$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/0967f533-314b-31fa-9f37-b33da500d8a5.roa File: 0967f533-314b-31fa-9f37-b33da500d8a5.roa (raw, json) Hash identifier: 9UX7Vn6SSsmiKgL77EbluIDNJ1akeAb/D2mmItx69Ik= Subject key identifier: 20:F3:DD:29:E3:1B:11:AD:08:A4:40:42:4C:1C:07:C8:80:45:24:2D Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584A8410D5C8E225F16D30BAFB20 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/0967f533-314b-31fa-9f37-b33da500d8a5.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 14813 IP address blocks: 72.22.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:d5:c8:e2:25:f1:6d:30:ba:fb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=ef33ed11-1268-42d3-b774-e3f909e50249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c0:6f:f4:66:e8:91:c4:99:df:a7:92:d4:fd: 35:5b:d9:d0:f0:3b:76:51:c5:db:72:79:08:a9:a3: 7a:58:03:de:8c:bf:0a:42:4b:b3:0d:56:0c:10:e0: 9a:a5:76:e7:63:44:cc:b2:62:ed:bd:09:36:b6:43: bf:ab:7c:8e:49:cc:9e:bb:60:54:17:b1:71:b1:09: f3:92:6a:7d:c7:68:20:00:fa:8e:7c:7a:9e:27:6a: 2f:f1:d1:13:af:1b:e2:75:b4:41:bf:fa:ae:e6:be: 7d:21:96:81:f8:c4:69:a6:e4:9a:87:6f:6e:9c:29: 22:58:b1:83:1a:e0:10:cb:d4:20:22:5b:7b:09:71: d7:d4:bf:88:58:1b:11:68:ae:bc:57:19:fc:bd:58: a9:5e:d7:f6:b1:7a:cf:de:d8:a3:da:d3:8b:dc:dc: 7f:b8:c8:a3:2e:5a:0a:e9:c5:0e:22:68:ae:af:5d: b2:53:d3:84:ca:8d:17:c8:c8:60:f1:29:07:5d:8d: 01:87:90:61:a9:8c:9a:0e:ce:f4:03:fc:13:b4:89: a0:f4:a3:11:52:a7:5f:66:c3:7e:2d:a9:ef:7a:2b: d5:b9:77:cd:e1:67:95:82:b0:bf:7a:62:51:c4:6c: d5:4c:28:53:b6:b4:9b:d8:90:63:58:d5:00:ee:18: 8a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F3:DD:29:E3:1B:11:AD:08:A4:40:42:4C:1C:07:C8:80:45:24:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/0967f533-314b-31fa-9f37-b33da500d8a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:7f:9f:47:82:7c:fa:bc:c9:ca:8a:69:b6:43:c9:77:45:5a: 5a:c2:69:0e:e9:91:2f:f7:f4:65:e7:19:7f:7a:38:ff:f8:71: 70:26:09:3a:79:63:6a:71:f3:81:6e:61:fc:d8:18:99:03:25: d2:f4:df:8a:03:5b:2a:00:70:4e:72:f0:02:d4:e1:56:42:4a: c8:b3:14:a9:a4:07:45:3b:a5:70:75:e8:f7:22:61:68:82:59: ea:80:87:fe:3e:0d:48:37:09:50:b4:67:14:44:6d:40:4e:4c: b0:69:6a:50:54:ae:af:db:26:a2:2c:cd:8a:e7:10:9a:a0:63: 5c:e0:14:dd:52:de:76:db:e2:84:21:c3:2e:4b:65:bb:32:f1: 47:33:e8:9a:23:05:86:16:72:89:bd:04:aa:0a:40:f5:7f:d1: 09:2d:e5:b2:d3:16:67:8f:5e:bc:ed:89:54:3b:2b:28:f1:64: 92:be:68:f7:07:59:05:0f:45:52:d0:21:49:8b:91:f7:38:03: ca:e6:42:be:63:09:13:64:ff:d8:21:9e:23:0f:9d:31:54:54: b8:ef:ba:b0:6e:ed:36:f2:be:36:e3:0d:86:08:ed:5e:83:95: de:d1:d7:3f:19:bb:82:94:43:a5:06:6e:0b:08:44:de:c1:39: a9:3b:cb:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEENXI4iXxbTC6+yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZWYzM2VkMTEtMTI2OC00MmQzLWI3NzQtZTNmOTA5ZTUwMjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8Bv9GbokcSZ36eS1P01W9nQ8Dt2UcXbcnkI qaN6WAPejL8KQkuzDVYMEOCapXbnY0TMsmLtvQk2tkO/q3yOScyeu2BUF7FxsQnz kmp9x2ggAPqOfHqeJ2ov8dETrxvidbRBv/qu5r59IZaB+MRppuSah29unCkiWLGD GuAQy9QgIlt7CXHX1L+IWBsRaK68Vxn8vVipXtf2sXrP3tij2tOL3Nx/uMijLloK 6cUOImiur12yU9OEyo0XyMhg8SkHXY0Bh5BhqYyaDs70A/wTtImg9KMRUqdfZsN+ LanveivVuXfN4WeVgrC/emJRxGzVTChTtrSb2JBjWNUA7hiKyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDz3SnjGxGtCKRAQkwcB8iARSQtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvMDk2N2Y1MzMtMzE0Yi0z MWZhLTlmMzctYjMzZGE1MDBkOGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBaWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHx/n0eCfPq8ycqKabZDyXdFWlrCaQ7pkS/39GXnGX96OP/4cXAmCTp5 Y2px84FuYfzYGJkDJdL034oDWyoAcE5y8ALU4VZCSsizFKmkB0U7pXB16PciYWiC WeqAh/4+DUg3CVC0ZxREbUBOTLBpalBUrq/bJqIszYrnEJqgY1zgFN1S3nbb4oQh wy5LZbsy8Ucz6JojBYYWcom9BKoKQPV/0Qkt5bLTFmePXrztiVQ7KyjxZJK+aPcH WQUPRVLQIUmLkfc4A8rmQr5jCRNk/9ghniMPnTFUVLjvurBu7TbyvjbjDYYI7V6D ld7R1z8Zu4KUQ6UGbgsIRN7BOak7y5w= -----END CERTIFICATE-----Generated at Sat Jul 26 23:49:57 2025 by rpki-client