$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/d6e40a07-1968-3c10-9e42-aa8d86b9f665.roa File: d6e40a07-1968-3c10-9e42-aa8d86b9f665.roa (raw, json) Hash identifier: A8fUqDxbODNEDb2SkBGgb4/98m4B01+eyuEYos83zmo= Subject key identifier: 83:1A:5C:FF:3D:E4:06:5D:DD:0E:2E:5C:3C:A1:EB:EB:A0:5D:B6:04 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584A84124FA82585EEB0DFA08F00 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/d6e40a07-1968-3c10-9e42-aa8d86b9f665.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 14813 IP address blocks: 72.22.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:4f:a8:25:85:ee:b0:df:a0:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=8efceccc-41d5-496d-8272-2f0ca6d1fc60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3e:6a:cc:66:19:5f:e1:90:76:b6:34:de:44: ff:d3:06:15:7f:99:7d:95:d5:b1:4d:45:04:ec:cc: 98:93:93:48:95:15:74:8f:fc:ff:3b:d3:2e:ac:22: be:e3:94:73:65:3f:95:3e:f5:b8:c4:77:6a:55:6b: c5:2a:b2:47:76:13:ad:3b:2a:2e:c6:c0:ee:44:13: 47:65:d1:1f:f9:10:06:3f:19:aa:da:64:14:72:f7: 29:81:03:19:eb:cc:53:cf:f2:64:52:db:3e:df:36: 3e:69:87:ff:3f:c0:b2:89:13:fa:60:a3:8d:44:9f: 6e:80:92:17:86:77:21:9f:f3:38:21:05:8f:6d:7c: b3:d0:58:83:25:33:b3:32:cc:0a:76:cc:91:92:bb: 0e:98:21:22:de:6d:15:1a:6f:e2:3b:a2:31:27:f0: c1:1e:62:48:06:c2:a0:35:c4:32:2c:c0:bd:4c:ad: a0:2b:e9:e5:d2:91:10:76:05:db:1c:6d:48:f3:b4: bd:21:60:03:a9:06:21:c3:c9:d7:3c:33:3f:af:0f: 5b:c8:4b:d6:76:e9:12:96:1a:48:2a:c9:b2:9f:8f: 1a:af:b1:d0:48:d5:8f:ec:43:75:15:22:b5:2d:6c: 15:7c:45:59:f2:f4:1c:ea:ef:7c:db:2c:31:06:10: ff:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1A:5C:FF:3D:E4:06:5D:DD:0E:2E:5C:3C:A1:EB:EB:A0:5D:B6:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/d6e40a07-1968-3c10-9e42-aa8d86b9f665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:95:5e:33:18:62:5d:3f:89:dd:fc:51:d1:0b:76:8e:27:26: 7f:73:9b:df:ec:b4:0e:f5:8c:73:94:44:02:4c:cf:00:45:61: 0d:65:df:84:79:31:ee:13:df:f6:42:80:5b:66:e0:5d:d7:af: 72:60:fa:ed:23:a2:cc:27:9e:37:77:dd:01:bd:94:f5:c9:6e: 50:70:b8:6e:15:43:0c:53:62:2c:c4:08:51:6b:10:d2:aa:31: 3d:4c:8b:1d:98:71:64:6c:d3:2f:aa:4c:79:91:10:c6:1f:ac: da:c2:34:57:b4:77:02:6c:3d:a1:28:86:89:ce:0d:6b:db:e6: 26:ef:e7:57:c4:6d:1e:ee:77:27:02:6f:91:fb:f8:e2:d6:23: 4f:ec:2c:39:18:59:55:13:1b:5b:1f:c5:97:ce:b3:64:b5:f0: 85:f2:66:1c:f8:fb:00:7d:f2:39:fc:62:3c:3a:1d:4e:d1:38: b8:61:49:5b:4c:26:22:b6:39:33:a4:0d:76:f5:ec:bf:c7:ad: 41:7d:fe:79:a6:c4:97:b9:65:73:49:62:60:0c:35:2c:00:65: 3b:19:80:ae:28:36:6d:7b:72:ec:06:01:71:86:00:14:53:cf: ca:6c:8c:c6:0b:25:2b:63:12:46:a2:c6:cb:76:2f:f1:18:3a: 38:83:47:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEk+oJYXusN+gjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OGVmY2VjY2MtNDFkNS00OTZkLTgyNzItMmYwY2E2ZDFmYzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2T5qzGYZX+GQdrY03kT/0wYVf5l9ldWxTUUE 7MyYk5NIlRV0j/z/O9MurCK+45RzZT+VPvW4xHdqVWvFKrJHdhOtOyouxsDuRBNH ZdEf+RAGPxmq2mQUcvcpgQMZ68xTz/JkUts+3zY+aYf/P8CyiRP6YKONRJ9ugJIX hnchn/M4IQWPbXyz0FiDJTOzMswKdsyRkrsOmCEi3m0VGm/iO6IxJ/DBHmJIBsKg NcQyLMC9TK2gK+nl0pEQdgXbHG1I87S9IWADqQYhw8nXPDM/rw9byEvWdukSlhpI Ksmyn48ar7HQSNWP7EN1FSK1LWwVfEVZ8vQc6u982ywxBhD/1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMaXP895AZd3Q4uXDyh6+ugXbYEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvZDZlNDBhMDctMTk2OC0z YzEwLTllNDItYWE4ZDg2YjlmNjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKeVXjMYYl0/id38UdELdo4nJn9zm9/stA71jHOURAJMzwBFYQ1l34R5 Me4T3/ZCgFtm4F3Xr3Jg+u0joswnnjd33QG9lPXJblBwuG4VQwxTYizECFFrENKq MT1Mix2YcWRs0y+qTHmREMYfrNrCNFe0dwJsPaEohonODWvb5ibv51fEbR7udycC b5H7+OLWI0/sLDkYWVUTG1sfxZfOs2S18IXyZhz4+wB98jn8Yjw6HU7ROLhhSVtM JiK2OTOkDXb17L/HrUF9/nmmxJe5ZXNJYmAMNSwAZTsZgK4oNm17cuwGAXGGABRT z8psjMYLJStjEkaixst2L/EYOjiDR2Q= -----END CERTIFICATE-----Generated at Sat Jul 26 23:45:29 2025 by rpki-client