$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2382a434-cda8-3060-a542-ba56e0e0f17b.roa File: 2382a434-cda8-3060-a542-ba56e0e0f17b.roa (raw, json) Hash identifier: BXOk6MWSfF0eb44XXqh8T+uOylLNRm91XR+ZxHpAg1o= Subject key identifier: BC:D8:C1:35:22:D2:05:E2:30:3C:4F:E4:84:4B:33:D2:5F:76:A3:69 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B87B241DB843D02BA67512020 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2382a434-cda8-3060-a542-ba56e0e0f17b.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6079 IP address blocks: 72.1.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:41:db:84:3d:02:ba:67:51:20:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=c984f010-77c1-478e-b378-5947ff96c796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e2:cc:14:b0:64:e3:ff:82:fb:8a:19:20:c4: cf:01:12:01:68:6d:41:46:91:c3:2c:83:84:f0:33: 04:7d:b0:3d:89:45:8f:ef:5a:7e:c1:ba:53:52:31: f1:0f:d9:22:dc:3f:a6:6d:b6:98:0a:c5:08:f3:d7: f0:c0:ad:db:65:c7:96:2c:78:cd:35:9a:39:16:9c: 0d:d6:98:f2:71:7a:e8:f4:3d:6f:15:cb:88:2b:69: c2:09:b4:9a:dd:d6:83:ac:a8:66:16:a6:dd:e1:17: 58:a9:ae:fe:da:c3:d8:c6:da:02:bf:19:00:54:68: 39:3a:64:15:33:25:a3:06:44:09:5c:1d:21:bf:d0: 23:ff:43:7e:25:ab:70:dc:13:23:d6:d8:da:9c:72: de:9b:df:cb:48:78:96:11:c5:b6:0c:32:b5:28:0b: ca:e3:7a:7c:d1:10:b6:0e:c4:43:9a:dd:b4:e6:89: 9d:02:d9:ba:1c:9b:eb:29:21:dd:b1:fa:b1:bc:26: 0b:2d:38:d4:3a:78:d8:78:77:ce:cc:f3:37:81:45: 87:13:48:bd:ad:bb:e2:04:c8:ed:bf:5a:b2:04:d1: b0:53:6c:06:ec:c7:87:45:3b:2e:e0:f2:86:6e:c2: e8:fb:9e:ea:b7:f1:10:b1:03:9d:ed:37:d0:31:5f: f6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D8:C1:35:22:D2:05:E2:30:3C:4F:E4:84:4B:33:D2:5F:76:A3:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2382a434-cda8-3060-a542-ba56e0e0f17b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.1.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:7e:66:c3:eb:c4:8f:b0:c3:7d:24:7c:43:36:54:9e:33:be: 91:23:5b:70:15:b9:99:0d:18:67:02:50:bc:b3:6b:91:b8:c7: 35:36:1e:46:cb:e7:0d:3b:18:9b:7d:50:43:2b:75:e5:b1:3a: 74:c2:cd:4c:37:3b:8d:4f:79:8a:40:d8:c7:8c:95:21:8a:c2: 93:40:d4:07:52:ca:6f:5b:99:6d:3f:18:8f:8f:ec:99:46:19: 9c:e0:ed:a3:e6:e4:2b:e0:54:2d:d5:50:1f:78:63:fe:c0:60: a5:e1:9a:d4:f3:52:44:2c:fd:0a:07:1b:ba:5f:cf:cf:02:3d: b9:60:67:5c:03:d2:29:61:e2:24:7d:f4:c3:8b:5e:67:45:05: db:4a:e4:bd:5a:ab:28:fd:6e:af:a2:f8:5f:30:b2:cb:8b:b7: 4a:f9:9a:5a:78:8d:f5:02:58:96:b3:bb:02:a9:3a:fe:20:42: a9:be:df:82:a6:a3:29:54:ec:53:3a:65:e1:d8:33:b1:04:47: 66:cb:63:44:4f:93:02:d9:21:2c:be:a1:24:d7:e8:0d:d2:1f: d3:34:33:db:e2:f0:0d:71:3b:c8:4c:d5:fe:78:fb:77:ac:5b: a9:75:70:b2:33:cd:83:08:97:72:74:4a:47:92:93:e5:1d:7e: 61:af:d1:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHskHbhD0CumdRICAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk Yzk4NGYwMTAtNzdjMS00NzhlLWIzNzgtNTk0N2ZmOTZjNzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOLMFLBk4/+C+4oZIMTPARIBaG1BRpHDLIOE 8DMEfbA9iUWP71p+wbpTUjHxD9ki3D+mbbaYCsUI89fwwK3bZceWLHjNNZo5FpwN 1pjycXro9D1vFcuIK2nCCbSa3daDrKhmFqbd4RdYqa7+2sPYxtoCvxkAVGg5OmQV MyWjBkQJXB0hv9Aj/0N+Jatw3BMj1tjanHLem9/LSHiWEcW2DDK1KAvK43p80RC2 DsRDmt205omdAtm6HJvrKSHdsfqxvCYLLTjUOnjYeHfOzPM3gUWHE0i9rbviBMjt v1qyBNGwU2wG7MeHRTsu4PKGbsLo+57qt/EQsQOd7TfQMV/2lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzYwTUi0gXiMDxP5IRLM9JfdqNpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjM4MmE0MzQtY2RhOC0z MDYwLWE1NDItYmE1NmUwZTBmMTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSAGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKR+ZsPrxI+ww30kfEM2VJ4zvpEjW3AVuZkNGGcCULyza5G4xzU2HkbL 5w07GJt9UEMrdeWxOnTCzUw3O41PeYpA2MeMlSGKwpNA1AdSym9bmW0/GI+P7JlG GZzg7aPm5CvgVC3VUB94Y/7AYKXhmtTzUkQs/QoHG7pfz88CPblgZ1wD0ilh4iR9 9MOLXmdFBdtK5L1aqyj9bq+i+F8wssuLt0r5mlp4jfUCWJazuwKpOv4gQqm+34Km oylU7FM6ZeHYM7EER2bLY0RPkwLZISy+oSTX6A3SH9M0M9vi8A1xO8hM1f54+3es W6l1cLIzzYMIl3J0SkeSk+UdfmGv0Vc= -----END CERTIFICATE-----Generated at Tue Nov 4 16:38:05 2025 by rpki-client