$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2a09d5aa-ff44-364e-8546-bc3f9845a726.roa File: 2a09d5aa-ff44-364e-8546-bc3f9845a726.roa (raw, json) Hash identifier: TjQVtE9G0QwLbMbn3yXCqjJM8JGsPRa5mHcwqjCsfEs= Subject key identifier: 11:9A:E4:EE:BE:95:9B:49:8C:47:05:7B:7E:A7:EC:7F:84:BA:EC:A9 Certificate issuer: /CN=1d639366-c044-456e-b8c8-0de04a543a0c Certificate serial: 010D0C9F4328584B25FC358D79A8425AA4AF4B80 Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2a09d5aa-ff44-364e-8546-bc3f9845a726.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 6181 IP address blocks: 72.49.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:35:8d:79:a8:42:5a:a4:af:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=6194f845-abc5-4cf7-b99c-b5f33d9fd1ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:13:d0:f5:54:81:67:a8:3b:68:80:c8:95:b0: 9e:0e:91:7f:f3:18:f8:7c:da:df:5e:fc:49:b1:bd: 59:f5:95:b2:d7:8a:e7:52:01:a0:99:8c:03:fe:b0: 53:ac:9a:69:56:e4:4e:c1:e3:06:88:79:db:eb:96: b0:dc:ff:67:3e:de:25:c5:df:f3:6b:ae:32:3e:6c: 62:5c:ec:d1:3e:27:d8:cf:8b:e5:ac:c0:a4:3b:f1: 36:8c:96:33:35:4c:e9:ff:e0:eb:e4:20:fd:3d:47: 37:65:d7:2e:ae:9c:fb:3f:15:c7:97:8c:8a:48:40: 02:c1:c3:e3:33:08:b8:b3:b8:55:ec:77:fa:0e:c2: c8:5e:37:d8:ac:6e:60:53:d3:7f:89:f2:69:79:13: 47:6b:35:b0:55:11:2d:3d:92:23:49:19:dc:86:4d: f7:79:3f:12:f4:e3:ec:e8:d6:f9:12:34:75:72:c7: c6:57:3a:e8:38:22:bd:40:80:a0:b6:7f:7b:3a:30: 52:57:67:0a:6d:f2:fc:09:c0:13:7e:b9:f0:51:c9: 68:ec:cf:d2:03:fc:ab:20:82:5f:b2:d0:ff:fb:93: a2:e8:9c:2f:a1:d7:e2:14:d1:07:3f:55:41:70:50: b3:cb:18:9c:98:74:68:19:be:88:e0:74:26:dc:cd: e2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9A:E4:EE:BE:95:9B:49:8C:47:05:7B:7E:A7:EC:7F:84:BA:EC:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2a09d5aa-ff44-364e-8546-bc3f9845a726.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl X509v3 Authority Key Identifier: keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer sbgp-ipAddrBlock: critical IPv4: 72.49.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:41:85:14:20:fa:6f:ae:15:6e:c5:c8:c5:cc:4b:db:e0:66: d5:e3:b3:2d:70:42:e6:c7:36:a7:13:46:e6:97:88:19:c9:8b: 1d:c7:79:85:0a:f0:7e:06:55:66:d9:55:61:11:bf:cb:a2:75: 5c:7a:c2:8d:57:70:86:99:bc:1b:2d:24:3c:1e:70:0f:50:2e: 8c:77:11:0c:4a:a9:98:34:02:c1:79:23:cc:55:7f:96:d8:4d: fb:7b:8d:81:c6:0f:2c:99:a1:8a:e7:12:00:d7:03:b7:a8:db: 70:72:f8:13:5c:61:9e:d8:4c:52:f8:ae:8c:da:c4:2a:b9:f8: 98:af:89:6e:97:47:e2:64:f4:f5:ed:a7:8c:36:73:94:8e:ef: 8c:e7:a3:c7:84:49:20:cb:ff:76:50:9f:0e:78:c8:de:0a:1b: 42:59:41:bf:b3:53:3b:43:9a:aa:e2:26:4f:c8:94:08:05:a8: 5f:c3:22:cb:f5:ce:71:5b:f2:63:e0:c9:68:f6:b8:43:af:93: 83:cd:0d:43:34:11:20:0d:91:ff:c6:b6:b7:a2:0d:fc:b1:38: 7f:82:d9:32:38:4a:7e:3a:9f:de:90:84:87:2e:65:95:ea:74: 80:5e:8a:c3:e5:77:14:d2:c3:d1:10:7e:68:3a:3d:cc:b9:3d: 50:3e:02:34 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsl/DWNeahCWqSvS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzkzNjYtYzA0NC00NTZlLWI4YzgtMGRlMDRhNTQz YTBjMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk NjE5NGY4NDUtYWJjNS00Y2Y3LWI5OWMtYjVmMzNkOWZkMWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBPQ9VSBZ6g7aIDIlbCeDpF/8xj4fNrfXvxJ sb1Z9ZWy14rnUgGgmYwD/rBTrJppVuROweMGiHnb65aw3P9nPt4lxd/za64yPmxi XOzRPifYz4vlrMCkO/E2jJYzNUzp/+Dr5CD9PUc3Zdcurpz7PxXHl4yKSEACwcPj Mwi4s7hV7Hf6DsLIXjfYrG5gU9N/ifJpeRNHazWwVREtPZIjSRnchk33eT8S9OPs 6Nb5EjR1csfGVzroOCK9QICgtn97OjBSV2cKbfL8CcATfrnwUclo7M/SA/yrIIJf stD/+5Oi6JwvodfiFNEHP1VBcFCzyxicmHRoGb6I4HQm3M3icwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBGa5O6+lZtJjEcFe36n7H+EuuypMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYz OTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1NDNhMGMvMmEwOWQ1YWEtZmY0NC0z NjRlLTg1NDYtYmMzZjk4NDVhNzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWQ2MzkzNjYtYzA0NC00NTZlLWI4 YzgtMGRlMDRhNTQzYTBjLzFkNjM5MzY2LWMwNDQtNDU2ZS1iOGM4LTBkZTA0YTU0 M2EwYy5jcmwwHwYDVR0jBBgwFoAU/DVXyQ49tRkFhaSn5xDpZWoEZ4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUw NGE1NDNhMGMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMASDEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAX0GFFCD6b64VbsXIxcxL2+Bm1eOzLXBC5sc2pxNG5peIGcmLHcd5hQrw fgZVZtlVYRG/y6J1XHrCjVdwhpm8Gy0kPB5wD1AujHcRDEqpmDQCwXkjzFV/lthN +3uNgcYPLJmhiucSANcDt6jbcHL4E1xhnthMUviujNrEKrn4mK+JbpdH4mT09e2n jDZzlI7vjOejx4RJIMv/dlCfDnjI3gobQllBv7NTO0OaquImT8iUCAWoX8Miy/XO cVvyY+DJaPa4Q6+Tg80NQzQRIA2R/8a2t6IN/LE4f4LZMjhKfjqf3pCEhy5llep0 gF6Kw+V3FNLD0RB+aDo9zLk9UD4CNA== -----END CERTIFICATE-----Generated at Wed Nov 5 02:55:31 2025 by rpki-client