$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/d981ed21-a25a-3b01-91c0-905497dccc91.roa File: d981ed21-a25a-3b01-91c0-905497dccc91.roa (raw, json) Hash identifier: CkbWkg+ZqvMrMxRro4mQ2cGswg/71E24QKeGJAx0De0= Subject key identifier: 54:3B:E6:C2:9A:BC:82:AC:8F:E8:E2:35:6F:35:F7:33:60:1C:02:0D Certificate issuer: /CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Certificate serial: 010D0C9F4328584B89176F63EF383F12C4F1A400 Authority key identifier: 46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/d981ed21-a25a-3b01-91c0-905497dccc91.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 29746 IP address blocks: 72.21.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:6f:63:ef:38:3f:12:c4:f1:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=0fe1664e-2c14-4a52-a86e-ede65727e9be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e4:76:d1:5e:c8:a7:dc:46:d8:10:48:e9:7d: f8:d8:ed:83:a7:2c:1a:f1:82:d0:a5:e3:81:da:9f: de:87:33:88:fc:c2:8a:e6:29:b8:06:85:24:05:92: 2e:31:48:62:9d:f8:82:e1:d1:ad:25:8d:4a:ea:63: 22:3d:44:ea:54:98:f5:a6:11:6e:a5:28:a7:89:85: 1e:b6:17:d5:32:f0:e2:15:8e:ac:10:7c:cc:21:cb: e0:e0:6b:57:d2:92:e6:72:46:89:37:d5:43:9e:81: 59:bd:66:9e:14:1c:60:7a:27:fb:43:40:ad:1b:43: c4:2a:19:b8:c2:e4:38:01:8a:05:5b:7c:83:c5:bf: 10:b8:89:b8:9f:14:f3:ef:fa:d5:6d:0c:cf:ac:e8: 7a:3e:db:55:ef:e4:ef:28:d1:33:dd:a7:c7:5d:87: d3:b2:18:40:42:7f:92:58:f7:33:60:8a:e6:1a:6d: bd:f6:de:8f:c8:4b:02:af:45:aa:98:ce:dd:49:ea: fe:a8:74:5b:91:22:ea:8b:85:7e:a9:02:5e:bb:e6: 04:5f:d3:64:b2:9e:06:23:fb:91:9c:c1:7c:ef:da: ae:e2:eb:e8:75:68:a0:e1:47:ca:3d:95:4d:58:10: ff:83:3a:3a:31:ca:23:c2:94:d7:6a:f6:71:5a:0e: 78:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:3B:E6:C2:9A:BC:82:AC:8F:E8:E2:35:6F:35:F7:33:60:1C:02:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/d981ed21-a25a-3b01-91c0-905497dccc91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl X509v3 Authority Key Identifier: keyid:46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer sbgp-ipAddrBlock: critical IPv4: 72.21.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:70:27:99:0b:de:41:f8:c4:9a:df:7d:4e:e8:2f:c6:0c:af: fb:bf:7c:8d:69:7a:04:a8:39:7e:f3:ce:1d:18:47:d0:59:76: b9:92:5a:f8:c8:dd:7b:af:89:bf:c0:91:f7:6c:4d:fd:0d:d4: 0f:1a:88:83:ca:e2:97:af:22:b1:50:17:ae:67:c6:1c:42:5a: 15:ae:88:57:fd:d9:fc:70:ad:3a:0d:69:f2:41:87:ea:04:aa: f4:b9:6e:3e:43:6a:8c:c8:fe:14:7f:d4:8e:b1:99:2e:51:85: cc:9a:48:05:ed:01:22:ad:9e:30:00:c4:65:d6:89:0e:21:9c: a0:74:e4:fb:9c:15:c4:fa:6d:c9:c4:0c:4a:2d:aa:b6:07:c8: cf:64:f1:cc:f7:86:b6:21:24:da:f2:56:2d:7d:01:64:e1:cb: b4:e1:bc:97:07:a8:11:21:ee:d6:e5:ac:9e:57:19:ab:4f:26: 30:32:75:5b:8e:e5:9b:ed:55:10:d1:9f:15:61:f8:08:47:6d: 27:36:63:34:be:0b:66:e1:dd:e2:73:52:bc:30:33:69:fe:6b: 0f:ed:84:d1:31:f2:d1:47:46:d4:c8:53:d3:d1:87:c3:5e:45: a1:68:3e:5a:25:d3:fd:b1:3a:74:64:e3:03:6f:c0:35:76:6b: 93:2c:47:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF29j7zg/EsTxpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFkNWJkMjUtOGFmYS00ZTUwLWJiMDItZjYzMTdlYWM3 ZTA1MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk MGZlMTY2NGUtMmMxNC00YTUyLWE4NmUtZWRlNjU3MjdlOWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+R20V7Ip9xG2BBI6X342O2Dpywa8YLQpeOB 2p/ehzOI/MKK5im4BoUkBZIuMUhinfiC4dGtJY1K6mMiPUTqVJj1phFupSiniYUe thfVMvDiFY6sEHzMIcvg4GtX0pLmckaJN9VDnoFZvWaeFBxgeif7Q0CtG0PEKhm4 wuQ4AYoFW3yDxb8QuIm4nxTz7/rVbQzPrOh6PttV7+TvKNEz3afHXYfTshhAQn+S WPczYIrmGm299t6PyEsCr0WqmM7dSer+qHRbkSLqi4V+qQJeu+YEX9Nksp4GI/uR nMF879qu4uvodWig4UfKPZVNWBD/gzo6McojwpTXavZxWg54OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQ75sKavIKsj+jiNW819zNgHAINMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1 YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMxN2VhYzdlMDUvZDk4MWVkMjEtYTI1YS0z YjAxLTkxYzAtOTA1NDk3ZGNjYzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkNWJkMjUtOGFmYS00ZTUwLWJi MDItZjYzMTdlYWM3ZTA1LzRhZDViZDI1LThhZmEtNGU1MC1iYjAyLWY2MzE3ZWFj N2UwNS5jcmwwHwYDVR0jBBgwFoAURruHeu2z6puPCZYhgAjpLO1NwtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMx N2VhYzdlMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBWtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlwJ5kL3kH4xJrffU7oL8YMr/u/fI1pegSoOX7zzh0YR9BZdrmSWvjI 3Xuvib/AkfdsTf0N1A8aiIPK4pevIrFQF65nxhxCWhWuiFf92fxwrToNafJBh+oE qvS5bj5DaozI/hR/1I6xmS5RhcyaSAXtASKtnjAAxGXWiQ4hnKB05PucFcT6bcnE DEotqrYHyM9k8cz3hrYhJNryVi19AWThy7ThvJcHqBEh7tblrJ5XGatPJjAydVuO 5ZvtVRDRnxVh+AhHbSc2YzS+C2bh3eJzUrwwM2n+aw/thNEx8tFHRtTIU9PRh8Ne RaFoPlol0/2xOnRk4wNvwDV2a5MsRwM= -----END CERTIFICATE-----Generated at Wed Nov 5 08:57:33 2025 by rpki-client