$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4c5eef93-7a6c-3a2c-99cf-6fb386599309.roa File: 4c5eef93-7a6c-3a2c-99cf-6fb386599309.roa (raw, json) Hash identifier: M/LH1Jm13VF4n9OT2c0Tzt9J9L97Vitd9sVnYnEm/l0= Subject key identifier: 5E:02:76:73:44:FF:15:37:6C:3A:80:E0:5E:65:21:5E:69:58:70:49 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BB727BB83194CE1F982CB7100 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4c5eef93-7a6c-3a2c-99cf-6fb386599309.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 3257 IP address blocks: 72.245.144.0/21 maxlen: 24 72.245.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:bb:83:19:4c:e1:f9:82:cb:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=42488a74-66f6-43d2-b7a3-aefd25ece7c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:47:36:80:62:b2:ca:b2:dc:ea:05:c7:5a:de: d9:0e:b4:92:1c:8c:5e:da:96:a0:38:5d:b7:12:8e: 4f:2a:95:06:8b:50:83:16:1c:28:8d:ea:4c:a5:54: b2:b1:b2:bc:04:05:29:ea:96:d1:80:8f:4f:61:db: 57:3e:28:a8:38:d0:d0:5b:49:64:d0:13:50:16:19: 29:22:39:c5:82:25:bf:62:7b:43:8b:0c:2d:d5:f1: ea:a3:2b:ef:31:10:b4:b2:5a:36:ea:b2:8d:f5:19: 8b:98:4e:f7:33:08:d8:5c:a2:56:59:5a:86:97:9f: 51:78:2b:e6:75:40:c9:65:6e:c0:fb:db:63:6f:38: 98:6a:d9:0d:21:21:8d:46:40:2e:80:62:9f:da:f0: ca:be:cc:4b:4d:4e:89:32:6a:6f:0e:34:2b:2b:99: 90:04:53:e0:0f:ac:00:fe:50:e5:42:27:83:ca:83: 2f:6a:9d:71:01:62:11:37:c4:8d:c5:83:d1:88:10: 7a:34:1e:6c:3e:31:bb:65:29:7f:9b:7f:70:ef:25: 19:27:d0:1e:d1:53:95:34:f7:d2:3f:6a:b2:b6:a9: a7:8f:41:50:7b:9b:f9:89:df:54:92:90:77:03:c5: 73:d3:60:cb:9b:5c:43:99:7c:42:f5:8c:d2:31:1a: 27:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:02:76:73:44:FF:15:37:6C:3A:80:E0:5E:65:21:5E:69:58:70:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4c5eef93-7a6c-3a2c-99cf-6fb386599309.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.245.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:ff:aa:3d:35:77:bf:aa:27:18:87:eb:b3:a8:58:0f:d7:6f: 1d:60:72:01:00:59:69:2e:af:cf:a3:08:eb:c2:57:00:4e:4d: 9a:22:fd:3a:96:3e:94:46:7b:25:b4:b5:81:64:f7:5b:4a:aa: 47:88:02:6f:92:d9:91:75:bf:84:2a:08:de:24:f8:3c:25:a5: 77:3b:35:32:d0:d3:3c:d0:a5:3c:52:4b:57:71:08:d2:fc:a0: 9a:1b:9f:ee:53:ed:e6:9e:ee:60:8f:b8:af:b5:19:be:e2:30: b3:ee:eb:73:86:6c:5c:0b:e1:d6:5d:60:f9:cf:2b:62:9d:d9: 39:8f:08:31:88:ec:2a:fb:48:d0:b4:21:74:5a:b6:20:31:ac: 1b:ff:d4:ca:d9:03:bd:27:85:b7:2a:bf:b5:ea:35:c1:d3:99: 5e:69:19:c4:49:8a:0c:50:59:1c:16:8e:ae:ba:96:e9:3f:b6: 16:9a:de:67:0c:6b:15:82:34:78:12:10:b8:cd:e2:5b:2a:bd: 5c:06:2a:4e:b9:54:71:68:03:98:6f:f1:a6:55:27:b3:87:e3: 47:12:7a:eb:bd:4a:b0:50:5a:11:95:5a:f9:c4:a7:40:fc:82: 39:9a:0f:21:a9:df:c8:65:39:e7:bf:37:26:38:64:e5:fa:89: 96:60:c0:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3J7uDGUzh+YLLcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk NDI0ODhhNzQtNjZmNi00M2QyLWI3YTMtYWVmZDI1ZWNlN2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ec2gGKyyrLc6gXHWt7ZDrSSHIxe2pagOF23 Eo5PKpUGi1CDFhwojepMpVSysbK8BAUp6pbRgI9PYdtXPiioONDQW0lk0BNQFhkp IjnFgiW/YntDiwwt1fHqoyvvMRC0slo26rKN9RmLmE73MwjYXKJWWVqGl59ReCvm dUDJZW7A+9tjbziYatkNISGNRkAugGKf2vDKvsxLTU6JMmpvDjQrK5mQBFPgD6wA /lDlQieDyoMvap1xAWIRN8SNxYPRiBB6NB5sPjG7ZSl/m39w7yUZJ9Ae0VOVNPfS P2qytqmnj0FQe5v5id9UkpB3A8Vz02DLm1xDmXxC9YzSMRon6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4CdnNE/xU3bDqA4F5lIV5pWHBJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGM1ZWVmOTMtN2E2Yy0z YTJjLTk5Y2YtNmZiMzg2NTk5MzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESPWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEj/qj01d7+qJxiH67OoWA/Xbx1gcgEAWWkur8+jCOvCVwBOTZoi/TqW PpRGeyW0tYFk91tKqkeIAm+S2ZF1v4QqCN4k+DwlpXc7NTLQ0zzQpTxSS1dxCNL8 oJobn+5T7eae7mCPuK+1Gb7iMLPu63OGbFwL4dZdYPnPK2Kd2TmPCDGI7Cr7SNC0 IXRatiAxrBv/1MrZA70nhbcqv7XqNcHTmV5pGcRJigxQWRwWjq66luk/thaa3mcM axWCNHgSELjN4lsqvVwGKk65VHFoA5hv8aZVJ7OH40cSeuu9SrBQWhGVWvnEp0D8 gjmaDyGp38hlOee/NyY4ZOX6iZZgwDI= -----END CERTIFICATE-----Generated at Wed Nov 5 03:21:30 2025 by rpki-client