$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/caad21aa-daa4-37b2-ad76-1e2e9b1a032f.roa File: caad21aa-daa4-37b2-ad76-1e2e9b1a032f.roa (raw, json) Hash identifier: pPMpgM6V6SOxnJWVdMpS88iraWrHnK9XU2AlvIreD8w= Subject key identifier: 81:B9:49:20:B8:C6:E8:44:01:D8:D9:16:48:58:D3:2B:99:D2:B9:AD Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395 Certificate serial: 010D0C9F4328584BBCDADD1F4E3BD066B6524780 Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/caad21aa-daa4-37b2-ad76-1e2e9b1a032f.roa Signing time: Mon 03 Nov 2025 14:00:38 +0000 ROA not before: Mon 03 Nov 2025 14:00:38 +0000 ROA not after: Sun 01 Feb 2026 14:00:38 +0000 asID: 23316 IP address blocks: 72.37.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:da:dd:1f:4e:3b:d0:66:b6:52:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Validity Not Before: Nov 3 14:00:38 2025 GMT Not After : Feb 1 14:00:38 2026 GMT Subject: CN=21ba0d7f-a4f7-4534-aa2a-7ebaf05c59eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:88:8a:fb:43:c9:a1:55:e8:8d:d6:49:8a:eb: ec:ca:73:b1:c4:d4:8f:30:c6:40:1a:a9:7b:5d:4e: 59:89:ef:7d:c8:b1:62:80:7a:66:d3:df:33:d4:c5: 17:b7:76:09:d1:2e:ac:b1:e7:c4:50:01:be:44:f9: 64:5a:38:dc:2c:04:9f:79:b1:57:b9:c1:59:59:f7: 25:e5:2d:4a:4b:32:47:bf:ae:39:6e:2b:8b:33:ba: 9a:b3:14:07:23:bf:54:39:27:bb:09:24:ed:36:ff: 65:28:c3:47:c6:77:0c:4c:f6:57:ef:c9:ed:a6:08: 60:60:95:96:c3:1d:56:bb:24:73:02:4f:a0:ce:e5: de:44:cf:d6:6d:3a:76:e9:a7:86:bc:c0:30:10:5d: 98:27:26:e0:78:b7:29:15:26:f2:19:83:7a:9a:41: 7e:de:08:17:7c:7b:37:3a:b0:60:04:a1:ab:c3:6d: b9:08:89:bd:0b:e7:fd:79:fb:34:bb:b1:8d:f4:a7: b9:22:1e:8c:d3:5a:f3:74:fc:a0:f7:cf:62:5b:41: 55:87:cf:86:fa:12:c4:88:15:00:8b:19:c3:71:ba: c7:3f:a3:37:a5:46:aa:59:b4:f7:40:03:c8:ba:ed: 93:5e:56:57:1e:b3:5b:95:71:4d:54:4f:10:a6:5a: fe:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B9:49:20:B8:C6:E8:44:01:D8:D9:16:48:58:D3:2B:99:D2:B9:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/caad21aa-daa4-37b2-ad76-1e2e9b1a032f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl X509v3 Authority Key Identifier: keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer sbgp-ipAddrBlock: critical IPv4: 72.37.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:38:fe:03:45:0e:94:a8:f5:30:63:0b:70:c0:07:40:5d:6b: fd:ce:7a:d8:97:07:20:04:70:84:18:4a:64:33:17:9d:b4:28: 53:57:60:6f:db:79:c5:08:18:ce:7d:54:b8:20:6d:a2:c1:fc: a3:f6:29:d5:0f:2f:c1:83:23:3a:2d:7b:55:7f:4a:c4:31:83: 27:e3:81:59:e7:88:dc:1b:29:27:1f:d5:b6:94:05:41:a8:1f: 4d:f2:55:07:23:6d:c4:15:7a:56:97:dc:05:07:dc:e9:2d:8a: 70:fe:12:4e:35:ee:40:30:1c:5e:5f:59:13:be:e9:34:50:b8: 55:af:ad:16:1a:24:28:09:8d:bd:b4:b3:d1:a9:18:9f:fa:fd: d4:7c:c6:61:6b:2b:90:0b:0a:b8:60:9f:d1:9a:1f:b0:c5:38: eb:8b:6f:70:de:95:fc:1d:bb:89:e3:ca:d9:74:a1:65:62:c4: 2c:7e:d2:e6:86:f3:86:0f:62:11:55:80:88:2f:8d:6c:c6:5f: 9f:b2:b5:81:f9:f8:24:ab:81:ef:c6:53:95:b3:c8:7f:f9:83: ea:38:c7:c5:a5:8f:a9:3b:6e:c5:de:43:98:eb:31:7e:8b:c1: f2:3c:b5:60:48:c3:10:1d:ca:02:5d:68:2e:8c:2d:f9:08:61: a7:a8:12:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu82t0fTjvQZrZSR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj Mzk1MB4XDTI1MTEwMzE0MDAzOFoXDTI2MDIwMTE0MDAzOFowLzEtMCsGA1UEAxMk MjFiYTBkN2YtYTRmNy00NTM0LWFhMmEtN2ViYWYwNWM1OWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIiK+0PJoVXojdZJiuvsynOxxNSPMMZAGql7 XU5Zie99yLFigHpm098z1MUXt3YJ0S6ssefEUAG+RPlkWjjcLASfebFXucFZWfcl 5S1KSzJHv645biuLM7qasxQHI79UOSe7CSTtNv9lKMNHxncMTPZX78ntpghgYJWW wx1WuyRzAk+gzuXeRM/WbTp26aeGvMAwEF2YJybgeLcpFSbyGYN6mkF+3ggXfHs3 OrBgBKGrw225CIm9C+f9efs0u7GN9Ke5Ih6M01rzdPyg989iW0FVh8+G+hLEiBUA ixnDcbrHP6M3pUaqWbT3QAPIuu2TXlZXHrNblXFNVE8Qplr+0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIG5SSC4xuhEAdjZFkhY0yuZ0rmtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvY2FhZDIxYWEtZGFhNC0z N2IyLWFkNzYtMWUyZTliMWEwMzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0 NzJmZGMzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSCWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHM4/gNFDpSo9TBjC3DAB0Bda/3OetiXByAEcIQYSmQzF520KFNXYG/b ecUIGM59VLggbaLB/KP2KdUPL8GDIzote1V/SsQxgyfjgVnniNwbKScf1baUBUGo H03yVQcjbcQVelaX3AUH3OktinD+Ek417kAwHF5fWRO+6TRQuFWvrRYaJCgJjb20 s9GpGJ/6/dR8xmFrK5ALCrhgn9GaH7DFOOuLb3Delfwdu4njytl0oWVixCx+0uaG 84YPYhFVgIgvjWzGX5+ytYH5+CSrge/GU5WzyH/5g+o4x8Wlj6k7bsXeQ5jrMX6L wfI8tWBIwxAdygJdaC6MLfkIYaeoEsA= -----END CERTIFICATE-----Generated at Wed Nov 5 09:02:51 2025 by rpki-client