$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/ed7d102b-c595-3d65-96b5-2e2b904a4cc8.roa File: ed7d102b-c595-3d65-96b5-2e2b904a4cc8.roa (raw, json) Hash identifier: Tm1CIiJCclAYTv9bbjORg633sqrD/c08jarwFvWfI2Q= Subject key identifier: 30:4C:FC:C7:E9:BF:68:40:98:46:9F:0B:09:63:D4:8E:F5:24:22:15 Certificate issuer: /CN=a4e67936-c857-487d-93df-2dff7fa79988 Certificate serial: 010D0C9F4328584BBE40464C832E2494ACADE480 Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/ed7d102b-c595-3d65-96b5-2e2b904a4cc8.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 19940 IP address blocks: 72.0.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:46:4c:83:2e:24:94:ac:ad:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=e6e8e1cb-a289-4dbd-ad66-4db590f348ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:26:a8:0d:1a:11:76:2c:12:82:91:68:8b:03: ec:b8:5b:b8:e7:30:d7:e5:4d:be:fb:be:0f:25:dc: d3:3b:17:db:1d:71:40:e2:8a:51:50:44:0f:e4:ee: bc:7a:b0:58:19:68:a6:6f:a6:68:40:2c:84:08:c5: 43:43:3e:c4:6f:8a:12:4e:fa:0a:46:c6:93:77:6c: d6:a5:88:49:99:fd:4d:0b:0b:1d:c4:87:4f:b9:e6: 44:87:4d:6e:3a:f8:ed:21:b4:8f:10:b0:6c:e3:ac: 00:a2:b6:9a:09:17:6d:72:e5:d0:23:d9:0f:69:1b: 44:53:e9:c1:d9:86:18:0a:08:8d:f7:cd:bc:fd:30: 3c:02:c1:f3:d1:78:73:d8:97:f9:dd:3d:ad:af:95: 0f:a2:1c:84:95:a1:76:3d:cc:02:52:c7:80:5f:fe: a1:51:6d:7b:bc:23:64:5d:00:f3:06:49:1f:7c:e8: a6:f5:54:84:26:3c:8a:1d:ed:cd:0c:32:38:90:5c: 72:55:f4:43:1b:ca:43:7a:32:90:01:2b:40:88:32: ce:70:1e:4b:22:6f:ae:8c:a5:08:0a:f7:b2:50:6f: ab:19:45:77:3a:16:11:a7:f0:63:50:7e:b6:d9:d1: 71:bc:c2:22:0e:0a:a9:41:d5:fb:1d:fb:b6:52:6a: 48:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4C:FC:C7:E9:BF:68:40:98:46:9F:0B:09:63:D4:8E:F5:24:22:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/ed7d102b-c595-3d65-96b5-2e2b904a4cc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl X509v3 Authority Key Identifier: keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer sbgp-ipAddrBlock: critical IPv4: 72.0.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:1d:26:3c:5c:c5:8e:8c:16:37:fa:10:60:eb:84:a9:96:e5: 30:30:3d:5f:02:b5:f2:e8:cf:74:1e:14:dd:9e:9e:c4:38:c8: e2:32:47:f5:37:e4:29:ef:14:4c:f3:3d:20:1c:45:0d:14:96: 1e:50:08:78:0c:ca:a3:f8:5e:66:84:c5:2f:d1:d7:89:8e:54: dd:ad:a9:00:85:84:ba:39:f5:af:d2:1d:0a:c6:c8:45:45:95: 5a:ac:bf:ce:7e:f7:55:8b:1d:1a:a0:21:c3:ea:af:bf:89:e6: 75:70:bb:9a:05:0e:05:76:04:ad:7b:c7:c1:3b:04:0d:ac:4c: fb:2e:f3:ec:ea:b1:22:3e:1a:81:ac:9c:71:5a:58:ac:61:c4: 6b:86:9a:e9:90:d6:95:c6:ad:cd:66:4e:f5:06:1b:f9:ac:e7: 11:b3:ec:63:59:95:b8:23:ca:95:df:fd:38:26:be:33:50:cc: b3:e1:5e:d8:db:7a:3f:cc:f6:8d:a9:fb:9f:d3:ef:e7:99:9e: 14:7f:3b:97:60:b9:65:b0:a5:46:d9:1e:6d:e3:08:69:64:35: 16:82:6b:7f:75:c1:e9:fa:ed:08:1b:84:d0:42:0e:36:a1:a7: 84:37:58:43:7a:51:59:9d:47:b3:60:a5:86:74:d9:a5:72:76: 39:00:f3:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEZMgy4klKyt5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlNjc5MzYtYzg1Ny00ODdkLTkzZGYtMmRmZjdmYTc5 OTg4MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZTZlOGUxY2ItYTI4OS00ZGJkLWFkNjYtNGRiNTkwZjM0OGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSaoDRoRdiwSgpFoiwPsuFu45zDX5U2++74P JdzTOxfbHXFA4opRUEQP5O68erBYGWimb6ZoQCyECMVDQz7Eb4oSTvoKRsaTd2zW pYhJmf1NCwsdxIdPueZEh01uOvjtIbSPELBs46wAoraaCRdtcuXQI9kPaRtEU+nB 2YYYCgiN9828/TA8AsHz0Xhz2Jf53T2tr5UPohyElaF2PcwCUseAX/6hUW17vCNk XQDzBkkffOim9VSEJjyKHe3NDDI4kFxyVfRDG8pDejKQAStAiDLOcB5LIm+ujKUI CveyUG+rGUV3OhYRp/BjUH622dFxvMIiDgqpQdX7Hfu2UmpIoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBM/Mfpv2hAmEafCwlj1I71JCIVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2 NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZmN2ZhNzk5ODgvZWQ3ZDEwMmItYzU5NS0z ZDY1LTk2YjUtMmUyYjkwNGE0Y2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTRlNjc5MzYtYzg1Ny00ODdkLTkz ZGYtMmRmZjdmYTc5OTg4L2E0ZTY3OTM2LWM4NTctNDg3ZC05M2RmLTJkZmY3ZmE3 OTk4OC5jcmwwHwYDVR0jBBgwFoAUFqXjOhIoly6fUjQBp27hlpzf6Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZm N2ZhNzk5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESADgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwdJjxcxY6MFjf6EGDrhKmW5TAwPV8CtfLoz3QeFN2ensQ4yOIyR/U3 5CnvFEzzPSAcRQ0Ulh5QCHgMyqP4XmaExS/R14mOVN2tqQCFhLo59a/SHQrGyEVF lVqsv85+91WLHRqgIcPqr7+J5nVwu5oFDgV2BK17x8E7BA2sTPsu8+zqsSI+GoGs nHFaWKxhxGuGmumQ1pXGrc1mTvUGG/ms5xGz7GNZlbgjypXf/TgmvjNQzLPhXtjb ej/M9o2p+5/T7+eZnhR/O5dguWWwpUbZHm3jCGlkNRaCa391wen67QgbhNBCDjah p4Q3WEN6UVmdR7NgpYZ02aVydjkA8yQ= -----END CERTIFICATE-----Generated at Wed Nov 5 13:18:00 2025 by rpki-client