$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cacd0df1-5cdf-3769-98be-255e1d5de51d.roa File: cacd0df1-5cdf-3769-98be-255e1d5de51d.roa (raw, json) Hash identifier: lR0LTmud/XFjH6s1N1/nrthTnOTYIRqJ7CjCe/aOR6c= Subject key identifier: C6:19:67:C9:68:84:25:D6:66:F6:D8:E4:3B:72:0E:14:48:6C:5F:2C Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584A8410EE33DD519B6D84C70B80 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cacd0df1-5cdf-3769-98be-255e1d5de51d.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 14813 IP address blocks: 72.22.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:ee:33:dd:51:9b:6d:84:c7:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=2c662af6-6bb4-426c-adab-cd37e6406bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:24:58:55:74:8d:3d:d0:ff:3d:a0:c9:04:ed: dc:27:79:08:9c:05:7a:ce:a5:e4:6d:9a:66:e6:ec: 70:46:15:5e:fb:ac:94:b9:0e:9c:2c:2e:59:93:d2: ca:76:fc:f7:7a:43:aa:d1:63:b3:89:e3:ee:97:bb: 8f:d6:f5:9b:54:77:a4:0d:4c:a4:c5:96:72:6d:e3: 2a:b1:b7:a9:10:bf:64:3d:63:e0:c8:b4:ea:a3:7f: 93:1c:58:d1:4f:af:26:2f:6d:d0:90:8d:e7:61:ed: b0:f7:2d:33:9b:d2:4d:14:86:05:a6:c3:24:16:e8: 3b:15:47:53:0c:77:c7:19:e5:d6:bd:3a:6c:68:b4: f9:46:fe:9a:2c:cd:e3:83:f8:d9:e1:93:62:53:95: 81:a4:7c:6f:37:8c:12:a9:5d:d1:77:11:17:86:98: a2:06:72:70:15:69:93:e8:eb:9d:a2:e3:a1:95:64: 40:4f:58:f9:f6:76:e9:dc:fb:f6:c5:11:21:cd:72: d0:61:62:81:5f:69:49:ae:7f:03:81:1e:0a:35:d6: 1f:26:9f:3c:a9:97:9d:df:12:8e:4a:4b:c5:9d:1d: ac:91:5f:ac:5e:a6:ac:cb:16:4c:d3:f6:83:c9:0c: ff:7e:8d:d4:42:fc:28:cd:81:84:b1:84:a0:57:75: 3f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:19:67:C9:68:84:25:D6:66:F6:D8:E4:3B:72:0E:14:48:6C:5F:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cacd0df1-5cdf-3769-98be-255e1d5de51d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:32:90:27:3c:63:93:04:fb:46:1b:ea:22:a8:d7:1c:5f:b7: b0:19:66:d8:d6:99:11:47:51:80:52:a2:f3:05:dc:c4:b4:63: 49:99:72:03:4c:6e:ab:9a:eb:d3:44:08:06:33:27:20:43:64: cb:7c:3f:2e:78:04:34:bf:9f:30:c3:fd:95:cc:82:d2:7a:93: d4:38:0c:d6:19:32:ea:14:fe:b7:04:61:53:67:aa:b5:ed:91: 90:16:22:8f:78:fc:e2:90:2e:23:99:a5:18:ef:e4:39:38:60: 49:6d:6a:42:56:78:cd:e9:3e:06:00:e3:f1:de:ad:27:22:a5: 63:bd:06:bf:b9:f8:f4:2d:3b:66:f3:aa:57:8b:fc:6d:58:10: 01:aa:1f:a3:60:8e:4f:68:0c:cf:23:99:5f:99:4b:88:a6:d3: 9b:33:f2:7a:22:5d:d8:49:03:43:08:7c:4b:ac:cb:ff:22:64: 9b:9e:7b:4a:00:fc:13:7c:b3:fa:56:03:53:81:86:b8:d7:af: 95:ac:02:42:7e:74:33:46:5c:70:32:ec:e4:79:59:64:8d:2e: 2d:58:05:ea:f6:29:30:59:72:8d:b7:11:9e:2e:3c:32:9c:c3: d8:ca:c3:b0:37:8c:08:84:d6:13:b0:55:e4:02:6b:21:c6:e1: 97:ff:0e:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEO4z3VGbbYTHC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MmM2NjJhZjYtNmJiNC00MjZjLWFkYWItY2QzN2U2NDA2YmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SRYVXSNPdD/PaDJBO3cJ3kInAV6zqXkbZpm 5uxwRhVe+6yUuQ6cLC5Zk9LKdvz3ekOq0WOziePul7uP1vWbVHekDUykxZZybeMq sbepEL9kPWPgyLTqo3+THFjRT68mL23QkI3nYe2w9y0zm9JNFIYFpsMkFug7FUdT DHfHGeXWvTpsaLT5Rv6aLM3jg/jZ4ZNiU5WBpHxvN4wSqV3RdxEXhpiiBnJwFWmT 6OudouOhlWRAT1j59nbp3Pv2xREhzXLQYWKBX2lJrn8DgR4KNdYfJp88qZed3xKO SkvFnR2skV+sXqasyxZM0/aDyQz/fo3UQvwozYGEsYSgV3U/VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYZZ8lohCXWZvbY5DtyDhRIbF8sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvY2FjZDBkZjEtNWNkZi0z NzY5LTk4YmUtMjU1ZTFkNWRlNTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgykCc8Y5ME+0Yb6iKo1xxft7AZZtjWmRFHUYBSovMF3MS0Y0mZcgNM bqua69NECAYzJyBDZMt8Py54BDS/nzDD/ZXMgtJ6k9Q4DNYZMuoU/rcEYVNnqrXt kZAWIo94/OKQLiOZpRjv5Dk4YEltakJWeM3pPgYA4/HerScipWO9Br+5+PQtO2bz qleL/G1YEAGqH6Ngjk9oDM8jmV+ZS4im05sz8noiXdhJA0MIfEusy/8iZJuee0oA /BN8s/pWA1OBhrjXr5WsAkJ+dDNGXHAy7OR5WWSNLi1YBer2KTBZco23EZ4uPDKc w9jKw7A3jAiE1hOwVeQCayHG4Zf/DkM= -----END CERTIFICATE-----Generated at Sat Jul 26 23:49:10 2025 by rpki-client