$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/4a4c019c-866a-3f57-b0a5-bf9605704819.roa File: 4a4c019c-866a-3f57-b0a5-bf9605704819.roa (raw, json) Hash identifier: i0QCW08nj478KfSwGx4iMG+IrJYmx/nhAFESAZH05JA= Subject key identifier: 2A:AB:12:49:96:BF:16:99:25:55:B7:98:B6:E3:20:1A:E3:87:F6:E7 Certificate issuer: /CN=a8f51da8-e3ca-4fc9-acce-94103c57aebc Certificate serial: 010D0C9F4328584B5B074159CCB06439FBD1BEBC Authority key identifier: 3A:72:E5:B7:27:34:1C:D3:AE:09:F2:9E:7D:BF:99:D5:A0:41:FD:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/4a4c019c-866a-3f57-b0a5-bf9605704819.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 62862 IP address blocks: 72.15.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/a8f51da8-e3ca-4fc9-acce-94103c57aebc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/a8f51da8-e3ca-4fc9-acce-94103c57aebc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:41:59:cc:b0:64:39:fb:d1:be:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8f51da8-e3ca-4fc9-acce-94103c57aebc Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=1da39a40-a1e3-4d0c-81d5-801b89d3adeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a7:8b:2d:ab:e0:c5:90:4e:c1:11:5b:72:9d: 9a:6f:b7:62:c0:5d:e5:51:20:c4:6e:2f:ad:34:e7: 62:81:b4:b0:ab:8d:65:bc:3a:58:58:7a:aa:21:27: 2d:7a:c7:9f:f5:f7:4f:2a:85:53:39:92:75:a7:95: 48:63:49:54:c1:07:e5:7c:f4:4d:6b:8a:35:cb:cc: 1a:75:fc:fc:ae:b6:c2:a5:42:c6:0b:0d:d9:2c:02: cb:9b:28:c4:c0:11:0c:eb:c2:db:ff:3c:69:ad:d2: df:2d:a5:b7:11:a9:67:56:5f:98:25:90:b3:7a:9f: 3b:66:9b:87:bb:b8:ef:5e:0b:4c:e0:03:50:b8:2d: 96:17:83:62:4d:13:ee:b2:fe:68:43:2f:d7:5f:7e: 5d:e7:73:67:9e:1d:71:76:79:d0:5d:f8:9e:1d:a5: ff:31:26:55:ca:bb:68:8b:4b:9a:c6:9f:47:1b:4a: 76:fc:4e:9f:ea:6d:ab:02:04:57:e6:ec:f5:08:88: 06:9b:05:e8:81:ca:0b:9e:5e:0b:39:a8:05:94:8b: 00:22:46:e6:1c:d7:e7:3c:75:d5:1d:31:6d:6c:14: 09:b0:92:b7:93:ff:b2:25:88:be:24:b0:f2:fc:5d: d2:04:c8:c8:ed:1e:5b:51:3d:22:9d:7a:ed:4a:f1: 83:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AB:12:49:96:BF:16:99:25:55:B7:98:B6:E3:20:1A:E3:87:F6:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/4a4c019c-866a-3f57-b0a5-bf9605704819.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/a8f51da8-e3ca-4fc9-acce-94103c57aebc.crl X509v3 Authority Key Identifier: keyid:3A:72:E5:B7:27:34:1C:D3:AE:09:F2:9E:7D:BF:99:D5:A0:41:FD:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc.cer sbgp-ipAddrBlock: critical IPv4: 72.15.