$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9515060-0bd3-3fee-96ac-906b45da358e.roa File: c9515060-0bd3-3fee-96ac-906b45da358e.roa (raw, json) Hash identifier: u/IM6/poxgdeV/Gnnd5CeBBHaAwodNUpRWa/9a8jL6E= Subject key identifier: 36:CA:72:D3:95:56:4B:E4:36:22:27:E3:A8:B9:ED:80:02:FB:76:A6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BABFD2F1B37EC02FDC66F1780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9515060-0bd3-3fee-96ac-906b45da358e.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 16625 IP address blocks: 72.247.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:2f:1b:37:ec:02:fd:c6:6f:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=7fc9afc8-f62d-4eb0-8394-db5658ddb2b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2a:7b:84:cf:6d:7c:f7:4b:af:2f:1f:8d:13: e8:ec:49:81:08:e9:65:38:9a:2f:c7:d6:ec:76:d0: 24:af:35:fd:32:c9:bc:74:ae:3c:b2:ff:ef:72:5f: 01:6b:73:66:05:df:c6:e2:ae:d0:7a:1e:b6:b2:90: 56:1c:b3:1c:a6:87:a7:1e:fb:a9:3b:e0:6f:9d:82: 04:d1:00:17:3e:aa:da:c5:2e:e0:b5:bc:f4:1c:db: 5f:e8:1c:c5:11:4e:fe:97:59:82:29:c5:4a:e8:43: 13:67:c0:01:31:50:d9:8b:8b:1d:3e:62:dd:74:a7: f8:27:46:50:09:c9:24:43:ba:ad:84:6d:b0:97:1b: f3:f0:c9:fc:d3:59:66:6f:92:57:e4:c2:bb:81:fe: eb:97:c1:5a:72:b9:48:78:b8:e5:87:b6:c6:a7:02: 52:cc:5e:f9:93:47:e8:75:8b:8c:73:6c:f4:86:d9: c3:1b:4e:34:a0:87:ce:fe:5f:ab:2f:4f:fe:e2:61: c0:9a:32:b5:59:b2:30:0a:74:e7:85:c6:6f:a7:7e: ff:b0:a7:ea:c4:e6:63:26:31:5e:82:a7:e6:e8:37: 8a:26:d2:b6:50:66:38:ef:f5:77:90:f4:e6:1d:5d: e1:ab:e6:af:fe:1b:d3:ae:cd:4f:de:84:f0:6f:38: 70:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CA:72:D3:95:56:4B:E4:36:22:27:E3:A8:B9:ED:80:02:FB:76:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9515060-0bd3-3fee-96ac-906b45da358e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.247.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:16:00:fc:70:71:c8:de:17:a6:d0:94:6f:78:68:ba:dc:90: 51:5a:eb:d8:b3:7a:ae:bf:26:96:59:f6:4d:17:81:34:03:b3: 1c:04:cd:3c:79:e2:5a:60:bd:4f:a3:4e:6b:91:f9:b9:a7:69: 13:95:e0:a4:57:bd:fa:cd:86:ff:0a:0c:55:ae:44:dd:ed:fa: 48:55:63:db:ad:f8:c5:75:b1:6c:de:9d:49:cd:1d:f8:25:c4: 7a:b4:31:3d:c6:ff:77:90:06:38:00:94:50:16:25:5d:5e:5f: 7e:ef:92:68:b8:b6:21:97:81:eb:da:7c:56:27:51:67:4a:04: 16:16:6c:fe:fb:0c:4c:54:46:54:2e:b0:27:28:a5:97:45:e2: 28:69:c9:43:f9:45:32:60:b7:b0:a5:e5:ef:5a:ea:1d:96:0b: bd:9a:62:87:cf:e5:8c:1c:ec:3a:e0:8c:0f:b9:86:83:12:29: af:0b:fe:36:c0:1b:8c:28:b6:36:90:9b:b4:f3:42:94:9e:d9: cb:2b:b4:c4:b8:55:31:bf:0a:99:63:20:67:53:b9:43:53:50: eb:4b:34:f4:8f:56:e5:2b:fa:11:86:09:22:45:d5:3c:d3:7a: f5:be:11:ac:2d:a6:cd:6b:43:15:1f:a0:4c:11:3e:28:d5:29: 2a:e2:b2:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/S8bN+wC/cZvF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk N2ZjOWFmYzgtZjYyZC00ZWIwLTgzOTQtZGI1NjU4ZGRiMmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgip7hM9tfPdLry8fjRPo7EmBCOllOJovx9bs dtAkrzX9Msm8dK48sv/vcl8Ba3NmBd/G4q7Qeh62spBWHLMcpoenHvupO+BvnYIE 0QAXPqraxS7gtbz0HNtf6BzFEU7+l1mCKcVK6EMTZ8ABMVDZi4sdPmLddKf4J0ZQ CckkQ7qthG2wlxvz8Mn801lmb5JX5MK7gf7rl8FacrlIeLjlh7bGpwJSzF75k0fo dYuMc2z0htnDG040oIfO/l+rL0/+4mHAmjK1WbIwCnTnhcZvp37/sKfqxOZjJjFe gqfm6DeKJtK2UGY47/V3kPTmHV3hq+av/hvTrs1P3oTwbzhwbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbKctOVVkvkNiIn46i57YAC+3amMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzk1MTUwNjAtMGJkMy0z ZmVlLTk2YWMtOTA2YjQ1ZGEzNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSPdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAWAPxwccjeF6bQlG94aLrckFFa69izeq6/JpZZ9k0XgTQDsxwEzTx5 4lpgvU+jTmuR+bmnaROV4KRXvfrNhv8KDFWuRN3t+khVY9ut+MV1sWzenUnNHfgl xHq0MT3G/3eQBjgAlFAWJV1eX37vkmi4tiGXgevafFYnUWdKBBYWbP77DExURlQu sCcopZdF4ihpyUP5RTJgt7Cl5e9a6h2WC72aYofP5Ywc7DrgjA+5hoMSKa8L/jbA G4wotjaQm7TzQpSe2csrtMS4VTG/CpljIGdTuUNTUOtLNPSPVuUr+hGGCSJF1TzT evW+Eawtps1rQxUfoEwRPijVKSrislI= -----END CERTIFICATE-----Generated at Tue Nov 4 22:40:46 2025 by rpki-client