$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/8f7a8d8b-1ad7-3f2e-a11d-62f2b96b5486.roa File: 8f7a8d8b-1ad7-3f2e-a11d-62f2b96b5486.roa (raw, json) Hash identifier: ch9nEaMfls5mr1y1i/GYrPryxEVwtGe+8ekNXqLdUi8= Subject key identifier: BC:6B:4B:77:E2:C9:CF:65:78:61:AA:C2:AE:72:56:07:FE:D7:68:0A Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584A8410D1918EF45108404B4000 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/8f7a8d8b-1ad7-3f2e-a11d-62f2b96b5486.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 14813 IP address blocks: 72.51.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:d1:91:8e:f4:51:08:40:4b:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=1e6d7e98-c5f3-43ae-a00b-bee8562d763d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:68:b0:e7:4c:ec:46:d3:39:a6:68:d0:50:c0: 4e:ee:80:8c:42:e0:09:f9:33:1a:41:3f:25:d7:5f: b5:9b:ff:71:ab:23:25:71:da:af:e0:21:fb:86:f4: 52:62:d5:1b:14:6e:8c:af:6c:d5:7b:e9:52:32:9f: 8d:39:0a:08:b9:b9:ad:19:10:86:83:6a:95:f6:bd: 54:17:84:d1:d5:3a:21:f7:55:85:65:05:21:6e:72: 0a:70:81:21:6f:89:0c:65:4c:2b:e3:e7:06:f8:ad: ab:8b:3a:c7:d3:11:e9:ec:bc:c7:16:ac:dd:d8:fa: 62:07:d4:f9:c8:83:a4:de:db:25:b9:16:9c:ff:e6: 4a:44:de:76:18:b9:4f:01:41:3d:d5:d1:ad:13:83: 3c:8c:3d:f4:15:52:dd:b1:52:3a:d6:ed:a9:7a:f9: 91:ce:28:2d:7c:ca:5e:b2:e5:48:7f:3b:9b:03:53: f0:25:6e:b6:66:cd:3c:01:d3:33:ab:68:7e:b1:df: 13:70:0f:5f:aa:19:63:35:63:57:91:35:c3:8e:8c: 18:31:34:ee:65:e8:84:4e:a1:f0:6e:b8:82:7d:29: 64:a7:5e:8f:7c:b9:4f:a7:c2:48:52:17:ec:b2:c2: b3:05:f4:f7:5b:d4:a7:0b:66:38:c6:cf:e8:15:01: 73:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6B:4B:77:E2:C9:CF:65:78:61:AA:C2:AE:72:56:07:FE:D7:68:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/8f7a8d8b-1ad7-3f2e-a11d-62f2b96b5486.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.51.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:66:62:54:1b:b0:76:00:6f:ec:de:f9:5a:da:37:1c:3b:59: 42:cc:69:18:35:c1:f7:50:14:48:a5:65:92:9d:7f:4b:02:d0: 47:39:3f:1a:e4:38:ed:fb:9a:f6:1b:07:bf:e0:7d:28:a3:89: 93:2d:60:2a:18:30:b3:c6:fd:2f:75:62:fb:5c:51:88:e7:40: 22:71:09:dd:c1:80:f5:16:9d:1b:01:35:57:a0:e9:8e:ee:be: 4e:0a:d9:94:58:0c:c2:31:21:4d:6e:26:21:ea:24:38:2a:5e: a6:0b:77:b7:63:93:e4:01:fb:83:91:ec:3c:60:72:28:e4:54: 83:c0:51:e8:5c:80:b2:6f:de:18:95:00:9a:e2:d7:63:32:48: 87:2e:59:69:27:9a:09:9f:0b:b7:a9:a0:1b:2c:2c:21:4f:80: 2b:83:32:9e:60:8c:af:f7:b1:5b:83:14:11:83:ae:87:72:aa: 0f:bd:6a:72:c2:d4:e2:90:1a:1c:2a:94:30:04:89:a3:d7:dd: 58:67:97:67:ea:5e:f6:e6:02:3e:30:8b:88:84:0d:fa:55:a0: 35:77:20:46:e2:a2:b6:9f:29:39:5e:75:41:91:0e:e0:c1:b4: 0a:97:2c:50:92:04:5d:ea:92:81:17:77:4e:c0:f9:7e:af:03: fb:d8:01:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEENGRjvRRCEBLQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MWU2ZDdlOTgtYzVmMy00M2FlLWEwMGItYmVlODU2MmQ3NjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGiw50zsRtM5pmjQUMBO7oCMQuAJ+TMaQT8l 11+1m/9xqyMlcdqv4CH7hvRSYtUbFG6Mr2zVe+lSMp+NOQoIubmtGRCGg2qV9r1U F4TR1Toh91WFZQUhbnIKcIEhb4kMZUwr4+cG+K2rizrH0xHp7LzHFqzd2PpiB9T5 yIOk3tsluRac/+ZKRN52GLlPAUE91dGtE4M8jD30FVLdsVI61u2pevmRzigtfMpe suVIfzubA1PwJW62Zs08AdMzq2h+sd8TcA9fqhljNWNXkTXDjowYMTTuZeiETqHw briCfSlkp16PfLlPp8JIUhfsssKzBfT3W9SnC2Y4xs/oFQFzFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxrS3fiyc9leGGqwq5yVgf+12gKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvOGY3YThkOGItMWFkNy0z ZjJlLWExMWQtNjJmMmI5NmI1NDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSDNoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVmYlQbsHYAb+ze+VraNxw7WULMaRg1wfdQFEilZZKdf0sC0Ec5Pxrk OO37mvYbB7/gfSijiZMtYCoYMLPG/S91YvtcUYjnQCJxCd3BgPUWnRsBNVeg6Y7u vk4K2ZRYDMIxIU1uJiHqJDgqXqYLd7djk+QB+4OR7DxgcijkVIPAUehcgLJv3hiV AJri12MySIcuWWknmgmfC7epoBssLCFPgCuDMp5gjK/3sVuDFBGDrodyqg+9anLC 1OKQGhwqlDAEiaPX3Vhnl2fqXvbmAj4wi4iEDfpVoDV3IEbiorafKTledUGRDuDB tAqXLFCSBF3qkoEXd07A+X6vA/vYAbs= -----END CERTIFICATE-----Generated at Sat Jul 26 23:44:27 2025 by rpki-client