$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa File: dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa (raw, json) Hash identifier: jRSfaPF15YtgV/RMvSCzLOrl/rooDspWUx8bMTgeHU4= Subject key identifier: 7C:35:2C:2A:89:09:CC:08:A3:55:F5:A7:75:25:B1:97:46:99:64:4E Certificate issuer: /CN=c22717c6-604d-4453-a20f-3430af557f6e Certificate serial: 010D0C9F4328584B13D6C5627DFAB01D8F514DC0 Authority key identifier: EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 11550 IP address blocks: 72.42.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c5:62:7d:fa:b0:1d:8f:51:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c22717c6-604d-4453-a20f-3430af557f6e Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=9ed92231-f27d-462b-92e9-5e925d319d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7b:ef:23:01:70:94:ce:3f:eb:f2:fe:7e:1c: c3:20:9b:c3:3c:0d:43:1c:a9:4d:ae:f2:49:2e:6b: 4a:cb:37:dc:46:65:7d:98:db:a8:0d:f1:0f:11:a1: bb:21:a3:96:73:08:26:50:c4:f3:fd:93:a9:1c:1b: e2:3e:66:84:aa:9d:d8:e6:49:1e:e2:38:19:63:45: 0e:8a:b0:a4:1a:6b:f8:e5:01:55:f9:b1:d9:0b:82: 51:f3:3a:44:69:11:61:1f:98:63:3a:80:98:03:82: 5a:0d:c2:b8:11:a3:14:42:fb:00:f1:09:13:3f:dd: d8:b9:c4:57:2f:07:b7:04:bc:ee:04:6c:d3:c6:61: b5:1a:0a:6d:9d:08:32:dc:f2:cb:40:31:9f:d5:20: b4:00:bb:bd:1f:58:d8:19:2d:5c:6e:3d:1c:ca:01: 54:4d:cc:b6:01:bf:42:c2:19:95:fd:74:68:1b:e7: cf:ea:71:77:42:03:86:f2:19:43:11:ae:ce:26:ff: 0a:78:4a:4b:63:a9:1d:a3:3b:c2:ea:29:17:a6:4c: 3f:20:db:d4:50:a2:54:de:ca:88:82:47:40:ff:de: 7f:ad:04:f7:57:b8:01:cc:a5:9c:3b:6a:f5:ca:7a: f3:49:96:c6:3e:b9:fe:93:9b:a5:e1:7a:f6:0c:b6: 67:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:35:2C:2A:89:09:CC:08:A3:55:F5:A7:75:25:B1:97:46:99:64:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl X509v3 Authority Key Identifier: keyid:EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer sbgp-ipAddrBlock: critical IPv4: 72.42.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e4:c8:93:f7:13:e4:fc:33:fc:69:7a:be:8e:e7:00:75:e9:38: 79:73:bf:de:9a:8b:54:7d:8d:f8:84:76:ae:bd:c4:a2:a5:8f: 33:87:55:47:c5:60:c9:a0:9e:d8:72:02:59:3e:aa:be:fa:34: f2:d7:2e:10:df:a7:68:e5:49:52:55:22:ea:15:16:9f:05:2f: bc:e3:7b:fe:fe:1a:32:b9:43:07:f1:60:ae:43:f3:0c:a9:47: 41:7e:99:f2:a2:bd:b8:f1:e6:6f:be:74:96:25:de:fb:12:67: 01:17:05:99:43:e3:2c:3e:44:78:82:a9:97:0a:0d:bb:2e:29: f0:29:00:8c:10:03:fe:26:e8:cf:e9:8f:0b:d1:f1:b9:2f:37: ef:54:a8:a9:6c:ba:5d:ed:4f:c3:3f:96:7a:df:6e:a7:d9:0b: 6a:fc:d7:89:6a:1a:93:bd:78:2a:10:67:d2:8e:b8:15:c9:66: 9b:6d:f1:3c:0c:99:d1:46:d6:26:53:02:f3:b1:ae:ed:dd:02: f2:3a:fa:81:18:b1:67:f0:47:99:21:46:e1:0d:25:e2:80:a7: 09:34:02:e0:27:36:71:2c:2a:52:37:5c:8e:07:54:ec:6a:dc: 6f:38:c8:7c:08:5f:01:79:da:29:aa:47:8a:17:58:f2:20:e3: c1:0f:88:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sViffqwHY9RTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIyNzE3YzYtNjA0ZC00NDUzLWEyMGYtMzQzMGFmNTU3 ZjZlMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk OWVkOTIyMzEtZjI3ZC00NjJiLTkyZTktNWU5MjVkMzE5ZDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXvvIwFwlM4/6/L+fhzDIJvDPA1DHKlNrvJJ LmtKyzfcRmV9mNuoDfEPEaG7IaOWcwgmUMTz/ZOpHBviPmaEqp3Y5kke4jgZY0UO irCkGmv45QFV+bHZC4JR8zpEaRFhH5hjOoCYA4JaDcK4EaMUQvsA8QkTP93YucRX Lwe3BLzuBGzTxmG1GgptnQgy3PLLQDGf1SC0ALu9H1jYGS1cbj0cygFUTcy2Ab9C whmV/XRoG+fP6nF3QgOG8hlDEa7OJv8KeEpLY6kdozvC6ikXpkw/INvUUKJU3sqI gkdA/95/rQT3V7gBzKWcO2r1ynrzSZbGPrn+k5ul4Xr2DLZnnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHw1LCqJCcwIo1X1p3UlsZdGmWROMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3 MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMwYWY1NTdmNmUvZGZiODEwMWUtZWMyYS0z NmU1LThjYmUtNTc2YmI4YzEyZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzIyNzE3YzYtNjA0ZC00NDUzLWEy MGYtMzQzMGFmNTU3ZjZlL2MyMjcxN2M2LTYwNGQtNDQ1My1hMjBmLTM0MzBhZjU1 N2Y2ZS5jcmwwHwYDVR0jBBgwFoAU7qMrzzRTqz7xoBFGZHeL3kSWVmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMw YWY1NTdmNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCr7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOTIk/cT5Pwz/Gl6vo7nAHXpOHlzv96ai1R9jfiEdq69xKKljzOHVUfF YMmgnthyAlk+qr76NPLXLhDfp2jlSVJVIuoVFp8FL7zje/7+GjK5QwfxYK5D8wyp R0F+mfKivbjx5m++dJYl3vsSZwEXBZlD4yw+RHiCqZcKDbsuKfApAIwQA/4m6M/p jwvR8bkvN+9UqKlsul3tT8M/lnrfbqfZC2r814lqGpO9eCoQZ9KOuBXJZptt8TwM mdFG1iZTAvOxru3dAvI6+oEYsWfwR5khRuENJeKApwk0AuAnNnEsKlI3XI4HVOxq 3G84yHwIXwF52imqR4oXWPIg48EPiMQ= -----END CERTIFICATE-----Generated at Sat Oct 11 02:53:53 2025 by rpki-client