$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/cbc3e14e-ffe9-3794-9a4e-a4b6199b6166.roa File: cbc3e14e-ffe9-3794-9a4e-a4b6199b6166.roa (raw, json) Hash identifier: fp6sj+pnzaFY+yUntTz5hce02lP5bi0gNtqCYO3oRPQ= Subject key identifier: D1:F5:04:F0:43:5F:B9:22:E6:3D:7C:51:49:66:DB:FF:4E:06:34:4B Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F4328584AAB26490905B39B0C763CFA00 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/cbc3e14e-ffe9-3794-9a4e-a4b6199b6166.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 187 IP address blocks: 72.42.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 31 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:49:09:05:b3:9b:0c:76:3c:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=7021137a-bea4-4c07-a3e9-b18a2c9def21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e9:3d:7f:9c:22:ef:c6:cb:f4:6d:a3:d1:07: cc:79:53:52:1e:54:74:86:05:69:20:5f:3b:77:9a: 7f:e7:b1:9c:15:2f:b1:5e:58:67:76:13:7b:51:3f: ba:00:49:10:12:e5:7b:5b:78:40:43:86:75:24:d1: 7f:6d:63:85:17:6f:99:0e:da:5f:f7:6c:af:d4:e2: 50:98:8f:1f:ef:c0:b3:59:0c:56:bc:c4:e0:92:3b: ba:d7:da:59:7a:de:17:08:7d:a9:d5:60:63:80:a5: cb:fa:07:f6:dd:fd:35:28:9f:7c:d6:29:e5:15:f4: 3e:81:dd:64:98:0e:54:be:5f:37:c9:da:60:91:8b: ce:98:0b:26:ba:50:dd:a0:a9:a6:c4:1d:7e:92:97: 14:26:65:2a:cd:b0:6e:5e:9c:6e:cd:62:4c:eb:56: 11:2c:75:c6:b7:c6:d1:14:3e:6d:c7:52:55:69:a6: 45:f4:d7:5b:0d:e5:d6:18:6f:ec:1f:41:f3:70:97: 33:53:32:a9:94:f6:f8:5d:57:46:64:3d:fb:be:da: ff:ae:ab:93:7a:71:7f:bb:a4:6b:57:2a:97:4a:5b: 06:44:1c:9d:b3:0b:79:95:45:d6:84:b6:59:51:69: b3:2a:0c:d0:3e:5d:0e:79:c6:d5:ca:8f:a2:7f:3a: 4c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F5:04:F0:43:5F:B9:22:E6:3D:7C:51:49:66:DB:FF:4E:06:34:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/cbc3e14e-ffe9-3794-9a4e-a4b6199b6166.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv4: 72.42.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:01:fb:54:c8:2a:13:aa:e8:92:d1:73:4f:fb:8d:64:52:4e: 8e:a6:60:e6:82:53:2e:66:d1:f4:05:2f:cc:29:97:23:ad:5a: 0a:ac:65:cd:3f:70:28:81:8a:43:c9:a7:09:fc:6c:d4:fd:a8: 77:b5:e9:d5:62:23:93:38:bd:6b:43:b3:16:7d:df:d6:3c:86: d8:71:d5:f4:22:51:a1:b2:51:0b:be:a6:42:dc:9c:3e:b9:0d: 46:73:e0:79:ad:7f:80:b1:83:04:5a:2a:5b:41:77:da:e7:ca: aa:d2:4a:3b:6d:03:a4:bd:77:24:4d:d2:1e:13:4f:dd:f1:a8: 8d:e3:55:c2:cc:19:f1:cd:24:10:b0:42:f3:9f:c3:df:b5:22: 85:a5:bd:58:44:50:6b:18:59:94:af:04:5a:4f:8a:f9:4c:1e: 32:ea:4d:aa:7d:82:f1:86:a6:fb:90:e5:cd:11:3f:aa:42:98: 9d:79:e1:87:48:9a:29:26:e7:8a:6e:5a:a4:76:c5:14:e6:ef: 4e:99:c5:2f:33:6e:68:9d:60:32:4c:32:45:50:87:5e:f4:68: db:20:89:f7:f3:46:05:65:e6:3c:68:d2:5a:72:e8:ba:19:06: 2b:dd:3c:df:84:b4:05:95:63:15:84:35:ef:84:08:a7:60:27: 5c:5c:d0:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJkkJBbObDHY8+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk NzAyMTEzN2EtYmVhNC00YzA3LWEzZTktYjE4YTJjOWRlZjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ok9f5wi78bL9G2j0QfMeVNSHlR0hgVpIF87 d5p/57GcFS+xXlhndhN7UT+6AEkQEuV7W3hAQ4Z1JNF/bWOFF2+ZDtpf92yv1OJQ mI8f78CzWQxWvMTgkju619pZet4XCH2p1WBjgKXL+gf23f01KJ981inlFfQ+gd1k mA5Uvl83ydpgkYvOmAsmulDdoKmmxB1+kpcUJmUqzbBuXpxuzWJM61YRLHXGt8bR FD5tx1JVaaZF9NdbDeXWGG/sH0HzcJczUzKplPb4XVdGZD37vtr/rquTenF/u6Rr VyqXSlsGRBydswt5lUXWhLZZUWmzKgzQPl0OecbVyo+ifzpMyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNH1BPBDX7ki5j18UUlm2/9OBjRLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvY2JjM2UxNGUtZmZlOS0z Nzk0LTlhNGUtYTRiNjE5OWI2MTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESCpwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0B+1TIKhOq6JLRc0/7jWRSTo6mYOaCUy5m0fQFL8wplyOtWgqsZc0/ cCiBikPJpwn8bNT9qHe16dViI5M4vWtDsxZ939Y8hthx1fQiUaGyUQu+pkLcnD65 DUZz4Hmtf4CxgwRaKltBd9rnyqrSSjttA6S9dyRN0h4TT93xqI3jVcLMGfHNJBCw QvOfw9+1IoWlvVhEUGsYWZSvBFpPivlMHjLqTap9gvGGpvuQ5c0RP6pCmJ154YdI mikm54puWqR2xRTm706ZxS8zbmidYDJMMkVQh170aNsgiffzRgVl5jxo0lpy6LoZ BivdPN+EtAWVYxWENe+ECKdgJ1xc0Pw= -----END CERTIFICATE-----Generated at Tue Jul 29 04:13:56 2025 by rpki-client