$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/360a5317-aa1e-354c-a006-0213019ba30a.roa File: 360a5317-aa1e-354c-a006-0213019ba30a.roa (raw, json) Hash identifier: 8cBsffqsyCoQN1bPeNEngzjy3cSzVPhaGBGycb6usK0= Subject key identifier: FF:5E:FF:EB:38:4F:FE:19:B6:84:34:EF:1C:26:DF:0F:01:B4:A0:96 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584BABFD0DF04D0B6F2EF0D77B40 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/360a5317-aa1e-354c-a006-0213019ba30a.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 14589 IP address blocks: 72.29.160.0/19 maxlen: 24 74.82.128.0/20 maxlen: 24 2001:48c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:0d:f0:4d:0b:6f:2e:f0:d7:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=768175fc-d9dc-4d9c-ad67-7868ea6ba9aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:93:8f:d2:f1:ce:c6:3c:ef:dc:60:65:d2:b0: bd:ee:8a:91:f3:14:3f:57:65:c3:b9:63:48:a7:b7: 9c:47:72:52:31:4b:1b:02:aa:2b:e0:4c:b1:0f:99: dd:23:2f:77:d7:29:eb:10:d7:52:b6:b2:65:26:ec: c5:8b:9b:43:72:ff:a4:11:8e:19:fe:f4:d8:af:a7: 11:a8:4b:98:94:ee:53:ab:63:61:0b:46:b2:82:2a: 9f:ad:4b:04:17:67:35:d3:5c:5e:f1:9c:4f:b4:c7: e4:31:bc:64:fb:73:a0:da:71:bf:01:72:46:d0:e7: 7a:a8:2d:a6:bb:10:b0:9e:47:c8:bd:b9:dd:e0:7d: e9:8d:47:71:cb:99:69:42:16:93:0e:80:9a:36:b5: 08:26:96:94:1c:79:44:0b:55:a6:3f:df:f0:44:69: 9f:ea:2d:7d:8d:86:83:80:a4:11:2c:2e:38:70:ed: 35:63:60:b6:e5:b4:b4:ec:ab:c7:83:43:44:15:76: 68:af:65:d2:2b:ec:9e:32:39:25:34:37:73:52:40: 2d:d8:93:d6:29:86:c2:f0:2e:e5:88:3f:8d:a4:95: e6:fa:ab:d3:0a:18:47:17:83:c3:42:3e:29:c5:c4: 82:bb:cc:37:f5:29:27:8a:8a:28:e9:55:56:93:41: ea:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:5E:FF:EB:38:4F:FE:19:B6:84:34:EF:1C:26:DF:0F:01:B4:A0:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/360a5317-aa1e-354c-a006-0213019ba30a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 72.29.160.0/19 74.82.128.0/20 IPv6: 2001:48c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:fd:50:d0:26:08:7e:38:07:24:05:3d:0e:e4:9e:b8:8f:83: 21:68:75:f5:4e:65:57:20:d9:67:72:fd:cd:94:14:4f:60:44: 83:df:b2:f9:6c:5a:55:8b:1f:9e:6c:d7:c8:7c:4c:b4:eb:3c: fb:47:e0:a1:7d:77:dc:c0:ee:e6:6d:f6:55:08:7c:e2:ff:67: a7:65:fd:aa:27:50:17:da:de:24:a8:f6:91:97:b1:ea:2f:b7: 23:02:67:6e:4c:0c:8b:bc:5f:a7:1d:72:4b:0a:8a:fe:49:9c: 1b:4c:d6:9e:fd:23:a1:f2:a5:ce:b5:fe:b6:de:6a:c9:0c:49: cd:83:53:b8:0a:40:7d:97:9d:10:0e:da:82:77:16:8d:37:c1: 72:ff:49:e9:be:62:6d:22:b3:e6:fd:bc:df:84:7a:a9:f0:66: 48:4b:fc:16:31:b3:00:a0:83:c5:8a:44:36:d0:bf:bc:40:7b: 71:1e:c6:15:e8:83:42:b4:39:68:89:8d:b8:63:84:7a:18:a1: 87:c0:e5:8f:4a:7c:b5:33:a0:64:5d:30:55:d0:d3:ff:f4:eb: 51:52:af:bd:b9:e5:5c:ac:f4:22:1f:22:22:f3:03:fa:7a:e3: 3d:06:1c:fc:3f:06:24:f8:de:64:a8:85:99:eb:fd:fb:81:b6: a5:15:c0:d6 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEur/Q3wTQtvLvDXe0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk NzY4MTc1ZmMtZDlkYy00ZDljLWFkNjctNzg2OGVhNmJhOWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpOP0vHOxjzv3GBl0rC97oqR8xQ/V2XDuWNI p7ecR3JSMUsbAqor4EyxD5ndIy931ynrENdStrJlJuzFi5tDcv+kEY4Z/vTYr6cR qEuYlO5Tq2NhC0aygiqfrUsEF2c101xe8ZxPtMfkMbxk+3Og2nG/AXJG0Od6qC2m uxCwnkfIvbnd4H3pjUdxy5lpQhaTDoCaNrUIJpaUHHlEC1WmP9/wRGmf6i19jYaD gKQRLC44cO01Y2C25bS07KvHg0NEFXZor2XSK+yeMjklNDdzUkAt2JPWKYbC8C7l iD+NpJXm+qvTChhHF4PDQj4pxcSCu8w39Skniooo6VVWk0HqrQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFP9e/+s4T/4ZtoQ07xwm3w8BtKCWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMzYwYTUzMTctYWExZS0z NTRjLWEwMDYtMDIxMzAxOWJhMzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFSB2gAwQE SlKAMA0EAgACMAcDBQAgAUjAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABv9UNAmCH44ByQFPQ7knriPgyFo dfVOZVcg2Wdy/c2UFE9gRIPfsvlsWlWLH55s18h8TLTrPPtH4KF9d9zA7uZt9lUI fOL/Z6dl/aonUBfa3iSo9pGXseovtyMCZ25MDIu8X6cdcksKiv5JnBtM1p79I6Hy pc61/rbeaskMSc2DU7gKQH2XnRAO2oJ3Fo03wXL/Sem+Ym0is+b9vN+EeqnwZkhL /BYxswCgg8WKRDbQv7xAe3EexhXog0K0OWiJjbhjhHoYoYfA5Y9KfLUzoGRdMFXQ 0//061FSr7255Vys9CIfIiLzA/p64z0GHPw/BiT43mSohZnr/fuBtqUVwNY= -----END CERTIFICATE-----Generated at Tue Nov 4 22:01:16 2025 by rpki-client