$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/395230d0-3cf8-35a4-bfa2-c07d5555c094.roa File: 395230d0-3cf8-35a4-bfa2-c07d5555c094.roa (raw, json) Hash identifier: omBe62lymlZwD8pzGIqWyhsZKTAAAflwDKyyGWIVRI8= Subject key identifier: 08:90:4C:46:88:58:0F:53:8B:69:EB:FA:E6:C3:21:2E:AC:F8:E2:31 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584B64CE3ACD4EE2EAE89787BC80 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/395230d0-3cf8-35a4-bfa2-c07d5555c094.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 14813 IP address blocks: 72.22.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:3a:cd:4e:e2:ea:e8:97:87:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=0ba9ab0c-783b-4a4a-804c-5e5c23b908ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:d4:f6:3f:78:7c:3f:a6:6d:99:52:23:34: a0:7e:82:44:5a:4a:45:23:33:c5:ba:1f:a3:64:90: 58:76:4c:6f:58:4e:85:3b:0a:49:d8:f5:c2:77:7d: 8c:cc:c8:80:6d:4f:04:95:37:55:ca:bf:f8:1d:73: 76:cf:a3:4a:89:5c:ba:75:ad:1e:79:82:14:b8:58: 29:a9:ca:56:29:c7:45:2f:e7:94:25:22:fa:77:dc: 9a:75:6e:39:93:fa:f7:9a:cd:ac:fe:b2:77:78:9b: 91:29:0d:68:ff:2b:65:52:bc:64:71:f2:10:0a:50: 9a:88:d1:a8:4e:cd:cd:6a:21:01:53:14:da:4f:5f: 4c:b8:af:00:d9:29:07:d9:7c:66:b5:ee:ff:cc:4b: 0b:cc:c5:d8:a7:e5:6e:11:42:26:f5:1d:0a:e3:05: da:e6:d0:c7:d1:b3:b3:a9:a2:16:04:5c:13:fe:63: 2f:02:77:f4:e4:bc:77:90:81:8b:9d:46:86:bb:69: ce:31:47:20:42:5d:df:0b:15:6b:70:24:72:99:b4: 85:49:06:d9:c2:b6:f2:40:17:8c:38:c9:62:4b:f5: 7d:41:b4:06:0d:72:80:ec:4f:31:49:6d:c5:b8:27: 7e:06:c3:97:76:5b:6a:6c:0e:41:8f:89:c2:e7:7e: 70:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:90:4C:46:88:58:0F:53:8B:69:EB:FA:E6:C3:21:2E:AC:F8:E2:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/395230d0-3cf8-35a4-bfa2-c07d5555c094.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:13:39:04:55:30:f9:77:fd:00:73:19:31:20:41:90:c7:d6: 52:ba:31:23:02:20:16:cd:58:ed:92:50:5b:64:cf:16:50:4e: da:0d:ae:b5:d4:a7:58:ac:47:c0:df:52:e4:21:91:58:68:83: 50:f4:0a:e2:9e:c2:be:13:6d:f2:28:03:21:6e:bd:a7:16:fd: b0:2c:47:09:a0:58:2e:03:24:18:37:b5:96:aa:fa:f8:bb:b0: 94:eb:7c:e3:9e:65:38:03:5a:cb:ba:b7:8e:45:56:44:b7:4a: a3:91:a3:e8:d5:b4:a7:6b:83:37:fa:50:b8:3b:40:bc:c5:c2: 74:82:7f:77:76:52:77:76:4c:52:f3:b4:47:f9:8d:eb:ea:ff: c8:89:b2:80:8c:47:62:c4:0f:d3:af:35:d1:81:f6:57:a9:f7: a1:a6:4b:a8:ca:0b:79:1c:e6:93:ea:b0:15:6c:9d:74:06:39: 7b:b5:0a:98:8e:46:ce:81:69:4e:d1:fd:d8:63:73:1e:e5:77: 55:f3:c6:8e:83:ea:8e:4a:7b:30:d4:3d:0f:a2:3e:4f:ea:5a: 36:5f:e5:05:92:e3:68:3a:08:44:1d:cb:f1:f2:ac:65:5a:76: f1:5b:b5:15:88:d6:ca:75:93:cb:f2:1b:ea:99:26:40:d4:c5: a3:58:b4:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzjrNTuLq6JeHvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MGJhOWFiMGMtNzgzYi00YTRhLTgwNGMtNWU1YzIzYjkwOGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvfU9j94fD+mbZlSIzSgfoJEWkpFIzPFuh+j ZJBYdkxvWE6FOwpJ2PXCd32MzMiAbU8ElTdVyr/4HXN2z6NKiVy6da0eeYIUuFgp qcpWKcdFL+eUJSL6d9yadW45k/r3ms2s/rJ3eJuRKQ1o/ytlUrxkcfIQClCaiNGo Ts3NaiEBUxTaT19MuK8A2SkH2Xxmte7/zEsLzMXYp+VuEUIm9R0K4wXa5tDH0bOz qaIWBFwT/mMvAnf05Lx3kIGLnUaGu2nOMUcgQl3fCxVrcCRymbSFSQbZwrbyQBeM OMliS/V9QbQGDXKA7E8xSW3FuCd+BsOXdltqbA5Bj4nC535w5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAiQTEaIWA9Ti2nr+ubDIS6s+OIxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvMzk1MjMwZDAtM2NmOC0z NWE0LWJmYTItYzA3ZDU1NTVjMDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAETOQRVMPl3/QBzGTEgQZDH1lK6MSMCIBbNWO2SUFtkzxZQTtoNrrXU p1isR8DfUuQhkVhog1D0CuKewr4TbfIoAyFuvacW/bAsRwmgWC4DJBg3tZaq+vi7 sJTrfOOeZTgDWsu6t45FVkS3SqORo+jVtKdrgzf6ULg7QLzFwnSCf3d2Und2TFLz tEf5jevq/8iJsoCMR2LED9OvNdGB9lep96GmS6jKC3kc5pPqsBVsnXQGOXu1CpiO Rs6BaU7R/dhjcx7ld1Xzxo6D6o5KezDUPQ+iPk/qWjZf5QWS42g6CEQdy/HyrGVa dvFbtRWI1sp1k8vyG+qZJkDUxaNYtBU= -----END CERTIFICATE-----Generated at Wed Nov 5 11:52:15 2025 by rpki-client