$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/9b788c72-aec8-3e82-a409-5b8355050a3b.roa File: 9b788c72-aec8-3e82-a409-5b8355050a3b.roa (raw, json) Hash identifier: Rmajpwivm/mzRrMmLtV6aS25yzg878OcSAzrwfN5l6A= Subject key identifier: C0:83:10:E0:DA:01:61:E4:6D:34:73:85:2B:8F:97:D2:9C:DD:9F:56 Certificate issuer: /CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170 Certificate serial: 010D0C9F4328584B28C6EDFC0CB973DD652F4E00 Authority key identifier: 0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/9b788c72-aec8-3e82-a409-5b8355050a3b.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 66.235.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:ed:fc:0c:b9:73:dd:65:2f:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=851b867f-a154-4bb6-abc9-58c03d6012a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f6:b3:e3:ad:fe:48:a2:18:0f:29:ea:5b:0e: b6:26:d3:7c:c7:99:42:d7:c9:6e:60:19:2c:3d:db: d7:95:08:f4:e1:9b:74:14:79:a6:6d:58:a2:38:c9: ef:86:bd:45:48:63:57:f0:ee:2a:1c:8b:56:f0:15: 7b:c5:ce:8d:55:73:46:dd:df:36:8c:ed:3f:dd:05: 2d:68:a2:f2:fe:4c:f1:66:2f:4b:3f:4c:4a:b6:db: 72:6b:92:b6:91:05:5d:0c:fe:b5:b9:34:82:78:02: 93:69:0d:86:0e:de:d3:c1:63:55:d2:be:57:46:f5: 78:5c:68:83:e0:3c:f4:01:af:d4:3e:a8:8b:96:38: 89:5b:3e:b1:e3:28:ce:b0:a1:ed:dd:9a:de:f9:f5: 0a:a8:a6:52:1e:49:37:51:39:48:91:8e:4a:0d:83: db:fb:5a:8e:c4:88:8a:0e:14:9f:78:13:61:fc:33: 41:f8:61:c2:7d:b7:24:59:49:b3:16:eb:13:cc:b7: ac:91:ac:c4:a2:1e:2d:50:4f:88:3f:7b:b9:36:f9: a3:e0:51:ef:f8:40:9a:8c:f6:07:e1:af:6d:e5:30: fd:29:e7:15:9c:f4:dd:29:2b:bb:40:d7:d4:47:8c: d8:9a:9a:fd:40:d7:8e:b3:30:83:ba:41:ec:a6:b1: 91:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:83:10:E0:DA:01:61:E4:6D:34:73:85:2B:8F:97:D2:9C:DD:9F:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/9b788c72-aec8-3e82-a409-5b8355050a3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl X509v3 Authority Key Identifier: keyid:0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer sbgp-ipAddrBlock: critical IPv4: 66.235.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:b9:98:c2:5f:56:e3:dd:09:30:62:fc:41:37:44:ea:71:77: 65:7d:18:af:62:52:e9:6e:29:0d:2b:d1:d6:66:dc:f5:67:18: e3:d2:30:ef:33:34:c7:a5:28:df:4d:94:e5:5a:f9:ec:14:f8: 7e:3d:34:35:9e:53:65:39:65:12:86:04:55:5a:ff:20:fb:d5: 7d:a9:87:19:a9:aa:f6:7d:84:bc:0e:4b:c2:f1:a8:7b:a2:bf: 32:47:ed:a8:0f:68:95:c7:1d:db:1e:eb:95:87:e8:6d:d9:68: 8d:6f:b4:3b:af:88:d3:e8:f4:99:1f:17:5f:40:de:ef:ab:cc: 0e:36:b5:2d:58:8a:b4:01:3a:1e:37:69:da:af:9a:e4:47:88: aa:e3:4e:12:2c:ad:ec:4d:5b:15:a4:38:fc:b6:24:14:1f:9a: a7:32:fd:33:4f:05:17:9c:85:64:7a:45:23:c8:a6:3f:f7:fa: 7d:74:98:39:91:d4:69:f4:ca:c2:6b:50:a6:69:15:58:52:08: e3:24:25:65:5b:41:1b:30:e8:6e:09:b6:b9:d4:ae:a9:d5:71: 4b:39:23:24:1c:21:e7:44:69:31:3f:e0:c0:b1:0d:34:5b:0a: 9e:5a:4b:da:ea:98:64:23:84:83:0b:2d:d4:d7:4a:57:27:6c: 74:be:fc:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxu38DLlz3WUvTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ3MjJiMjAtZjI4OC00YmQ4LWJmYzctNGViN2VhZDlk MTcwMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk ODUxYjg2N2YtYTE1NC00YmI2LWFiYzktNThjMDNkNjAxMmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvaz463+SKIYDynqWw62JtN8x5lC18luYBks PdvXlQj04Zt0FHmmbViiOMnvhr1FSGNX8O4qHItW8BV7xc6NVXNG3d82jO0/3QUt aKLy/kzxZi9LP0xKtttya5K2kQVdDP61uTSCeAKTaQ2GDt7TwWNV0r5XRvV4XGiD 4Dz0Aa/UPqiLljiJWz6x4yjOsKHt3Zre+fUKqKZSHkk3UTlIkY5KDYPb+1qOxIiK DhSfeBNh/DNB+GHCfbckWUmzFusTzLeskazEoh4tUE+IP3u5Nvmj4FHv+ECajPYH 4a9t5TD9KecVnPTdKSu7QNfUR4zYmpr9QNeOszCDukHsprGR+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCDEODaAWHkbTRzhSuPl9Kc3Z9WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZDcy MmIyMC1mMjg4LTRiZDgtYmZjNy00ZWI3ZWFkOWQxNzAvOWI3ODhjNzItYWVjOC0z ZTgyLWE0MDktNWI4MzU1MDUwYTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmQ3MjJiMjAtZjI4OC00YmQ4LWJm YzctNGViN2VhZDlkMTcwL2ZkNzIyYjIwLWYyODgtNGJkOC1iZmM3LTRlYjdlYWQ5 ZDE3MC5jcmwwHwYDVR0jBBgwFoAUD6H2SRALtv19Wb/tcfGsC09Uy7MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZDcyMmIyMC1mMjg4LTRiZDgtYmZjNy00ZWI3 ZWFkOWQxNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQutyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFa5mMJfVuPdCTBi/EE3ROpxd2V9GK9iUuluKQ0r0dZm3PVnGOPSMO8z NMelKN9NlOVa+ewU+H49NDWeU2U5ZRKGBFVa/yD71X2phxmpqvZ9hLwOS8LxqHui vzJH7agPaJXHHdse65WH6G3ZaI1vtDuviNPo9JkfF19A3u+rzA42tS1YirQBOh43 adqvmuRHiKrjThIsrexNWxWkOPy2JBQfmqcy/TNPBRechWR6RSPIpj/3+n10mDmR 1Gn0ysJrUKZpFVhSCOMkJWVbQRsw6G4JtrnUrqnVcUs5IyQcIedEaTE/4MCxDTRb Cp5aS9rqmGQjhIMLLdTXSlcnbHS+/KU= -----END CERTIFICATE-----Generated at Wed Nov 5 05:40:05 2025 by rpki-client