$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbac86b9-ad52-3f12-946d-2d55637800a8.roa File: cbac86b9-ad52-3f12-946d-2d55637800a8.roa (raw, json) Hash identifier: ApaAcaeRPAxGAntheE1iUjmdYefl/GoC7oPze7B0KfM= Subject key identifier: 54:48:A9:B5:28:C0:A4:6D:FE:D7:1F:1D:EE:BD:5F:81:E0:79:1B:DE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BABFD18CA8F4B9F9E2078E580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbac86b9-ad52-3f12-946d-2d55637800a8.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 16625 IP address blocks: 72.247.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:18:ca:8f:4b:9f:9e:20:78:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=fcc284d1-399e-4001-ae4f-a54e1912ddc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2d:4e:df:d9:b7:fc:8b:2c:dc:be:6e:be:c9: e1:cc:57:18:7c:55:16:ef:31:69:4f:0f:03:10:12: 6b:9a:b2:47:d3:b4:b6:59:12:f2:ce:71:61:a2:ce: 4b:ba:94:3e:90:22:9d:e1:b3:88:17:9b:18:eb:ee: a8:77:2f:6a:d2:42:53:22:33:ec:13:2e:cc:e9:7a: 5f:08:3a:61:71:6a:17:fd:78:17:5b:d9:cb:77:c2: 03:a8:3d:c9:8d:ff:08:72:98:65:85:8b:04:08:cd: 37:32:99:cd:b1:78:73:09:83:7e:4a:c7:8e:64:11: 53:98:12:28:96:86:5e:37:e2:19:6f:13:c3:f4:ed: bd:fb:a7:e6:73:3c:89:45:40:75:be:19:a1:90:95: 0f:9a:33:4e:6a:49:6d:22:47:f9:39:78:ed:75:93: b1:59:65:0c:1b:8c:a1:e9:56:56:cb:f6:c4:65:77: c9:91:91:62:25:36:21:62:0d:35:76:38:bf:e2:03: bc:cd:71:4c:d6:1c:75:35:2e:d8:70:ba:01:93:26: 19:fe:09:0e:20:28:16:1e:78:73:df:e5:dc:5c:aa: 5c:8d:3c:a2:67:c2:e3:81:71:4d:ca:a4:ea:88:65: b7:61:d7:b7:d9:f8:2a:5e:94:0b:77:5c:c5:5d:32: ce:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:48:A9:B5:28:C0:A4:6D:FE:D7:1F:1D:EE:BD:5F:81:E0:79:1B:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbac86b9-ad52-3f12-946d-2d55637800a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.247.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:03:b0:4f:36:e4:50:59:09:1d:8b:e3:11:c8:e7:e4:2e:f7: c6:5f:a1:53:df:cd:14:2d:72:c8:df:9f:ae:4f:fe:e9:28:80: ba:3f:2b:4a:c1:8c:df:db:b3:1d:1b:d6:79:5a:80:3a:0b:54: d6:7b:cb:f5:0f:72:f2:3e:ea:f8:2d:63:f8:3d:d3:65:09:47: cc:be:78:eb:57:e6:a6:66:a9:88:08:6f:79:a3:4d:82:16:c5: cc:59:bb:9a:65:ed:56:87:d6:5f:bc:69:62:7b:f3:c9:c6:79: c4:6f:52:9d:4f:91:4c:17:59:c4:e5:f9:e6:2a:73:41:52:d7: c6:ab:64:34:d0:0e:5d:5a:37:bf:73:dc:ab:59:3a:d8:c7:a2: 51:e7:26:43:96:6f:3c:d3:7a:79:aa:17:0f:0d:ea:31:d4:db: be:00:ff:18:56:f5:1d:35:ee:07:be:5d:63:ef:e7:c3:e0:07: 19:31:eb:21:93:0a:56:21:56:d9:b6:d4:bc:21:9e:76:59:fe: f4:90:ad:e0:5d:96:59:74:1a:9d:26:10:d8:96:8d:3e:47:d6: e2:5f:eb:90:b8:fd:8a:8e:da:47:41:5d:a3:11:e2:97:d8:d7: 7f:e6:9e:c7:be:34:f8:d9:f3:71:4b:e4:70:86:19:91:f6:08: 2c:5e:0e:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/RjKj0ufniB45YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZmNjMjg0ZDEtMzk5ZS00MDAxLWFlNGYtYTU0ZTE5MTJkZGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3S1O39m3/Iss3L5uvsnhzFcYfFUW7zFpTw8D EBJrmrJH07S2WRLyznFhos5LupQ+kCKd4bOIF5sY6+6ody9q0kJTIjPsEy7M6Xpf CDphcWoX/XgXW9nLd8IDqD3Jjf8IcphlhYsECM03MpnNsXhzCYN+SseOZBFTmBIo loZeN+IZbxPD9O29+6fmczyJRUB1vhmhkJUPmjNOakltIkf5OXjtdZOxWWUMG4yh 6VZWy/bEZXfJkZFiJTYhYg01dji/4gO8zXFM1hx1NS7YcLoBkyYZ/gkOICgWHnhz 3+XcXKpcjTyiZ8LjgXFNyqTqiGW3Yde32fgqXpQLd1zFXTLOuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRIqbUowKRt/tcfHe69X4HgeRveMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2JhYzg2YjktYWQ1Mi0z ZjEyLTk0NmQtMmQ1NTYzNzgwMGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPd0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkDsE825FBZCR2L4xHI5+Qu98ZfoVPfzRQtcsjfn65P/ukogLo/K0rB jN/bsx0b1nlagDoLVNZ7y/UPcvI+6vgtY/g902UJR8y+eOtX5qZmqYgIb3mjTYIW xcxZu5pl7VaH1l+8aWJ788nGecRvUp1PkUwXWcTl+eYqc0FS18arZDTQDl1aN79z 3KtZOtjHolHnJkOWbzzTenmqFw8N6jHU274A/xhW9R017ge+XWPv58PgBxkx6yGT ClYhVtm21LwhnnZZ/vSQreBdlll0Gp0mENiWjT5H1uJf65C4/YqO2kdBXaMR4pfY 13/mnse+NPjZ83FL5HCGGZH2CCxeDvQ= -----END CERTIFICATE-----Generated at Wed Nov 5 06:24:01 2025 by rpki-client