$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/72e207f9-f199-3543-a4e1-beefe43e0da9.roa File: 72e207f9-f199-3543-a4e1-beefe43e0da9.roa (raw, json) Hash identifier: jkzFhs7TmkSIamDzFXUolKBBdF8TIEEcaN2SyI5ysJI= Subject key identifier: 2D:1C:1E:F9:96:25:86:96:B9:73:35:95:96:11:A9:E0:F5:9A:83:03 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B61737EE2530C48BC74314060 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/72e207f9-f199-3543-a4e1-beefe43e0da9.roa Signing time: Wed 01 Oct 2025 20:13:49 +0000 ROA not before: Wed 01 Oct 2025 20:13:49 +0000 ROA not after: Tue 30 Dec 2025 21:13:49 +0000 asID: 19905 IP address blocks: 173.22.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:73:7e:e2:53:0c:48:bc:74:31:40:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 1 20:13:49 2025 GMT Not After : Dec 30 21:13:49 2025 GMT Subject: CN=67086a66-8a75-47f1-84a7-0de623abcaa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:39:68:4e:5d:71:ae:bf:60:c5:74:b2:5e:0f: 8b:95:46:f2:e3:ad:f0:bf:20:c5:de:74:bd:45:4c: bd:e7:83:35:94:54:8d:b3:d8:93:19:96:be:f2:92: 16:9a:bb:bd:6b:d2:e0:d6:20:7c:98:91:5a:71:4a: c5:a8:e8:d0:6d:c2:02:4f:51:e1:a0:53:75:06:bf: 45:8e:ad:63:77:50:dd:b0:4d:5a:15:3a:0f:83:79: da:b3:68:1a:7a:28:0d:0d:40:78:ff:13:2d:c1:95: 51:0b:ce:b2:a0:83:0c:d0:17:ea:77:9c:77:27:50: 70:b0:45:c8:75:d4:e5:0a:4b:13:5c:8c:5d:bb:9f: e4:9e:89:f8:ce:a8:b7:0b:19:32:a8:ba:19:d9:83: 8e:1f:2b:89:34:f2:49:3a:c0:ba:d5:40:3e:e6:68: 64:52:6f:96:6e:95:da:40:f2:49:a6:19:9f:61:06: 25:19:14:c6:34:dd:b9:32:cb:0e:64:c8:31:e2:4a: a1:5c:56:d5:7e:8b:c3:7c:53:f4:8e:d5:d5:be:93: 9f:63:d0:9e:ab:1d:a3:97:25:b4:29:61:f8:68:2f: 85:bb:0f:d4:1a:5b:ff:ba:34:2a:87:48:52:55:9a: 23:cc:7c:c8:dd:ed:e6:56:28:d9:8a:64:b8:3d:63: fd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1C:1E:F9:96:25:86:96:B9:73:35:95:96:11:A9:E0:F5:9A:83:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/72e207f9-f199-3543-a4e1-beefe43e0da9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:79:a2:73:46:34:38:1d:f8:bd:35:d3:ad:64:78:e8:d2:e2: 49:03:7c:ac:97:98:3f:40:6e:73:1c:76:e9:ae:79:9c:6b:53: 23:cd:bc:fd:ae:53:67:a3:82:43:61:f1:eb:9c:ea:9b:3e:87: e7:6c:5d:90:fb:86:69:41:f1:6e:4e:0d:0d:61:48:c9:c2:4f: 0b:83:ed:4f:c1:1e:e3:be:78:3e:e7:00:18:fc:3a:e2:4f:41: 64:e6:ea:57:2c:98:c7:8e:e2:74:5a:44:12:f2:1e:de:b0:48: cb:d8:b6:c4:dc:0a:94:41:50:12:e7:d8:74:4b:ce:03:8f:f7: a5:92:29:ae:a6:fc:6a:7b:11:80:8e:55:dd:93:60:ef:86:7c: dc:72:f5:42:69:43:e2:d5:23:a1:9d:01:26:d9:b4:7d:88:6c: e2:78:72:33:75:3f:0b:e7:0c:a5:1f:f3:24:a7:4b:c5:c5:3b: c4:40:be:bc:c3:fa:94:cd:a9:12:9b:34:b8:91:b8:33:bd:25: d0:15:6e:2c:5e:ec:aa:cb:c2:88:17:53:ff:c8:fc:53:eb:57: 45:f1:32:8d:e5:c3:f1:68:29:94:be:23:6f:f6:03:56:b7:5e: 93:d3:22:fb:62:86:ff:3e:41:0b:26:61:07:1a:56:fe:d3:8e: 77:cb:55:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEthc37iUwxIvHQxQGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMTIwMTM0OVoXDTI1MTIzMDIxMTM0OVowLzEtMCsGA1UEAxMk NjcwODZhNjYtOGE3NS00N2YxLTg0YTctMGRlNjIzYWJjYWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTloTl1xrr9gxXSyXg+LlUby463wvyDF3nS9 RUy954M1lFSNs9iTGZa+8pIWmru9a9Lg1iB8mJFacUrFqOjQbcICT1HhoFN1Br9F jq1jd1DdsE1aFToPg3nas2gaeigNDUB4/xMtwZVRC86yoIMM0Bfqd5x3J1BwsEXI ddTlCksTXIxdu5/knon4zqi3CxkyqLoZ2YOOHyuJNPJJOsC61UA+5mhkUm+WbpXa QPJJphmfYQYlGRTGNN25MssOZMgx4kqhXFbVfovDfFP0jtXVvpOfY9Ceqx2jlyW0 KWH4aC+Fuw/UGlv/ujQqh0hSVZojzHzI3e3mVijZimS4PWP9DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0cHvmWJYaWuXM1lZYRqeD1moMDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzJlMjA3ZjktZjE5OS0z NTQzLWE0ZTEtYmVlZmU0M2UwZGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRbjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHd5onNGNDgd+L01061keOjS4kkDfKyXmD9AbnMcdumueZxrUyPNvP2u U2ejgkNh8euc6ps+h+dsXZD7hmlB8W5ODQ1hSMnCTwuD7U/BHuO+eD7nABj8OuJP QWTm6lcsmMeO4nRaRBLyHt6wSMvYtsTcCpRBUBLn2HRLzgOP96WSKa6m/Gp7EYCO Vd2TYO+GfNxy9UJpQ+LVI6GdASbZtH2IbOJ4cjN1PwvnDKUf8ySnS8XFO8RAvrzD +pTNqRKbNLiRuDO9JdAVbixe7KrLwogXU//I/FPrV0XxMo3lw/FoKZS+I2/2A1a3 XpPTIvtihv8+QQsmYQcaVv7TjnfLVRc= -----END CERTIFICATE-----Generated at Tue Nov 4 16:53:50 2025 by rpki-client