$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88f5b36f-0596-3cca-aa5b-808dcd0f3989.roa File: 88f5b36f-0596-3cca-aa5b-808dcd0f3989.roa (raw, json) Hash identifier: SquQBx4979i5dQmvFpFF3qhOkLpqe6kCY/p1ipLns2w= Subject key identifier: 80:4E:9E:28:00:5C:20:1D:02:BF:45:BF:A4:C7:5D:55:4A:B0:36:C1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BABFD2EC2DBCEE9E925465A40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88f5b36f-0596-3cca-aa5b-808dcd0f3989.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 16625 IP address blocks: 72.246.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:2e:c2:db:ce:e9:e9:25:46:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=699a56a2-de46-4cab-98cc-9aa4ef15372f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f6:67:39:5e:ad:c7:97:0d:3c:f3:aa:65:6a: 67:f8:d1:ac:e1:b3:1b:81:fa:ec:1d:16:00:f4:90: ae:26:12:2d:02:c1:42:70:78:d9:19:fb:23:32:15: 9e:c9:ed:25:9a:ad:1b:85:b0:21:74:0b:40:34:55: 22:9c:01:2e:68:4a:a7:7a:81:ec:23:44:8f:cd:e0: 3d:56:a9:dd:30:b9:42:01:ae:6d:ad:db:15:ab:64: 47:85:d9:a8:fe:82:18:a6:a5:74:3f:d8:9c:58:17: 9d:08:46:e4:e2:df:2a:06:7c:f4:bb:d5:76:42:34: ae:42:f8:46:29:46:8e:6c:b4:f8:ad:21:c7:49:9f: cf:cc:33:43:14:34:a2:7c:5b:76:26:d1:e7:7a:80: e9:cd:66:24:30:6b:95:68:d7:a1:ed:73:e9:4e:b8: 78:7b:3c:e4:56:04:a5:25:b0:0e:96:e6:f5:2d:1a: 33:14:5b:b5:9f:cd:9e:b8:05:ec:d2:19:93:8f:e2: 43:b7:55:f3:61:d5:e1:f6:0e:07:8b:11:aa:73:e6: 27:b7:e0:b5:b6:6e:c1:06:79:0e:67:f3:91:4b:15: ed:fe:c9:41:93:ca:2a:77:3d:68:49:2f:d7:b0:f7: e3:44:9f:fd:fe:1a:69:bc:0d:06:f1:80:44:53:1e: f8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:4E:9E:28:00:5C:20:1D:02:BF:45:BF:A4:C7:5D:55:4A:B0:36:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88f5b36f-0596-3cca-aa5b-808dcd0f3989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.246.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:71:a9:ea:6a:05:5f:55:03:eb:51:cc:b6:92:ae:dd:ea:33: 93:44:b7:6b:3c:4f:c3:58:a9:7d:d0:d0:92:3b:2f:e8:03:5a: 52:47:e2:d0:e0:17:14:5d:02:7f:57:aa:71:ef:60:3d:96:e2: 24:a5:e9:82:b7:00:99:ae:a2:38:4d:ba:cc:6c:a8:73:99:8b: 38:8b:43:3a:6c:bb:84:0c:57:04:69:89:98:8a:6e:16:bb:7f: 9f:ee:5b:7b:91:88:c5:50:7d:54:28:ad:a8:c8:04:57:25:dd: 7c:50:a6:e2:bd:f0:0c:b2:7e:27:74:77:a8:16:a7:45:64:c9: 56:63:9f:19:2a:1b:1d:e9:28:48:ce:18:5f:09:c7:e1:26:9c: 9d:37:a3:d8:dd:c3:c4:83:5f:96:c9:f9:0e:45:df:d1:f3:d5: 76:55:b2:d5:a0:e3:01:72:37:72:f7:7e:4a:a8:91:61:3a:52: b8:38:2b:bb:cd:68:0a:1b:f1:b2:6f:36:35:53:92:93:2a:6e: fb:c8:fe:d3:be:8d:37:01:1c:91:98:fb:c0:8c:c6:7d:90:ff: bd:21:c6:12:db:70:fe:b5:6a:92:c5:be:53:39:4e:5e:5d:52: 7e:fd:4c:8e:50:0b:d1:31:ba:c0:56:a0:3e:e6:76:8e:45:f8: 12:6a:2e:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/S7C287p6SVGWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk Njk5YTU2YTItZGU0Ni00Y2FiLTk4Y2MtOWFhNGVmMTUzNzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPZnOV6tx5cNPPOqZWpn+NGs4bMbgfrsHRYA 9JCuJhItAsFCcHjZGfsjMhWeye0lmq0bhbAhdAtANFUinAEuaEqneoHsI0SPzeA9 VqndMLlCAa5trdsVq2RHhdmo/oIYpqV0P9icWBedCEbk4t8qBnz0u9V2QjSuQvhG KUaObLT4rSHHSZ/PzDNDFDSifFt2JtHneoDpzWYkMGuVaNeh7XPpTrh4ezzkVgSl JbAOlub1LRozFFu1n82euAXs0hmTj+JDt1XzYdXh9g4HixGqc+Ynt+C1tm7BBnkO Z/ORSxXt/slBk8oqdz1oSS/XsPfjRJ/9/hppvA0G8YBEUx74QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBOnigAXCAdAr9Fv6THXVVKsDbBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODhmNWIzNmYtMDU5Ni0z Y2NhLWFhNWItODA4ZGNkMGYzOTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlxqepqBV9VA+tRzLaSrt3qM5NEt2s8T8NYqX3Q0JI7L+gDWlJH4tDg FxRdAn9XqnHvYD2W4iSl6YK3AJmuojhNusxsqHOZiziLQzpsu4QMVwRpiZiKbha7 f5/uW3uRiMVQfVQorajIBFcl3XxQpuK98Ayyfid0d6gWp0VkyVZjnxkqGx3pKEjO GF8Jx+EmnJ03o9jdw8SDX5bJ+Q5F39Hz1XZVstWg4wFyN3L3fkqokWE6Urg4K7vN aAob8bJvNjVTkpMqbvvI/tO+jTcBHJGY+8CMxn2Q/70hxhLbcP61apLFvlM5Tl5d Un79TI5QC9ExusBWoD7mdo5F+BJqLno= -----END CERTIFICATE-----Generated at Tue Nov 4 22:42:37 2025 by rpki-client