$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f2becbea-8e5f-3dd6-bbe0-38c8315aa2c4.roa File: f2becbea-8e5f-3dd6-bbe0-38c8315aa2c4.roa (raw, json) Hash identifier: lPWSQsfbBQDTTBS02hACm+A2cj8Lw23UKHNj6r9bOXY= Subject key identifier: 5B:42:49:EE:C0:BD:80:74:83:57:B0:18:1E:D2:A5:60:24:DA:D7:44 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584BAA97A48CDC5987642CAC5430 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f2becbea-8e5f-3dd6-bbe0-38c8315aa2c4.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 272370 IP address blocks: 72.14.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:a4:8c:dc:59:87:64:2c:ac:54:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=2c4ac44a-d1a9-45e4-b22b-665cc4f9dbfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:54:56:7f:ac:41:80:7b:f0:47:28:87:dc:65: 47:da:ce:97:07:ba:dd:bd:2d:b3:bf:14:68:e2:95: e4:8d:d1:79:e8:26:60:d1:61:09:b2:06:cf:d6:29: cb:ef:cc:c0:a0:1b:12:e8:5e:27:20:ed:c1:01:32: 02:5e:11:db:55:1a:03:d8:d4:cc:2b:0b:19:bc:0d: 98:20:a1:b7:31:8b:8d:28:01:68:74:e6:db:b0:f0: aa:21:1d:83:5c:8f:b9:a6:4e:6b:81:8e:3f:aa:98: 61:06:01:59:0f:c2:ae:c6:44:80:20:99:66:ce:81: 0a:c4:21:30:2e:89:fa:de:25:85:4d:6c:71:7f:59: e1:b2:89:f0:4b:0f:29:18:52:ce:b7:c2:6f:4a:2e: 61:aa:19:83:40:96:57:55:b7:0e:0e:14:9f:b2:99: 71:ec:ff:f0:ad:50:e3:05:10:35:00:5a:56:ba:ae: aa:f8:39:92:73:f6:08:7b:b8:b4:30:38:ed:35:d7: 19:0a:82:b4:13:3b:ac:f2:d3:1b:f5:f8:5e:fc:01: e1:c1:0d:9c:69:56:a8:62:f9:e1:eb:f7:3d:6d:92: e5:f7:db:7e:14:5f:70:94:af:b5:cc:e8:fc:b5:13: c1:cb:78:6c:ba:cd:a8:df:e4:7a:78:05:97:9b:fe: 37:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:42:49:EE:C0:BD:80:74:83:57:B0:18:1E:D2:A5:60:24:DA:D7:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f2becbea-8e5f-3dd6-bbe0-38c8315aa2c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:75:07:0f:8c:67:eb:3e:75:d0:65:65:de:ef:dd:e7:13:d0: 42:87:c5:b4:e8:b5:36:d4:78:0e:79:17:33:48:5c:50:19:d1: ea:05:28:26:18:fb:f2:ef:b7:58:27:32:d1:b2:f9:02:f1:05: 5f:45:dd:99:80:e1:be:b9:c4:4b:30:d4:11:d7:ad:7a:2d:90: 6f:bf:3b:95:77:e6:c5:7f:f6:f3:76:3a:80:c4:46:6a:17:fa: 6b:62:83:be:5d:b7:bc:08:1e:64:9f:bd:62:30:14:2f:72:41: 72:33:6b:5f:11:5a:87:4d:b6:aa:f0:91:2d:57:26:fb:85:56: 1d:d7:d2:03:03:56:1a:55:01:57:96:a5:6f:5d:52:47:d9:0b: 49:13:04:00:01:57:94:70:61:7a:56:25:9c:7d:5e:ac:c3:e9: 91:3a:f0:64:27:7b:11:d1:52:e6:24:fb:2e:bf:93:5d:cd:a4: 95:90:cd:e9:2d:ba:f2:42:3d:16:e8:4b:33:e2:a0:ee:c9:80: 43:c9:04:0a:06:cb:46:55:99:e0:37:c3:0c:65:f3:33:f5:59: 32:84:24:8d:16:21:b8:6b:a8:3e:9b:58:0d:c3:56:bf:c6:32: 6d:70:89:36:c6:52:60:49:f3:4a:c8:f4:6d:5f:64:85:0c:5e: 97:a5:cd:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6SM3FmHZCysVDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk MmM0YWM0NGEtZDFhOS00NWU0LWIyMmItNjY1Y2M0ZjlkYmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFRWf6xBgHvwRyiH3GVH2s6XB7rdvS2zvxRo 4pXkjdF56CZg0WEJsgbP1inL78zAoBsS6F4nIO3BATICXhHbVRoD2NTMKwsZvA2Y IKG3MYuNKAFodObbsPCqIR2DXI+5pk5rgY4/qphhBgFZD8KuxkSAIJlmzoEKxCEw Lon63iWFTWxxf1nhsonwSw8pGFLOt8JvSi5hqhmDQJZXVbcODhSfsplx7P/wrVDj BRA1AFpWuq6q+DmSc/YIe7i0MDjtNdcZCoK0Ezus8tMb9fhe/AHhwQ2caVaoYvnh 6/c9bZLl99t+FF9wlK+1zOj8tRPBy3hsus2o3+R6eAWXm/43kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtCSe7AvYB0g1ewGB7SpWAk2tdEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvZjJiZWNiZWEtOGU1Zi0z ZGQ2LWJiZTAtMzhjODMxNWFhMmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAF1Bw+MZ+s+ddBlZd7v3ecT0EKHxbTotTbUeA55FzNIXFAZ0eoFKCYY +/Lvt1gnMtGy+QLxBV9F3ZmA4b65xEsw1BHXrXotkG+/O5V35sV/9vN2OoDERmoX +mtig75dt7wIHmSfvWIwFC9yQXIza18RWodNtqrwkS1XJvuFVh3X0gMDVhpVAVeW pW9dUkfZC0kTBAABV5RwYXpWJZx9XqzD6ZE68GQnexHRUuYk+y6/k13NpJWQzekt uvJCPRboSzPioO7JgEPJBAoGy0ZVmeA3wwxl8zP1WTKEJI0WIbhrqD6bWA3DVr/G Mm1wiTbGUmBJ80rI9G1fZIUMXpelzeY= -----END CERTIFICATE-----Generated at Tue Nov 4 19:55:12 2025 by rpki-client