$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/3f610126-c000-34a1-8bf7-08e6484877a2.roa File: 3f610126-c000-34a1-8bf7-08e6484877a2.roa (raw, json) Hash identifier: E0U/NIywrZy2fqDJwIClLX74pcFSq1RS/2vI3ZIeBt0= Subject key identifier: 7A:D5:BE:D2:8D:61:53:6A:5C:0F:A9:7B:47:17:07:79:3A:B7:C1:85 Certificate issuer: /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Certificate serial: 010D0C9F4328584BA7CCE46AB28083F1A84CFF40 Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/3f610126-c000-34a1-8bf7-08e6484877a2.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 22709 IP address blocks: 72.11.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:e4:6a:b2:80:83:f1:a8:4c:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=dac8aa04-803d-4908-84fd-bc1c8d629c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:12:b1:1b:66:7e:9a:60:ad:0e:17:35:64:70: c9:41:4a:e9:6f:a9:f0:00:39:88:f9:87:b6:34:ee: f8:29:d7:d6:0b:11:9c:a0:b6:c6:e4:5f:26:d1:aa: 2f:fd:38:61:d9:ae:f0:e4:68:9c:14:dd:3c:a2:60: 79:17:e8:da:8b:f3:92:31:f3:18:f5:48:13:55:2b: a5:43:6a:e3:90:21:22:39:94:6e:61:bd:3f:00:20: 23:49:68:a5:1c:73:18:c8:9f:01:5e:e8:52:a3:90: f5:d6:85:d0:d1:fd:7b:ac:24:6f:11:96:9f:3e:f6: 6f:38:5e:b7:88:df:a3:16:55:e9:5e:e0:55:d6:fc: 98:14:a1:3b:46:be:3d:8c:91:46:47:aa:ef:9e:f6: e2:87:6e:c6:cf:ac:5f:10:01:39:c5:0e:c5:8d:64: ec:97:e1:86:5b:3c:0f:2b:7e:d9:ae:e2:f9:31:ff: 01:68:02:fa:39:eb:72:8d:63:af:64:83:68:71:ae: d3:48:e0:8a:4f:b4:96:a4:2b:00:82:06:9b:78:9a: 44:69:cd:a5:0f:03:31:ed:c8:8b:44:37:12:29:3d: 93:b8:09:bb:84:c4:23:24:78:13:49:b4:ab:64:de: 1c:0b:cd:93:c2:2e:ff:55:c4:3c:01:ed:f6:8c:79: 86:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D5:BE:D2:8D:61:53:6A:5C:0F:A9:7B:47:17:07:79:3A:B7:C1:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/3f610126-c000-34a1-8bf7-08e6484877a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl X509v3 Authority Key Identifier: keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer sbgp-ipAddrBlock: critical IPv4: 72.11.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f0:32:1d:83:31:4b:ed:16:f1:05:3e:49:30:83:88:ec:2f: 6d:c6:b5:85:ed:9b:e1:49:dd:96:e5:24:32:7f:eb:c3:b3:65: 5e:eb:16:65:22:c4:b1:d0:9f:c7:5b:eb:f9:92:c6:ff:75:91: 0d:fd:47:6d:ce:e6:21:9d:fe:aa:b3:79:99:fb:43:03:4b:bd: 8c:4b:72:63:64:b2:8e:d9:9c:4e:7d:a2:28:e8:8d:b4:8f:29: ee:47:16:39:63:40:c6:b7:8b:13:fa:73:2c:0c:62:94:b2:46: a5:82:79:1f:ba:7a:ad:bf:bb:9e:63:19:4c:80:bd:46:37:8b: 0a:e1:ac:78:9c:5a:af:ac:80:c5:d0:68:a5:a2:28:a8:01:5e: fa:ff:34:86:44:9c:14:68:4b:c4:23:a3:58:80:b6:a2:92:42: 22:ee:9b:f3:e3:79:bc:7d:64:1f:53:42:8b:76:05:8d:d4:29: c1:03:a8:af:19:07:7c:d0:15:3c:89:30:b9:97:8a:5b:ca:ff: 01:5c:b0:9e:f3:c7:6d:b2:7e:2a:4e:3c:88:6d:c2:8a:d2:8f: 1f:12:dc:20:7e:8e:e8:79:b0:e3:4a:35:d5:27:a6:2c:0f:75: 2f:80:80:b6:94:05:f3:03:4f:32:b3:32:dd:9d:3a:47:4d:41: b1:af:c6:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzORqsoCD8ahM/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2MDMtZjJkMDljZmI1 ZmE3MB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ZGFjOGFhMDQtODAzZC00OTA4LTg0ZmQtYmMxYzhkNjI5YzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBKxG2Z+mmCtDhc1ZHDJQUrpb6nwADmI+Ye2 NO74KdfWCxGcoLbG5F8m0aov/Thh2a7w5GicFN08omB5F+jai/OSMfMY9UgTVSul Q2rjkCEiOZRuYb0/ACAjSWilHHMYyJ8BXuhSo5D11oXQ0f17rCRvEZafPvZvOF63 iN+jFlXpXuBV1vyYFKE7Rr49jJFGR6rvnvbih27Gz6xfEAE5xQ7FjWTsl+GGWzwP K37ZruL5Mf8BaAL6OetyjWOvZINoca7TSOCKT7SWpCsAggabeJpEac2lDwMx7ciL RDcSKT2TuAm7hMQjJHgTSbSrZN4cC82Twi7/VcQ8Ae32jHmG9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrVvtKNYVNqXA+pe0cXB3k6t8GFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5 YTRjMC1iODhiLTRjZjUtODYwMy1mMmQwOWNmYjVmYTcvM2Y2MTAxMjYtYzAwMC0z NGExLThiZjctMDhlNjQ4NDg3N2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2 MDMtZjJkMDljZmI1ZmE3L2EzZTlhNGMwLWI4OGItNGNmNS04NjAzLWYyZDA5Y2Zi NWZhNy5jcmwwHwYDVR0jBBgwFoAU8HKPkEcdsCoGHpgpE5pGA72MWJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5YTRjMC1iODhiLTRjZjUtODYwMy1mMmQw OWNmYjVmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPwMh2DMUvtFvEFPkkwg4jsL23GtYXtm+FJ3ZblJDJ/68OzZV7rFmUi xLHQn8db6/mSxv91kQ39R23O5iGd/qqzeZn7QwNLvYxLcmNkso7ZnE59oijojbSP Ke5HFjljQMa3ixP6cywMYpSyRqWCeR+6eq2/u55jGUyAvUY3iwrhrHicWq+sgMXQ aKWiKKgBXvr/NIZEnBRoS8Qjo1iAtqKSQiLum/Pjebx9ZB9TQot2BY3UKcEDqK8Z B3zQFTyJMLmXilvK/wFcsJ7zx22yfipOPIhtworSjx8S3CB+juh5sONKNdUnpiwP dS+AgLaUBfMDTzKzMt2dOkdNQbGvxrI= -----END CERTIFICATE-----Generated at Wed Nov 5 07:04:02 2025 by rpki-client