$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8dbc2972-670d-3384-8729-8987f2639e3b.roa File: 8dbc2972-670d-3384-8729-8987f2639e3b.roa (raw, json) Hash identifier: 5I6lXRDgKQtacoIV8l2F/5Fqj0tlWGGSjBwxGVDxd1s= Subject key identifier: BE:9B:81:45:34:C7:4E:93:87:3F:2C:30:BE:4C:47:AC:3A:67:AB:46 Certificate issuer: /CN=8b7074c2-7c8f-41ac-8307-74ece44a460c Certificate serial: 010D0C9F4328584BBE4039201827EFDE4DAF4C00 Authority key identifier: C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8dbc2972-670d-3384-8729-8987f2639e3b.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 13977 IP address blocks: 72.14.76.0/24 maxlen: 24 72.14.84.0/24 maxlen: 24 72.14.90.0/24 maxlen: 24 72.14.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:39:20:18:27:ef:de:4d:af:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b7074c2-7c8f-41ac-8307-74ece44a460c Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=8d84f89b-bc34-4cf4-9934-f9f69072214e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8e:75:96:24:56:3f:2b:81:2f:8a:cf:5a:88: fb:a6:d0:f6:a9:7f:0b:a6:d0:78:02:23:5f:34:87: a2:4e:fb:0e:14:e7:2d:41:d2:c3:39:cf:62:26:ea: e3:d0:86:06:97:dd:30:df:9b:78:ff:86:d1:03:13: 8f:cc:a3:70:55:e3:19:41:4d:8c:16:57:60:14:79: 8e:69:26:dc:13:31:3d:1c:d8:34:b3:c1:33:be:ac: 64:92:0c:ed:e4:60:fb:1d:92:e3:11:26:e4:46:8a: 1c:10:78:2c:c7:99:f9:77:4b:c4:9c:1a:44:ea:47: b4:a2:6f:bc:4c:57:32:bc:64:93:13:e7:f4:df:bd: 2b:09:80:db:0b:01:51:d4:1a:20:41:45:8d:5b:7f: 79:c5:2a:4e:e4:c3:0d:d2:89:71:11:1a:5f:0b:19: a2:47:89:6e:a7:01:6c:e4:6a:0c:ba:96:0f:58:31: 4a:42:a8:7c:d1:f0:46:a5:fa:90:4b:36:2b:8a:3c: 96:09:ca:5e:dd:6c:5a:18:f9:a9:9b:e3:18:86:27: d3:c7:d3:98:24:28:0c:7f:60:fe:fa:42:fd:d8:98: 21:42:3e:e3:4f:c4:ea:f0:73:95:2b:ce:4e:5c:ec: 0f:c1:b4:58:97:96:b1:5e:45:57:f5:28:8a:53:5e: f9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9B:81:45:34:C7:4E:93:87:3F:2C:30:BE:4C:47:AC:3A:67:AB:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8dbc2972-670d-3384-8729-8987f2639e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.crl X509v3 Authority Key Identifier: keyid:C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer sbgp-ipAddrBlock: critical IPv4: 72.14.76.0/24 72.14.84.0/24 72.14.90.0/24 72.14.