$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a05fde6c-d2ff-3701-9252-dda8da5b78e8.roa File: a05fde6c-d2ff-3701-9252-dda8da5b78e8.roa (raw, json) Hash identifier: RtbaBgc2AM7xWKwApn6Lyk/jiF04uoZOV8UHkGZ6mi4= Subject key identifier: 6F:F0:4B:EB:BB:B0:98:0D:8C:65:C1:49:07:3B:3E:3D:15:66:70:DB Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584B2E5C4C12DADD1DD64AEB18E8 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a05fde6c-d2ff-3701-9252-dda8da5b78e8.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 152700 IP address blocks: 72.14.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:4c:12:da:dd:1d:d6:4a:eb:18:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=288e9842-70b2-49e9-8875-4407b525f776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:db:4a:3b:d0:c5:8d:c2:eb:4f:2c:b3:e7:23: de:15:17:3c:8d:43:5c:c8:04:37:00:f6:04:9b:ed: 90:ed:20:b9:b8:19:f4:f2:c8:42:e5:b1:c4:68:09: d0:be:45:40:d5:fa:63:05:18:06:13:87:57:6d:a3: 1d:95:49:55:02:c8:a9:d3:29:43:60:cf:b9:04:65: 59:90:f9:ef:74:63:ad:58:4c:5d:83:c2:79:7c:9e: df:e9:f2:80:f5:bc:a9:52:62:7f:0b:bd:86:a2:45: b9:43:2a:4c:12:d4:08:4a:6b:c4:7a:a6:b5:45:a2: 8f:ae:42:1e:88:a1:5c:fa:9e:a5:ed:18:91:f2:2c: f0:3c:a6:0a:60:c3:cf:44:f5:54:69:3d:4b:1b:ac: 17:b7:0f:ee:e1:46:02:a0:0f:76:48:53:5e:32:2b: 16:46:05:06:3b:97:20:d9:3b:f9:c1:bd:6c:bc:1f: eb:de:ff:6a:a6:11:0d:8e:b9:a5:34:67:e6:a8:56: 29:80:7e:9c:e1:76:8a:4f:48:f5:34:53:d4:4d:07: 81:22:67:3b:ce:be:7f:9b:9b:e2:d6:fb:80:93:a7: 89:78:d0:3b:a3:5a:b6:0b:ea:c7:d6:81:19:a5:66: a6:4a:67:b1:bd:84:cf:e9:58:58:a7:dc:33:9f:cd: c0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F0:4B:EB:BB:B0:98:0D:8C:65:C1:49:07:3B:3E:3D:15:66:70:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a05fde6c-d2ff-3701-9252-dda8da5b78e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:75:10:8a:6a:50:8e:26:48:d8:7d:bb:1c:48:b1:ee:5a:4d: c3:0c:79:5b:01:1a:21:4a:6e:e9:44:72:be:09:69:b5:51:61: 83:c2:df:57:65:a5:ca:e2:cc:11:3a:d3:d7:66:ff:f6:d8:4f: c2:48:de:ba:d4:d8:6a:b1:cb:d4:6d:30:5f:58:fb:47:51:99: 28:3a:7c:7e:e8:a9:2a:9d:92:e9:a8:68:d3:96:0e:54:19:87: f4:b1:7a:37:46:56:01:5a:8b:b1:99:1a:89:0c:0d:9c:d0:aa: 43:09:bc:d5:45:31:6c:3e:68:68:65:25:49:35:3a:ba:0c:36: ee:00:2c:4e:be:00:04:d0:b2:5d:75:36:52:12:b3:7e:8c:1c: da:69:b7:34:37:9a:eb:43:6e:3b:7e:73:d4:32:28:36:8f:b0: 7c:de:66:d1:20:1b:b7:84:5d:74:94:15:ee:04:71:1f:17:ad: d7:16:56:42:19:37:cb:85:bc:b3:ac:4b:a6:81:e0:b0:74:97: 99:01:86:85:9c:3d:a6:d0:f0:6f:41:8e:80:7f:f8:12:9b:38: 10:ee:9c:d4:05:dd:00:f8:25:4f:13:a0:45:f3:44:0e:10:2d: c2:01:db:e3:ad:7e:ff:0d:64:fa:67:ac:f9:e6:41:c5:bf:b9: 9b:89:17:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXEwS2t0d1krrGOgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk Mjg4ZTk4NDItNzBiMi00OWU5LTg4NzUtNDQwN2I1MjVmNzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9tKO9DFjcLrTyyz5yPeFRc8jUNcyAQ3APYE m+2Q7SC5uBn08shC5bHEaAnQvkVA1fpjBRgGE4dXbaMdlUlVAsip0ylDYM+5BGVZ kPnvdGOtWExdg8J5fJ7f6fKA9bypUmJ/C72GokW5QypMEtQISmvEeqa1RaKPrkIe iKFc+p6l7RiR8izwPKYKYMPPRPVUaT1LG6wXtw/u4UYCoA92SFNeMisWRgUGO5cg 2Tv5wb1svB/r3v9qphENjrmlNGfmqFYpgH6c4XaKT0j1NFPUTQeBImc7zr5/m5vi 1vuAk6eJeNA7o1q2C+rH1oEZpWamSmexvYTP6VhYp9wzn83AowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/wS+u7sJgNjGXBSQc7Pj0VZnDbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvYTA1ZmRlNmMtZDJmZi0z NzAxLTkyNTItZGRhOGRhNWI3OGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFp1EIpqUI4mSNh9uxxIse5aTcMMeVsBGiFKbulEcr4JabVRYYPC31dl pcrizBE609dm//bYT8JI3rrU2Gqxy9RtMF9Y+0dRmSg6fH7oqSqdkumoaNOWDlQZ h/SxejdGVgFai7GZGokMDZzQqkMJvNVFMWw+aGhlJUk1OroMNu4ALE6+AATQsl11 NlISs36MHNpptzQ3mutDbjt+c9QyKDaPsHzeZtEgG7eEXXSUFe4EcR8XrdcWVkIZ N8uFvLOsS6aB4LB0l5kBhoWcPabQ8G9BjoB/+BKbOBDunNQF3QD4JU8ToEXzRA4Q LcIB2+Otfv8NZPpnrPnmQcW/uZuJF4g= -----END CERTIFICATE-----Generated at Tue Nov 4 19:54:46 2025 by rpki-client