$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/912be08e-f017-32ba-9ba9-296d043b1189.roa File: 912be08e-f017-32ba-9ba9-296d043b1189.roa (raw, json) Hash identifier: wkKT9/K1oeLxYFRnjVun8lc+n2fgtzJKYtbb9lxnDJ0= Subject key identifier: A0:DD:0A:10:6F:CC:A4:CE:C6:7C:5F:56:37:E5:B8:0C:64:A2:65:2D Certificate issuer: /CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Certificate serial: 010D0C9F4328584BA39D0997BBB72E401F44CD78 Authority key identifier: 6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/912be08e-f017-32ba-9ba9-296d043b1189.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 36100 IP address blocks: 72.10.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:09:97:bb:b7:2e:40:1f:44:cd:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=1a2d3641-98de-40cd-ba10-52b5efc08ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2d:34:0c:7b:63:3a:84:32:2b:63:5f:08:e1: a1:29:4e:1d:e4:15:89:ad:19:d9:2c:b0:75:3e:07: 2e:79:22:3b:94:8a:e0:0e:69:0e:48:af:38:03:73: 76:07:9b:fd:f9:05:a6:85:fc:d9:70:45:d2:4e:70: 60:c1:d4:4b:1b:e7:07:dd:f9:db:e5:99:67:3e:3f: e4:89:71:eb:23:49:d0:59:05:a4:55:16:7e:44:1f: dc:0b:12:6c:e8:04:6d:8d:33:74:e8:cf:f0:98:ad: 3b:fb:01:37:7a:66:92:be:53:da:ce:90:21:06:70: 95:71:50:7a:08:e7:ec:56:1d:09:03:65:33:61:75: 57:ad:8c:d7:bf:d5:40:5b:a5:11:fd:ed:bf:cb:a5: a6:c5:4c:8c:cd:44:77:d7:08:ed:94:92:d4:22:48: 83:7d:07:4b:ef:3e:f3:cb:bd:53:84:d9:91:c9:cd: 4e:d7:ea:a1:c7:54:82:49:0c:11:66:db:1f:c0:63: 77:89:10:2a:de:dd:d7:a8:da:1f:10:4a:cf:f7:e0: c6:f6:95:11:42:b1:4c:71:6c:8e:85:23:9b:d0:6e: 07:42:a0:cb:c5:f8:5b:4b:6d:49:1a:1b:15:c2:d0: c4:cd:fe:7d:77:69:88:11:3f:bc:c9:cc:2e:08:d5: 9e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DD:0A:10:6F:CC:A4:CE:C6:7C:5F:56:37:E5:B8:0C:64:A2:65:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/912be08e-f017-32ba-9ba9-296d043b1189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl X509v3 Authority Key Identifier: keyid:6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer sbgp-ipAddrBlock: critical IPv4: 72.10.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:69:66:65:fa:bc:ab:8c:9b:c5:fa:83:a3:69:59:74:75:81: fe:6a:f0:65:bf:ec:25:5d:38:2b:58:da:20:97:0c:b9:27:84: 43:94:3d:9a:7c:56:2c:4f:5c:7e:0b:c9:7a:9b:40:4a:74:1f: f3:76:cb:d2:ae:d6:19:69:96:fc:82:b1:ca:33:55:35:64:8d: 0e:e9:29:f3:f4:22:f4:90:cc:85:88:90:d2:e3:06:8b:17:ab: de:d2:0e:aa:e4:f2:83:da:45:18:55:05:55:37:01:02:82:44: 94:b4:c0:35:8d:8f:00:b6:31:40:c7:af:1b:17:e4:05:eb:29: d3:6d:a9:81:ac:a7:c6:42:b8:d2:35:f2:9f:c0:95:46:c8:76: c2:03:cd:43:7f:eb:29:59:33:c1:73:95:88:c3:fd:7b:5f:ec: c6:a8:26:67:63:70:1a:7d:57:23:9a:02:9a:15:dd:51:19:41: d0:e1:8c:1f:7d:07:eb:95:df:95:3c:6b:de:10:7f:39:46:e0: 88:f2:34:28:cd:64:8e:3c:3e:8f:50:77:d1:8d:91:ab:6e:bc: 24:5a:86:20:b8:fe:0c:63:d4:28:6e:a3:7f:e2:a1:38:23:74: 45:2f:44:e9:b9:07:e2:8d:83:ec:00:1d:b5:bc:04:39:c4:7c: f9:c6:d5:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQmXu7cuQB9EzXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFiMDA1ZjUtYTMxMi00Y2I1LTgxZDgtYTVjMGJlZDVj YTRkMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MWEyZDM2NDEtOThkZS00MGNkLWJhMTAtNTJiNWVmYzA4ZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi00DHtjOoQyK2NfCOGhKU4d5BWJrRnZLLB1 PgcueSI7lIrgDmkOSK84A3N2B5v9+QWmhfzZcEXSTnBgwdRLG+cH3fnb5ZlnPj/k iXHrI0nQWQWkVRZ+RB/cCxJs6ARtjTN06M/wmK07+wE3emaSvlPazpAhBnCVcVB6 COfsVh0JA2UzYXVXrYzXv9VAW6UR/e2/y6WmxUyMzUR31wjtlJLUIkiDfQdL7z7z y71ThNmRyc1O1+qhx1SCSQwRZtsfwGN3iRAq3t3XqNofEErP9+DG9pURQrFMcWyO hSOb0G4HQqDLxfhbS21JGhsVwtDEzf59d2mIET+8ycwuCNWeqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDdChBvzKTOxnxfVjfluAxkomUtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIw MDVmNS1hMzEyLTRjYjUtODFkOC1hNWMwYmVkNWNhNGQvOTEyYmUwOGUtZjAxNy0z MmJhLTliYTktMjk2ZDA0M2IxMTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDFiMDA1ZjUtYTMxMi00Y2I1LTgx ZDgtYTVjMGJlZDVjYTRkL2QxYjAwNWY1LWEzMTItNGNiNS04MWQ4LWE1YzBiZWQ1 Y2E0ZC5jcmwwHwYDVR0jBBgwFoAUanfLu4B9r+DBZ0PisNa4C6VFOXswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIwMDVmNS1hMzEyLTRjYjUtODFkOC1hNWMw YmVkNWNhNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASArAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtpZmX6vKuMm8X6g6NpWXR1gf5q8GW/7CVdOCtY2iCXDLknhEOUPZp8 VixPXH4LyXqbQEp0H/N2y9Ku1hlplvyCscozVTVkjQ7pKfP0IvSQzIWIkNLjBosX q97SDqrk8oPaRRhVBVU3AQKCRJS0wDWNjwC2MUDHrxsX5AXrKdNtqYGsp8ZCuNI1 8p/AlUbIdsIDzUN/6ylZM8FzlYjD/Xtf7MaoJmdjcBp9VyOaApoV3VEZQdDhjB99 B+uV35U8a94QfzlG4IjyNCjNZI48Po9Qd9GNkatuvCRahiC4/gxj1Chuo3/ioTgj dEUvROm5B+KNg+wAHbW8BDnEfPnG1Vo= -----END CERTIFICATE-----Generated at Wed Nov 5 12:36:03 2025 by rpki-client