$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/b76220b4-2974-3e26-adfe-1897e4b5b302.roa File: b76220b4-2974-3e26-adfe-1897e4b5b302.roa (raw, json) Hash identifier: i3LsS5W4mJVZLdW3zJEvhnWMVhlw2jnVTka8DtRWf5w= Subject key identifier: 57:06:AD:79:35:C1:33:F0:EA:EA:9C:7D:C9:47:18:80:B1:B5:84:8F Certificate issuer: /CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Certificate serial: 010D0C9F4328584BA39CFAFA2DE51F5171AB5880 Authority key identifier: 6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/b76220b4-2974-3e26-adfe-1897e4b5b302.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 36100 IP address blocks: 72.10.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:fa:fa:2d:e5:1f:51:71:ab:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=4b8fe336-99e1-4a94-b4cc-f97b83bb5cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:96:09:db:6c:f6:a9:83:24:0c:24:7c:b2:09: bd:cb:61:67:03:fe:60:52:0d:b8:b2:e7:14:2c:7c: 40:7d:04:ff:02:d4:1a:e3:48:02:43:77:82:02:a5: 58:51:4c:64:f2:58:8b:2e:03:8c:60:dc:7c:c2:c6: 56:61:4e:8a:59:0d:53:79:ff:80:50:6d:54:1b:9e: e7:d7:26:a3:2c:c4:6c:3a:ae:75:f6:02:ec:aa:97: 8a:3a:42:6e:7d:42:80:e1:0a:2e:81:74:b8:78:fd: 3f:cb:d8:06:58:c2:dd:da:4d:13:49:e8:aa:7e:0d: 88:96:31:24:0f:6a:62:86:72:ed:ae:23:ce:cb:00: 16:b5:07:52:33:2b:e0:c9:93:54:83:a2:cd:ac:c3: 92:21:3b:9f:f8:0d:38:c4:b6:7a:ad:85:7f:38:ce: 2a:60:8d:b9:8e:44:fe:c2:35:80:75:b3:93:e1:dd: f9:ef:1e:48:93:47:db:ac:87:6e:73:8c:54:8a:ab: d1:82:b4:46:c1:6b:50:b2:8e:ae:fc:4f:57:ba:9d: 56:78:11:11:8d:cc:e4:bb:6a:c8:76:0d:21:d8:19: 84:73:2a:ad:d6:fe:e8:97:c9:5c:e7:11:d6:06:f4: ed:27:2e:17:54:6b:62:24:d7:70:75:73:ed:2a:28: 6e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:06:AD:79:35:C1:33:F0:EA:EA:9C:7D:C9:47:18:80:B1:B5:84:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/b76220b4-2974-3e26-adfe-1897e4b5b302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl X509v3 Authority Key Identifier: keyid:6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer sbgp-ipAddrBlock: critical IPv4: 72.10.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:33:85:ef:a3:16:3c:e4:39:38:40:b0:28:94:73:19:7d:f6: b9:6e:63:13:8f:e6:b8:9c:0b:31:fe:1e:04:b7:e8:eb:31:9b: de:20:0a:7f:4a:b5:91:cd:f6:08:9c:18:35:d8:bf:21:02:5f: 18:ea:00:a2:9f:67:af:f6:02:65:8e:f3:c4:59:d9:df:b8:d4: 64:72:fc:47:89:7f:ac:25:ca:c0:80:bf:10:18:31:26:52:d9: 24:f0:35:a2:6c:bf:3c:dc:28:f7:90:c8:a7:e3:9c:3b:af:ac: f8:5f:85:49:c8:26:77:da:80:6f:23:4f:29:21:5e:6f:b8:c7: 7c:66:19:e4:1b:38:bf:a8:9e:01:52:90:ed:4d:6d:c1:02:4f: 0e:64:80:30:b4:b9:53:eb:bc:4e:35:7a:de:31:4b:00:08:f0: 7e:64:9f:0d:d9:77:ba:af:1e:cd:6b:e1:a9:82:26:a9:b4:3c: 79:f9:41:03:33:55:3c:26:43:0c:dd:2e:be:65:73:a7:fd:6a: 15:4c:90:0b:db:f4:9c:00:e3:e8:6f:29:a7:61:d6:7f:45:89: 59:05:60:20:e3:ed:2f:04:e3:c8:44:0b:be:39:78:fb:29:62: b8:eb:a2:e3:86:90:b7:42:22:77:67:79:a1:81:4b:f0:f2:c3: 89:ac:8d:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPr6LeUfUXGrWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFiMDA1ZjUtYTMxMi00Y2I1LTgxZDgtYTVjMGJlZDVj YTRkMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NGI4ZmUzMzYtOTllMS00YTk0LWI0Y2MtZjk3YjgzYmI1Y2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pYJ22z2qYMkDCR8sgm9y2FnA/5gUg24sucU LHxAfQT/AtQa40gCQ3eCAqVYUUxk8liLLgOMYNx8wsZWYU6KWQ1Tef+AUG1UG57n 1yajLMRsOq519gLsqpeKOkJufUKA4QougXS4eP0/y9gGWMLd2k0TSeiqfg2IljEk D2pihnLtriPOywAWtQdSMyvgyZNUg6LNrMOSITuf+A04xLZ6rYV/OM4qYI25jkT+ wjWAdbOT4d357x5Ik0fbrIduc4xUiqvRgrRGwWtQso6u/E9Xup1WeBERjczku2rI dg0h2BmEcyqt1v7ol8lc5xHWBvTtJy4XVGtiJNdwdXPtKihuqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcGrXk1wTPw6uqcfclHGICxtYSPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIw MDVmNS1hMzEyLTRjYjUtODFkOC1hNWMwYmVkNWNhNGQvYjc2MjIwYjQtMjk3NC0z ZTI2LWFkZmUtMTg5N2U0YjViMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDFiMDA1ZjUtYTMxMi00Y2I1LTgx ZDgtYTVjMGJlZDVjYTRkL2QxYjAwNWY1LWEzMTItNGNiNS04MWQ4LWE1YzBiZWQ1 Y2E0ZC5jcmwwHwYDVR0jBBgwFoAUanfLu4B9r+DBZ0PisNa4C6VFOXswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIwMDVmNS1hMzEyLTRjYjUtODFkOC1hNWMw YmVkNWNhNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSArEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGczhe+jFjzkOThAsCiUcxl99rluYxOP5ricCzH+HgS36Osxm94gCn9K tZHN9gicGDXYvyECXxjqAKKfZ6/2AmWO88RZ2d+41GRy/EeJf6wlysCAvxAYMSZS 2STwNaJsvzzcKPeQyKfjnDuvrPhfhUnIJnfagG8jTykhXm+4x3xmGeQbOL+ongFS kO1NbcECTw5kgDC0uVPrvE41et4xSwAI8H5knw3Zd7qvHs1r4amCJqm0PHn5QQMz VTwmQwzdLr5lc6f9ahVMkAvb9JwA4+hvKadh1n9FiVkFYCDj7S8E48hEC745ePsp YrjrouOGkLdCIndneaGBS/Dyw4msjbs= -----END CERTIFICATE-----Generated at Wed Nov 5 16:08:50 2025 by rpki-client