$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e4e5eb2-92d8-33bd-8e45-c6d45e5c6285.roa File: 5e4e5eb2-92d8-33bd-8e45-c6d45e5c6285.roa (raw, json) Hash identifier: /0N4jXwkRCnwrn2s7gPRRr3z4tK6otPH8cGHJkzdE3Y= Subject key identifier: B3:02:29:91:C2:6C:D4:53:34:11:6D:6C:69:E3:AC:CE:2F:2E:DC:01 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BABFD1941D49FC83C1A122780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e4e5eb2-92d8-33bd-8e45-c6d45e5c6285.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 24319 IP address blocks: 72.247.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:19:41:d4:9f:c8:3c:1a:12:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=b673687e-b4a0-4438-876b-115c52f76ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:68:e1:5b:43:31:58:2b:4f:10:02:56:87:aa: fe:80:7c:35:15:cf:33:0b:db:0a:23:9d:26:a1:26: 4d:96:b4:a5:01:5d:32:ad:d6:a2:17:d6:21:b3:15: fd:27:4c:f7:e9:c9:92:e4:87:50:70:fa:59:61:0c: ec:7d:10:b5:b9:ea:8b:5e:af:ba:ca:f5:cd:60:06: 59:38:cb:2e:48:1b:09:d2:4e:6d:86:f4:76:61:a5: a5:24:af:24:05:30:db:25:c7:3a:8a:32:05:0b:6b: aa:75:f2:a9:5f:ee:e1:7e:83:e2:a9:c5:77:d7:aa: 19:d7:d7:66:54:23:1d:7e:4f:aa:42:42:47:cb:f1: ee:d8:29:80:f3:35:54:df:53:47:52:45:71:75:41: fe:2c:3f:3e:23:7a:10:97:fa:d3:f2:ea:c6:95:ed: 2b:e1:cc:38:5a:2d:f0:cc:e3:20:bd:ba:55:24:3a: 67:88:f0:a0:27:64:57:3f:80:f9:15:5c:1b:09:c5: a0:85:2b:96:5e:22:58:b6:23:90:96:c5:57:a6:1c: 0a:38:1f:4c:da:40:94:bb:c1:4d:86:04:2e:30:5a: 0d:5c:9c:c6:bd:2f:4f:68:4f:f6:b4:64:b5:49:f5: a9:33:d8:62:46:56:59:dd:34:10:40:b8:44:3a:b0: ad:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:02:29:91:C2:6C:D4:53:34:11:6D:6C:69:E3:AC:CE:2F:2E:DC:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e4e5eb2-92d8-33bd-8e45-c6d45e5c6285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.247.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:ca:cf:f9:91:a0:f6:b6:ef:1f:ad:dd:13:e8:23:29:1d:28: 5e:dc:51:2a:8f:be:35:13:4c:0d:b4:c3:fe:d7:4b:1b:94:07: 23:54:10:84:1f:98:ec:de:81:e1:bf:0c:05:d9:37:29:53:7c: 23:63:47:96:69:e4:82:b0:5a:6a:42:92:26:0c:6c:15:90:b5: c9:75:8a:73:47:4f:64:e7:3d:74:10:4b:30:1f:ec:82:f9:58: f5:60:09:20:d2:7b:a5:e1:20:06:c4:66:fa:c1:30:5d:ff:e6: 1a:ed:ab:44:2c:2b:7d:1b:77:b3:9c:95:5e:3c:40:e8:72:f7: 77:b2:4d:a7:2f:3f:4a:bb:da:86:10:42:14:1c:3e:08:d7:8e: cc:68:65:ab:c0:99:38:33:db:e9:7a:a7:a6:5c:08:74:39:2b: 58:4d:ad:3c:ee:fb:bf:2d:11:36:78:8f:1d:f8:3a:58:cd:57: 19:fc:be:e6:cb:4e:8c:a4:4b:80:ce:04:e6:67:be:e3:b0:c8: b1:f7:4e:ed:e1:1f:a9:fa:08:aa:e9:40:ed:f8:1a:db:e8:e4: d8:ef:f6:9e:1b:f6:22:e7:c6:16:25:55:d8:77:d0:ce:78:06: 00:58:80:6d:ae:3d:8a:6b:9a:d8:4d:9c:da:f2:74:5f:98:d6: 20:fc:30:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/RlB1J/IPBoSJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk YjY3MzY4N2UtYjRhMC00NDM4LTg3NmItMTE1YzUyZjc2YWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2jhW0MxWCtPEAJWh6r+gHw1Fc8zC9sKI50m oSZNlrSlAV0yrdaiF9YhsxX9J0z36cmS5IdQcPpZYQzsfRC1ueqLXq+6yvXNYAZZ OMsuSBsJ0k5thvR2YaWlJK8kBTDbJcc6ijIFC2uqdfKpX+7hfoPiqcV316oZ19dm VCMdfk+qQkJHy/Hu2CmA8zVU31NHUkVxdUH+LD8+I3oQl/rT8urGle0r4cw4Wi3w zOMgvbpVJDpniPCgJ2RXP4D5FVwbCcWghSuWXiJYtiOQlsVXphwKOB9M2kCUu8FN hgQuMFoNXJzGvS9PaE/2tGS1SfWpM9hiRlZZ3TQQQLhEOrCtkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMCKZHCbNRTNBFtbGnjrM4vLtwBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWU0ZTVlYjItOTJkOC0z M2JkLThlNDUtYzZkNDVlNWM2Mjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPe9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/Kz/mRoPa27x+t3RPoIykdKF7cUSqPvjUTTA20w/7XSxuUByNUEIQf mOzegeG/DAXZNylTfCNjR5Zp5IKwWmpCkiYMbBWQtcl1inNHT2TnPXQQSzAf7IL5 WPVgCSDSe6XhIAbEZvrBMF3/5hrtq0QsK30bd7OclV48QOhy93eyTacvP0q72oYQ QhQcPgjXjsxoZavAmTgz2+l6p6ZcCHQ5K1hNrTzu+78tETZ4jx34OljNVxn8vubL ToykS4DOBOZnvuOwyLH3Tu3hH6n6CKrpQO34Gtvo5Njv9p4b9iLnxhYlVdh30M54 BgBYgG2uPYprmthNnNrydF+Y1iD8MJM= -----END CERTIFICATE-----Generated at Wed Nov 5 04:32:43 2025 by rpki-client