$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6d684cbf-5dc7-359e-bab2-d5b92d5eed9b.roa File: 6d684cbf-5dc7-359e-bab2-d5b92d5eed9b.roa (raw, json) Hash identifier: fXSMEzQxe027IQ2l5sDmzF5mucGzXeyaI4Dk2NtYl3E= Subject key identifier: 8D:9F:4B:B0:CE:66:A0:51:43:A0:68:44:8D:1C:45:42:B2:F1:FB:3A Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584A8412542FA8C482248F85E968 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6d684cbf-5dc7-359e-bab2-d5b92d5eed9b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 14813 IP address blocks: 72.22.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:54:2f:a8:c4:82:24:8f:85:e9:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=dfd2da7c-3170-4411-a47d-7b13974bd347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7c:c8:80:b7:f0:2a:2c:8f:37:9e:91:43:c5: c3:6a:ba:2b:7e:20:87:a6:be:f6:d4:77:7d:97:fe: 47:7c:56:c0:cf:23:c5:3b:01:47:e2:9f:4c:b3:ea: 48:f6:23:3b:94:7b:23:a5:01:13:dd:e3:31:63:46: 92:f1:ec:3a:ce:e7:bf:18:76:60:11:ea:85:7e:be: b0:e8:bf:0b:f3:64:2e:fb:34:fd:1e:b5:14:e8:34: a1:ae:1a:a6:71:8e:b3:09:08:fe:d3:a0:b6:14:a8: 5e:08:69:39:02:52:93:82:c0:74:e8:f1:22:ae:40: c6:76:be:28:49:33:79:28:a1:88:13:33:89:f5:9b: 0c:fc:70:bb:8d:1b:f6:79:53:35:fa:a7:6e:db:64: a3:c7:47:bf:d7:a0:d5:ec:97:dd:b6:e2:dc:8b:5a: 9d:51:aa:a5:0a:2f:ac:8b:25:8c:1c:f9:55:4b:36: 75:e5:bd:08:35:44:81:78:1c:6a:89:7f:09:08:bc: de:b6:16:19:7f:b2:78:89:40:e9:6d:db:dd:e7:31: 62:b8:ff:78:f9:ec:b3:3f:48:46:a8:0c:84:ea:b6: 91:95:36:b9:ad:3c:f2:a4:ee:09:51:f5:1f:6f:6d: 7f:e5:b2:93:f3:2c:38:07:a7:bd:0f:86:49:0b:c9: a8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9F:4B:B0:CE:66:A0:51:43:A0:68:44:8D:1C:45:42:B2:F1:FB:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6d684cbf-5dc7-359e-bab2-d5b92d5eed9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:1d:9a:eb:36:36:3b:8f:3e:6c:aa:a7:3f:b0:ba:7f:2a:f4: a9:cb:bb:5f:f3:be:c4:7c:fe:c0:30:5f:42:ad:97:00:01:40: 44:44:72:ee:eb:94:d2:72:1e:67:92:8a:58:41:e3:e1:04:49: c5:13:90:c6:ee:06:b8:8a:71:bf:6e:0b:a2:34:ff:1b:36:40: b8:d5:d7:99:28:75:2d:53:3e:6a:d2:0c:7d:bf:d9:86:a3:f5: 05:dc:53:c0:3b:7a:41:f5:87:23:3e:3d:e7:2f:f0:25:90:4c: d8:dc:62:c6:aa:4e:11:52:e4:30:69:1c:a6:6f:bf:06:7e:da: 1c:8f:7f:5b:be:72:d5:02:06:74:74:7b:c7:f4:c4:10:27:02: 8e:18:fb:e9:60:52:27:ee:26:e3:60:da:0f:66:38:95:cd:4d: ee:6f:39:ee:97:aa:5b:f7:3c:bc:38:ec:b0:03:61:28:68:1f: 75:8b:ef:e6:71:a2:bc:7d:f0:05:6b:9d:23:6f:85:71:87:ca: be:51:34:7c:48:15:27:6d:64:ea:a8:bc:87:3e:ae:e8:63:b5: 19:9e:9f:b0:da:33:37:9e:6d:88:77:a6:88:2e:29:4d:a3:1d: bd:10:6c:8c:5d:46:92:2b:a5:be:f9:32:eb:a1:7f:5d:57:9a: 37:34:28:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEElQvqMSCJI+F6WgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZGZkMmRhN2MtMzE3MC00NDExLWE0N2QtN2IxMzk3NGJkMzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnzIgLfwKiyPN56RQ8XDarorfiCHpr721Hd9 l/5HfFbAzyPFOwFH4p9Ms+pI9iM7lHsjpQET3eMxY0aS8ew6zue/GHZgEeqFfr6w 6L8L82Qu+zT9HrUU6DShrhqmcY6zCQj+06C2FKheCGk5AlKTgsB06PEirkDGdr4o STN5KKGIEzOJ9ZsM/HC7jRv2eVM1+qdu22Sjx0e/16DV7JfdtuLci1qdUaqlCi+s iyWMHPlVSzZ15b0INUSBeBxqiX8JCLzethYZf7J4iUDpbdvd5zFiuP94+eyzP0hG qAyE6raRlTa5rTzypO4JUfUfb21/5bKT8yw4B6e9D4ZJC8moOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2fS7DOZqBRQ6BoRI0cRUKy8fs6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvNmQ2ODRjYmYtNWRjNy0z NTllLWJhYjItZDViOTJkNWVlZDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0dmus2NjuPPmyqpz+wun8q9KnLu1/zvsR8/sAwX0KtlwABQEREcu7r lNJyHmeSilhB4+EEScUTkMbuBriKcb9uC6I0/xs2QLjV15kodS1TPmrSDH2/2Yaj 9QXcU8A7ekH1hyM+Pecv8CWQTNjcYsaqThFS5DBpHKZvvwZ+2hyPf1u+ctUCBnR0 e8f0xBAnAo4Y++lgUifuJuNg2g9mOJXNTe5vOe6Xqlv3PLw47LADYShoH3WL7+Zx orx98AVrnSNvhXGHyr5RNHxIFSdtZOqovIc+ruhjtRmen7DaMzeebYh3poguKU2j Hb0QbIxdRpIrpb75Muuhf11Xmjc0KEw= -----END CERTIFICATE-----Generated at Sat Jul 26 23:50:03 2025 by rpki-client