$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/289daa74-4a09-31a6-b30b-a1e175e151de.roa File: 289daa74-4a09-31a6-b30b-a1e175e151de.roa (raw, json) Hash identifier: veP4S+UbIVzQuPYeho2w8MGh89LKtrTqUs1jyKLhz2A= Subject key identifier: C9:25:57:3C:C4:55:6D:83:FB:E6:E2:4B:27:B4:E0:A5:65:1F:66:15 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BAA979C8A1DA3B53A091A3080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/289daa74-4a09-31a6-b30b-a1e175e151de.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 12222 IP address blocks: 72.247.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:9c:8a:1d:a3:b5:3a:09:1a:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=c9798d48-c3bb-4529-b904-94e4e468f5ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6a:a9:02:cb:4f:cd:40:75:47:fc:4e:a3:c5: df:25:86:6b:8e:8f:96:58:72:01:f8:d3:99:1a:92: c9:53:95:b1:86:94:ff:7a:d0:d4:e5:93:26:d8:57: d2:2c:ab:c1:09:cf:79:20:a9:c4:36:3c:75:22:95: 38:26:70:a0:61:37:92:75:01:93:15:78:50:7b:12: 74:ac:f8:b7:68:1b:17:c3:73:dd:14:ea:94:42:06: d4:8c:a3:b4:3c:e8:28:3f:b1:00:6e:5c:4f:0c:0d: 97:a7:5c:d8:77:08:21:69:0e:b6:d1:29:cf:b8:34: b3:ba:b6:ea:67:8b:24:33:9a:64:c8:45:b6:6a:c8: 0c:d6:56:31:43:d8:37:7e:88:42:94:20:a1:9f:7e: 4e:e6:aa:40:a8:06:66:03:01:ee:40:f6:54:f2:62: 1e:94:e1:fa:ab:01:f8:f1:6c:2e:6e:26:01:90:ce: 25:fe:e7:23:47:0e:96:2e:7d:83:87:0c:4f:bd:ce: ae:51:81:64:0c:a1:35:16:3f:e3:72:d8:0f:83:bb: e4:82:74:ca:fd:03:ac:8e:f6:b6:72:de:52:11:5c: e2:12:68:ee:bc:00:e6:a0:f1:be:59:67:ec:35:1e: 76:25:76:60:7c:d4:e6:a7:95:6a:62:b2:aa:97:c7: b2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:25:57:3C:C4:55:6D:83:FB:E6:E2:4B:27:B4:E0:A5:65:1F:66:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/289daa74-4a09-31a6-b30b-a1e175e151de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.247.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:d1:66:bb:77:42:c2:ef:16:06:0d:67:c3:9a:cc:18:a6:cc: fa:36:54:47:14:2d:06:63:89:24:6e:0c:f4:f5:0b:fa:0e:eb: b2:67:c1:fb:78:99:a8:44:e5:0a:b0:57:80:cb:00:9f:28:7e: 51:f6:b5:f5:c9:d8:83:b7:98:31:05:ed:42:b6:a8:05:21:28: 7c:4c:55:92:6b:b6:39:a1:5e:71:52:d0:d9:81:b6:ee:dc:52: 24:fc:e0:95:19:66:41:9b:79:d5:81:14:63:91:9b:ba:b2:44: 10:b3:07:a9:eb:d7:29:b0:48:4f:46:bb:e3:23:1f:a5:28:c2: 63:68:6f:34:1f:8b:fa:eb:1f:ef:bc:0e:f3:88:39:d8:7e:33: 77:bc:ec:58:d3:c5:d9:9a:b4:e3:9f:98:07:2f:4f:0d:9a:6a: c1:82:93:bc:74:ba:fd:bb:61:84:c5:0d:a4:fa:1b:37:61:48: 72:f8:80:82:02:4e:bf:6a:60:24:6f:4a:97:fe:81:bb:05:f7: 82:1e:d5:cd:ea:c9:53:07:b1:2f:ad:cf:66:9a:2e:f3:80:f2: 7b:7e:f2:93:13:0c:4e:cc:4c:75:bc:3f:8e:3a:7d:4a:ee:28: 24:d3:9d:1a:c6:7a:7d:cd:fc:74:de:ad:ad:66:3b:56:02:ad: 43:99:4c:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql5yKHaO1OgkaMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk Yzk3OThkNDgtYzNiYi00NTI5LWI5MDQtOTRlNGU0NjhmNWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2qpAstPzUB1R/xOo8XfJYZrjo+WWHIB+NOZ GpLJU5WxhpT/etDU5ZMm2FfSLKvBCc95IKnENjx1IpU4JnCgYTeSdQGTFXhQexJ0 rPi3aBsXw3PdFOqUQgbUjKO0POgoP7EAblxPDA2Xp1zYdwghaQ620SnPuDSzurbq Z4skM5pkyEW2asgM1lYxQ9g3fohClCChn35O5qpAqAZmAwHuQPZU8mIelOH6qwH4 8WwubiYBkM4l/ucjRw6WLn2DhwxPvc6uUYFkDKE1Fj/jctgPg7vkgnTK/QOsjva2 ct5SEVziEmjuvADmoPG+WWfsNR52JXZgfNTmp5VqYrKql8eypQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMklVzzEVW2D++biSye04KVlH2YVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjg5ZGFhNzQtNGEwOS0z MWE2LWIzMGItYTFlMTc1ZTE1MWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPeXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXRZrt3QsLvFgYNZ8OazBimzPo2VEcULQZjiSRuDPT1C/oO67Jnwft4 mahE5QqwV4DLAJ8oflH2tfXJ2IO3mDEF7UK2qAUhKHxMVZJrtjmhXnFS0NmBtu7c UiT84JUZZkGbedWBFGORm7qyRBCzB6nr1ymwSE9Gu+MjH6UowmNobzQfi/rrH++8 DvOIOdh+M3e87FjTxdmatOOfmAcvTw2aasGCk7x0uv27YYTFDaT6GzdhSHL4gIIC Tr9qYCRvSpf+gbsF94Ie1c3qyVMHsS+tz2aaLvOA8nt+8pMTDE7MTHW8P446fUru KCTTnRrGen3N/HTera1mO1YCrUOZTDI= -----END CERTIFICATE-----Generated at Tue Nov 4 22:25:54 2025 by rpki-client