$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/7dae7a15-92d5-3a05-9576-1a80ff484bb0.roa File: 7dae7a15-92d5-3a05-9576-1a80ff484bb0.roa (raw, json) Hash identifier: IKJzuTLbBXbBsrLfsfl37I+8ry3r0leEOBo2Kzm0A60= Subject key identifier: B8:4B:7D:F9:FE:AA:21:FB:9D:D6:51:F8:80:BB:37:11:A1:C4:13:4B Certificate issuer: /CN=e699b02b-ca04-4557-94f4-189989d49ccd Certificate serial: 010D0C9F4328584BBE4030AEB6341E739521B360 Authority key identifier: 5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/7dae7a15-92d5-3a05-9576-1a80ff484bb0.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 8987 IP address blocks: 72.18.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:30:ae:b6:34:1e:73:95:21:b3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e699b02b-ca04-4557-94f4-189989d49ccd Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=2185c709-c0b3-46ee-9027-b2949d5e028f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7f:e7:70:0b:2e:f7:61:ac:41:d4:28:17:64: cb:17:bb:db:59:14:6a:57:02:b6:51:43:ee:ad:b8: 16:28:c1:3f:38:83:76:47:f7:e5:e4:8b:22:c8:00: 71:1c:eb:55:4d:31:d7:47:21:a7:66:a7:c4:e9:37: 90:14:3c:c4:28:22:e9:29:8d:e2:85:e8:e2:90:04: 74:1c:3d:f1:d5:28:da:f0:2e:af:60:63:f7:c7:99: d2:d7:77:6a:de:e2:10:64:03:05:ab:85:3a:74:c5: 84:a1:4e:b7:93:7b:27:d4:c4:fb:c7:59:ea:a0:82: b6:e8:ba:c1:70:58:5f:86:e0:23:3c:fe:63:4c:4c: 82:9e:ca:6e:bc:f6:74:06:ff:68:1a:36:32:74:2d: bf:d6:8a:68:63:c2:48:3a:6a:b4:35:7a:a7:9f:0e: 72:31:ed:d3:d4:19:36:b9:1e:d2:75:25:64:95:66: 4b:87:9f:f8:56:f3:4d:e8:c0:62:99:25:da:ca:cc: 39:39:ff:3d:cc:03:cf:82:0d:05:42:72:cc:9e:82: a4:7a:6d:e6:2a:8b:c3:40:e8:3f:fa:b3:08:71:18: 31:90:d6:c8:c5:ea:54:c4:4a:89:96:fb:79:01:c4: 08:b9:89:44:0f:41:69:e7:56:13:6e:20:67:43:d0: 9c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4B:7D:F9:FE:AA:21:FB:9D:D6:51:F8:80:BB:37:11:A1:C4:13:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/7dae7a15-92d5-3a05-9576-1a80ff484bb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl X509v3 Authority Key Identifier: keyid:5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer sbgp-ipAddrBlock: critical IPv4: 72.18.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:05:a7:19:ba:75:ed:12:93:55:44:78:e7:c3:75:78:0f:15: 26:b6:9f:41:50:d9:e9:91:9a:2f:39:aa:b3:16:6b:4d:de:5b: cf:36:e0:15:91:d2:cc:24:db:d2:99:49:7b:3f:00:f7:85:3f: fb:4d:a0:32:b5:2e:59:b9:0c:66:c5:2a:36:dd:77:47:1d:d4: 09:f6:4d:a8:e0:6c:a9:0d:a9:fd:df:50:6c:9a:2e:60:99:c9: ad:87:9d:ad:ea:ef:0e:d4:d0:a4:6f:31:26:05:a3:13:18:d8: 70:27:16:63:90:af:da:91:42:b7:55:04:bc:72:38:8e:a5:f5: 90:83:e1:21:6c:c6:c3:c2:8b:6d:86:ac:71:34:04:76:98:5b: 55:73:c2:42:ca:04:b5:78:23:93:a5:79:d0:42:a9:68:d6:32: fd:d9:ab:70:10:d7:d8:4e:a7:4b:20:83:22:79:6b:b3:1c:88: e2:78:0e:9a:85:63:c1:70:a4:3c:91:59:c3:4f:2b:08:46:d6: 28:fc:14:78:6e:0b:fa:f5:a6:82:cb:89:96:60:87:92:bb:86: 16:98:67:1f:35:86:58:7f:63:f4:87:4f:62:47:61:b7:69:12: ba:2d:ff:38:d8:10:8e:6f:81:47:01:17:4f:e4:82:2c:50:a6: fb:31:90:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QDCutjQec5Uhs2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTY5OWIwMmItY2EwNC00NTU3LTk0ZjQtMTg5OTg5ZDQ5 Y2NkMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk MjE4NWM3MDktYzBiMy00NmVlLTkwMjctYjI5NDlkNWUwMjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn/ncAsu92GsQdQoF2TLF7vbWRRqVwK2UUPu rbgWKME/OIN2R/fl5IsiyABxHOtVTTHXRyGnZqfE6TeQFDzEKCLpKY3ihejikAR0 HD3x1Sja8C6vYGP3x5nS13dq3uIQZAMFq4U6dMWEoU63k3sn1MT7x1nqoIK26LrB cFhfhuAjPP5jTEyCnspuvPZ0Bv9oGjYydC2/1opoY8JIOmq0NXqnnw5yMe3T1Bk2 uR7SdSVklWZLh5/4VvNN6MBimSXaysw5Of89zAPPgg0FQnLMnoKkem3mKovDQOg/ +rMIcRgxkNbIxepUxEqJlvt5AcQIuYlED0Fp51YTbiBnQ9CcbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhLffn+qiH7ndZR+IC7NxGhxBNLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lNjk5 YjAyYi1jYTA0LTQ1NTctOTRmNC0xODk5ODlkNDljY2QvN2RhZTdhMTUtOTJkNS0z YTA1LTk1NzYtMWE4MGZmNDg0YmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTY5OWIwMmItY2EwNC00NTU3LTk0 ZjQtMTg5OTg5ZDQ5Y2NkL2U2OTliMDJiLWNhMDQtNDU1Ny05NGY0LTE4OTk4OWQ0 OWNjZC5jcmwwHwYDVR0jBBgwFoAUXq+Y0QCDzSh9pkhSkMpB2+xuMXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lNjk5YjAyYi1jYTA0LTQ1NTctOTRmNC0xODk5 ODlkNDljY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBJNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAFpxm6de0Sk1VEeOfDdXgPFSa2n0FQ2emRmi85qrMWa03eW8824BWR 0swk29KZSXs/APeFP/tNoDK1Llm5DGbFKjbdd0cd1An2TajgbKkNqf3fUGyaLmCZ ya2Hna3q7w7U0KRvMSYFoxMY2HAnFmOQr9qRQrdVBLxyOI6l9ZCD4SFsxsPCi22G rHE0BHaYW1VzwkLKBLV4I5OledBCqWjWMv3Zq3AQ19hOp0sggyJ5a7MciOJ4DpqF Y8FwpDyRWcNPKwhG1ij8FHhuC/r1poLLiZZgh5K7hhaYZx81hlh/Y/SHT2JHYbdp Erot/zjYEI5vgUcBF0/kgixQpvsxkOI= -----END CERTIFICATE-----Generated at Wed Nov 5 12:13:12 2025 by rpki-client