$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5bfb6bd8-0185-3ea1-9861-0a2a0d143ab6.roa File: 5bfb6bd8-0185-3ea1-9861-0a2a0d143ab6.roa (raw, json) Hash identifier: sN+0lsG1zm+dPpC5Gze6Oczilb/H5bldwd3d3b+tvW4= Subject key identifier: 02:33:9F:43:BE:41:3F:D3:F3:8B:A0:B3:A4:12:F0:AA:AE:6B:8E:5D Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B970D013BD9381EA353775340 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5bfb6bd8-0185-3ea1-9861-0a2a0d143ab6.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 395793 IP address blocks: 72.13.227.0/24 maxlen: 24 72.13.232.0/24 maxlen: 24 72.13.241.0/24 maxlen: 24 72.13.243.0/24 maxlen: 24 72.13.246.0/24 maxlen: 24 72.13.249.0/24 maxlen: 24 72.13.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0d:01:3b:d9:38:1e:a3:53:77:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=a011697f-7907-4961-9ae8-ba966fe35139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6c:94:f8:8c:94:72:ff:6a:e3:34:90:ba:aa: 54:51:bf:e0:97:52:2c:cd:80:0c:62:84:24:73:cd: d3:f7:af:2c:99:67:7e:64:98:ae:e6:75:c4:87:48: a4:48:c2:11:34:77:57:27:00:0d:9a:9d:dc:6b:f1: 2f:e9:45:53:9c:78:e8:22:c1:9f:35:13:76:6a:0a: 20:1c:07:d3:91:d1:6f:8f:5b:87:03:33:72:6d:e5: 71:16:9b:49:d2:5c:dc:4d:73:9c:86:fd:4c:19:b5: 61:4e:c1:73:18:d8:dc:9c:50:98:c6:ff:a4:7a:87: e8:a4:fa:8a:38:4e:a6:8d:0e:15:56:08:d0:ec:6f: 44:a8:8d:5e:c0:5e:27:11:d4:51:04:ee:0a:08:83: 97:c2:e4:60:9e:81:ff:7e:0c:ba:e5:10:fd:36:be: 8a:4f:52:39:d1:e3:2b:74:6c:18:98:7b:8e:ec:c6: f9:6c:63:a9:e5:20:e4:33:05:27:1d:76:71:b8:89: 8e:ac:40:67:22:61:e8:dc:a9:fd:44:38:fb:cf:12: 2e:7a:5b:17:17:a2:da:37:27:1f:cd:93:8c:6e:eb: 14:0e:34:3f:3b:dd:86:8d:55:d4:fd:9a:35:7e:18: 29:0d:ca:b2:c7:d0:06:9d:ff:8e:6f:16:f3:47:14: 49:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:33:9F:43:BE:41:3F:D3:F3:8B:A0:B3:A4:12:F0:AA:AE:6B:8E:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5bfb6bd8-0185-3ea1-9861-0a2a0d143ab6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.13.227.0/24 72.13.232.0/24 72.13.241.0/24 72.13.243.0/24 72.13.246.0/24 72.13.249.0/24 72.13.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:7a:92:0a:d1:95:3f:92:93:80:57:06:8e:bb:a7:42:45:81: c5:e6:c8:15:a6:74:60:d6:27:73:7c:9a:42:d4:6f:c3:37:d6: ae:a3:45:f4:f7:15:1f:ed:db:15:9c:af:5b:b2:10:b9:1f:48: 90:63:e6:5e:c7:10:b1:ea:17:6c:c3:85:f8:a8:8d:5b:1a:b6: be:eb:f3:6d:96:73:66:19:94:7d:cf:fc:1f:9d:6f:a9:f8:23: 68:13:f3:e6:cb:6a:cd:6a:28:a7:c2:90:73:be:ab:49:24:c9: 1b:bd:3b:06:d2:0b:b3:b0:af:c8:93:e5:d3:b2:b5:8d:b7:af: 36:3b:24:4b:6c:20:1d:64:c8:43:2c:56:e7:7d:17:9c:63:6c: 56:27:72:83:8e:d2:09:ba:65:b1:c7:26:1c:a3:6f:3d:e1:28: 01:48:aa:81:65:98:1c:a1:ba:06:0a:4a:39:1d:cb:89:54:e5: e8:95:5e:b4:58:02:da:1a:4f:4b:9d:8a:e5:ec:0b:9f:55:32: ed:e6:0b:81:fc:b2:68:0f:cb:7f:70:a3:b5:e9:9b:f9:4c:10: a3:b2:82:61:3b:88:9e:32:17:c5:a3:e1:8c:11:63:48:0b:fa: 51:a6:57:3b:15:ca:5f:d8:1f:d9:27:51:7a:4a:28:76:01:dd: 12:8d:a0:0f -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEuXDQE72Tgeo1N3U0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YTAxMTY5N2YtNzkwNy00OTYxLTlhZTgtYmE5NjZmZTM1MTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2yU+IyUcv9q4zSQuqpUUb/gl1IszYAMYoQk c83T968smWd+ZJiu5nXEh0ikSMIRNHdXJwANmp3ca/Ev6UVTnHjoIsGfNRN2agog HAfTkdFvj1uHAzNybeVxFptJ0lzcTXOchv1MGbVhTsFzGNjcnFCYxv+keofopPqK OE6mjQ4VVgjQ7G9EqI1ewF4nEdRRBO4KCIOXwuRgnoH/fgy65RD9Nr6KT1I50eMr dGwYmHuO7Mb5bGOp5SDkMwUnHXZxuImOrEBnImHo3Kn9RDj7zxIuelsXF6LaNycf zZOMbusUDjQ/O92GjVXU/Zo1fhgpDcqyx9AGnf+ObxbzRxRJ8wIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFAIzn0O+QT/T84ugs6QS8Kqua45dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNWJmYjZiZDgtMDE4NS0z ZWExLTk4NjEtMGEyYTBkMTQzYWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQASA3jAwQA SA3oAwQASA3xAwQASA3zAwQASA32AwQASA35AwQASA38MFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD56kgrR lT+Sk4BXBo67p0JFgcXmyBWmdGDWJ3N8mkLUb8M31q6jRfT3FR/t2xWcr1uyELkf SJBj5l7HELHqF2zDhfiojVsatr7r822Wc2YZlH3P/B+db6n4I2gT8+bLas1qKKfC kHO+q0kkyRu9OwbSC7Owr8iT5dOytY23rzY7JEtsIB1kyEMsVud9F5xjbFYncoOO 0gm6ZbHHJhyjbz3hKAFIqoFlmByhugYKSjkdy4lU5eiVXrRYAtoaT0udiuXsC59V Mu3mC4H8smgPy39wo7Xpm/lMEKOygmE7iJ4yF8Wj4YwRY0gL+lGmVzsVyl/YH9kn UXpKKHYB3RKNoA8= -----END CERTIFICATE-----Generated at Wed Nov 5 10:28:49 2025 by rpki-client