$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/2a75d702-7816-3d06-bd91-26f37b381683.roa File: 2a75d702-7816-3d06-bd91-26f37b381683.roa (raw, json) Hash identifier: 96RcquJ6tvKByNuvHmXgiKd8W2evGBbfluUfg3jZHFI= Subject key identifier: 62:63:8A:42:0F:C6:E4:6D:06:D2:0F:5B:C2:D9:64:24:F5:3A:5E:33 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584BB727B7217D79369BD3F795C0 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/2a75d702-7816-3d06-bd91-26f37b381683.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 4229 IP address blocks: 128.14.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:b7:21:7d:79:36:9b:d3:f7:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=d0e3b5b8-8946-4b14-969f-e952fd6c42b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7f:4e:23:f8:43:a1:2c:08:ae:0f:b2:94:71: d2:e9:18:70:8f:08:c0:55:00:48:91:ed:fc:41:e9: 0f:2a:b5:d0:0a:55:94:08:40:ed:53:76:6f:17:b7: 10:0b:52:82:9f:f5:2d:b7:b0:4c:2e:9d:90:39:a9: 48:fe:bb:16:47:1a:e7:76:df:91:68:be:89:ec:81: 07:9c:0a:8e:9d:1e:a8:02:2d:59:99:2d:e7:16:71: 4d:9f:bc:5b:46:2b:0b:f7:a7:08:58:98:14:45:d9: 7a:e2:36:e8:59:fb:1a:54:1c:5a:1b:a6:71:9f:b7: 39:db:0e:a1:3c:a4:b2:91:ab:9d:b7:73:e3:85:55: e1:88:2e:c9:43:10:58:e2:23:37:32:71:86:20:d7: 0e:9b:39:07:ff:4c:b4:d8:3e:32:3e:2e:43:b4:13: 3c:b7:15:78:6f:18:8f:4b:0a:d9:e4:68:2e:c7:eb: e5:8e:38:43:45:d4:80:b9:d9:45:2d:b7:13:64:cb: 16:80:b0:07:8c:d3:02:51:06:79:95:66:e3:b9:d9: 33:11:6e:d0:4c:9d:9e:c5:60:8b:11:25:b7:98:bf: 60:78:79:4c:72:68:01:2b:7a:b0:09:a1:19:70:97: 27:e8:53:d9:50:77:4c:d6:89:bd:38:f4:4f:9b:71: 72:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:63:8A:42:0F:C6:E4:6D:06:D2:0F:5B:C2:D9:64:24:F5:3A:5E:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/2a75d702-7816-3d06-bd91-26f37b381683.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.14.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:d1:46:50:31:37:f7:91:6f:41:6a:8b:97:d0:10:39:a1:a1: a9:c6:2b:87:c2:ec:9e:56:e3:03:4e:71:16:31:10:c7:b8:96: 3b:0a:99:07:92:da:d7:af:7b:b3:ac:46:31:8e:01:dd:4a:7c: 8b:e0:57:9f:c2:08:59:d5:27:aa:49:52:81:45:27:2f:28:7d: 62:5f:6a:e5:89:db:0b:15:38:ac:ef:9d:9f:e5:72:6c:34:e9: ab:d9:e6:fc:44:0e:ec:0a:a8:9e:f2:5e:e4:52:46:bc:37:50: f7:86:68:e5:20:05:dd:57:59:fb:29:45:af:fa:d5:d2:be:e2: 38:3c:bb:80:18:3a:0c:d8:89:e4:c0:2e:3b:00:ae:cd:0e:a6: 3c:1c:d8:c6:7c:23:18:cc:d3:b6:cd:9a:3e:1b:c7:cc:c3:c5: ee:9b:e6:fd:10:1f:e2:a4:8c:ec:4f:ba:f4:e3:56:ec:06:b5: 08:99:db:b5:4b:f1:a3:92:59:18:95:bc:c9:cf:2b:a7:63:58: 35:df:db:f0:01:2c:6f:64:2e:b5:00:8e:b9:08:32:f9:e9:8f: ee:13:41:a1:cd:59:59:62:be:bc:a2:a9:8e:ce:80:c5:17:56: 95:44:79:b7:b2:63:c2:b7:94:bd:c4:48:9e:c7:27:a0:63:5d: a1:04:a7:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3J7chfXk2m9P3lcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk ZDBlM2I1YjgtODk0Ni00YjE0LTk2OWYtZTk1MmZkNmM0MmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn9OI/hDoSwIrg+ylHHS6RhwjwjAVQBIke38 QekPKrXQClWUCEDtU3ZvF7cQC1KCn/Utt7BMLp2QOalI/rsWRxrndt+RaL6J7IEH nAqOnR6oAi1ZmS3nFnFNn7xbRisL96cIWJgURdl64jboWfsaVBxaG6Zxn7c52w6h PKSykaudt3PjhVXhiC7JQxBY4iM3MnGGINcOmzkH/0y02D4yPi5DtBM8txV4bxiP SwrZ5Ggux+vljjhDRdSAudlFLbcTZMsWgLAHjNMCUQZ5lWbjudkzEW7QTJ2exWCL ESW3mL9geHlMcmgBK3qwCaEZcJcn6FPZUHdM1om9OPRPm3FyIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJjikIPxuRtBtIPW8LZZCT1Ol4zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMmE3NWQ3MDItNzgxNi0z ZDA2LWJkOTEtMjZmMzdiMzgxNjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgA5WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHRRlAxN/eRb0Fqi5fQEDmhoanGK4fC7J5W4wNOcRYxEMe4ljsKmQeS 2teve7OsRjGOAd1KfIvgV5/CCFnVJ6pJUoFFJy8ofWJfauWJ2wsVOKzvnZ/lcmw0 6avZ5vxEDuwKqJ7yXuRSRrw3UPeGaOUgBd1XWfspRa/61dK+4jg8u4AYOgzYieTA LjsArs0Opjwc2MZ8IxjM07bNmj4bx8zDxe6b5v0QH+KkjOxPuvTjVuwGtQiZ27VL 8aOSWRiVvMnPK6djWDXf2/ABLG9kLrUAjrkIMvnpj+4TQaHNWVlivryiqY7OgMUX VpVEebeyY8K3lL3ESJ7HJ6BjXaEEp5s= -----END CERTIFICATE-----Generated at Wed Nov 5 06:08:46 2025 by rpki-client