$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/aaf529f7-7b6d-3be9-978f-88e20d77046a.roa File: aaf529f7-7b6d-3be9-978f-88e20d77046a.roa (raw, json) Hash identifier: 7B2nbH9k1zSr9NVeonkGOzmUpfkck+egJXdPCGRePlk= Subject key identifier: 1F:20:FE:A5:DF:F4:D9:03:3F:31:2F:A1:61:1F:97:92:70:84:65:FB Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395 Certificate serial: 010D0C9F4328584BBCDAE4EFA0698C504EA879E0 Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/aaf529f7-7b6d-3be9-978f-88e20d77046a.roa Signing time: Mon 03 Nov 2025 14:00:38 +0000 ROA not before: Mon 03 Nov 2025 14:00:38 +0000 ROA not after: Sun 01 Feb 2026 14:00:38 +0000 asID: 23316 IP address blocks: 72.37.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:da:e4:ef:a0:69:8c:50:4e:a8:79:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Validity Not Before: Nov 3 14:00:38 2025 GMT Not After : Feb 1 14:00:38 2026 GMT Subject: CN=c9e05c4d-b900-4dba-b548-ac1fb0ea51cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3f:4d:72:8d:9b:5d:f9:79:4c:7a:df:8f:98: 80:6d:05:6c:20:3f:e4:a9:7b:d1:e9:be:c6:54:0b: ec:c2:e1:ed:08:31:c4:5a:52:ea:16:d6:9b:35:b7: 6d:7b:58:cc:1f:7d:68:f9:af:2a:14:08:00:dc:e4: f7:2a:60:65:b4:ce:9c:2e:fd:c3:7c:04:d0:5d:be: 6e:12:9d:41:63:66:d0:f9:b7:f8:5d:3b:ef:0f:bc: 01:91:e5:1b:85:be:32:0c:a0:20:4b:76:e8:22:f4: 63:47:e9:42:19:c8:fb:1e:e5:85:03:8c:86:2a:1d: b3:08:81:b3:f9:10:00:9b:4d:29:8a:5e:f3:59:04: e2:68:d2:6a:a0:56:2e:f7:de:33:67:79:77:d3:81: 18:a5:0e:c5:71:f5:7d:bf:7c:c2:44:89:e3:f2:71: 9a:a3:6a:43:50:e4:9c:e1:65:0b:ed:d4:0c:f8:c3: 59:35:a8:0a:0e:4c:ca:ad:80:42:e9:0d:0f:72:35: 9c:ca:7c:7c:ab:3f:69:cf:d1:12:90:09:47:e3:70: 00:ba:93:b2:50:f8:26:2a:98:47:7d:d7:f6:7f:19: 00:bd:9a:82:7a:0b:aa:d9:6c:38:a9:42:75:02:f0: 8b:b4:72:07:51:ec:94:ef:b8:5b:e1:e8:25:b2:5d: 92:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:20:FE:A5:DF:F4:D9:03:3F:31:2F:A1:61:1F:97:92:70:84:65:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/aaf529f7-7b6d-3be9-978f-88e20d77046a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl X509v3 Authority Key Identifier: keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer sbgp-ipAddrBlock: critical IPv4: 72.37.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:06:70:f8:cd:66:5f:d9:0c:56:e2:6b:e7:9c:1d:e0:e8:fa: 6f:8f:c8:76:3b:d7:9c:cd:fe:66:6a:59:1c:06:73:91:42:c6: e2:fb:a4:95:eb:52:df:a0:00:b4:a3:dc:6f:62:dc:1f:40:96: 3b:d8:6c:c3:99:35:b4:c9:6f:d7:40:ca:71:27:ce:02:0f:65: 42:8c:a4:f5:d4:16:3d:22:89:88:08:aa:9c:59:4f:cf:07:0e: 03:a9:17:af:b2:cd:96:16:33:50:30:6e:12:89:f0:a5:18:1a: b2:de:44:02:34:29:40:5e:9a:e6:bd:7a:16:e9:10:83:78:c2: 40:be:2f:ca:f8:1f:97:8c:7c:52:c3:70:19:05:d1:6f:5f:84: 5f:0d:7d:56:35:29:5c:7f:fd:b3:ca:4c:79:b2:7c:34:fb:2b: 95:cd:3c:41:9b:f5:8b:73:2d:39:b4:88:72:fb:6a:78:b2:ff: 63:82:19:04:fb:14:4f:43:83:c8:b5:41:97:00:77:2c:8c:aa: 16:38:ea:21:b7:50:38:98:cd:a0:d4:28:a2:32:a6:26:a8:c4: 89:e0:ee:ad:af:a4:9e:5b:b4:eb:cd:ed:d6:04:fe:10:af:af: 7b:ec:f0:bf:97:09:b7:65:ef:d1:5b:14:43:e9:1a:cc:12:72: c0:1c:61:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu82uTvoGmMUE6oeeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj Mzk1MB4XDTI1MTEwMzE0MDAzOFoXDTI2MDIwMTE0MDAzOFowLzEtMCsGA1UEAxMk YzllMDVjNGQtYjkwMC00ZGJhLWI1NDgtYWMxZmIwZWE1MWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD9Nco2bXfl5THrfj5iAbQVsID/kqXvR6b7G VAvswuHtCDHEWlLqFtabNbdte1jMH31o+a8qFAgA3OT3KmBltM6cLv3DfATQXb5u Ep1BY2bQ+bf4XTvvD7wBkeUbhb4yDKAgS3boIvRjR+lCGcj7HuWFA4yGKh2zCIGz +RAAm00pil7zWQTiaNJqoFYu994zZ3l304EYpQ7FcfV9v3zCRInj8nGao2pDUOSc 4WUL7dQM+MNZNagKDkzKrYBC6Q0PcjWcynx8qz9pz9ESkAlH43AAupOyUPgmKphH fdf2fxkAvZqCeguq2Ww4qUJ1AvCLtHIHUeyU77hb4eglsl2S/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8g/qXf9NkDPzEvoWEfl5JwhGX7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvYWFmNTI5ZjctN2I2ZC0z YmU5LTk3OGYtODhlMjBkNzcwNDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0 NzJmZGMzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCWNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8GcPjNZl/ZDFbia+ecHeDo+m+PyHY715zN/mZqWRwGc5FCxuL7pJXr Ut+gALSj3G9i3B9AljvYbMOZNbTJb9dAynEnzgIPZUKMpPXUFj0iiYgIqpxZT88H DgOpF6+yzZYWM1AwbhKJ8KUYGrLeRAI0KUBemua9ehbpEIN4wkC+L8r4H5eMfFLD cBkF0W9fhF8NfVY1KVx//bPKTHmyfDT7K5XNPEGb9YtzLTm0iHL7aniy/2OCGQT7 FE9Dg8i1QZcAdyyMqhY46iG3UDiYzaDUKKIypiaoxIng7q2vpJ5btOvN7dYE/hCv r3vs8L+XCbdl79FbFEPpGswScsAcYZo= -----END CERTIFICATE-----Generated at Wed Nov 5 06:52:29 2025 by rpki-client