$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/4f32bdd6-c862-39c9-bfbe-0f0c7171a6e4.roa File: 4f32bdd6-c862-39c9-bfbe-0f0c7171a6e4.roa (raw, json) Hash identifier: 3OX1U5mC2nPav47LpMPA9G99OS4PLNVDgurL3tfcc4Q= Subject key identifier: 80:EE:F9:06:23:FF:5B:79:78:8E:5D:0B:26:86:76:86:24:C6:40:7E Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584A841249EC1E1FDC6F76888840 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/4f32bdd6-c862-39c9-bfbe-0f0c7171a6e4.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 14813 IP address blocks: 72.22.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:49:ec:1e:1f:dc:6f:76:88:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=bff4bc6d-b11b-4526-8e95-9d031a25970e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:de:e6:03:06:d6:22:b2:95:59:dc:f1:a1:d5: 4a:9f:cf:11:66:25:75:77:0b:9c:5b:15:10:3e:13: a4:9c:86:4e:ca:8a:e8:ba:32:b2:06:70:47:69:67: 57:cf:fd:d7:0b:30:c4:0e:9c:e9:d7:f4:a5:bc:4e: 93:4e:d6:43:49:84:55:d1:27:34:ab:c8:eb:17:b5: bf:56:ff:a7:8f:a9:75:4c:30:c1:3b:02:03:99:eb: 29:3e:8d:34:96:8a:2d:4a:f1:e1:78:d4:11:71:87: 32:a1:60:d4:ea:4c:e9:07:d6:3d:59:d0:ec:17:41: 08:0b:ac:15:7e:45:a7:40:00:88:10:7e:f5:76:f1: 7a:e6:a8:a5:26:55:b1:ba:b9:b1:fb:d6:b9:4f:15: 5c:ff:54:c8:04:9e:aa:6e:3f:66:82:6c:b2:0a:01: 3a:1f:69:1b:e4:6f:52:78:9f:b7:33:93:75:38:a7: 0b:1d:57:41:65:86:57:c8:5f:fa:71:1e:2e:e1:30: 55:40:26:45:9c:a3:e2:b3:16:c9:45:97:5c:c9:fb: 8d:f8:94:c1:c6:68:70:54:a9:3c:6f:aa:08:d1:47: bc:0b:df:4a:57:45:00:5e:a6:b7:64:b5:90:52:50: c9:3e:34:e7:59:79:f1:ba:92:db:bb:9e:10:e6:ff: 35:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:EE:F9:06:23:FF:5B:79:78:8E:5D:0B:26:86:76:86:24:C6:40:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/4f32bdd6-c862-39c9-bfbe-0f0c7171a6e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:3f:26:a9:ec:f6:0b:0a:a4:77:0d:f8:fb:1e:6f:32:ee:c2: 45:10:b5:f4:da:4a:f8:55:0e:8b:66:3d:8b:26:cc:54:df:9e: 37:d0:2a:14:fc:0c:41:5e:8e:66:37:73:e6:e6:38:e5:d0:05: 55:9b:ed:7d:76:f5:db:f4:47:b5:51:21:64:53:33:29:85:f1: 7b:43:e8:cd:8f:84:a5:a8:b0:bd:8d:2e:16:38:c9:31:a1:5a: 27:1f:62:8f:2c:55:09:ed:8c:0e:af:c5:4a:a3:4d:90:4c:e1: f3:1b:4b:2f:e1:ae:0c:cd:de:69:2c:18:32:61:0e:ef:b0:51: 88:7f:bd:a3:c9:a6:f5:6d:0c:7d:a7:8f:e3:33:2f:83:5f:f3: 02:59:e9:c2:b5:8f:00:ed:a9:ad:6b:d0:b0:58:34:26:6b:6b: e6:73:48:66:35:2e:e4:0c:42:78:9e:b6:0d:4a:97:97:de:1d: 63:a8:bd:19:22:0d:0c:93:db:05:71:d1:9b:f4:fe:6e:ac:74: e6:32:16:45:39:df:e0:b2:e7:44:33:60:a3:fa:ab:dd:a6:df: 73:57:af:ee:62:a4:ce:00:f5:22:32:eb:ab:c1:2a:23:ea:18: 3b:a5:9e:26:c4:f1:3a:d5:30:18:ab:73:a3:01:b3:db:ed:13: 5c:d1:01:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEknsHh/cb3aIiEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YmZmNGJjNmQtYjExYi00NTI2LThlOTUtOWQwMzFhMjU5NzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN7mAwbWIrKVWdzxodVKn88RZiV1dwucWxUQ PhOknIZOyoroujKyBnBHaWdXz/3XCzDEDpzp1/SlvE6TTtZDSYRV0Sc0q8jrF7W/ Vv+nj6l1TDDBOwIDmespPo00lootSvHheNQRcYcyoWDU6kzpB9Y9WdDsF0EIC6wV fkWnQACIEH71dvF65qilJlWxurmx+9a5TxVc/1TIBJ6qbj9mgmyyCgE6H2kb5G9S eJ+3M5N1OKcLHVdBZYZXyF/6cR4u4TBVQCZFnKPisxbJRZdcyfuN+JTBxmhwVKk8 b6oI0Ue8C99KV0UAXqa3ZLWQUlDJPjTnWXnxupLbu54Q5v81XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDu+QYj/1t5eI5dCyaGdoYkxkB+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvNGYzMmJkZDYtYzg2Mi0z OWM5LWJmYmUtMGYwYzcxNzFhNmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBafMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4/Jqns9gsKpHcN+PsebzLuwkUQtfTaSvhVDotmPYsmzFTfnjfQKhT8 DEFejmY3c+bmOOXQBVWb7X129dv0R7VRIWRTMymF8XtD6M2PhKWosL2NLhY4yTGh WicfYo8sVQntjA6vxUqjTZBM4fMbSy/hrgzN3mksGDJhDu+wUYh/vaPJpvVtDH2n j+MzL4Nf8wJZ6cK1jwDtqa1r0LBYNCZra+ZzSGY1LuQMQnietg1Kl5feHWOovRki DQyT2wVx0Zv0/m6sdOYyFkU53+Cy50QzYKP6q92m33NXr+5ipM4A9SIy66vBKiPq GDulnibE8TrVMBirc6MBs9vtE1zRAWk= -----END CERTIFICATE-----Generated at Sat Jul 26 23:44:28 2025 by rpki-client