$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/0e89bdba-09c4-3f9b-9f55-492ca291ac39.roa File: 0e89bdba-09c4-3f9b-9f55-492ca291ac39.roa (raw, json) Hash identifier: ux0G0kI4FYi5nuecvUQZ6rDQlxoQwdsrxLcAB28AZTQ= Subject key identifier: 81:25:E1:0A:5D:80:EA:63:30:36:FF:B9:9F:4D:2B:78:F0:64:7E:CB Certificate issuer: /CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Certificate serial: 010D0C9F4328584BA39CFB1065FA0BB7612CF140 Authority key identifier: 6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/0e89bdba-09c4-3f9b-9f55-492ca291ac39.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 36100 IP address blocks: 72.10.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:fb:10:65:fa:0b:b7:61:2c:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=91454ecb-6ba5-4aa6-b8af-772a41440a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:58:cd:84:1f:5d:33:f9:1d:d5:58:3d:3e:fe: 74:28:f4:7a:2f:38:bd:f7:1e:ac:e3:d3:98:97:44: 38:fa:1a:0f:e3:64:74:d5:01:6b:c4:e3:96:74:92: 93:a0:9f:56:6a:90:cb:70:07:2a:51:b3:98:93:ac: 42:bb:77:8a:1e:e2:d9:cf:9f:e9:e3:13:13:5b:e5: fc:3e:a0:82:44:70:6c:81:d5:4a:17:d2:42:2a:75: 70:16:b6:89:5f:65:24:4e:ab:03:9f:eb:33:3c:da: cb:78:75:ad:e3:16:79:14:53:ca:50:62:b7:6a:17: a8:77:90:4b:55:d0:0e:6d:77:1c:75:19:a1:32:62: da:49:14:10:36:90:d8:7c:4e:86:80:32:3f:e6:58: 46:f0:00:d9:09:73:cd:b6:9f:47:5a:12:76:e8:34: d4:14:f1:c3:3a:06:52:54:bb:6c:a2:bb:c3:06:81: 72:65:fd:58:f6:4b:b5:04:57:ad:aa:49:81:9d:df: e4:14:56:96:6a:8b:39:96:ad:ed:be:fe:db:62:93: 8c:6b:b6:c6:a4:fd:88:8d:52:a4:fc:81:9d:a7:d2: 43:7b:9d:1a:ff:c4:fc:61:a2:30:92:eb:44:75:2a: 51:48:16:7a:f8:0b:16:44:c5:e7:b5:b8:55:3d:94: 37:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:25:E1:0A:5D:80:EA:63:30:36:FF:B9:9F:4D:2B:78:F0:64:7E:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/0e89bdba-09c4-3f9b-9f55-492ca291ac39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl X509v3 Authority Key Identifier: keyid:6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer sbgp-ipAddrBlock: critical IPv4: 72.10.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:05:bc:6c:3a:b7:7a:13:89:8c:cf:af:5c:6b:9d:37:d5:8e: 6f:f2:01:a5:0f:d1:b3:44:7b:9e:55:44:7b:c5:e0:57:29:a1: 30:e4:d3:b6:81:d9:cf:c1:1e:09:cd:28:cf:32:8f:64:77:cb: 0c:17:b9:46:2b:99:26:c3:2f:82:8c:48:99:36:4b:e5:1d:18: dd:6c:0c:08:fd:15:9e:d0:93:68:76:06:87:c8:6a:7f:77:4a: d1:b1:73:ce:ff:5a:aa:bb:4b:9c:ac:97:d5:68:68:39:06:95: 2d:cb:17:c1:5e:f5:6d:d8:c9:3d:75:27:e8:6a:51:67:d0:50: 0b:ee:26:c0:93:6b:70:58:a3:0b:a8:a9:1b:f8:83:62:e0:bb: 64:68:93:1d:be:8a:34:3d:22:74:71:23:fa:10:53:a3:c3:f9: 4b:e5:43:a2:c7:f3:a2:19:80:a3:5b:bd:d9:19:7b:18:f5:6d: 4b:0e:81:bc:35:a4:40:33:1b:fe:d4:98:54:b4:c5:a0:4c:5f: 18:25:4f:b1:15:1f:71:1e:90:f3:99:cc:ba:24:43:8a:2b:39: 86:e5:25:c0:7b:e0:09:5a:a4:72:65:45:9e:f6:79:51:83:51: e3:7d:c7:67:22:f3:0d:48:a6:f2:3a:6b:07:59:1c:c3:75:9d: fd:df:59:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPsQZfoLt2Es8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFiMDA1ZjUtYTMxMi00Y2I1LTgxZDgtYTVjMGJlZDVj YTRkMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OTE0NTRlY2ItNmJhNS00YWE2LWI4YWYtNzcyYTQxNDQwYTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11jNhB9dM/kd1Vg9Pv50KPR6Lzi99x6s49OY l0Q4+hoP42R01QFrxOOWdJKToJ9WapDLcAcqUbOYk6xCu3eKHuLZz5/p4xMTW+X8 PqCCRHBsgdVKF9JCKnVwFraJX2UkTqsDn+szPNrLeHWt4xZ5FFPKUGK3aheod5BL VdAObXccdRmhMmLaSRQQNpDYfE6GgDI/5lhG8ADZCXPNtp9HWhJ26DTUFPHDOgZS VLtsorvDBoFyZf1Y9ku1BFetqkmBnd/kFFaWaos5lq3tvv7bYpOMa7bGpP2IjVKk /IGdp9JDe50a/8T8YaIwkutEdSpRSBZ6+AsWRMXntbhVPZQ3zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEl4QpdgOpjMDb/uZ9NK3jwZH7LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIw MDVmNS1hMzEyLTRjYjUtODFkOC1hNWMwYmVkNWNhNGQvMGU4OWJkYmEtMDljNC0z ZjliLTlmNTUtNDkyY2EyOTFhYzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDFiMDA1ZjUtYTMxMi00Y2I1LTgx ZDgtYTVjMGJlZDVjYTRkL2QxYjAwNWY1LWEzMTItNGNiNS04MWQ4LWE1YzBiZWQ1 Y2E0ZC5jcmwwHwYDVR0jBBgwFoAUanfLu4B9r+DBZ0PisNa4C6VFOXswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIwMDVmNS1hMzEyLTRjYjUtODFkOC1hNWMw YmVkNWNhNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSArMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcFvGw6t3oTiYzPr1xrnTfVjm/yAaUP0bNEe55VRHvF4FcpoTDk07aB 2c/BHgnNKM8yj2R3ywwXuUYrmSbDL4KMSJk2S+UdGN1sDAj9FZ7Qk2h2BofIan93 StGxc87/Wqq7S5ysl9VoaDkGlS3LF8Fe9W3YyT11J+hqUWfQUAvuJsCTa3BYowuo qRv4g2Lgu2Rokx2+ijQ9InRxI/oQU6PD+UvlQ6LH86IZgKNbvdkZexj1bUsOgbw1 pEAzG/7UmFS0xaBMXxglT7EVH3EekPOZzLokQ4orOYblJcB74AlapHJlRZ72eVGD UeN9x2ci8w1IpvI6awdZHMN1nf3fWUY= -----END CERTIFICATE-----Generated at Wed Nov 5 22:52:48 2025 by rpki-client