$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/84cef4d2-b3ca-3adb-bfca-9e4b4867424a.roa File: 84cef4d2-b3ca-3adb-bfca-9e4b4867424a.roa (raw, json) Hash identifier: /tfUivCInXvG0oS3PF+gcmqMzX7+57fO1dRMJYGLlc0= Subject key identifier: 7D:D9:01:6F:CB:C3:85:40:E0:BB:9D:AB:DE:0D:5B:B8:07:F5:BA:AD Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584A84124C8998D9ACAD600B8240 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/84cef4d2-b3ca-3adb-bfca-9e4b4867424a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 14813 IP address blocks: 72.22.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:4c:89:98:d9:ac:ad:60:0b:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=8195d8ac-54a2-4404-8ae3-e0c12d5024f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ea:d2:33:e0:bd:0c:f5:fe:4a:1d:8d:16:ac: 93:c5:f2:70:ca:80:af:cf:8f:e2:3f:78:41:e5:f8: 96:f9:9e:ef:43:84:8b:6f:f1:ca:f6:8f:db:e5:80: f9:d2:14:8c:92:e4:10:06:ed:9b:40:24:82:0b:61: ec:4d:8f:3c:00:85:1b:d3:ce:98:11:cd:d6:b2:b8: b8:0e:a7:f1:4f:93:f8:4e:1c:63:f2:4d:8f:d4:4e: 3f:5d:ef:37:cd:50:0a:90:6f:97:8e:a2:1d:d2:88: 16:72:f2:ac:0b:2e:33:87:8d:cd:a4:5e:c1:79:3e: bb:3a:6d:23:5f:9a:fe:4c:46:c2:83:0a:23:47:71: be:c0:7d:2b:4a:07:74:79:ab:df:74:29:9e:21:30: 83:48:84:ad:37:30:e4:38:2c:39:b5:34:c6:bd:04: 86:bc:70:70:f7:0b:83:ac:4c:82:0c:f0:19:88:6e: ab:35:35:c5:20:f1:cf:7e:2a:fa:d4:86:fe:95:39: 9d:dd:9e:04:44:db:44:1b:37:5e:52:7e:f7:df:04: d2:49:f3:2d:6b:12:81:eb:8a:17:25:0f:76:95:b2: 21:f0:d0:f5:e2:bc:c0:26:09:aa:b8:9e:ae:45:57: 9c:64:7c:d7:c6:3f:e8:6d:36:e7:19:b0:da:10:23: 85:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D9:01:6F:CB:C3:85:40:E0:BB:9D:AB:DE:0D:5B:B8:07:F5:BA:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/84cef4d2-b3ca-3adb-bfca-9e4b4867424a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:3f:54:04:3f:a1:33:3a:e9:04:32:0f:6f:b9:28:3f:1c:46: 0d:fc:15:0a:83:1f:ef:54:3a:f9:fe:64:79:56:8c:98:fb:cd: 97:34:de:bd:f5:a5:fb:b9:34:a1:22:dc:38:57:8e:0b:2b:aa: 63:93:7a:13:09:1b:b9:5c:25:da:71:46:8c:c5:15:05:df:26: 61:05:e5:92:6b:91:01:41:df:f0:ba:19:a3:ee:b0:0e:32:4a: be:e0:ce:a3:99:41:92:5d:bd:67:c0:3e:7e:a2:20:4d:de:57: 50:5d:99:a9:88:6f:83:85:e4:7e:50:cc:8b:aa:d1:31:3e:57: 7d:1d:5d:dd:f9:88:f2:da:63:4a:ea:a2:d9:5d:b0:57:6e:5e: 78:7c:37:6a:cd:6a:30:43:7b:7e:fd:17:30:58:a6:39:04:b2: ab:ba:9f:44:d9:39:a0:3b:d0:75:45:07:5c:fe:10:3e:d8:49: fd:ec:35:47:d9:d8:1e:1d:ff:1b:28:75:18:6f:8b:86:b4:c9: 89:dc:01:ea:0b:2e:e6:6d:da:ce:d5:f8:23:a8:ef:da:78:c8: 9e:bb:5a:eb:77:51:92:31:ab:43:e0:b9:a0:a1:fd:55:f9:4d: bc:6f:b1:d0:60:25:cb:96:a4:c6:22:67:03:cd:bd:e9:21:a0: 63:ee:11:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEkyJmNmsrWALgkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODE5NWQ4YWMtNTRhMi00NDA0LThhZTMtZTBjMTJkNTAyNGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgurSM+C9DPX+Sh2NFqyTxfJwyoCvz4/iP3hB 5fiW+Z7vQ4SLb/HK9o/b5YD50hSMkuQQBu2bQCSCC2HsTY88AIUb086YEc3Wsri4 DqfxT5P4Thxj8k2P1E4/Xe83zVAKkG+XjqId0ogWcvKsCy4zh43NpF7BeT67Om0j X5r+TEbCgwojR3G+wH0rSgd0eavfdCmeITCDSIStNzDkOCw5tTTGvQSGvHBw9wuD rEyCDPAZiG6rNTXFIPHPfir61Ib+lTmd3Z4ERNtEGzdeUn733wTSSfMtaxKB64oX JQ92lbIh8ND14rzAJgmquJ6uRVecZHzXxj/obTbnGbDaECOFpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3ZAW/Lw4VA4Ludq94NW7gH9bqtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvODRjZWY0ZDItYjNjYS0z YWRiLWJmY2EtOWU0YjQ4Njc0MjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACI/VAQ/oTM66QQyD2+5KD8cRg38FQqDH+9UOvn+ZHlWjJj7zZc03r31 pfu5NKEi3DhXjgsrqmOTehMJG7lcJdpxRozFFQXfJmEF5ZJrkQFB3/C6GaPusA4y Sr7gzqOZQZJdvWfAPn6iIE3eV1BdmamIb4OF5H5QzIuq0TE+V30dXd35iPLaY0rq otldsFduXnh8N2rNajBDe379FzBYpjkEsqu6n0TZOaA70HVFB1z+ED7YSf3sNUfZ 2B4d/xsodRhvi4a0yYncAeoLLuZt2s7V+COo79p4yJ67Wut3UZIxq0PguaCh/VX5 TbxvsdBgJcuWpMYiZwPNvekhoGPuEfw= -----END CERTIFICATE-----Generated at Sat Jul 26 23:51:38 2025 by rpki-client