$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/4c8f1eda-3531-3cf9-b7e3-1127391f3f28.roa File: 4c8f1eda-3531-3cf9-b7e3-1127391f3f28.roa (raw, json) Hash identifier: +tybSA/sxv/jt84O7nE+z3KISxiLb1CuLIDiT1IFRho= Subject key identifier: A7:47:DC:A5:14:5F:5F:F2:30:CE:93:CB:98:95:CB:E9:55:7F:2B:C3 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584B821CCCA71E5A06EEA8D2E840 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/4c8f1eda-3531-3cf9-b7e3-1127391f3f28.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 54032 IP address blocks: 72.233.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:cc:a7:1e:5a:06:ee:a8:d2:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=d4b32003-efb4-4e9d-85a8-89f9c82225aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:25:8b:df:bf:f1:8f:83:a5:3c:2c:ba:d4:90: 1c:0b:93:7a:a8:d0:d3:7b:0f:d8:6c:d4:89:8d:52: c0:55:8f:d0:05:8e:c0:fd:b0:c6:c2:f3:22:c3:90: 7d:10:77:0c:0c:02:b4:4a:67:83:45:bf:da:8e:df: d0:48:33:57:e1:31:44:e7:3c:b1:1a:a1:e6:fa:70: f9:a3:c6:2c:a3:85:54:7c:cc:60:0d:96:8c:e0:e9: a0:a2:96:7d:84:ed:0f:ee:f1:99:2e:db:d6:ca:a0: 5a:d3:44:27:ec:04:d5:ce:59:90:14:4f:ef:df:86: bd:c6:6f:3f:e2:6e:32:b3:e9:62:35:b0:6b:f1:1a: 85:31:e4:d1:4f:ec:2e:3e:16:1e:8b:d7:41:dd:fd: 97:2f:86:08:c8:32:05:69:63:0f:1c:6f:59:e9:69: 3c:02:06:3e:c9:2e:e4:21:b9:63:22:0d:6b:e3:b1: 85:c3:4a:bf:f2:47:ae:d0:d3:3d:fa:d9:10:0a:d6: 09:22:8a:d9:e9:55:ab:bb:15:60:04:8d:3d:3a:7d: a1:a1:4e:de:e9:c2:98:ee:ad:82:04:d9:94:94:0f: ce:18:ef:b6:32:d6:a9:74:d4:da:09:67:be:89:17: 12:27:f6:9e:1b:3a:d1:de:e8:54:69:2a:ea:35:fa: 15:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:47:DC:A5:14:5F:5F:F2:30:CE:93:CB:98:95:CB:E9:55:7F:2B:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/4c8f1eda-3531-3cf9-b7e3-1127391f3f28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:93:84:ec:ab:8d:d6:d0:ad:59:72:b5:19:0c:67:0c:c5:b9: 82:78:55:54:e9:73:07:af:a4:a7:e1:64:eb:f5:7b:de:bd:06: 4d:ec:d2:81:3b:96:b0:b6:21:12:2a:22:41:7c:b1:7b:19:e0: 64:80:ca:5d:dc:13:0f:42:41:5a:a5:26:b8:a8:48:6d:eb:43: e0:9b:9a:73:1c:dc:0f:00:81:22:67:8f:d3:6f:30:79:c8:a2: 27:98:9a:e1:14:c4:0a:0b:5a:a1:d8:b7:09:98:6f:63:a6:06: ff:f3:ac:c9:2a:84:16:b1:79:7c:4e:68:68:77:e2:d9:c3:fb: a8:9e:95:96:0d:31:e6:dd:78:08:dd:0d:00:77:06:b8:c9:0d: c6:61:5b:ee:76:80:d1:ce:6d:47:73:5a:ee:26:3f:16:88:f5: db:46:70:59:03:2b:c5:97:3b:7a:66:d6:1f:60:3b:ad:85:32: 35:e5:14:a2:f7:3f:8b:33:1e:d8:f7:c4:70:fe:0b:e4:2d:45: d2:88:25:80:77:54:85:a8:08:87:06:7a:5c:b9:42:5f:34:56: 57:ff:f4:c9:a9:1e:a6:e4:08:4c:8e:88:69:e6:99:f6:a5:7e: dd:70:4e:6c:0c:bf:95:d9:66:20:15:62:74:82:e7:49:8c:84: ec:67:eb:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHMynHloG7qjS6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZDRiMzIwMDMtZWZiNC00ZTlkLTg1YTgtODlmOWM4MjIyNWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SWL37/xj4OlPCy61JAcC5N6qNDTew/YbNSJ jVLAVY/QBY7A/bDGwvMiw5B9EHcMDAK0SmeDRb/ajt/QSDNX4TFE5zyxGqHm+nD5 o8Yso4VUfMxgDZaM4OmgopZ9hO0P7vGZLtvWyqBa00Qn7ATVzlmQFE/v34a9xm8/ 4m4ys+liNbBr8RqFMeTRT+wuPhYei9dB3f2XL4YIyDIFaWMPHG9Z6Wk8AgY+yS7k IbljIg1r47GFw0q/8keu0NM9+tkQCtYJIorZ6VWruxVgBI09On2hoU7e6cKY7q2C BNmUlA/OGO+2MtapdNTaCWe+iRcSJ/aeGzrR3uhUaSrqNfoVXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdH3KUUX1/yMM6Ty5iVy+lVfyvDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvNGM4ZjFlZGEtMzUzMS0z Y2Y5LWI3ZTMtMTEyNzM5MWYzZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSOmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOThOyrjdbQrVlytRkMZwzFuYJ4VVTpcwevpKfhZOv1e969Bk3s0oE7 lrC2IRIqIkF8sXsZ4GSAyl3cEw9CQVqlJrioSG3rQ+CbmnMc3A8AgSJnj9NvMHnI oieYmuEUxAoLWqHYtwmYb2OmBv/zrMkqhBaxeXxOaGh34tnD+6ielZYNMebdeAjd DQB3BrjJDcZhW+52gNHObUdzWu4mPxaI9dtGcFkDK8WXO3pm1h9gO62FMjXlFKL3 P4szHtj3xHD+C+QtRdKIJYB3VIWoCIcGely5Ql80Vlf/9MmpHqbkCEyOiGnmmfal ft1wTmwMv5XZZiAVYnSC50mMhOxn6+I= -----END CERTIFICATE-----Generated at Wed Nov 5 11:10:14 2025 by rpki-client