:df:df:bb:43:74:4e:6f:5c:69:6c:3f:66:01:ca:86: b3:9e:0a:20:ed:71:6c:ad:2f:b0:3d:9e:c3:45:ef:e4:15:f7: 1e:e1:cf:19:19:d5:35:f7:c5:76:35:ad:d7:cc:ea:37:dd:a0: 63:83:95:e6:d4:ca:4c:1d:18:73:c2:c3:96:53:64:89:b6:e7: 6a:48:bd:7a:f0:10:20:3c:5f:15:4d:ba:ba:95:85:c3:86:1e: 8f:68:e6:a0:50:5d:72:a6:c8:3a:33:75:26:1a:50:12:88:7c: 3c:a4:f6:d8:56:87:06:47:35:5c:91:54:5e:70:82:b5:aa:1e: 23:ea:f0:56:1c:6c:2b:d9:10:93:68:c7:73:23:ff:67:da:95: e2:89:76:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDOZDIlrYPPMXtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NWI0MzI1ZjItN2RmYy00NmEwLThmYzItMmIyZTkzNzFlMGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/zRSt26rEBn9j7uiJ3peRu3Vu/jd2z0OMFG 2/QYrDq3aWDbaislZVGsgLrzk5v5MVuvVB/7kCSCtD1RGvSge7cdyZqMxORd38Dt RgJAquH4p4U/8it+Y/KVecRaB/UmZ44Z57aIJGrQEfFJONHdUWCx10yxSbMYJlTj Nd828nmibP9x6bueNNJSQ/6fA+ClwyXLl1D/P1V+VAd8imDxaNDW3MvY5Zt3mGPF QE9lfE7GRo/qitK3T9fnolMixQ8KrPWj9NbkIZZ2cV2lzqUCyWuIB6n6xBhATRHk ZEuR4HLn4yYHlcSHff7qK945mwVFwsL7JMcxNVe0262t/NUymQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjR5tu/Jlw8KvWGm39IoWdsJ0XGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvYTcyZWVhM2UtOWU5MC0z OGJjLTllOGEtNjcxODJhZDU2YTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQUhAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9pJEM4CAlKqv6onZnewwsHCyAhLjyqCNzOLG5hOwKMpXiiYBzeropR gP4MWmzAErRs6kNRFWgSsHK3pyicJS2BiTlciPuwf1kSr0/D+Cbmo3y4RLVVsn/z VwmIfu7duUtpIH/3crOp+knNbc0o7N/fu0N0Tm9caWw/ZgHKhrOeCiDtcWytL7A9 nsNF7+QV9x7hzxkZ1TX3xXY1rdfM6jfdoGODlebUykwdGHPCw5ZTZIm252pIvXrw ECA8XxVNurqVhcOGHo9o5qBQXXKmyDozdSYaUBKIfDyk9thWhwZHNVyRVF5wgrWq HiPq8FYcbCvZEJNox3Mj/2faleKJdkU= -----END CERTIFICATE-----Generated at Sat Oct 25 13:36:01 2025 by rpki-client