$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/300dbd74-6428-329b-87a1-93eec764e123.roa File: 300dbd74-6428-329b-87a1-93eec764e123.roa (raw, json) Hash identifier: uDi4Xb9DVVQjv6MEm7apHGxWHGIOjKi+AeJWpCSN0JY= Subject key identifier: 34:4D:E9:04:0A:94:13:CD:2B:AD:8D:BF:21:1F:ED:F0:6C:09:61:A8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BABFD2FC79FCAE267D09F6480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/300dbd74-6428-329b-87a1-93eec764e123.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 20940 IP address blocks: 72.247.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:2f:c7:9f:ca:e2:67:d0:9f:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=d7bb5a7e-31b6-4cf3-a6b4-7fed1ad21e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e5:dc:51:6f:5c:f0:21:6c:cb:e0:f2:7c:76: dd:57:b6:74:ec:d1:a7:f0:b7:f2:37:54:e0:8d:41: 9a:62:5b:62:a7:68:ff:71:0a:e5:6b:02:b0:c0:11: e7:da:ce:71:47:af:46:41:39:c9:d1:9c:1a:ed:c7: bf:61:2b:22:b0:a6:5d:1d:0b:6c:a1:e7:73:09:b8: 8f:21:7f:3e:6e:5f:79:d6:a7:b9:d6:10:e0:6c:b4: b4:9b:c4:67:3f:20:26:17:c7:83:44:b8:e9:04:72: b9:60:e3:75:f6:34:c6:ae:74:c8:5b:96:cf:4f:06: eb:4b:be:64:63:84:f4:c9:0c:d6:14:7b:93:05:d6: fd:8c:9a:88:d2:0a:db:4d:7b:4a:ce:f3:b4:50:f4: be:57:28:9a:24:df:d7:1a:66:e0:c8:07:2e:42:36: ce:0d:60:a1:da:25:ac:2e:9f:33:e8:f3:b1:37:60: 86:7e:c7:7f:19:f7:8a:99:7f:6b:96:4c:cf:83:47: 0a:ab:24:24:7e:80:39:ba:2b:f6:d1:e6:c5:74:df: b6:b6:2d:e8:e1:6a:a8:3d:aa:d7:25:56:c7:6c:58: 45:32:b7:56:0c:95:2c:f1:71:fb:63:8e:65:e0:de: c5:91:9e:63:0c:5b:36:2d:13:b9:d6:72:64:b0:af: 5f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4D:E9:04:0A:94:13:CD:2B:AD:8D:BF:21:1F:ED:F0:6C:09:61:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/300dbd74-6428-329b-87a1-93eec764e123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.247.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:65:80:01:fb:14:38:03:13:91:da:f9:2f:c8:c2:f1:ed:75: b7:79:19:09:3d:a4:59:87:dc:6d:28:8c:2c:79:dc:88:7d:64: 16:b1:74:42:3d:48:2d:f2:c9:8c:fa:93:75:3a:4f:3a:11:69: 70:63:f7:ab:ff:74:9d:ca:d3:62:e6:25:94:c4:fc:80:0a:2e: 3d:3a:e2:4c:74:0f:b7:84:87:da:25:00:83:a2:24:68:0b:ba: a7:15:6a:ed:42:81:d2:d5:2c:41:ad:f7:29:41:0e:11:0f:b8: 52:29:87:e5:c9:b4:5f:56:ae:5a:b3:a7:8b:9f:34:5d:1a:30: f3:d0:13:78:ef:ec:1c:fb:b9:36:bc:a9:8e:3b:dc:b5:d2:6b: fd:e1:ca:7e:7f:cb:50:be:2a:b3:64:43:7a:e3:7c:d3:38:f2: f9:a6:01:08:89:af:d1:28:8a:58:71:58:41:36:6e:2d:af:c7: 90:d2:12:e7:2d:0e:b6:2a:03:97:54:51:01:f0:5e:be:69:c6: a1:96:db:8c:52:5c:d9:43:7f:a7:73:f3:dd:c5:69:60:7f:bc: 38:30:17:a2:b0:93:d9:3a:5e:4e:78:47:37:2f:ef:4b:86:8d: 99:5e:cd:38:18:78:5b:67:70:98:c4:62:77:d0:54:f5:71:bc: ea:73:7d:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/S/Hn8riZ9CfZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZDdiYjVhN2UtMzFiNi00Y2YzLWE2YjQtN2ZlZDFhZDIxZTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eXcUW9c8CFsy+DyfHbdV7Z07NGn8LfyN1Tg jUGaYltip2j/cQrlawKwwBHn2s5xR69GQTnJ0Zwa7ce/YSsisKZdHQtsoedzCbiP IX8+bl951qe51hDgbLS0m8RnPyAmF8eDRLjpBHK5YON19jTGrnTIW5bPTwbrS75k Y4T0yQzWFHuTBdb9jJqI0grbTXtKzvO0UPS+VyiaJN/XGmbgyAcuQjbODWCh2iWs Lp8z6POxN2CGfsd/GfeKmX9rlkzPg0cKqyQkfoA5uiv20ebFdN+2ti3o4WqoParX JVbHbFhFMrdWDJUs8XH7Y45l4N7FkZ5jDFs2LRO51nJksK9ffwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRN6QQKlBPNK62NvyEf7fBsCWGoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzAwZGJkNzQtNjQyOC0z MjliLTg3YTEtOTNlZWM3NjRlMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPf0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGplgAH7FDgDE5Ha+S/IwvHtdbd5GQk9pFmH3G0ojCx53Ih9ZBaxdEI9 SC3yyYz6k3U6TzoRaXBj96v/dJ3K02LmJZTE/IAKLj064kx0D7eEh9olAIOiJGgL uqcVau1CgdLVLEGt9ylBDhEPuFIph+XJtF9Wrlqzp4ufNF0aMPPQE3jv7Bz7uTa8 qY473LXSa/3hyn5/y1C+KrNkQ3rjfNM48vmmAQiJr9EoilhxWEE2bi2vx5DSEuct DrYqA5dUUQHwXr5pxqGW24xSXNlDf6dz893FaWB/vDgwF6Kwk9k6Xk54Rzcv70uG jZlezTgYeFtncJjEYnfQVPVxvOpzfWs= -----END CERTIFICATE-----Generated at Tue Nov 4 22:27:09 2025 by rpki-client