$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/01c00e7f-6f75-39cf-8a6f-0e53566512de.roa File: 01c00e7f-6f75-39cf-8a6f-0e53566512de.roa (raw, json) Hash identifier: p0sOtFJm1RhQUkgpNzrvhIoSx84VgIalw2phjWqgfwM= Subject key identifier: A7:85:68:4B:12:78:58:CE:54:33:7D:DE:22:65:DD:E3:02:63:44:85 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584A841256AD2E4684E47D168140 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/01c00e7f-6f75-39cf-8a6f-0e53566512de.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 14813 IP address blocks: 72.22.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:56:ad:2e:46:84:e4:7d:16:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=3dee2fa7-a11a-41aa-a45a-8f3130c863a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:95:c4:87:ab:aa:9f:cf:5a:6d:11:82:0c:fb: b9:81:c5:e6:87:4d:b4:f8:f3:69:b9:81:8a:e7:b5: 46:1d:13:76:f3:98:52:cc:e0:e5:ff:d7:b3:94:3a: 0f:60:95:50:c0:9c:ae:e3:0b:e6:04:3e:5e:fc:cd: f2:7a:c6:d4:3b:41:23:3f:18:19:38:c8:56:ab:23: 00:11:64:a6:2e:62:00:19:9f:04:f9:81:1c:f9:f1: 64:9d:14:48:86:45:e6:ec:4d:65:93:95:c7:fb:90: 3a:fb:b0:32:66:19:31:18:27:2d:61:55:cf:f9:30: 23:f1:99:fa:5e:9c:e9:f5:9e:5a:14:93:a7:4b:55: 1c:ca:5b:2c:d8:dc:06:09:c9:37:60:44:7a:c5:a4: 1b:4a:65:e5:0f:79:bc:2e:e2:a4:eb:a3:ad:be:c3: f6:d5:26:b1:d4:e1:3f:f5:27:0d:9e:55:bc:36:10: bc:2e:2d:2e:71:45:dc:d0:af:14:33:63:b3:7a:52: 50:2a:37:37:08:70:2a:7a:0e:0e:a6:1b:1d:c4:30: 74:ca:b0:d8:92:c1:4b:a9:f2:f6:09:5c:37:7c:76: 4a:15:51:cd:5e:ac:26:bc:64:07:76:a0:1c:8e:30: 6b:e5:0d:c3:5d:4b:10:1a:51:95:64:bc:2a:c1:66: a5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:85:68:4B:12:78:58:CE:54:33:7D:DE:22:65:DD:E3:02:63:44:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/01c00e7f-6f75-39cf-8a6f-0e53566512de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:bf:82:0c:20:d7:88:5f:48:ef:78:ad:53:b1:54:67:da:c1: 5a:96:31:36:30:6a:4f:e5:45:41:4d:71:7b:23:a5:57:38:91: 6e:b7:a7:03:7c:92:60:2b:3f:bc:d8:ad:b9:58:a1:69:bf:8c: c8:83:24:85:a0:a0:30:d0:01:2a:6b:d6:04:b5:78:87:29:69: c0:4b:dd:0e:c7:6f:2e:c0:d3:9f:54:69:f4:bc:70:79:82:09: d7:80:f1:b1:0b:fc:0e:bb:6e:7a:15:05:55:d2:13:05:ae:5f: d9:98:06:24:8a:6c:40:d7:6b:b0:53:f6:2e:00:29:f3:07:fa: 86:91:c7:ca:db:ee:84:a7:91:7b:62:f1:56:b3:ca:7c:df:19: de:65:82:33:37:45:3c:fd:5b:11:af:1f:9b:f7:7b:ce:22:b0: dd:8f:a2:00:bc:e9:92:b6:39:34:d9:6c:a5:df:5f:47:6e:a4: a9:1c:8b:66:bc:3e:2f:be:0b:46:a4:53:b3:8d:50:fd:ef:17: d5:40:91:97:8e:30:ce:f0:3f:95:f9:6f:d9:ae:31:65:db:9d: 21:b5:17:22:12:a0:d8:6e:b0:d3:ce:11:0b:f4:60:94:0c:71: d6:e1:05:13:fe:94:d0:f7:f4:b4:83:5b:ca:cd:88:2f:f4:8a: 27:08:2c:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEElatLkaE5H0WgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk M2RlZTJmYTctYTExYS00MWFhLWE0NWEtOGYzMTMwYzg2M2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZXEh6uqn89abRGCDPu5gcXmh020+PNpuYGK 57VGHRN285hSzODl/9ezlDoPYJVQwJyu4wvmBD5e/M3yesbUO0EjPxgZOMhWqyMA EWSmLmIAGZ8E+YEc+fFknRRIhkXm7E1lk5XH+5A6+7AyZhkxGCctYVXP+TAj8Zn6 Xpzp9Z5aFJOnS1Ucylss2NwGCck3YER6xaQbSmXlD3m8LuKk66OtvsP21Sax1OE/ 9ScNnlW8NhC8Li0ucUXc0K8UM2OzelJQKjc3CHAqeg4OphsdxDB0yrDYksFLqfL2 CVw3fHZKFVHNXqwmvGQHdqAcjjBr5Q3DXUsQGlGVZLwqwWalFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKeFaEsSeFjOVDN93iJl3eMCY0SFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvMDFjMDBlN2YtNmY3NS0z OWNmLThhNmYtMGU1MzU2NjUxMmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJq/ggwg14hfSO94rVOxVGfawVqWMTYwak/lRUFNcXsjpVc4kW63pwN8 kmArP7zYrblYoWm/jMiDJIWgoDDQASpr1gS1eIcpacBL3Q7Hby7A059UafS8cHmC CdeA8bEL/A67bnoVBVXSEwWuX9mYBiSKbEDXa7BT9i4AKfMH+oaRx8rb7oSnkXti 8VazynzfGd5lgjM3RTz9WxGvH5v3e84isN2PogC86ZK2OTTZbKXfX0dupKkci2a8 Pi++C0akU7ONUP3vF9VAkZeOMM7wP5X5b9muMWXbnSG1FyISoNhusNPOEQv0YJQM cdbhBRP+lND39LSDW8rNiC/0iicILK0= -----END CERTIFICATE-----Generated at Sat Jul 26 23:48:21 2025 by rpki-client