$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/710afa09-a2c0-3a9d-8496-9e3a4fbbcc19.roa File: 710afa09-a2c0-3a9d-8496-9e3a4fbbcc19.roa (raw, json) Hash identifier: RXbco1GSJNEK0rnk4zVJzVQABbzWL7V9c/+Fq2YkZjg= Subject key identifier: C7:52:7D:55:E9:F4:A0:F0:80:A4:23:59:DA:25:9B:93:A0:A1:C9:63 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BABFD18E63648E507A3733D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/710afa09-a2c0-3a9d-8496-9e3a4fbbcc19.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 20940 IP address blocks: 72.247.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:18:e6:36:48:e5:07:a3:73:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=991e4d99-0ee5-4777-9861-1b5b94fe4541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d7:51:0e:8f:14:7b:f2:99:5a:16:cc:35:be: 80:06:92:25:ec:34:17:d8:4e:7e:f4:f4:b7:24:7e: e8:1f:7b:7f:bc:51:89:59:32:54:de:6b:42:31:07: 4f:10:d7:97:76:c4:31:d3:06:ff:15:ec:83:79:a1: 0e:e0:2a:50:d7:19:ee:70:5d:b0:62:83:89:8c:b6: 81:c0:87:2d:d5:56:af:0c:8f:d6:68:d6:e7:f2:e7: 1a:ca:36:59:db:a5:f8:0b:31:b6:5d:4c:91:fa:10: 4e:af:26:ba:f2:4c:1e:40:b7:b3:b4:c9:e4:8f:47: 9f:8f:c4:41:fb:2a:40:03:82:e4:4a:1d:4a:cd:32: 0f:94:e5:e6:c6:e1:70:96:0f:31:f9:6e:98:28:37: 20:79:fa:85:cb:f8:13:76:56:4f:2d:aa:65:84:f8: 89:76:f5:d8:03:3d:39:ec:94:37:88:5d:07:e8:47: b7:8b:c5:5f:f2:69:f9:cd:80:26:a9:74:a8:7b:8d: 87:96:ef:31:6d:4f:f3:b8:2d:b6:9b:26:d1:8c:41: bf:28:0e:b4:9b:19:f1:4b:e4:a6:9a:53:11:09:78: 26:cb:40:8d:d3:50:96:05:4b:d6:ad:83:ca:a2:21: 2a:2f:d7:2d:23:44:96:9c:bb:5b:10:95:e6:7d:97: 52:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:52:7D:55:E9:F4:A0:F0:80:A4:23:59:DA:25:9B:93:A0:A1:C9:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/710afa09-a2c0-3a9d-8496-9e3a4fbbcc19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.247.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:6a:a7:f8:e7:53:67:db:28:1e:71:8a:d1:85:4d:82:30:02: e1:3c:3b:7f:fa:83:d6:5a:9c:57:74:77:03:d8:33:81:8c:f4: fb:f5:5b:83:2a:e1:2e:37:d8:94:4e:73:70:18:c8:a6:80:71: d8:da:ec:bc:5f:97:47:34:09:6c:a9:26:9d:fe:f4:d8:4c:13: 0b:0b:71:79:a1:42:83:a8:59:b2:fb:64:e2:06:02:ce:a2:76: 4a:e6:5a:19:5d:e8:43:b3:d1:4f:91:bc:5e:f6:98:4d:7d:26: ca:b4:0a:d1:b9:9a:0e:75:b4:c0:bb:e5:56:f6:a4:0c:5f:65: e7:dd:e2:df:45:c8:be:1a:d4:29:83:eb:96:06:2a:9d:7a:df: ae:06:da:9c:90:8e:17:5e:cd:e7:c0:96:51:59:47:0c:72:08: cd:bf:54:97:26:53:a7:50:7a:d0:1d:63:0d:1a:f8:1c:f9:d0: 2d:29:5f:8c:34:d0:f3:fb:52:ce:55:d2:f3:c2:6f:60:33:39: 3b:49:ab:d2:92:41:63:a2:22:18:e1:2a:a0:72:5e:c8:80:b5: 0d:69:ce:aa:f0:03:47:42:ae:ea:4c:b5:08:39:a1:41:2c:47: 08:dd:03:16:8d:92:39:be:dc:0b:db:97:52:34:92:4d:42:cb: b3:57:cb:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/RjmNkjlB6NzPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk OTkxZTRkOTktMGVlNS00Nzc3LTk4NjEtMWI1Yjk0ZmU0NTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79dRDo8Ue/KZWhbMNb6ABpIl7DQX2E5+9PS3 JH7oH3t/vFGJWTJU3mtCMQdPENeXdsQx0wb/FeyDeaEO4CpQ1xnucF2wYoOJjLaB wIct1VavDI/WaNbn8ucayjZZ26X4CzG2XUyR+hBOrya68kweQLeztMnkj0efj8RB +ypAA4LkSh1KzTIPlOXmxuFwlg8x+W6YKDcgefqFy/gTdlZPLaplhPiJdvXYAz05 7JQ3iF0H6Ee3i8Vf8mn5zYAmqXSoe42Hlu8xbU/zuC22mybRjEG/KA60mxnxS+Sm mlMRCXgmy0CN01CWBUvWrYPKoiEqL9ctI0SWnLtbEJXmfZdSwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdSfVXp9KDwgKQjWdolm5OgocljMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzEwYWZhMDktYTJjMC0z YTlkLTg0OTYtOWUzYTRmYmJjYzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPeZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRqp/jnU2fbKB5xitGFTYIwAuE8O3/6g9ZanFd0dwPYM4GM9Pv1W4Mq 4S432JROc3AYyKaAcdja7Lxfl0c0CWypJp3+9NhMEwsLcXmhQoOoWbL7ZOIGAs6i dkrmWhld6EOz0U+RvF72mE19Jsq0CtG5mg51tMC75Vb2pAxfZefd4t9FyL4a1CmD 65YGKp16364G2pyQjhdezefAllFZRwxyCM2/VJcmU6dQetAdYw0a+Bz50C0pX4w0 0PP7Us5V0vPCb2AzOTtJq9KSQWOiIhjhKqByXsiAtQ1pzqrwA0dCrupMtQg5oUEs RwjdAxaNkjm+3Avbl1I0kk1Cy7NXy1k= -----END CERTIFICATE-----Generated at Wed Nov 5 00:04:27 2025 by rpki-client