$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/aa6e3fbd-5d57-3052-aa78-d08a722b781c.roa File: aa6e3fbd-5d57-3052-aa78-d08a722b781c.roa (raw, json) Hash identifier: 3Dj7WnKEl+sjv9mxOzEHI88Zmavea+MAdxE7+LZTfok= Subject key identifier: E8:8C:E3:B0:92:CE:77:A4:12:E2:45:A7:BB:53:26:7F:E3:62:9E:0F Certificate issuer: /CN=51772dd7-991f-47b2-b40b-d92a8497234e Certificate serial: 010D0C9F4328584AF95140223288A1BA212A1F50 Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/aa6e3fbd-5d57-3052-aa78-d08a722b781c.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 14618 IP address blocks: 72.18.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:40:22:32:88:a1:ba:21:2a:1f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=eb81984a-cf5e-40a9-bbc4-5f562747636b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ff:64:23:7f:2b:11:59:f4:fc:0d:a8:a6:09: b9:ea:49:c7:ec:e2:92:0c:b9:e4:ae:84:53:37:b4: 06:2f:b7:74:01:18:80:fc:33:57:f9:15:97:fd:76: 2a:a0:51:95:f9:cf:25:bb:7a:25:03:54:3a:8d:cf: 31:bc:76:f1:d3:83:11:01:3e:5b:35:c2:97:bb:0b: 91:43:e8:87:0d:4f:ce:c1:3f:ac:1c:1f:21:5b:23: 10:8e:fd:a6:64:6a:86:bd:59:dd:a2:0b:22:29:3e: 36:bf:f0:da:bc:18:a4:5a:ee:c8:8a:ab:83:f5:5a: ff:b7:6a:9e:81:48:3b:83:cc:28:5b:83:b0:0a:11: fb:ff:44:2f:40:7d:cc:69:fc:e2:cc:d7:fe:fa:a7: 25:2f:e7:ee:7e:3c:4b:03:03:5e:2a:1c:7a:bd:24: 04:e2:4b:99:a2:c9:88:f4:ca:bc:0e:dd:83:ee:9c: c0:79:8d:11:2c:0b:3d:e9:1a:9e:b8:e2:35:f0:8a: 66:7c:04:1e:5a:2f:12:12:c0:ef:c9:84:40:62:7f: eb:5c:a3:bb:67:87:64:fd:8e:47:ea:ee:84:e8:be: f5:6b:cb:74:bd:1c:71:ac:ab:67:2a:12:68:64:7f: 72:6f:71:8f:37:cf:87:34:c2:42:bb:1b:55:e3:26: d1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:8C:E3:B0:92:CE:77:A4:12:E2:45:A7:BB:53:26:7F:E3:62:9E:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/aa6e3fbd-5d57-3052-aa78-d08a722b781c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl X509v3 Authority Key Identifier: keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer sbgp-ipAddrBlock: critical IPv4: 72.18.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:92:90:99:ae:20:69:c4:84:86:3f:7c:93:e9:74:3c:a4:2d: c2:52:7c:78:c4:09:94:62:b5:d9:96:50:fe:7b:55:d4:ae:b4: 47:67:ce:9c:d3:24:68:4e:c3:7f:1e:ed:36:5a:f5:f3:7f:1f: 50:81:a4:8d:81:1c:1d:b3:8e:c2:40:e2:4e:ee:b3:10:89:ee: f0:8f:2d:ed:55:c7:d7:62:38:01:a3:6c:cd:3e:63:a8:20:d2: 08:d9:60:59:8c:1f:64:ae:49:0e:54:44:25:2a:49:78:be:55: f5:ac:14:25:b4:16:b5:56:ac:47:df:c6:db:62:61:cd:53:14: 04:46:d6:06:41:7e:ce:fd:3d:f7:5d:04:63:5f:1b:5c:91:9e: bf:94:61:65:79:52:f0:1f:4f:9e:92:d2:ce:cc:9f:55:c7:97: 93:36:e0:db:e2:75:a4:8f:03:a1:f3:55:88:2e:9d:ac:08:78: 01:2f:c4:51:71:19:a2:8b:a4:4a:a9:cd:7b:a5:c2:10:47:a4: fe:9c:fa:62:a5:1b:79:6f:38:c1:1a:75:60:36:12:b5:dd:f5: 58:a7:0c:1a:5e:33:7d:8f:30:fa:45:02:ae:bc:db:c0:21:34: 9e:93:83:29:9d:dc:5f:df:c8:de:7b:7e:95:a6:a9:e0:6e:25: 63:6d:1a:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UUAiMoihuiEqH1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3NzJkZDctOTkxZi00N2IyLWI0MGItZDkyYTg0OTcy MzRlMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZWI4MTk4NGEtY2Y1ZS00MGE5LWJiYzQtNWY1NjI3NDc2MzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf9kI38rEVn0/A2opgm56knH7OKSDLnkroRT N7QGL7d0ARiA/DNX+RWX/XYqoFGV+c8lu3olA1Q6jc8xvHbx04MRAT5bNcKXuwuR Q+iHDU/OwT+sHB8hWyMQjv2mZGqGvVndogsiKT42v/DavBikWu7IiquD9Vr/t2qe gUg7g8woW4OwChH7/0QvQH3MafzizNf++qclL+fufjxLAwNeKhx6vSQE4kuZosmI 9Mq8Dt2D7pzAeY0RLAs96RqeuOI18IpmfAQeWi8SEsDvyYRAYn/rXKO7Z4dk/Y5H 6u6E6L71a8t0vRxxrKtnKhJoZH9yb3GPN8+HNMJCuxtV4ybRUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiM47CSznekEuJFp7tTJn/jYp4PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3 MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJhODQ5NzIzNGUvYWE2ZTNmYmQtNWQ1Ny0z MDUyLWFhNzgtZDA4YTcyMmI3ODFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTE3NzJkZDctOTkxZi00N2IyLWI0 MGItZDkyYTg0OTcyMzRlLzUxNzcyZGQ3LTk5MWYtNDdiMi1iNDBiLWQ5MmE4NDk3 MjM0ZS5jcmwwHwYDVR0jBBgwFoAU17ypcT0ujL6ovHcuMMM9YAkEAo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJh ODQ5NzIzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBLeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+SkJmuIGnEhIY/fJPpdDykLcJSfHjECZRitdmWUP57VdSutEdnzpzT JGhOw38e7TZa9fN/H1CBpI2BHB2zjsJA4k7usxCJ7vCPLe1Vx9diOAGjbM0+Y6gg 0gjZYFmMH2SuSQ5URCUqSXi+VfWsFCW0FrVWrEffxttiYc1TFARG1gZBfs79Pfdd BGNfG1yRnr+UYWV5UvAfT56S0s7Mn1XHl5M24NvidaSPA6HzVYgunawIeAEvxFFx GaKLpEqpzXulwhBHpP6c+mKlG3lvOMEadWA2ErXd9VinDBpeM32PMPpFAq6828Ah NJ6Tgymd3F/fyN57fpWmqeBuJWNtGm8= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:55 2025 by rpki-client