$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/038febac-a971-356a-a45e-6ac7bc0667ad.roa File: 038febac-a971-356a-a45e-6ac7bc0667ad.roa (raw, json) Hash identifier: hKe8MbBpIdM1KbcyrQEfokPTSgwkkL/OYLiHuTSFqH4= Subject key identifier: 4F:B7:C7:73:23:93:C1:A8:B5:7B:39:02:33:C3:C4:3C:34:8E:E8:B6 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584A8410C7E913FF74BB2E5FEA00 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/038febac-a971-356a-a45e-6ac7bc0667ad.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 14813 IP address blocks: 72.22.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:c7:e9:13:ff:74:bb:2e:5f:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=c6f531ab-7b0e-4f55-8063-264a29a8eb39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fe:13:8a:d9:24:09:04:58:18:ed:a0:a4:06: b7:0d:51:e3:e8:76:68:47:6a:3f:2e:d1:05:f3:30: df:51:a5:78:a8:ec:1a:d7:54:9e:9c:25:c5:e5:e4: 73:3c:2f:d2:fa:46:dd:ec:7a:c7:9d:0b:2c:3f:19: dc:77:eb:11:04:e3:73:8e:74:65:de:66:74:ac:55: a0:84:3c:54:2b:63:01:73:0e:a7:6d:6b:68:b4:13: ec:ff:ff:65:8f:fe:1b:46:d7:97:40:a5:d6:2c:cd: 02:b0:9d:19:82:79:8d:a2:0d:fe:ab:9d:0e:c6:ea: 93:84:2d:5f:0f:c2:82:a2:54:36:f9:95:e4:70:4c: c0:76:93:9b:7b:b9:95:28:be:31:d9:6a:74:11:b8: 64:b8:11:de:07:ca:97:1f:b6:92:df:c0:6d:b6:e6: e1:7b:51:b9:e2:99:bb:77:2d:4f:7c:d1:24:3d:28: d9:8e:23:b4:eb:bd:8a:c4:65:2a:74:5d:e1:4f:8e: 8c:c6:c3:27:af:a2:12:67:1e:9e:45:93:00:ed:fa: a5:f0:35:a0:a7:c5:78:8a:91:84:13:dc:5c:48:d5: 15:ae:d7:3f:ac:96:73:b8:66:c2:36:28:e2:d1:c5: 27:cb:7e:e1:3b:9d:ec:8f:92:ca:7e:18:a4:86:7d: 8f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B7:C7:73:23:93:C1:A8:B5:7B:39:02:33:C3:C4:3C:34:8E:E8:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/038febac-a971-356a-a45e-6ac7bc0667ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:e0:24:04:a2:e2:98:48:0a:2f:de:6a:ad:27:df:e8:27:c1: bf:56:e9:aa:e7:2e:56:55:1b:91:14:d0:cb:56:0e:f9:59:51: 5c:82:66:0a:2a:95:e9:22:0e:65:93:94:25:fb:28:b1:70:a3: 5c:02:27:5a:a8:d0:c0:0e:22:86:57:55:33:eb:56:ec:e2:45: fc:be:a3:03:39:41:04:e3:13:65:f6:f0:aa:85:3a:57:04:4c: ef:fe:7f:22:39:c9:f8:10:e4:aa:03:d5:81:34:7b:ad:9c:f5: a3:ba:90:8c:fc:4c:0b:d5:0c:e6:c5:e2:c2:a9:9d:88:dd:4f: 29:6a:ed:59:3d:fb:33:c6:63:66:a3:eb:ba:08:88:97:e0:d7: 62:a3:3a:fb:66:f8:ec:d4:21:86:f8:c9:b1:a7:6c:65:51:5c: c4:a0:42:b5:6a:b8:89:44:e6:9e:49:78:b3:8a:da:15:3f:59: 8f:6f:04:c8:78:99:0e:f3:a1:f0:b5:c6:fa:50:d2:99:fd:01: 53:e7:79:b7:71:76:33:a4:c3:70:a5:99:da:16:2e:9f:e0:24: 0f:bd:22:ce:50:ea:f0:62:9c:3f:32:b0:0c:ef:74:9e:18:1c: fc:f1:cc:12:50:3a:7c:2c:09:1f:75:5b:6a:6e:a6:9a:1e:15: 4e:77:16:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEMfpE/90uy5f6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YzZmNTMxYWItN2IwZS00ZjU1LTgwNjMtMjY0YTI5YThlYjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv4TitkkCQRYGO2gpAa3DVHj6HZoR2o/LtEF 8zDfUaV4qOwa11SenCXF5eRzPC/S+kbd7HrHnQssPxncd+sRBONzjnRl3mZ0rFWg hDxUK2MBcw6nbWtotBPs//9lj/4bRteXQKXWLM0CsJ0ZgnmNog3+q50OxuqThC1f D8KColQ2+ZXkcEzAdpObe7mVKL4x2Wp0EbhkuBHeB8qXH7aS38Bttubhe1G54pm7 dy1PfNEkPSjZjiO0672KxGUqdF3hT46MxsMnr6ISZx6eRZMA7fql8DWgp8V4ipGE E9xcSNUVrtc/rJZzuGbCNiji0cUny37hO53sj5LKfhikhn2PCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+3x3Mjk8GotXs5AjPDxDw0jui2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvMDM4ZmViYWMtYTk3MS0z NTZhLWE0NWUtNmFjN2JjMDY2N2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBadMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzgJASi4phICi/eaq0n3+gnwb9W6arnLlZVG5EU0MtWDvlZUVyCZgoq lekiDmWTlCX7KLFwo1wCJ1qo0MAOIoZXVTPrVuziRfy+owM5QQTjE2X28KqFOlcE TO/+fyI5yfgQ5KoD1YE0e62c9aO6kIz8TAvVDObF4sKpnYjdTylq7Vk9+zPGY2aj 67oIiJfg12KjOvtm+OzUIYb4ybGnbGVRXMSgQrVquIlE5p5JeLOK2hU/WY9vBMh4 mQ7zofC1xvpQ0pn9AVPnebdxdjOkw3ClmdoWLp/gJA+9Is5Q6vBinD8ysAzvdJ4Y HPzxzBJQOnwsCR91W2puppoeFU53FnA= -----END CERTIFICATE-----Generated at Sat Jul 26 23:44:32 2025 by rpki-client