$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5b0388b1-dc91-3d6d-a1fa-e1b43b44deaa.roa File: 5b0388b1-dc91-3d6d-a1fa-e1b43b44deaa.roa (raw, json) Hash identifier: b0esuupcU8XwlFlVvom6TyaT8Xmlf+gCIVUYSflYGTM= Subject key identifier: 76:71:C0:E7:77:5B:D8:4B:02:F5:92:FB:73:E2:AB:72:B1:19:17:69 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584B9B51E29823B905FC8DCA2560 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5b0388b1-dc91-3d6d-a1fa-e1b43b44deaa.roa Signing time: Wed 22 Oct 2025 13:42:59 +0000 ROA not before: Wed 22 Oct 2025 13:42:59 +0000 ROA not after: Tue 20 Jan 2026 14:42:59 +0000 asID: 399861 IP address blocks: 72.14.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:51:e2:98:23:b9:05:fc:8d:ca:25:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Oct 22 13:42:59 2025 GMT Not After : Jan 20 14:42:59 2026 GMT Subject: CN=1c0b9625-ba04-491c-af5a-e503448d2da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:62:cb:fe:37:49:44:ae:b0:89:8c:3b:89:d6: 38:5c:b1:17:0f:a5:20:c0:5b:68:5b:24:18:98:c3: dc:82:1f:d8:17:62:c2:48:9f:3f:c9:52:d5:e9:94: 7f:9c:8e:8a:3a:4f:9d:bd:38:d4:50:9c:19:4d:36: 24:95:a5:bd:33:33:96:93:b2:fb:2d:aa:8d:17:1b: 59:c1:56:29:4d:91:b8:ec:df:60:fc:35:26:db:1e: 8d:3e:54:83:d2:7a:6c:57:3d:93:3d:a8:52:2a:68: 25:73:7f:ad:78:8e:89:3f:8d:46:f9:ca:65:19:a1: 0d:56:12:ef:47:c7:14:5f:fd:3a:34:a1:c2:71:3a: e9:46:90:db:29:12:16:ee:0e:7f:47:95:e3:8f:54: e2:c6:1f:05:d4:69:43:e1:cd:80:51:cb:ef:53:b1: 70:84:99:89:82:cb:1f:86:5e:54:9e:ff:25:12:f3: 25:88:55:ea:a7:42:79:0f:0d:86:f9:53:80:95:12: a8:3d:33:f7:47:6e:43:26:87:e4:58:58:aa:0e:d6: a6:f5:c8:05:04:d2:05:5d:f0:81:24:9c:4f:2b:5b: 45:6b:44:24:0d:bd:d1:bc:02:f9:73:a1:9f:b7:d7: cb:73:3c:d6:33:b8:3b:d3:87:1b:78:63:2d:cb:de: dc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:71:C0:E7:77:5B:D8:4B:02:F5:92:FB:73:E2:AB:72:B1:19:17:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5b0388b1-dc91-3d6d-a1fa-e1b43b44deaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:f5:21:48:09:85:31:0f:18:27:40:72:38:4c:0d:c3:09:47: ae:c2:1a:c6:d3:0b:58:b8:d8:06:34:42:56:dc:18:3e:81:eb: 51:d8:93:3c:6b:2c:8a:31:1a:23:c7:fa:7e:9e:4b:f7:a8:a3: ee:ab:5a:f5:f8:a1:41:d2:5f:af:16:6c:d8:3e:52:cd:9f:de: ef:4c:c6:30:de:a7:d2:60:5e:98:e2:0b:ca:65:11:b3:1c:d3: 8d:a8:af:88:a7:20:7e:80:08:48:26:71:2c:6a:c8:e8:58:ba: 44:6e:f3:1e:ed:db:42:a2:29:96:96:34:00:63:e9:eb:fb:52: b2:a8:21:16:35:d9:c4:69:34:4c:0b:d2:ed:9a:ea:ee:b7:82: 2e:70:50:ce:25:0b:a1:3e:c9:a6:0e:c4:db:a3:0f:fc:58:6e: f8:d0:fe:cf:14:0f:d5:89:d8:df:01:6f:3d:bf:a4:02:ef:89: 6d:ab:91:5b:e6:e3:71:62:28:a9:df:28:bb:30:86:a1:93:e5: 61:38:41:fd:3b:b3:b0:28:5c:df:24:08:e5:ee:f3:a5:cf:90: dc:00:83:af:1f:05:43:e0:4e:09:f1:16:29:21:05:74:69:df: f5:35:83:44:ce:92:af:46:65:37:b3:31:43:0b:c3:62:58:1f: 7f:26:f1:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubUeKYI7kF/I3KJWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI1MTAyMjEzNDI1OVoXDTI2MDEyMDE0NDI1OVowLzEtMCsGA1UEAxMk MWMwYjk2MjUtYmEwNC00OTFjLWFmNWEtZTUwMzQ0OGQyZGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWLL/jdJRK6wiYw7idY4XLEXD6UgwFtoWyQY mMPcgh/YF2LCSJ8/yVLV6ZR/nI6KOk+dvTjUUJwZTTYklaW9MzOWk7L7LaqNFxtZ wVYpTZG47N9g/DUm2x6NPlSD0npsVz2TPahSKmglc3+teI6JP41G+cplGaENVhLv R8cUX/06NKHCcTrpRpDbKRIW7g5/R5Xjj1Tixh8F1GlD4c2AUcvvU7FwhJmJgssf hl5Unv8lEvMliFXqp0J5Dw2G+VOAlRKoPTP3R25DJofkWFiqDtam9cgFBNIFXfCB JJxPK1tFa0QkDb3RvAL5c6Gft9fLczzWM7g704cbeGMty97ckwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZxwOd3W9hLAvWS+3Piq3KxGRdpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvNWIwMzg4YjEtZGM5MS0z ZDZkLWExZmEtZTFiNDNiNDRkZWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAT1IUgJhTEPGCdAcjhMDcMJR67CGsbTC1i42AY0QlbcGD6B61HYkzxr LIoxGiPH+n6eS/eoo+6rWvX4oUHSX68WbNg+Us2f3u9MxjDep9JgXpjiC8plEbMc 042or4inIH6ACEgmcSxqyOhYukRu8x7t20KiKZaWNABj6ev7UrKoIRY12cRpNEwL 0u2a6u63gi5wUM4lC6E+yaYOxNujD/xYbvjQ/s8UD9WJ2N8Bbz2/pALviW2rkVvm 43FiKKnfKLswhqGT5WE4Qf07s7AoXN8kCOXu86XPkNwAg68fBUPgTgnxFikhBXRp 3/U1g0TOkq9GZTezMUMLw2JYH38m8ek= -----END CERTIFICATE-----Generated at Tue Nov 4 19:48:28 2025 by rpki-client