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:8f:b4:62:ce:5c:b1:c0:bf:68:d8:6e:30:42:8c:de:dc:58: d3:51:ab:c5:5a:41:26:ee:d5:5f:56:4b:74:00:2b:3f:f3:35: 7a:df:d8:33:41:b3:97:2c:f0:36:43:e1:02:ba:0b:62:99:00: 59:40:be:70:b0:e6:9d:55:4a:23:a0:94:d1:32:7e:8e:3b:8b: 6b:6c:cc:55:7a:2c:d2:1b:0c:d5:fb:fd:84:69:42:cf:b8:45: e1:06:9e:50:16:e7:51:88:1b:b8:8d:48:ef:8f:9f:29:72:a2: b3:5a:d9:f3:ac:3b:ee:a8:60:03:63:f4:2a:6d:f1:f0:bb:93: f6:b8:2f:28:35:2a:65:25:b3:61:39:fd:68:a2:38:4f:83:cf: d2:39:a1:c4:a2:f4:b6:67:f0:d5:09:e5:96:be:8a:89:c9:9c: 37:e8:53:ae:7f:ae:6f:86:47:71:15:88:de:a0:a1:85:c2:ae: 3e:4d:c6:f9:a5:56:aa:8a:8a:6e:33:70:d3:9b:22:00:5a:6b: 7b:a6:c1:4b:6a:b8:40:4c:b3:50:70:be:c6:8a:50:1e:35:f4: e3:09:4e:de:33:a7:4f:3f:24:9e:d5:22:10:a1:8b:99:5f:00: fd:1a:87:23:eb:15:6d:07:c3:41:04:d5:f4:3e:4a:bc:2a:63: 73:b6:dd:72 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEu+QDkgGCfv3k2vTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI3MDc0YzItN2M4Zi00MWFjLTgzMDctNzRlY2U0NGE0 NjBjMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk OGQ4NGY4OWItYmMzNC00Y2Y0LTk5MzQtZjlmNjkwNzIyMTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiI51liRWPyuBL4rPWoj7ptD2qX8LptB4AiNf NIeiTvsOFOctQdLDOc9iJurj0IYGl90w35t4/4bRAxOPzKNwVeMZQU2MFldgFHmO aSbcEzE9HNg0s8Ezvqxkkgzt5GD7HZLjESbkRoocEHgsx5n5d0vEnBpE6ke0om+8 TFcyvGSTE+f0370rCYDbCwFR1BogQUWNW395xSpO5MMN0olxERpfCxmiR4lupwFs 5GoMupYPWDFKQqh80fBGpfqQSzYrijyWCcpe3WxaGPmpm+MYhifTx9OYJCgMf2D+ +kL92JghQj7jT8Tq8HOVK85OXOwPwbRYl5axXkVX9SiKU175WwIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFL6bgUU0x06Thz8sML5MR6w6Z6tGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84Yjcw NzRjMi03YzhmLTQxYWMtODMwNy03NGVjZTQ0YTQ2MGMvOGRiYzI5NzItNjcwZC0z Mzg0LTg3MjktODk4N2YyNjM5ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGI3MDc0YzItN2M4Zi00MWFjLTgz MDctNzRlY2U0NGE0NjBjLzhiNzA3NGMyLTdjOGYtNDFhYy04MzA3LTc0ZWNlNDRh NDYwYy5jcmwwHwYDVR0jBBgwFoAUwcyIvErACddhSMPRw7JSQGnVnwEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YjcwNzRjMi03YzhmLTQxYWMtODMwNy03NGVj ZTQ0YTQ2MGMuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQASA5MAwQA SA5UAwQASA5aAwQASA5gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBACyPtGLOXLHAv2jYbjBCjN7cWNNRq8Va QSbu1V9WS3QAKz/zNXrf2DNBs5cs8DZD4QK6C2KZAFlAvnCw5p1VSiOglNEyfo47 i2tszFV6LNIbDNX7/YRpQs+4ReEGnlAW51GIG7iNSO+PnylyorNa2fOsO+6oYANj 9Cpt8fC7k/a4Lyg1KmUls2E5/WiiOE+Dz9I5ocSi9LZn8NUJ5Za+ionJnDfoU65/ rm+GR3EViN6goYXCrj5NxvmlVqqKim4zcNObIgBaa3umwUtquEBMs1BwvsaKUB41 9OMJTt4zp08/JJ7VIhChi5lfAP0ahyPrFW0Hw0EE1fQ+SrwqY3O23XI= -----END CERTIFICATE-----Generated at Tue Nov 4 22:05:47 2025 by rpki-client