$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/c47cecfe-2d16-3ba9-85b1-c17b1aeaa5b1.roa File: c47cecfe-2d16-3ba9-85b1-c17b1aeaa5b1.roa (raw, json) Hash identifier: jy4vMi3QfxBlfg6IYbJ39h/BrbyF/WIlCP361cmOOfw= Subject key identifier: 86:81:4C:38:20:CE:54:BC:FA:E6:4B:1E:45:4B:36:82:E6:DC:49:28 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584BA9326850B08BFDD8A42D5C00 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/c47cecfe-2d16-3ba9-85b1-c17b1aeaa5b1.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 211373 IP address blocks: 72.14.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:68:50:b0:8b:fd:d8:a4:2d:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=521d335c-fffe-4397-ae9b-05e0dec5362c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ce:04:a6:9f:a8:ec:f8:92:36:10:fe:b1:e4: a9:5c:29:be:dc:80:d4:20:9e:30:bd:c0:ff:7b:49: f2:3c:82:d7:11:a7:f5:4b:07:91:b1:bd:ed:5f:47: 39:3a:37:39:96:54:0a:87:ce:23:21:02:10:02:6f: e2:dc:ca:0f:b0:a1:7e:d1:5d:c8:67:98:75:c3:3c: f5:e8:31:80:a5:e8:a4:3b:b4:05:20:a0:be:05:37: bd:a4:44:97:87:ce:c4:61:15:b1:89:39:cb:8c:5d: ba:f6:10:76:b5:ec:82:2a:79:88:5d:c0:b0:25:28: 00:03:45:19:a3:f8:59:ae:29:1e:41:55:16:50:b7: d5:1a:be:cb:ce:94:71:f1:0b:41:63:47:98:e0:a4: 38:67:dc:3c:9a:f1:60:9e:c0:63:6b:34:b3:1e:14: b5:e5:55:1f:7f:9a:9f:a0:0e:12:ae:8c:07:91:a4: be:f6:3a:84:ad:96:b8:61:73:e1:8b:7c:a4:11:89: 34:ff:d7:ae:6f:63:ce:3c:e8:b4:d3:3c:2e:c2:da: d4:f8:41:46:9c:00:e1:de:30:19:03:2a:19:96:34: 71:23:e4:f2:c9:d0:56:64:51:32:28:93:3e:78:7f: f6:96:a4:0a:c6:09:3c:bb:71:65:bd:b5:25:37:7e: 2a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:81:4C:38:20:CE:54:BC:FA:E6:4B:1E:45:4B:36:82:E6:DC:49:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/c47cecfe-2d16-3ba9-85b1-c17b1aeaa5b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:9f:53:0e:42:ae:6f:42:77:a3:38:0e:07:5f:95:01:18:78: 47:eb:8a:e3:a8:41:77:20:69:3a:c4:cb:48:3c:30:ce:34:d6: 62:82:9d:ec:f0:77:2a:15:dd:18:fc:98:9a:03:43:6b:e5:c3: 2b:1d:0f:37:8d:0a:aa:b4:5e:27:76:fa:55:d5:a9:f7:89:d5: 2a:90:ea:3c:f8:7c:77:17:6d:82:e6:51:a2:e8:83:1c:d3:33: 97:c0:3c:fc:16:b6:db:b6:06:44:1c:8b:48:b3:a3:56:db:cd: 40:a6:17:c1:26:4d:da:37:42:24:ff:ad:45:11:d6:45:cd:56: 5b:0b:86:50:f0:dc:ae:5b:1d:04:26:0c:2d:db:ff:a1:33:68: a5:8a:04:67:2c:3c:c1:ce:f9:fb:f4:10:e3:8b:ba:9f:61:11: d3:de:67:5e:6b:ec:e4:31:b3:f4:dd:51:35:e7:2a:40:b6:d3: 96:d3:a4:c5:81:c2:fe:ae:8f:9b:36:fa:35:4b:da:42:e7:02: cf:18:1d:61:5e:b0:35:c1:07:c2:ed:61:d5:e5:fb:ae:7e:b2: 91:b4:d7:06:c7:d2:22:5f:ec:88:b3:63:ea:31:76:a6:d4:4d: 69:25:cc:fb:0d:9a:74:1c:a6:80:41:3d:d5:e8:f0:f0:77:40: 31:0e:50:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMmhQsIv92KQtXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NTIxZDMzNWMtZmZmZS00Mzk3LWFlOWItMDVlMGRlYzUzNjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM4Epp+o7PiSNhD+seSpXCm+3IDUIJ4wvcD/ e0nyPILXEaf1SweRsb3tX0c5Ojc5llQKh84jIQIQAm/i3MoPsKF+0V3IZ5h1wzz1 6DGApeikO7QFIKC+BTe9pESXh87EYRWxiTnLjF269hB2teyCKnmIXcCwJSgAA0UZ o/hZrikeQVUWULfVGr7LzpRx8QtBY0eY4KQ4Z9w8mvFgnsBjazSzHhS15VUff5qf oA4SrowHkaS+9jqErZa4YXPhi3ykEYk0/9eub2POPOi00zwuwtrU+EFGnADh3jAZ AyoZljRxI+TyydBWZFEyKJM+eH/2lqQKxgk8u3FlvbUlN34qTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaBTDggzlS8+uZLHkVLNoLm3EkoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvYzQ3Y2VjZmUtMmQxNi0z YmE5LTg1YjEtYzE3YjFhZWFhNWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWfUw5Crm9Cd6M4DgdflQEYeEfriuOoQXcgaTrEy0g8MM401mKCnezw dyoV3Rj8mJoDQ2vlwysdDzeNCqq0Xid2+lXVqfeJ1SqQ6jz4fHcXbYLmUaLogxzT M5fAPPwWttu2BkQci0izo1bbzUCmF8EmTdo3QiT/rUUR1kXNVlsLhlDw3K5bHQQm DC3b/6EzaKWKBGcsPMHO+fv0EOOLup9hEdPeZ15r7OQxs/TdUTXnKkC205bTpMWB wv6uj5s2+jVL2kLnAs8YHWFesDXBB8LtYdXl+65+spG01wbH0iJf7IizY+oxdqbU TWklzPsNmnQcpoBBPdXo8PB3QDEOUDY= -----END CERTIFICATE-----Generated at Wed Nov 5 00:30:54 2025 by rpki-client