$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/2d4a32ae-9ef6-3b6c-bab6-bdd7b44e1654.roa File: 2d4a32ae-9ef6-3b6c-bab6-bdd7b44e1654.roa (raw, json) Hash identifier: gy0TXxHxCQr8eO/T4iXu5eQPLzg6X2/Du11vztWtaN8= Subject key identifier: 4D:3B:B2:B8:A8:09:FA:21:DC:A2:D1:D4:24:70:84:06:6A:7D:99:64 Certificate issuer: /CN=e699b02b-ca04-4557-94f4-189989d49ccd Certificate serial: 010D0C9F4328584AF0F13BDD2C56F3FBBA7F17E0 Authority key identifier: 5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/2d4a32ae-9ef6-3b6c-bab6-bdd7b44e1654.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 8075 IP address blocks: 72.18.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:3b:dd:2c:56:f3:fb:ba:7f:17:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e699b02b-ca04-4557-94f4-189989d49ccd Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=9383bacc-c0be-4aa1-bb6c-a87d07aad763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:81:7c:16:38:47:8d:2c:23:b9:91:ff:83:17: 5c:e4:b7:a9:68:ad:b9:13:ad:26:de:ae:22:e0:2f: 8f:cc:3e:7a:37:ec:37:a9:da:24:6c:3a:bb:a2:d4: 94:6b:12:2c:51:62:6e:c6:2b:53:98:8f:6e:8f:79: a3:bc:12:41:e2:e5:57:13:1c:a4:06:10:3e:a8:ed: 6f:c3:c1:34:a5:20:d8:28:07:3c:e9:a1:9c:d9:8c: cc:81:bf:18:b0:29:0b:90:f2:3d:49:fd:68:71:51: be:02:d0:8c:bb:2b:9b:e7:dc:14:60:9b:eb:59:6f: 26:22:31:e1:ad:1e:8f:93:68:46:0c:d5:d7:bc:9d: ec:b6:32:56:1b:99:1b:0c:e0:54:53:fa:1e:60:9e: 49:af:d4:2a:42:a2:59:ba:93:83:71:e5:5b:c0:0f: 18:53:55:d4:fb:48:10:af:d1:61:f8:6f:fa:61:94: 2a:14:5c:33:ff:8b:0d:78:6d:65:f1:0f:07:6e:5d: 9a:e3:99:88:97:ce:e3:55:03:dc:5d:5f:17:55:e3: 0c:46:e3:82:d4:49:4e:75:c1:fa:7f:76:08:29:26: cc:67:25:f8:f8:14:4b:f4:3d:2b:c7:eb:7d:65:08: 86:39:05:1f:5e:78:5b:39:6d:a1:26:cf:34:d3:ea: 40:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3B:B2:B8:A8:09:FA:21:DC:A2:D1:D4:24:70:84:06:6A:7D:99:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/2d4a32ae-9ef6-3b6c-bab6-bdd7b44e1654.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl X509v3 Authority Key Identifier: keyid:5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer sbgp-ipAddrBlock: critical IPv4: 72.18.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:dd:32:cf:da:b2:03:26:b3:54:41:75:21:dd:1d:0f:04:13: e9:58:c9:be:a8:10:c3:ae:8b:22:9c:cd:5a:63:b5:b8:08:ca: 6d:47:82:48:0f:13:37:a5:c9:dd:ff:20:9d:31:1d:46:08:51: 69:10:4d:9e:83:8d:dc:c7:1f:49:49:ad:5c:29:98:76:20:e3: 80:08:d8:eb:b0:9b:04:51:49:68:1e:e7:0a:ad:c0:72:a4:55: 01:56:c8:0c:75:ad:12:00:68:85:87:b1:44:29:a7:a3:16:a7: 5c:e1:95:56:ee:ac:bf:89:e7:68:05:e3:07:2a:a6:c2:d5:84: ab:bb:03:5b:7f:b7:fa:10:96:54:94:87:99:27:59:aa:b1:3e: eb:6e:18:33:9f:64:e3:57:5e:31:9d:c2:b7:7c:f4:b5:39:3e: c7:3e:b7:df:d9:a3:4e:f6:fd:c1:f9:2a:ba:c6:5e:b6:fa:07: f5:8e:a2:48:5b:c3:7d:e3:2e:3c:3e:c3:56:d0:2d:35:03:2e: c3:04:4d:e7:a4:d0:db:62:1d:d8:28:d4:9b:77:9f:28:a2:6a: 90:a0:79:a6:4b:6f:17:09:d9:5b:8c:a1:69:29:02:b2:e7:0e: 55:17:5e:63:1d:dc:81:a9:20:fb:c3:bb:73:16:8f:e1:0d:37: b8:e1:22:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8TvdLFbz+7p/F+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTY5OWIwMmItY2EwNC00NTU3LTk0ZjQtMTg5OTg5ZDQ5 Y2NkMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk OTM4M2JhY2MtYzBiZS00YWExLWJiNmMtYTg3ZDA3YWFkNzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIF8FjhHjSwjuZH/gxdc5LepaK25E60m3q4i 4C+PzD56N+w3qdokbDq7otSUaxIsUWJuxitTmI9uj3mjvBJB4uVXExykBhA+qO1v w8E0pSDYKAc86aGc2YzMgb8YsCkLkPI9Sf1ocVG+AtCMuyub59wUYJvrWW8mIjHh rR6Pk2hGDNXXvJ3stjJWG5kbDOBUU/oeYJ5Jr9QqQqJZupODceVbwA8YU1XU+0gQ r9Fh+G/6YZQqFFwz/4sNeG1l8Q8Hbl2a45mIl87jVQPcXV8XVeMMRuOC1ElOdcH6 f3YIKSbMZyX4+BRL9D0rx+t9ZQiGOQUfXnhbOW2hJs800+pANwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE07srioCfoh3KLR1CRwhAZqfZlkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lNjk5 YjAyYi1jYTA0LTQ1NTctOTRmNC0xODk5ODlkNDljY2QvMmQ0YTMyYWUtOWVmNi0z YjZjLWJhYjYtYmRkN2I0NGUxNjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTY5OWIwMmItY2EwNC00NTU3LTk0 ZjQtMTg5OTg5ZDQ5Y2NkL2U2OTliMDJiLWNhMDQtNDU1Ny05NGY0LTE4OTk4OWQ0 OWNjZC5jcmwwHwYDVR0jBBgwFoAUXq+Y0QCDzSh9pkhSkMpB2+xuMXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lNjk5YjAyYi1jYTA0LTQ1NTctOTRmNC0xODk5 ODlkNDljY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBJOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7dMs/asgMms1RBdSHdHQ8EE+lYyb6oEMOuiyKczVpjtbgIym1HgkgP Ezelyd3/IJ0xHUYIUWkQTZ6DjdzHH0lJrVwpmHYg44AI2OuwmwRRSWge5wqtwHKk VQFWyAx1rRIAaIWHsUQpp6MWp1zhlVburL+J52gF4wcqpsLVhKu7A1t/t/oQllSU h5knWaqxPutuGDOfZONXXjGdwrd89LU5Psc+t9/Zo072/cH5KrrGXrb6B/WOokhb w33jLjw+w1bQLTUDLsMETeek0NtiHdgo1Jt3nyiiapCgeaZLbxcJ2VuMoWkpArLn DlUXXmMd3IGpIPvDu3MWj+ENN7jhIn0= -----END CERTIFICATE-----Generated at Wed Nov 5 07:10:33 2025 by rpki-client