$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e59784a-723f-311f-a0fe-cf83b9c9b200.roa File: 2e59784a-723f-311f-a0fe-cf83b9c9b200.roa (raw, json) Hash identifier: vzRGZEmrmfflxDVOOxf+udXeFDvfPyrP6hqzRruvxC0= Subject key identifier: 86:7D:D0:6C:35:7C:47:DB:2F:EC:46:06:94:02:E4:35:46:71:00:93 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BABFD18160DCCB544B77B2180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e59784a-723f-311f-a0fe-cf83b9c9b200.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 16625 IP address blocks: 72.246.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:18:16:0d:cc:b5:44:b7:7b:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=ca0f113d-6aff-4bd6-88b0-0bb3bdaf66ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:22:97:c9:fe:4e:c2:eb:cf:c6:48:0a:7c:a1: c9:cc:de:55:90:d5:c3:3d:59:34:3f:d5:e9:81:9c: ef:67:24:7d:25:63:d7:72:c6:06:f3:9a:e3:78:c8: 89:14:66:c1:76:ce:a9:86:83:3e:a6:05:43:09:94: d8:98:04:28:3e:b7:9d:b9:5c:65:a8:91:17:2d:f6: 7b:54:80:be:ed:e8:3e:43:4d:ad:55:cb:1e:af:1e: 1a:7b:b4:bd:44:14:4b:2f:c1:4d:48:b7:a1:98:eb: 1d:b9:fb:7e:a9:1e:ae:b4:85:47:c5:76:fd:dc:be: bb:2b:63:3e:fe:f8:23:58:48:ba:ad:ba:b1:37:a7: d9:6e:b3:43:5a:b2:61:f9:25:b6:79:47:13:59:74: df:2a:f8:9b:57:e5:a2:e9:f7:c0:4e:f1:f9:bc:68: d4:f8:db:39:04:f2:62:b3:37:99:7a:14:58:b9:8d: 97:9c:b7:6a:e8:41:8c:25:d6:23:1f:0e:cb:2f:4b: 25:e5:d7:3f:4a:49:49:f7:8d:3a:17:c9:87:28:b6: c5:3a:5c:78:78:d0:d0:dd:1a:74:c1:2d:8f:4f:f4: 04:fa:ff:18:f5:3c:ac:ac:24:67:9a:a8:71:61:37: 1e:f6:c5:13:0b:69:e6:66:02:3e:35:f6:71:be:0a: 22:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7D:D0:6C:35:7C:47:DB:2F:EC:46:06:94:02:E4:35:46:71:00:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e59784a-723f-311f-a0fe-cf83b9c9b200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.246.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:02:c1:9c:da:49:7c:c4:18:5a:27:84:dd:0f:fc:fd:db:3b: f6:3a:08:b1:f6:c1:26:97:93:8b:cb:9b:64:df:3e:34:90:19: 87:54:79:be:02:1f:51:f5:03:ed:93:85:9b:fa:3f:d7:91:65: 8e:86:4c:9e:5d:ed:a9:5a:ac:a2:af:21:d7:b4:83:c7:24:84: 0b:46:d5:20:08:f4:13:99:59:51:43:13:27:14:e1:ce:bc:3f: 71:b1:89:ae:a6:6c:94:dd:c8:4e:f0:75:2e:98:87:07:34:3d: 4b:19:c1:d4:41:f5:91:7d:e7:1b:65:eb:a3:8e:b9:5a:88:1a: f3:ef:90:3c:aa:c4:4c:08:5d:7a:aa:3b:27:14:e1:be:4e:25: e3:50:32:9a:c7:a3:e7:ce:34:ab:3a:e3:9b:ea:67:cd:0b:c4: ae:67:af:8d:29:53:ba:44:81:26:cf:c8:77:5b:0b:2c:b4:4e: 65:13:35:c3:e8:fc:00:b6:ac:74:37:63:a3:cb:ef:d2:b3:0b: 45:5c:ab:4d:07:df:c1:18:c8:ac:6c:b5:50:2d:a8:5b:ad:06: 25:74:d0:bd:bf:88:a1:77:c1:0b:3f:62:b4:53:33:1b:ef:50: 38:e0:08:6d:a4:4f:6d:de:2d:8f:5c:69:90:a4:3f:90:95:30: 7b:2f:b3:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/RgWDcy1RLd7IYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk Y2EwZjExM2QtNmFmZi00YmQ2LTg4YjAtMGJiM2JkYWY2NmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSKXyf5OwuvPxkgKfKHJzN5VkNXDPVk0P9Xp gZzvZyR9JWPXcsYG85rjeMiJFGbBds6phoM+pgVDCZTYmAQoPreduVxlqJEXLfZ7 VIC+7eg+Q02tVcserx4ae7S9RBRLL8FNSLehmOsduft+qR6utIVHxXb93L67K2M+ /vgjWEi6rbqxN6fZbrNDWrJh+SW2eUcTWXTfKvibV+Wi6ffATvH5vGjU+Ns5BPJi szeZehRYuY2XnLdq6EGMJdYjHw7LL0sl5dc/SklJ9406F8mHKLbFOlx4eNDQ3Rp0 wS2PT/QE+v8Y9TysrCRnmqhxYTce9sUTC2nmZgI+NfZxvgoinQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZ90Gw1fEfbL+xGBpQC5DVGcQCTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmU1OTc4NGEtNzIzZi0z MTFmLWEwZmUtY2Y4M2I5YzliMjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMCwZzaSXzEGFonhN0P/P3bO/Y6CLH2wSaXk4vLm2TfPjSQGYdUeb4C H1H1A+2ThZv6P9eRZY6GTJ5d7alarKKvIde0g8ckhAtG1SAI9BOZWVFDEycU4c68 P3Gxia6mbJTdyE7wdS6Yhwc0PUsZwdRB9ZF95xtl66OOuVqIGvPvkDyqxEwIXXqq OycU4b5OJeNQMprHo+fONKs645vqZ80LxK5nr40pU7pEgSbPyHdbCyy0TmUTNcPo /AC2rHQ3Y6PL79KzC0Vcq00H38EYyKxstVAtqFutBiV00L2/iKF3wQs/YrRTMxvv UDjgCG2kT23eLY9caZCkP5CVMHsvs3g= -----END CERTIFICATE-----Generated at Tue Nov 4 22:25:06 2025 by rpki-client