$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5d4d838c-1189-3360-acd9-c2bc6fa8c3ee.roa File: 5d4d838c-1189-3360-acd9-c2bc6fa8c3ee.roa (raw, json) Hash identifier: WypJWx7kTp2FDHGE2InOGxBTcmL95KND0/QuuJF0EFg= Subject key identifier: 89:6B:C7:6D:6E:22:67:3F:43:1B:57:FB:B4:5C:67:DE:D1:FC:77:3A Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584A8410F0600B73F338FF9BF940 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5d4d838c-1189-3360-acd9-c2bc6fa8c3ee.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 14813 IP address blocks: 72.22.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:f0:60:0b:73:f3:38:ff:9b:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=327cc3d5-84f2-43d1-a19c-d79bc12bef6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ff:ba:0e:94:9e:a3:8a:8b:4b:4c:9f:12:44: 02:e3:a6:ba:3f:33:0f:3c:58:a9:e1:c7:3c:5a:67: 63:6b:a7:2f:c3:13:3c:d3:c8:1a:ff:02:36:c3:f2: bd:3d:c6:3f:48:8f:a4:fa:d9:ab:62:ea:4e:37:ea: 3d:f7:36:5f:27:66:76:6a:03:05:98:b1:ec:91:ec: 83:c7:b6:b5:f0:83:c9:b8:f8:24:7f:ea:f5:2d:c4: 55:55:65:8d:42:c7:3a:4c:f9:71:e3:ac:91:cd:d9: f9:67:68:12:69:e7:2e:63:bf:73:6c:18:f6:53:63: 1a:4b:10:78:bd:8b:c7:3d:26:ac:e1:4c:c6:67:03: ba:b9:ec:4c:cc:a4:da:2b:e1:ac:f8:2a:d2:0b:7c: 9d:f2:63:af:6c:a5:2e:98:c3:39:d1:4f:25:7e:9a: c0:8a:67:17:5f:e8:41:4c:79:4a:8a:b4:3a:92:05: 66:88:5e:51:e7:0a:3f:c8:d1:95:74:f4:70:1d:70: 6a:f2:93:d4:01:31:51:fe:ce:68:7c:f7:b2:83:39: 33:8c:d7:6d:f4:11:b3:b0:35:00:dc:02:68:9b:b7: 9a:f5:4b:a6:33:79:1e:27:21:c8:21:b3:5d:9c:91: de:70:c1:22:a4:b6:ab:52:b2:38:52:07:da:79:6f: 57:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6B:C7:6D:6E:22:67:3F:43:1B:57:FB:B4:5C:67:DE:D1:FC:77:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5d4d838c-1189-3360-acd9-c2bc6fa8c3ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:ba:0f:32:e3:dc:05:94:4c:b5:bc:2f:3e:e0:e6:71:8b:1f: 8f:cd:d2:da:e1:ad:07:e5:aa:d1:16:82:ba:37:d6:45:89:58: 84:40:d4:ce:7a:0a:d8:69:9f:a8:97:68:18:ae:cb:35:92:c3: 9e:ee:57:3b:9d:84:91:ca:99:a2:38:57:bf:95:ab:17:fa:9b: 7c:ae:de:ac:3e:5d:0a:21:1f:c2:6e:bb:02:96:bb:6d:1d:22: 1e:99:f6:9c:a4:7b:20:8b:38:ad:49:45:7f:d0:ec:0d:9c:47: e6:57:e4:6d:39:de:a6:02:aa:96:d7:c1:13:22:9e:42:05:83: b3:b2:c8:80:f7:98:ec:7b:01:e6:22:49:d9:8c:32:48:78:a7: ae:c4:b1:df:bc:03:93:0a:ca:79:0d:13:d0:13:a1:41:87:44: 7d:4c:8f:52:06:72:6d:2d:6e:00:ba:40:df:2d:72:10:eb:20: 25:c8:b4:55:f9:88:86:4b:67:89:dd:45:62:6f:e7:48:7e:35: c8:28:a8:7b:e3:01:4b:48:69:82:09:11:42:48:70:37:89:a6: 6a:88:05:34:b6:7f:f5:79:c4:98:e4:f5:04:c8:16:ea:de:b6: 01:04:4e:d9:33:60:c0:b2:e3:de:bc:11:cc:91:c3:0b:e4:07: 09:59:6e:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEPBgC3PzOP+b+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MzI3Y2MzZDUtODRmMi00M2QxLWExOWMtZDc5YmMxMmJlZjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv+6DpSeo4qLS0yfEkQC46a6PzMPPFip4cc8 Wmdja6cvwxM808ga/wI2w/K9PcY/SI+k+tmrYupON+o99zZfJ2Z2agMFmLHskeyD x7a18IPJuPgkf+r1LcRVVWWNQsc6TPlx46yRzdn5Z2gSaecuY79zbBj2U2MaSxB4 vYvHPSas4UzGZwO6uexMzKTaK+Gs+CrSC3yd8mOvbKUumMM50U8lfprAimcXX+hB THlKirQ6kgVmiF5R5wo/yNGVdPRwHXBq8pPUATFR/s5ofPeygzkzjNdt9BGzsDUA 3AJom7ea9UumM3keJyHIIbNdnJHecMEipLarUrI4UgfaeW9X1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlrx21uImc/QxtX+7RcZ97R/Hc6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvNWQ0ZDgzOGMtMTE4OS0z MzYwLWFjZDktYzJiYzZmYThjM2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGS6DzLj3AWUTLW8Lz7g5nGLH4/N0trhrQflqtEWgro31kWJWIRA1M56 Cthpn6iXaBiuyzWSw57uVzudhJHKmaI4V7+Vqxf6m3yu3qw+XQohH8JuuwKWu20d Ih6Z9pykeyCLOK1JRX/Q7A2cR+ZX5G053qYCqpbXwRMinkIFg7OyyID3mOx7AeYi SdmMMkh4p67Esd+8A5MKynkNE9AToUGHRH1Mj1IGcm0tbgC6QN8tchDrICXItFX5 iIZLZ4ndRWJv50h+NcgoqHvjAUtIaYIJEUJIcDeJpmqIBTS2f/V5xJjk9QTIFure tgEETtkzYMCy4968EcyRwwvkBwlZblg= -----END CERTIFICATE-----Generated at Sat Jul 26 23:42:00 2025 by rpki-client