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:da:b7:b4:b2:d4:0c:57:27:cc:6b:77:3b:83:37:39:38:97: e2:6e:ee:04:0d:b1:81:69:30:94:46:55:8b:46:cf:38:72:c4: 4f:c8:79:c5:f5:cb:ee:26:36:0b:d9:39:fd:29:e0:24:00:29: 7e:a3:2a:ee:56:02:01:f1:46:38:07:bd:aa:e7:4a:3c:34:f7: 01:08:ff:1a:40:03:f0:d2:18:ac:1a:ca:cd:f6:1b:6a:ee:06: 07:ca:ec:59:b2:08:11:d5:2e:fc:94:4b:ca:e9:bf:9e:09:f6: 86:ff:22:4e:07:3f:33:95:85:5d:fb:45:31:4a:e7:2a:6d:66: 68:66:dd:7a:00:64:a0:fd:cc:b9:75:f6:77:be:26:5e:8b:37: 33:07:8c:a5:4c:82:3d:c7:59:6d:bc:1a:d7:cf:0e:95:f9:02: 23:85:a2:44:b8:bf:30:ff:70:d6:ee:45:6f:62:9d:11:d6:0f: c4:9e:67:35:92:cc:b2:91:a0:a2:19:ce:4a:df:4e:c2:c4:a1: 90:61:59:f6:56:93:33:1a:dd:d3:93:e4:05:4b:15:60:27:1b: 9e:ee:f2:8b:4d:1c:6f:f7:3d:64:74:d3:6e:58:80:62:01:97: 9e:2b:73:9e:16:77:e3:d1:a7:a3:87:0b:53:b7:83:5e:38:a0: 0d:40:9b:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0FZzLBkOfvRvrwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThmNTFkYTgtZTNjYS00ZmM5LWFjY2UtOTQxMDNjNTdh ZWJjMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MWRhMzlhNDAtYTFlMy00ZDBjLTgxZDUtODAxYjg5ZDNhZGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqeLLavgxZBOwRFbcp2ab7diwF3lUSDEbi+t NOdigbSwq41lvDpYWHqqISctesef9fdPKoVTOZJ1p5VIY0lUwQflfPRNa4o1y8wa dfz8rrbCpULGCw3ZLALLmyjEwBEM68Lb/zxprdLfLaW3EalnVl+YJZCzep87ZpuH u7jvXgtM4ANQuC2WF4NiTRPusv5oQy/XX35d53Nnnh1xdnnQXfieHaX/MSZVyrto i0uaxp9HG0p2/E6f6m2rAgRX5uz1CIgGmwXogcoLnl4LOagFlIsAIkbmHNfnPHXV HTFtbBQJsJK3k/+yJYi+JLDy/F3SBMjI7R5bUT0inXrtSvGDlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqrEkmWvxaZJVW3mLbjIBrjh/bnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOGY1 MWRhOC1lM2NhLTRmYzktYWNjZS05NDEwM2M1N2FlYmMvNGE0YzAxOWMtODY2YS0z ZjU3LWIwYTUtYmY5NjA1NzA0ODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYThmNTFkYTgtZTNjYS00ZmM5LWFj Y2UtOTQxMDNjNTdhZWJjL2E4ZjUxZGE4LWUzY2EtNGZjOS1hY2NlLTk0MTAzYzU3 YWViYy5jcmwwHwYDVR0jBBgwFoAUOnLltyc0HNOuCfKefb+Z1aBB/RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hOGY1MWRhOC1lM2NhLTRmYzktYWNjZS05NDEw M2M1N2FlYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESA+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3at7Sy1AxXJ8xrdzuDNzk4l+Ju7gQNsYFpMJRGVYtGzzhyxE/IecX1 y+4mNgvZOf0p4CQAKX6jKu5WAgHxRjgHvarnSjw09wEI/xpAA/DSGKways32G2ru BgfK7FmyCBHVLvyUS8rpv54J9ob/Ik4HPzOVhV37RTFK5yptZmhm3XoAZKD9zLl1 9ne+Jl6LNzMHjKVMgj3HWW28GtfPDpX5AiOFokS4vzD/cNbuRW9inRHWD8SeZzWS zLKRoKIZzkrfTsLEoZBhWfZWkzMa3dOT5AVLFWAnG57u8otNHG/3PWR0025YgGIB l54rc54Wd+PRp6OHC1O3g144oA1Am5Q= -----END CERTIFICATE-----Generated at Thu Nov 6 02:36:40 2025 by rpki-client