$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/692f5272-0ac6-3e25-a216-1e24529614aa.roa File: 692f5272-0ac6-3e25-a216-1e24529614aa.roa (raw, json) Hash identifier: 1NQefL3BNqM6N55VNh8bP2tUQuVi2U6uhBz10e0hpEI= Subject key identifier: 38:89:49:D6:69:69:BD:04:7F:B8:27:FF:60:A0:A4:9F:84:01:73:4D Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584B94422A0665ECC4ACEB27A680 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/692f5272-0ac6-3e25-a216-1e24529614aa.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 58212 IP address blocks: 72.14.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:2a:06:65:ec:c4:ac:eb:27:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=232dba68-292e-40b1-aa6b-762be02de93e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6c:84:67:97:78:1b:91:2c:8d:71:0c:12:82: 2b:ad:90:33:1e:52:12:d6:8a:eb:3c:59:f6:38:65: f2:0a:b6:e5:bc:5f:b7:de:a0:9f:b9:4e:e9:b6:93: f3:03:79:49:dd:4a:39:b2:b4:ba:a8:7f:81:f9:2f: 5c:1c:1a:f9:84:2e:d6:53:e2:40:af:e6:54:78:43: be:b9:b6:75:ae:a0:04:1f:de:47:96:99:c4:e2:97: 16:05:4f:61:1d:18:8b:3a:f1:1e:dc:17:c9:af:fb: d1:cc:c0:d7:fb:ae:cd:3c:16:76:ce:d5:ee:10:df: 13:f2:a3:03:a0:85:6c:48:db:a3:08:f1:a4:77:7a: 79:14:d9:67:e9:3e:36:55:cb:83:06:a5:33:0a:1c: 36:6a:2c:e1:e2:31:91:94:ea:40:e0:57:41:50:40: 45:fa:d7:3c:07:e2:42:6b:f9:11:5f:35:dd:0b:52: 92:c8:f7:76:41:16:e5:46:39:b7:66:b1:c7:0f:6d: 17:34:60:86:eb:83:87:5a:9b:cb:e6:83:38:06:4b: 6a:9a:7a:d4:ad:f5:a5:bf:0d:77:9a:a5:e1:47:dc: a6:84:4e:63:37:39:98:92:fd:68:46:20:dd:3b:bf: db:67:66:99:81:2f:38:7a:7d:4b:51:94:97:44:64: c2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:89:49:D6:69:69:BD:04:7F:B8:27:FF:60:A0:A4:9F:84:01:73:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/692f5272-0ac6-3e25-a216-1e24529614aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:97:59:1c:7b:0b:fa:a3:49:f0:14:e2:2c:77:2c:1b:dc:93: d7:d3:3c:a3:11:b8:f1:20:46:4a:be:6f:6f:08:56:0b:ed:e6: 4d:cf:19:3c:17:1a:7c:b4:91:37:c0:2f:40:aa:76:c1:33:26: c1:8c:7a:61:3b:c7:83:cb:d6:d5:42:5f:6f:32:0b:88:54:9d: 44:11:f9:f8:83:5d:a2:9e:98:73:80:0f:3a:19:c9:50:f1:00: 9c:aa:bc:a6:c0:ee:21:cb:7d:73:87:8e:9b:a1:74:80:d1:36: a4:d8:03:80:7d:d0:0b:fb:a3:d5:0e:2f:07:7a:a1:6d:c0:d2: 1b:b5:ef:00:2d:97:7a:9b:01:e8:b3:7b:d6:a3:a5:e2:10:30: 85:61:83:23:e7:c4:b1:1e:25:fb:e4:86:dd:b6:5d:c5:4b:21: 18:5e:bc:e2:da:00:38:cd:35:27:ed:03:63:1d:07:9e:70:92: 6c:fa:c3:3b:64:54:5c:c0:b3:43:4f:a3:af:35:5d:25:e8:00: c0:b6:6a:61:07:0e:0f:3f:06:c9:d3:19:8b:fc:27:b9:81:54: a4:b1:cb:4f:c1:69:df:fe:d2:31:ed:4b:76:d3:87:bf:6a:0d: e6:32:3c:c1:d6:7e:43:bc:4e:f8:b7:83:a5:1a:28:b8:a0:39: 2b:c6:4a:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQioGZezErOsnpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk MjMyZGJhNjgtMjkyZS00MGIxLWFhNmItNzYyYmUwMmRlOTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGyEZ5d4G5EsjXEMEoIrrZAzHlIS1orrPFn2 OGXyCrblvF+33qCfuU7ptpPzA3lJ3Uo5srS6qH+B+S9cHBr5hC7WU+JAr+ZUeEO+ ubZ1rqAEH95HlpnE4pcWBU9hHRiLOvEe3BfJr/vRzMDX+67NPBZ2ztXuEN8T8qMD oIVsSNujCPGkd3p5FNln6T42VcuDBqUzChw2aizh4jGRlOpA4FdBUEBF+tc8B+JC a/kRXzXdC1KSyPd2QRblRjm3ZrHHD20XNGCG64OHWpvL5oM4BktqmnrUrfWlvw13 mqXhR9ymhE5jNzmYkv1oRiDdO7/bZ2aZgS84en1LUZSXRGTCRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiJSdZpab0Ef7gn/2CgpJ+EAXNNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvNjkyZjUyNzItMGFjNi0z ZTI1LWEyMTYtMWUyNDUyOTYxNGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByXWRx7C/qjSfAU4ix3LBvck9fTPKMRuPEgRkq+b28IVgvt5k3PGTwX Gny0kTfAL0CqdsEzJsGMemE7x4PL1tVCX28yC4hUnUQR+fiDXaKemHOADzoZyVDx AJyqvKbA7iHLfXOHjpuhdIDRNqTYA4B90Av7o9UOLwd6oW3A0hu17wAtl3qbAeiz e9ajpeIQMIVhgyPnxLEeJfvkht22XcVLIRhevOLaADjNNSftA2MdB55wkmz6wztk VFzAs0NPo681XSXoAMC2amEHDg8/BsnTGYv8J7mBVKSxy0/Bad/+0jHtS3bTh79q DeYyPMHWfkO8Tvi3g6UaKLigOSvGSps= -----END CERTIFICATE-----Generated at Tue Nov 4 19:57:59 2025 by rpki-client