$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c3fcf00-ac5c-3598-9597-be4536e9dc4e.roa File: 9c3fcf00-ac5c-3598-9597-be4536e9dc4e.roa (raw, json) Hash identifier: 96d3xxMXnT0yTO7/woviml9ghgAFBpnFBfHwvkfL5EI= Subject key identifier: 87:7F:A7:CC:2C:87:27:F6:3A:FD:67:06:F4:6E:6B:E0:60:4A:CF:D9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA39D036DB3EC41E9EB7A1840 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c3fcf00-ac5c-3598-9597-be4536e9dc4e.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 35994 IP address blocks: 72.246.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:03:6d:b3:ec:41:e9:eb:7a:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=3f3a3534-b590-4adf-a86a-a0687c0ff2bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:08:80:c3:e4:17:f6:0a:d9:25:d3:be:75:3d: 6a:27:9d:59:ec:d9:26:7b:fe:1b:1e:77:27:6b:1a: 6b:5a:84:40:93:66:16:8a:68:61:74:58:96:08:95: 40:6f:ac:6d:e9:12:a5:bf:fe:8d:69:ad:2c:86:7e: 02:2a:e1:66:03:78:da:3a:0f:cf:6c:9c:af:43:9f: 08:bb:21:13:70:80:15:71:3b:79:45:b3:1e:8f:1d: 65:29:81:d3:ed:4e:b2:ae:6b:ee:4e:db:a5:e0:fd: f3:95:2b:9f:2f:a6:16:6c:f1:44:21:9a:12:c5:19: 55:22:2f:14:54:4d:67:d8:9f:6b:6f:4e:cc:bb:2e: e4:b5:20:a5:d1:3e:d6:ff:7d:e3:94:93:27:cc:15: 65:e9:ca:92:1f:a2:ea:da:87:cc:7c:08:89:37:37: 1a:8a:ad:84:39:47:ad:fd:a3:70:60:34:7c:b2:23: 50:50:e6:d0:a2:fb:e2:03:14:87:c7:bd:10:35:57: db:0a:7f:62:25:63:ef:d7:8b:03:c2:e9:ef:11:d1: f6:2e:e2:ea:ac:b6:4b:cf:92:fa:9e:81:b9:16:e5: 1a:43:3d:2e:eb:87:df:6e:53:5d:1a:6f:0e:d2:e8: 68:f6:e9:d0:08:10:71:e0:f6:2e:8b:8e:f6:06:2c: 74:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7F:A7:CC:2C:87:27:F6:3A:FD:67:06:F4:6E:6B:E0:60:4A:CF:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c3fcf00-ac5c-3598-9597-be4536e9dc4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.246.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:3e:47:5d:9d:cf:7b:95:7a:d5:4d:83:c1:8a:37:90:2f:7a: 08:55:da:6a:5a:2f:11:4e:83:c1:20:54:30:b4:89:70:c6:d1: da:78:88:62:40:f1:d5:16:fc:91:2e:47:3a:97:48:f4:f2:5d: c3:fc:5f:9b:ee:9b:21:99:fe:53:aa:d6:86:2e:ba:38:e3:ff: 4e:c0:e6:c3:6d:39:b7:fd:df:09:d5:2c:da:71:ad:ae:f1:c5: 44:d9:a8:91:ee:47:2d:22:1f:41:67:27:0c:d8:59:b9:ba:3b: ae:ce:d9:50:09:53:43:08:e3:ed:fc:1a:e7:2d:4a:75:a4:61: 9f:fe:25:91:15:41:f4:d6:40:77:32:50:e8:b8:f9:cd:be:0c: d3:9a:eb:6b:14:f1:69:c7:fd:e8:79:ed:81:24:77:17:38:aa: f5:31:a1:67:e4:a2:fd:73:27:b5:b0:99:99:2d:68:62:24:03: 61:f0:26:88:01:0e:3e:bc:27:6a:c6:02:6f:40:a6:cc:f5:5b: c2:8b:7f:44:da:2b:3b:8e:7f:6f:c7:c9:bd:fa:e9:2c:7c:93: 81:dd:e2:0d:d3:9c:02:80:42:d3:f9:fc:75:93:8c:ce:ec:19: 86:aa:2a:05:cb:fa:2c:d1:bc:37:80:26:5d:e4:56:dc:a7:93: a5:a0:2e:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQNts+xB6et6GEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk M2YzYTM1MzQtYjU5MC00YWRmLWE4NmEtYTA2ODdjMGZmMmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggiAw+QX9grZJdO+dT1qJ51Z7Nkme/4bHncn axprWoRAk2YWimhhdFiWCJVAb6xt6RKlv/6Naa0shn4CKuFmA3jaOg/PbJyvQ58I uyETcIAVcTt5RbMejx1lKYHT7U6yrmvuTtul4P3zlSufL6YWbPFEIZoSxRlVIi8U VE1n2J9rb07Muy7ktSCl0T7W/33jlJMnzBVl6cqSH6Lq2ofMfAiJNzcaiq2EOUet /aNwYDR8siNQUObQovviAxSHx70QNVfbCn9iJWPv14sDwunvEdH2LuLqrLZLz5L6 noG5FuUaQz0u64ffblNdGm8O0uho9unQCBBx4PYui472Bix0pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFId/p8wshyf2Ov1nBvRua+BgSs/ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWMzZmNmMDAtYWM1Yy0z NTk4LTk1OTctYmU0NTM2ZTlkYzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSPbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0+R12dz3uVetVNg8GKN5AveghV2mpaLxFOg8EgVDC0iXDG0dp4iGJA 8dUW/JEuRzqXSPTyXcP8X5vumyGZ/lOq1oYuujjj/07A5sNtObf93wnVLNpxra7x xUTZqJHuRy0iH0FnJwzYWbm6O67O2VAJU0MI4+38GuctSnWkYZ/+JZEVQfTWQHcy UOi4+c2+DNOa62sU8WnH/eh57YEkdxc4qvUxoWfkov1zJ7WwmZktaGIkA2HwJogB Dj68J2rGAm9Apsz1W8KLf0TaKzuOf2/Hyb366Sx8k4Hd4g3TnAKAQtP5/HWTjM7s GYaqKgXL+izRvDeAJl3kVtynk6WgLjM= -----END CERTIFICATE-----Generated at Tue Nov 4 23:56:55 2025 by rpki-client