$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/65b9d867-dd7c-3a12-9866-063268e4d901.roa File: 65b9d867-dd7c-3a12-9866-063268e4d901.roa (raw, json) Hash identifier: v59M1Bm+WbXczntNtxbDplGUbZ8jZYW9eBW5l9zSY7E= Subject key identifier: F9:2A:5A:3C:C6:DE:E7:C3:A7:AF:64:2A:E1:41:EE:39:AF:9B:AA:78 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584A8410E612317AEDC674193B80 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/65b9d867-dd7c-3a12-9866-063268e4d901.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 14813 IP address blocks: 72.51.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:e6:12:31:7a:ed:c6:74:19:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=3e15ba99-4e40-40d1-8d7e-f98443113559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:72:56:90:fc:25:d5:cb:37:d4:63:60:ae:72: 47:37:bf:f9:05:25:81:6b:ae:d2:73:40:97:5d:bc: 1e:46:4c:62:0e:6b:a4:71:f5:fb:4a:2a:68:74:fa: 6b:3d:85:ed:f4:96:70:88:cb:99:8b:19:b6:cf:c7: ac:01:c0:07:5c:ea:3d:29:dd:91:d6:0f:6b:6d:a5: 6b:07:8c:67:5a:81:8a:f5:ae:7b:79:56:b1:2f:98: 8d:cc:4d:e5:31:9f:e8:34:52:1a:1b:5b:3e:f5:25: dd:a8:f1:e5:0c:46:3b:4d:65:73:27:42:5c:78:4f: 3e:72:3d:19:2f:7d:34:70:d9:56:16:e3:bd:9a:be: e9:d5:90:b6:6d:76:64:76:57:a6:94:f9:14:f4:ac: 2a:ab:d5:b4:ab:b0:f0:a0:b8:c3:c8:73:4e:37:8a: bb:ce:c9:73:cb:c6:47:13:d1:10:47:02:cf:e3:70: ec:70:7c:b7:80:de:98:43:20:fa:ac:24:dd:88:35: a9:67:09:c3:e2:82:6f:42:63:0c:25:59:45:e7:a0: a1:b1:c8:51:89:25:c1:64:b3:c9:b5:6b:ed:05:1a: 23:88:9c:3f:66:94:dc:6d:b6:d2:b2:56:06:ed:b3: 09:99:c6:a3:0e:d0:ab:f3:c0:60:05:9e:51:19:ca: 66:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:2A:5A:3C:C6:DE:E7:C3:A7:AF:64:2A:E1:41:EE:39:AF:9B:AA:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/65b9d867-dd7c-3a12-9866-063268e4d901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.51.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:28:fc:06:13:8e:b8:bb:a2:f5:50:3d:ae:d6:bf:55:00:af: 65:67:89:cf:dd:ee:31:ca:de:1c:26:76:b9:b9:a3:3c:39:81: 19:ac:e4:55:e8:2e:77:17:9d:df:48:3c:3d:58:6c:1b:9e:67: 83:1a:c5:ee:fe:7f:7a:be:7f:20:69:4c:63:9a:88:bd:a6:69: 73:f9:a1:37:c4:a9:0e:38:19:95:57:1a:8d:8a:83:0f:7f:a3: 4a:f3:e9:59:0c:97:db:4f:53:1a:75:69:ec:b0:80:8a:70:03: cd:5a:06:87:25:12:ba:aa:65:a4:74:51:d9:72:45:a9:a5:82: 69:19:cf:fc:9d:60:d8:33:89:17:e4:42:2f:70:45:4b:f5:dd: f7:8b:af:0f:d3:ac:b8:d6:a1:50:63:36:ba:01:80:3e:41:2d: 27:2d:d7:0e:da:bd:bf:44:68:a7:ba:ee:09:a1:4d:04:e9:3e: 12:cb:cf:1a:85:28:62:da:f3:07:62:1e:df:13:29:70:fd:52: 96:1e:56:49:f3:2b:08:30:85:1d:04:79:29:c6:09:01:ed:e7: ca:be:85:b4:4b:e3:4f:10:49:17:69:f5:48:a8:4f:c3:f6:5d: 4b:f9:1f:37:35:2b:47:91:31:64:09:df:ed:65:00:61:9b:8c: 6b:11:f7:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEOYSMXrtxnQZO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk M2UxNWJhOTktNGU0MC00MGQxLThkN2UtZjk4NDQzMTEzNTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3JWkPwl1cs31GNgrnJHN7/5BSWBa67Sc0CX XbweRkxiDmukcfX7SipodPprPYXt9JZwiMuZixm2z8esAcAHXOo9Kd2R1g9rbaVr B4xnWoGK9a57eVaxL5iNzE3lMZ/oNFIaG1s+9SXdqPHlDEY7TWVzJ0JceE8+cj0Z L300cNlWFuO9mr7p1ZC2bXZkdlemlPkU9Kwqq9W0q7DwoLjDyHNON4q7zslzy8ZH E9EQRwLP43DscHy3gN6YQyD6rCTdiDWpZwnD4oJvQmMMJVlF56ChschRiSXBZLPJ tWvtBRojiJw/ZpTcbbbSslYG7bMJmcajDtCr88BgBZ5RGcpmVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkqWjzG3ufDp69kKuFB7jmvm6p4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvNjViOWQ4NjctZGQ3Yy0z YTEyLTk4NjYtMDYzMjY4ZTRkOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDNhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAko/AYTjri7ovVQPa7Wv1UAr2Vnic/d7jHK3hwmdrm5ozw5gRms5FXo LncXnd9IPD1YbBueZ4Maxe7+f3q+fyBpTGOaiL2maXP5oTfEqQ44GZVXGo2Kgw9/ o0rz6VkMl9tPUxp1aeywgIpwA81aBoclErqqZaR0UdlyRamlgmkZz/ydYNgziRfk Qi9wRUv13feLrw/TrLjWoVBjNroBgD5BLSct1w7avb9EaKe67gmhTQTpPhLLzxqF KGLa8wdiHt8TKXD9UpYeVknzKwgwhR0EeSnGCQHt58q+hbRL408QSRdp9UioT8P2 XUv5Hzc1K0eRMWQJ3+1lAGGbjGsR96s= -----END CERTIFICATE-----Generated at Sat Jul 26 23:46:54 2025 by rpki-client