$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/0af9e6a7-ec26-3b88-8fa4-8d3254986df9.roa File: 0af9e6a7-ec26-3b88-8fa4-8d3254986df9.roa (raw, json) Hash identifier: tSer6jRUNkItuGoF1jODBZrVd0gDUBIr4vW5IVP0LYo= Subject key identifier: 7E:13:20:D8:4C:50:07:6E:4E:B5:E4:2A:1F:91:F4:D3:CD:49:C2:AC Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584B99D7A29472043E6CAAF87080 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/0af9e6a7-ec26-3b88-8fa4-8d3254986df9.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 10430 IP address blocks: 72.233.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:a2:94:72:04:3e:6c:aa:f8:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=759c1ede-0940-41ff-9ab9-ca900ee20908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:00:db:96:35:14:c6:0d:87:56:cd:00:e1:dc: 6e:03:95:c0:09:b8:a6:95:5e:4a:b2:42:52:d0:9c: 62:59:98:ac:fb:ad:4e:9d:5a:34:d3:5b:bf:6f:ff: 5d:d4:59:11:15:e6:a9:71:e7:1d:50:41:19:27:af: a3:2b:dc:f9:94:3c:0b:34:0d:40:84:31:c4:6d:aa: 2f:a2:76:be:00:d8:52:0a:95:40:94:2c:66:03:c6: 65:04:47:b9:82:97:cd:c0:bd:99:49:49:5b:5c:0c: ad:e0:38:9d:61:a7:b3:83:9c:0f:8d:8e:26:3c:96: 29:e3:20:8a:b6:4f:5c:46:a2:f2:51:51:95:f1:9f: 39:c4:ed:f2:32:5f:80:15:25:29:00:90:ca:d6:0b: 01:99:16:3a:8f:7f:27:02:4a:b3:a7:ce:a3:7d:57: 59:2b:35:ae:6f:b5:56:0b:8e:23:c5:27:64:79:cd: db:7b:e5:1a:66:97:e2:39:b0:0d:78:c0:86:3f:da: 58:1c:42:51:5c:bb:43:17:d9:f9:85:8d:83:aa:54: 1a:24:bf:e9:3d:8e:71:69:16:c6:e1:19:98:9f:8b: 44:4f:96:d6:f4:37:87:00:6e:23:f6:0a:6b:f7:bd: a5:44:a3:d9:b7:ca:af:b1:6f:10:68:ef:88:2c:ff: c1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:13:20:D8:4C:50:07:6E:4E:B5:E4:2A:1F:91:F4:D3:CD:49:C2:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/0af9e6a7-ec26-3b88-8fa4-8d3254986df9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:a0:fa:09:dc:df:f6:80:6e:d1:bc:d4:10:aa:92:3f:87:d3: e3:73:06:2c:c4:a0:1f:04:c1:af:54:10:11:fa:77:44:91:da: 3d:f7:c9:0e:fb:7e:d9:db:40:63:20:60:a1:00:30:75:3a:1b: 2d:a9:37:b2:78:33:1d:cd:01:67:b6:87:16:43:17:9a:6c:a0: 59:13:2b:b9:96:1a:33:d1:c6:2c:8a:06:58:c7:9f:eb:e1:5b: 98:9f:a1:39:99:27:d7:84:0a:d0:b7:64:10:9c:30:47:a0:da: 5d:e2:ab:29:56:fb:f2:b3:48:b2:f2:e4:0e:6a:80:15:d6:1c: 2d:e2:1d:6e:5f:2c:c4:dc:82:82:7e:e0:a1:67:6c:24:aa:72: 6e:e5:1e:09:d9:47:1a:0c:6d:b1:9b:40:4d:62:cf:45:27:fe: e3:98:e4:a9:dd:9d:d3:f7:ff:46:4b:fe:33:db:29:0e:3a:52: 46:5c:3e:25:2f:15:d5:db:cd:03:6e:ff:37:41:0f:ec:5c:dd: c7:52:7f:f4:59:d0:ff:49:8f:8e:e6:31:fe:e5:3d:74:82:75: f5:fd:a2:07:e7:a0:55:db:b0:21:aa:5f:69:73:44:28:c9:73: 80:f1:90:34:ca:45:3a:7e:8e:55:e5:0a:b9:10:ec:6b:40:b9: 70:0c:19:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ16KUcgQ+bKr4cIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NzU5YzFlZGUtMDk0MC00MWZmLTlhYjktY2E5MDBlZTIwOTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gDbljUUxg2HVs0A4dxuA5XACbimlV5KskJS 0JxiWZis+61OnVo001u/b/9d1FkRFeapcecdUEEZJ6+jK9z5lDwLNA1AhDHEbaov ona+ANhSCpVAlCxmA8ZlBEe5gpfNwL2ZSUlbXAyt4DidYaezg5wPjY4mPJYp4yCK tk9cRqLyUVGV8Z85xO3yMl+AFSUpAJDK1gsBmRY6j38nAkqzp86jfVdZKzWub7VW C44jxSdkec3be+UaZpfiObANeMCGP9pYHEJRXLtDF9n5hY2DqlQaJL/pPY5xaRbG 4RmYn4tET5bW9DeHAG4j9gpr972lRKPZt8qvsW8QaO+ILP/BQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4TINhMUAduTrXkKh+R9NPNScKsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvMGFmOWU2YTctZWMyNi0z Yjg4LThmYTQtOGQzMjU0OTg2ZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSOmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFug+gnc3/aAbtG81BCqkj+H0+NzBizEoB8Ewa9UEBH6d0SR2j33yQ77 ftnbQGMgYKEAMHU6Gy2pN7J4Mx3NAWe2hxZDF5psoFkTK7mWGjPRxiyKBljHn+vh W5ifoTmZJ9eECtC3ZBCcMEeg2l3iqylW+/KzSLLy5A5qgBXWHC3iHW5fLMTcgoJ+ 4KFnbCSqcm7lHgnZRxoMbbGbQE1iz0Un/uOY5KndndP3/0ZL/jPbKQ46UkZcPiUv FdXbzQNu/zdBD+xc3cdSf/RZ0P9Jj47mMf7lPXSCdfX9ogfnoFXbsCGqX2lzRCjJ c4DxkDTKRTp+jlXlCrkQ7GtAuXAMGeQ= -----END CERTIFICATE-----Generated at Wed Nov 5 11:09:56 2025 by rpki-client