$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0b9a80c-0bfd-3e08-95c5-3161f6dc3051.roa File: c0b9a80c-0bfd-3e08-95c5-3161f6dc3051.roa (raw, json) Hash identifier: YyxdTyOHtKy1ar67gdhhxo1Qsom75yFp60vRiWuVC4U= Subject key identifier: 8A:AC:4C:3C:21:84:39:F0:38:36:4A:84:D0:DE:66:76:5B:66:8E:F6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA9325509F413BF2F7DD8C500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0b9a80c-0bfd-3e08-95c5-3161f6dc3051.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 24319 IP address blocks: 72.247.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:55:09:f4:13:bf:2f:7d:d8:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=a516356a-c57c-4c89-9f84-555f94dea070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:23:99:d8:4f:a2:87:a7:a0:4c:7a:a2:22:7d: b2:a3:af:48:c8:15:71:86:c7:09:77:be:21:6b:3e: 09:9a:cb:39:54:8d:aa:45:ad:11:5e:80:10:4d:e5: 35:3c:79:cc:7b:c7:68:91:29:4d:ce:d7:ac:2a:5e: b7:37:72:97:bf:f1:2c:f3:3b:91:7f:76:80:24:5c: d6:bb:ab:e0:34:9a:73:a7:7d:87:b4:e9:7d:7e:a8: 9d:cc:01:bb:82:f8:64:f5:6f:2c:7b:4c:f1:b1:13: 63:aa:68:dc:49:17:5c:11:8d:08:15:ab:c2:c2:f8: 3b:5a:68:6f:1f:e8:78:e7:06:20:95:a6:4b:95:79: e3:43:d9:a0:56:cc:fd:be:6f:6d:41:4a:e8:86:0b: 09:4b:b9:0a:ca:53:74:df:c3:ee:6f:8e:e4:23:f1: 24:16:c0:e7:8c:99:f5:d4:81:8a:a3:f5:f0:0b:a2: f8:37:a3:58:25:5a:15:76:d5:80:05:09:9b:0f:88: 3e:52:9f:46:3a:3f:38:e0:6d:d2:25:04:32:01:aa: cb:44:f3:35:b7:41:49:ad:ae:b8:30:13:f5:36:2a: 92:d5:cc:68:e6:a6:c2:c2:cb:c8:1a:a8:40:0c:2e: d7:5f:fb:80:19:b7:25:4a:d6:67:7a:58:3e:21:33: 7f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AC:4C:3C:21:84:39:F0:38:36:4A:84:D0:DE:66:76:5B:66:8E:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0b9a80c-0bfd-3e08-95c5-3161f6dc3051.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.247.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:9c:4c:db:db:5b:fd:db:80:f5:f7:3e:b7:9d:97:b6:18:e2: fd:f4:76:15:89:d6:f4:e5:29:b7:b7:d1:97:1c:d3:72:24:b8: 80:0c:7a:33:66:bd:34:3e:cf:c8:c1:cb:06:fe:20:3a:e3:08: d6:54:52:f0:1f:e3:82:de:aa:10:70:0f:36:8f:67:bb:a4:a5: 0f:0a:b4:93:6a:7f:d4:7a:57:c5:c2:ea:8e:1c:9c:91:b0:86: 2e:80:61:ad:a7:6c:f3:e6:4a:58:fe:80:29:e8:ee:99:f5:3d: 67:1e:6a:0b:66:f6:aa:3d:11:c8:a9:f5:03:29:a1:d5:fe:11: a0:59:1e:0b:67:f7:f4:bb:4e:e4:b0:65:90:5e:73:a5:0e:09: 24:f3:a1:f4:99:d6:db:03:bb:0b:5c:b9:d0:f8:3c:c6:aa:ae: 44:29:ce:fc:4c:eb:fc:15:89:f3:b1:1f:3c:0e:d5:e6:cd:fe: 78:23:94:f5:32:4b:9e:8c:af:bd:3b:76:50:3d:cd:6c:27:f9: 4e:c3:4c:3a:1a:f4:a1:d2:4d:45:b5:0a:a7:3b:8e:c7:64:ad: ff:37:49:63:ec:f4:7e:07:c2:13:95:a8:a9:0b:6e:d5:3f:ae: a3:59:25:25:a1:74:12:d5:8d:2a:a9:28:f9:ef:62:bc:8d:30: 0f:e0:eb:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMlUJ9BO/L33YxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YTUxNjM1NmEtYzU3Yy00Yzg5LTlmODQtNTU1Zjk0ZGVhMDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCOZ2E+ih6egTHqiIn2yo69IyBVxhscJd74h az4Jmss5VI2qRa0RXoAQTeU1PHnMe8dokSlNztesKl63N3KXv/Es8zuRf3aAJFzW u6vgNJpzp32HtOl9fqidzAG7gvhk9W8se0zxsRNjqmjcSRdcEY0IFavCwvg7Wmhv H+h45wYglaZLlXnjQ9mgVsz9vm9tQUrohgsJS7kKylN038Pub47kI/EkFsDnjJn1 1IGKo/XwC6L4N6NYJVoVdtWABQmbD4g+Up9GOj844G3SJQQyAarLRPM1t0FJra64 MBP1NiqS1cxo5qbCwsvIGqhADC7XX/uAGbclStZnelg+ITN/uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqsTDwhhDnwODZKhNDeZnZbZo72MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzBiOWE4MGMtMGJmZC0z ZTA4LTk1YzUtMzE2MWY2ZGMzMDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPfuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEacTNvbW/3bgPX3Predl7YY4v30dhWJ1vTlKbe30Zcc03IkuIAMejNm vTQ+z8jBywb+IDrjCNZUUvAf44LeqhBwDzaPZ7ukpQ8KtJNqf9R6V8XC6o4cnJGw hi6AYa2nbPPmSlj+gCno7pn1PWceagtm9qo9Ecip9QMpodX+EaBZHgtn9/S7TuSw ZZBec6UOCSTzofSZ1tsDuwtcudD4PMaqrkQpzvxM6/wVifOxHzwO1ebN/ngjlPUy S56Mr707dlA9zWwn+U7DTDoa9KHSTUW1Cqc7jsdkrf83SWPs9H4HwhOVqKkLbtU/ rqNZJSWhdBLVjSqpKPnvYryNMA/g698= -----END CERTIFICATE-----Generated at Wed Nov 5 01:29:52 2025 by rpki-client