$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/42695a1a-7905-32c3-8305-6a9c579ab1a0.roa File: 42695a1a-7905-32c3-8305-6a9c579ab1a0.roa (raw, json) Hash identifier: 8q7PP7Btdey0L13l+EhygCeqmK1DREwHbgushPMSynE= Subject key identifier: 0B:A4:86:A9:E1:A1:4F:CD:39:C3:B4:C4:A9:D8:06:44:4B:99:87:61 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584B89177226D11D4D9B96838380 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/42695a1a-7905-32c3-8305-6a9c579ab1a0.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 54032 IP address blocks: 72.233.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:72:26:d1:1d:4d:9b:96:83:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=13fcade4-a48e-43b4-90ae-e36ba15d0050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:19:5b:2b:7b:fb:a6:19:83:56:cb:5d:76:72: 51:d9:9a:bc:97:a5:33:89:e0:14:9e:5c:67:f7:70: 0c:93:ca:81:19:27:9f:d9:c1:83:74:83:a8:97:1a: d0:7d:99:da:57:32:f8:69:96:91:dc:46:dd:89:60: f5:f7:48:74:de:ff:5c:df:ea:c7:17:b4:31:93:3f: 05:49:5e:32:bd:92:40:61:6b:86:d8:e1:47:da:83: dc:f8:51:23:c5:eb:24:4b:ca:d4:f9:6f:bd:8c:b7: 33:13:c2:9c:39:38:12:c3:d5:1b:ef:21:4e:2f:29: 2e:cc:70:60:e4:ee:62:a4:ae:a4:71:65:32:43:24: be:54:d3:82:55:ec:38:d4:93:15:a2:ed:e0:de:57: 20:d3:51:0a:06:0f:88:b3:ca:e8:5b:23:a7:75:ee: ab:07:5c:ba:32:34:a9:2c:b4:c3:66:41:32:f4:13: 52:f2:0b:35:b1:b5:af:a4:1d:9d:f9:1e:89:1d:06: e9:ff:28:b4:ec:f2:6b:13:fd:cf:82:64:11:80:aa: 78:dc:b6:59:03:1a:0b:ba:8b:4b:12:7b:15:8c:1c: e1:3c:5d:ed:1e:16:f8:4c:8b:44:2e:d5:d4:72:63: a3:e9:bb:77:d3:19:88:a2:ee:08:02:a7:e0:31:8f: d9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A4:86:A9:E1:A1:4F:CD:39:C3:B4:C4:A9:D8:06:44:4B:99:87:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/42695a1a-7905-32c3-8305-6a9c579ab1a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:1c:50:e5:72:2d:3c:31:97:77:b6:e6:d1:3d:db:b0:a1:38: 5b:e2:c4:b6:49:4e:21:d7:ad:c8:c0:f4:a8:8e:ea:a9:26:14: b3:8d:a7:cf:be:cb:8d:6e:e3:7b:8f:3e:1b:68:f0:24:4a:12: c2:67:92:62:31:0a:ee:38:86:7e:16:cf:47:87:e0:21:6b:18: 1e:4f:fe:ba:99:fb:b7:8c:9b:7a:61:ea:cc:1a:91:e2:15:e2: 1d:10:94:9e:7c:b4:0c:47:61:7d:19:08:4e:0a:d9:01:50:87: 50:d2:75:fd:6c:1e:58:3f:c9:76:ff:17:c1:3b:64:d7:ca:f1: 24:f7:34:40:6e:db:ad:2c:46:79:2a:d6:fb:5a:a7:a7:62:ba: 52:d4:ab:ba:66:07:14:1b:4c:7b:8f:49:86:c0:d8:b3:70:0e: b4:1f:82:2a:e9:8c:89:32:60:a8:d7:77:db:11:48:d2:5e:04: ff:ff:7c:ba:58:57:1a:a6:a9:53:4c:33:d3:33:51:7b:fe:a9: 84:17:4c:2b:74:47:3f:e6:3f:c0:7b:cd:0a:15:93:85:45:ba: 75:ce:88:7e:45:3b:28:95:e8:f4:b0:cd:b4:3f:51:61:9b:e2: 39:71:3f:bc:e0:14:02:db:67:36:11:a2:0c:55:37:bf:04:db: 76:12:17:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3Im0R1Nm5aDg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk MTNmY2FkZTQtYTQ4ZS00M2I0LTkwYWUtZTM2YmExNWQwMDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxlbK3v7phmDVstddnJR2Zq8l6UzieAUnlxn 93AMk8qBGSef2cGDdIOolxrQfZnaVzL4aZaR3EbdiWD190h03v9c3+rHF7Qxkz8F SV4yvZJAYWuG2OFH2oPc+FEjxeskS8rU+W+9jLczE8KcOTgSw9Ub7yFOLykuzHBg 5O5ipK6kcWUyQyS+VNOCVew41JMVou3g3lcg01EKBg+Is8roWyOnde6rB1y6MjSp LLTDZkEy9BNS8gs1sbWvpB2d+R6JHQbp/yi07PJrE/3PgmQRgKp43LZZAxoLuotL EnsVjBzhPF3tHhb4TItELtXUcmOj6bt30xmIou4IAqfgMY/ZlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAukhqnhoU/NOcO0xKnYBkRLmYdhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvNDI2OTVhMWEtNzkwNS0z MmMzLTgzMDUtNmE5YzU3OWFiMWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSOmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgcUOVyLTwxl3e25tE927ChOFvixLZJTiHXrcjA9KiO6qkmFLONp8++ y41u43uPPhto8CRKEsJnkmIxCu44hn4Wz0eH4CFrGB5P/rqZ+7eMm3ph6swakeIV 4h0QlJ58tAxHYX0ZCE4K2QFQh1DSdf1sHlg/yXb/F8E7ZNfK8ST3NEBu260sRnkq 1vtap6diulLUq7pmBxQbTHuPSYbA2LNwDrQfgirpjIkyYKjXd9sRSNJeBP//fLpY VxqmqVNMM9MzUXv+qYQXTCt0Rz/mP8B7zQoVk4VFunXOiH5FOyiV6PSwzbQ/UWGb 4jlxP7zgFALbZzYRogxVN78E23YSF+I= -----END CERTIFICATE-----Generated at Wed Nov 5 16:08:50 2025 by rpki-client