$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce901dff-264b-3028-91d8-c31311f305e1.roa File: ce901dff-264b-3028-91d8-c31311f305e1.roa (raw, json) Hash identifier: WEP88+nhUwY1NzfyNyjU6AK8xSRYF5Fds9rG64pvmC4= Subject key identifier: 61:DD:3C:65:2F:4C:58:CE:50:56:5B:04:C3:E7:87:AC:22:07:1D:87 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA667A083924B783B6F6F8400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce901dff-264b-3028-91d8-c31311f305e1.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 18717 IP address blocks: 72.246.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:a0:83:92:4b:78:3b:6f:6f:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=8c60e712-c363-498f-8fbf-9266ebf168a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fa:8b:bd:ab:85:78:38:b8:7f:76:01:2a:c9: dc:d2:3e:50:8a:ac:2b:37:10:5a:ad:5c:b2:13:ae: 87:93:16:96:a3:a3:0f:ad:ef:c5:dd:6e:33:f6:42: bb:fe:8c:54:80:c3:74:2d:c0:e7:53:d9:8b:4b:e4: 15:16:04:25:64:a3:36:88:bb:dd:49:62:ba:56:b4: a2:c9:be:a8:45:73:1d:86:c1:95:60:f1:44:54:b2: 9d:67:c7:a2:01:43:bc:13:73:ed:af:90:80:e0:f8: cc:60:a6:78:93:21:fc:66:3d:19:2c:94:4c:9c:d5: ea:4a:8c:3f:f1:ea:e2:46:ef:db:28:bb:d9:f4:15: 13:3a:d8:90:ad:f5:7b:80:e5:b0:6a:1e:d6:9b:d5: 4d:ee:06:26:02:ab:94:92:32:7b:cb:63:b3:e1:6a: 4e:04:b7:e2:92:fd:5e:76:b6:4c:93:89:8b:8d:ec: 16:2e:6f:d6:f3:fa:1b:c2:97:2b:00:fb:09:ba:2d: b4:29:aa:03:a1:d3:12:83:99:cc:cc:8b:ce:3f:7a: 03:df:e1:e9:40:3e:14:de:ef:11:c8:af:27:c4:ff: 9e:48:58:a4:91:47:a4:e4:76:d6:a5:de:43:fd:53: 1e:84:3e:89:dd:69:6f:f5:b8:af:c2:b6:50:59:5c: 04:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DD:3C:65:2F:4C:58:CE:50:56:5B:04:C3:E7:87:AC:22:07:1D:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce901dff-264b-3028-91d8-c31311f305e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.246.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:da:c3:d0:92:b4:5d:9a:6a:db:15:71:25:23:ca:b2:3d:8d: af:85:50:98:b4:8f:8a:fe:f4:b8:83:43:a7:30:63:a8:3b:37: fe:9c:27:fc:c9:a6:15:a2:66:0b:a7:c4:fa:c8:83:23:38:f9: 74:63:92:e0:88:19:49:1c:29:6d:d7:eb:4e:8a:35:55:62:d0: 54:d0:76:16:87:51:68:81:f4:20:91:d3:17:fd:6d:71:dc:23: e5:45:54:4b:50:91:c8:e6:79:59:61:94:b4:00:e7:38:49:00: 60:63:70:7c:e3:b5:ce:58:42:7a:e1:30:be:88:8f:0f:a7:df: 89:6b:99:cd:cf:bb:e3:e9:7c:58:06:4a:e3:35:28:03:1c:42: b0:c6:dc:aa:9a:e2:31:30:ec:11:df:87:8c:19:93:da:ea:77: 9b:14:01:cb:6e:d6:2d:27:6d:9b:bf:6f:f6:f6:11:95:54:8a: 03:73:71:96:dd:73:55:24:e6:c7:53:ba:b5:3c:96:1b:94:36: 81:d6:84:0a:29:39:6e:a5:d2:fb:ac:12:ce:d1:b0:0c:a1:ca: e9:e4:fd:16:f3:d2:66:b0:43:d9:60:91:97:6b:a1:9e:4f:8d: b1:8e:0b:5c:83:21:0e:0c:27:02:fd:9a:c7:90:93:b8:6a:0c: 66:01:4d:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ6CDkkt4O29vhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk OGM2MGU3MTItYzM2My00OThmLThmYmYtOTI2NmViZjE2OGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvqLvauFeDi4f3YBKsnc0j5QiqwrNxBarVyy E66HkxaWo6MPre/F3W4z9kK7/oxUgMN0LcDnU9mLS+QVFgQlZKM2iLvdSWK6VrSi yb6oRXMdhsGVYPFEVLKdZ8eiAUO8E3Ptr5CA4PjMYKZ4kyH8Zj0ZLJRMnNXqSow/ 8eriRu/bKLvZ9BUTOtiQrfV7gOWwah7Wm9VN7gYmAquUkjJ7y2Oz4WpOBLfikv1e drZMk4mLjewWLm/W8/obwpcrAPsJui20KaoDodMSg5nMzIvOP3oD3+HpQD4U3u8R yK8nxP+eSFikkUek5HbWpd5D/VMehD6J3Wlv9bivwrZQWVwEZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHdPGUvTFjOUFZbBMPnh6wiBx2HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2U5MDFkZmYtMjY0Yi0z MDI4LTkxZDgtYzMxMzExZjMwNWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSPbCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbaw9CStF2aatsVcSUjyrI9ja+FUJi0j4r+9LiDQ6cwY6g7N/6cJ/zJ phWiZgunxPrIgyM4+XRjkuCIGUkcKW3X606KNVVi0FTQdhaHUWiB9CCR0xf9bXHc I+VFVEtQkcjmeVlhlLQA5zhJAGBjcHzjtc5YQnrhML6Ijw+n34lrmc3Pu+PpfFgG SuM1KAMcQrDG3Kqa4jEw7BHfh4wZk9rqd5sUActu1i0nbZu/b/b2EZVUigNzcZbd c1Uk5sdTurU8lhuUNoHWhAopOW6l0vusEs7RsAyhyunk/Rbz0mawQ9lgkZdroZ5P jbGOC1yDIQ4MJwL9mseQk7hqDGYBTXI= -----END CERTIFICATE-----Generated at Tue Nov 4 22:20:18 2025 by rpki-client