$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/1cebdd97-c4bb-3a5d-8203-c5a235368b55.roa File: 1cebdd97-c4bb-3a5d-8203-c5a235368b55.roa (raw, json) Hash identifier: K/tPMnS+W5xM8f2dPIyWDGqa1v3xtgxIh9+XEQUOVY8= Subject key identifier: 02:C4:14:B2:9C:21:F5:5F:34:AE:2F:20:BB:21:5B:6F:C4:A7:EB:00 Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395 Certificate serial: 010D0C9F4328584BBCDADD39DE384EC828447000 Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/1cebdd97-c4bb-3a5d-8203-c5a235368b55.roa Signing time: Mon 03 Nov 2025 14:00:38 +0000 ROA not before: Mon 03 Nov 2025 14:00:38 +0000 ROA not after: Sun 01 Feb 2026 14:00:38 +0000 asID: 23316 IP address blocks: 72.37.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:da:dd:39:de:38:4e:c8:28:44:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Validity Not Before: Nov 3 14:00:38 2025 GMT Not After : Feb 1 14:00:38 2026 GMT Subject: CN=ce4722ca-9d4c-45ca-94a2-5664f00d1ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ee:e8:1f:cb:ae:8c:98:ba:74:0f:30:4f:48: 56:60:2e:1d:6d:ef:65:0a:77:01:98:d0:6c:e4:43: 0e:83:e5:bd:32:66:f5:f8:9d:52:60:ad:4d:db:cc: 98:f5:4d:18:cd:32:35:59:60:1d:f4:23:2d:20:16: 3f:d4:c9:de:12:fa:9c:e5:e1:b7:a8:33:bb:43:0d: 68:3a:e7:58:ff:bc:2a:b0:f2:8e:56:a0:41:49:24: b7:df:2b:6c:68:a2:a6:cf:b2:63:80:97:c0:60:d3: a7:e3:af:f8:96:b5:32:5e:ca:97:a4:c7:b5:ee:5f: 49:92:90:ab:31:d3:74:66:27:fb:28:b1:d9:e8:91: c0:cf:db:37:2d:3e:3f:77:35:0e:c7:03:01:61:d9: ea:a8:3d:9e:e1:24:2e:c8:f8:58:44:35:3f:42:75: c7:df:ac:be:7d:72:b9:5d:ec:3a:68:51:3a:ca:75: 0d:93:38:d6:dc:d0:39:f9:2f:c0:70:42:bf:e1:03: ff:9b:97:8f:4f:41:71:f8:7f:54:db:a7:c9:d2:2c: 69:69:55:46:e5:7a:a6:d4:52:02:0e:50:e4:7d:ed: 60:4d:16:30:ce:8e:eb:3a:55:5c:f0:44:b8:6e:62: 87:03:1c:97:e4:a6:3b:2f:2f:28:66:b7:2b:63:a2: 04:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C4:14:B2:9C:21:F5:5F:34:AE:2F:20:BB:21:5B:6F:C4:A7:EB:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/1cebdd97-c4bb-3a5d-8203-c5a235368b55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl X509v3 Authority Key Identifier: keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer sbgp-ipAddrBlock: critical IPv4: 72.37.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:5c:42:24:88:14:0b:56:89:49:16:b3:c5:4f:5a:ce:82:fb: fb:85:45:20:7d:46:ab:bc:0b:0b:9f:70:c7:ee:1d:3a:4f:6e: 22:4b:08:74:21:6c:a6:44:b3:88:7c:aa:d1:d9:9b:06:7f:34: 02:6e:d3:9b:f8:f6:59:41:a7:fc:5a:17:4c:d6:39:ff:66:60: 06:1d:ae:f0:c8:41:24:ed:f5:b3:00:9f:f3:41:36:5a:ae:15: 93:78:25:38:c2:8e:09:90:e5:c5:0d:16:55:8b:2f:42:e5:cc: 27:f3:4d:c5:57:4a:2c:4a:86:32:f9:92:56:a0:7a:65:21:ea: 03:51:9c:1a:66:eb:20:d9:b7:7c:9d:f4:e9:72:36:6a:14:5b: b9:dd:2b:8d:0d:c6:7b:88:28:fc:c0:d5:2d:12:81:44:1d:be: ad:01:81:16:f3:0e:52:c4:f0:fb:76:70:80:9e:e8:42:b5:a8: 3b:ab:88:43:f6:a8:72:34:4c:62:dd:42:e6:d3:39:13:7a:12: 07:ab:2a:b7:c3:c4:25:58:7f:a3:2d:f1:86:37:67:b9:34:33: c8:c9:3a:8c:6d:0d:bb:86:c0:8f:61:63:1b:6b:73:ea:eb:0a: 12:83:cc:f4:42:29:c0:88:35:84:4c:11:91:10:d5:39:27:58: e2:98:62:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu82t053jhOyChEcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj Mzk1MB4XDTI1MTEwMzE0MDAzOFoXDTI2MDIwMTE0MDAzOFowLzEtMCsGA1UEAxMk Y2U0NzIyY2EtOWQ0Yy00NWNhLTk0YTItNTY2NGYwMGQxZWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO7oH8uujJi6dA8wT0hWYC4dbe9lCncBmNBs 5EMOg+W9Mmb1+J1SYK1N28yY9U0YzTI1WWAd9CMtIBY/1MneEvqc5eG3qDO7Qw1o OudY/7wqsPKOVqBBSSS33ytsaKKmz7JjgJfAYNOn46/4lrUyXsqXpMe17l9JkpCr MdN0Zif7KLHZ6JHAz9s3LT4/dzUOxwMBYdnqqD2e4SQuyPhYRDU/QnXH36y+fXK5 Xew6aFE6ynUNkzjW3NA5+S/AcEK/4QP/m5ePT0Fx+H9U26fJ0ixpaVVG5Xqm1FIC DlDkfe1gTRYwzo7rOlVc8ES4bmKHAxyX5KY7Ly8oZrcrY6IE4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALEFLKcIfVfNK4vILshW2/Ep+sAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvMWNlYmRkOTctYzRiYi0z YTVkLTgyMDMtYzVhMjM1MzY4YjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0 NzJmZGMzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCWOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9cQiSIFAtWiUkWs8VPWs6C+/uFRSB9Rqu8CwufcMfuHTpPbiJLCHQh bKZEs4h8qtHZmwZ/NAJu05v49llBp/xaF0zWOf9mYAYdrvDIQSTt9bMAn/NBNlqu FZN4JTjCjgmQ5cUNFlWLL0LlzCfzTcVXSixKhjL5klagemUh6gNRnBpm6yDZt3yd 9OlyNmoUW7ndK40NxnuIKPzA1S0SgUQdvq0BgRbzDlLE8Pt2cICe6EK1qDuriEP2 qHI0TGLdQubTORN6EgerKrfDxCVYf6Mt8YY3Z7k0M8jJOoxtDbuGwI9hYxtrc+rr ChKDzPRCKcCINYRMEZEQ1TknWOKYYlQ= -----END CERTIFICATE-----Generated at Wed Nov 5 17:51:28 2025 by rpki-client