$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ef45f13b-3949-3a40-8bc3-6a04344c00b9.roa File: ef45f13b-3949-3a40-8bc3-6a04344c00b9.roa (raw, json) Hash identifier: CQn3pa93dSdCSsSZymjlm6ex8EWb+miAvD6RmBl4oJM= Subject key identifier: CE:92:89:9A:9D:ED:55:B4:7C:F6:B6:29:36:45:60:50:FD:B5:23:96 Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Certificate serial: 010D0C9F4328584B110C046556DD6D6768D09300 Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ef45f13b-3949-3a40-8bc3-6a04344c00b9.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 21559 IP address blocks: 72.46.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:04:65:56:dd:6d:67:68:d0:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=11a8e206-6e4d-474e-962b-93af16d2fb76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:da:a0:34:57:bb:05:43:1e:fa:bc:30:72:9d: 93:41:4f:75:61:fc:b7:26:2d:12:19:39:70:b9:cd: dc:a7:84:1d:d4:15:b5:d2:87:e2:12:f3:91:1c:4f: 22:4e:1b:87:0d:ec:41:7f:bd:dd:52:6e:55:1a:25: 1e:2b:b7:db:c4:99:8c:f0:e3:90:bb:bb:5d:81:07: cf:23:b1:a0:96:92:d0:05:62:3f:85:93:89:b7:00: 76:8b:ed:62:94:99:03:85:e9:78:f5:57:33:b0:54: ce:fd:b2:94:e8:1c:84:d2:15:9f:b6:77:21:45:4a: 00:cd:43:7a:95:e5:db:95:0c:b2:26:8e:74:8c:1a: 22:cb:9a:d1:81:bb:9d:72:cf:cd:9f:1e:ae:2a:6b: 01:bb:09:80:4d:39:9e:c4:86:c5:aa:e3:68:86:02: 2a:51:d5:4c:81:e7:49:f5:65:02:4d:78:cc:68:b7: d7:05:0a:8c:be:15:3e:32:80:9c:93:7e:24:3e:22: 0e:83:9f:b4:76:67:c4:dc:81:86:35:d6:fa:6a:25: 73:d8:51:70:2f:e0:0e:0c:ed:47:d0:5b:9e:1c:f7: 47:bd:c6:1f:e3:c4:ef:55:23:7c:60:d1:13:e5:ea: c2:f4:e4:c0:53:3f:34:e5:c4:52:ad:dc:85:e1:16: 27:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:92:89:9A:9D:ED:55:B4:7C:F6:B6:29:36:45:60:50:FD:B5:23:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ef45f13b-3949-3a40-8bc3-6a04344c00b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl X509v3 Authority Key Identifier: keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer sbgp-ipAddrBlock: critical IPv4: 72.46.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:a6:16:84:aa:fa:f3:fa:69:97:15:2f:fd:04:14:91:74:ee: ab:bb:d3:b3:90:c3:b5:9c:62:f7:d9:d1:ba:40:33:c6:eb:aa: ff:ea:54:4e:01:42:7a:19:cd:bb:e1:f2:68:7c:71:a9:34:9c: 3f:cb:2f:59:5c:39:e5:cf:7c:e9:12:47:51:0e:1f:46:02:ba: f6:76:bc:bf:6e:41:a9:3b:fb:77:a6:94:42:40:73:9e:26:2d: 63:a2:a9:ca:fd:57:73:c5:b6:af:e5:82:23:08:75:6d:93:b7: bf:25:55:25:14:54:5d:eb:c9:3b:38:d2:73:e5:eb:56:00:d0: 3d:bb:82:99:36:e4:d9:9e:68:69:57:a3:fa:4d:29:8a:91:b2: b3:fe:89:20:19:8f:d7:47:7f:f5:63:3c:02:0d:eb:98:65:0a: 71:48:1f:43:54:28:4c:4b:3a:24:03:4e:a1:d5:6f:4c:e0:84: 84:f6:31:70:8b:bd:9f:9a:7d:01:a7:00:8d:61:41:41:bf:0a: be:58:56:4f:c7:6b:f1:6a:23:c1:e8:16:e8:56:e2:ca:2b:d0: 71:89:89:54:59:62:b6:74:4c:cb:0f:03:32:71:b3:ff:aa:8f: 9f:60:60:da:9c:87:4d:46:34:05:64:26:5e:d5:9e:6a:fa:d6: 69:78:4a:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDARlVt1tZ2jQkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMwMWJkMGYtYzgwYS00MTU4LTlhZGEtZjUwNmJhZTBh YTNjMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk MTFhOGUyMDYtNmU0ZC00NzRlLTk2MmItOTNhZjE2ZDJmYjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtqgNFe7BUMe+rwwcp2TQU91Yfy3Ji0SGTlw uc3cp4Qd1BW10ofiEvORHE8iThuHDexBf73dUm5VGiUeK7fbxJmM8OOQu7tdgQfP I7GglpLQBWI/hZOJtwB2i+1ilJkDhel49VczsFTO/bKU6ByE0hWftnchRUoAzUN6 leXblQyyJo50jBoiy5rRgbudcs/Nnx6uKmsBuwmATTmexIbFquNohgIqUdVMgedJ 9WUCTXjMaLfXBQqMvhU+MoCck34kPiIOg5+0dmfE3IGGNdb6aiVz2FFwL+AODO1H 0FueHPdHvcYf48TvVSN8YNET5erC9OTAUz805cRSrdyF4RYnwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6SiZqd7VW0fPa2KTZFYFD9tSOWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzAx YmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2YmFlMGFhM2MvZWY0NWYxM2ItMzk0OS0z YTQwLThiYzMtNmEwNDM0NGMwMGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTMwMWJkMGYtYzgwYS00MTU4LTlh ZGEtZjUwNmJhZTBhYTNjL2UzMDFiZDBmLWM4MGEtNDE1OC05YWRhLWY1MDZiYWUw YWEzYy5jcmwwHwYDVR0jBBgwFoAU2+tyG9DCXdrpdTdqrZ80dv4slR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzAxYmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2 YmFlMGFhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASC6dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSmFoSq+vP6aZcVL/0EFJF07qu707OQw7WcYvfZ0bpAM8brqv/qVE4B QnoZzbvh8mh8cak0nD/LL1lcOeXPfOkSR1EOH0YCuvZ2vL9uQak7+3emlEJAc54m LWOiqcr9V3PFtq/lgiMIdW2Tt78lVSUUVF3ryTs40nPl61YA0D27gpk25NmeaGlX o/pNKYqRsrP+iSAZj9dHf/VjPAIN65hlCnFIH0NUKExLOiQDTqHVb0zghIT2MXCL vZ+afQGnAI1hQUG/Cr5YVk/Ha/FqI8HoFuhW4sor0HGJiVRZYrZ0TMsPAzJxs/+q j59gYNqch01GNAVkJl7Vnmr61ml4Su0= -----END CERTIFICATE-----Generated at Wed Nov 5 11:52:42 2025 by rpki-client