$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/832e9cf3-7676-3b39-af93-a7eb74275a8e.roa File: 832e9cf3-7676-3b39-af93-a7eb74275a8e.roa (raw, json) Hash identifier: tmlacO+SU5fsLSHqAbDqsZI4PYb1CyTRJbz8YRdU9uU= Subject key identifier: CF:BE:CD:25:C6:64:A7:01:FB:49:DC:08:27:F7:9B:35:D1:FA:BE:36 Certificate issuer: /CN=44e39417-e931-4514-89dc-a42b5b458fb5 Certificate serial: 010D0C9F4328584AFAB684EB6B7A1789436D3280 Authority key identifier: 44:9D:B2:B5:1C:CA:4C:8C:77:44:9C:66:77:47:66:84:A2:C6:5F:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/832e9cf3-7676-3b39-af93-a7eb74275a8e.roa Signing time: Tue 26 Aug 2025 01:00:32 +0000 ROA not before: Tue 26 Aug 2025 01:00:32 +0000 ROA not after: Mon 24 Nov 2025 02:00:32 +0000 asID: 8075 IP address blocks: 168.137.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/44e39417-e931-4514-89dc-a42b5b458fb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/44e39417-e931-4514-89dc-a42b5b458fb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Sep 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:b6:84:eb:6b:7a:17:89:43:6d:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44e39417-e931-4514-89dc-a42b5b458fb5 Validity Not Before: Aug 26 01:00:32 2025 GMT Not After : Nov 24 02:00:32 2025 GMT Subject: CN=30772759-a524-46ec-a277-0b1a7fe7feaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e1:e5:ad:ba:84:b7:7e:4b:2a:6a:9d:2d:a1: 63:ce:4f:76:5f:ab:2d:36:ee:b8:53:ab:de:28:30: 24:78:8b:57:b0:e4:27:50:4f:77:2f:7a:0a:ef:17: c6:0b:b9:53:ae:12:ba:49:a6:15:89:c5:61:5b:9d: ba:b5:6e:e3:64:83:c9:0c:bf:0b:e3:5f:44:7e:3d: bb:cb:c1:5c:eb:4c:43:36:74:74:4e:22:d1:ad:25: 5b:d3:2f:fe:bf:99:5b:99:26:f5:97:e0:ad:42:4b: 94:3c:a0:95:29:bc:19:08:90:49:c2:27:5e:4a:ee: be:10:38:45:e9:24:84:b2:1f:fa:8a:7b:f9:a5:45: c1:4c:8b:ed:97:90:04:2e:21:40:34:13:56:ef:27: 98:71:cc:d0:86:42:f2:09:f6:a0:c9:31:36:8f:99: 33:2b:0b:38:9d:d5:34:30:5b:66:7c:85:a9:d7:a3: 01:f3:9a:1e:45:cb:00:de:72:5f:b0:f8:a4:8d:2c: 4b:00:8e:d5:3e:26:80:95:97:0a:bd:97:6e:c2:38: f1:a7:4c:7c:bc:55:fc:c2:3f:8c:8f:ce:07:29:b2: 77:db:0e:85:2a:6e:1a:13:74:a1:af:32:ac:ef:96: fb:f2:16:48:7a:97:78:b5:42:ea:80:25:92:af:db: 1c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BE:CD:25:C6:64:A7:01:FB:49:DC:08:27:F7:9B:35:D1:FA:BE:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/832e9cf3-7676-3b39-af93-a7eb74275a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/44e39417-e931-4514-89dc-a42b5b458fb5.crl X509v3 Authority Key Identifier: keyid:44:9D:B2:B5:1C:CA:4C:8C:77:44:9C:66:77:47:66:84:A2:C6:5F:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer sbgp-ipAddrBlock: critical IPv4: 168.137.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:3f:4d:d9:97:e2:89:0d:07:46:c9:61:e2:55:b9:e3:26:ef: c7:e4:ca:32:eb:d6:23:de:fe:56:0a:85:de:03:81:78:14:81: 6a:82:81:97:f5:3e:6d:56:56:b9:8c:7a:f7:fb:1f:04:61:be: b1:88:cf:47:20:e9:51:39:f6:9c:81:b1:f8:e4:a2:d8:45:f7: d9:c5:61:be:78:4f:9d:58:ac:ec:dd:b5:e1:ef:40:9c:cc:4f: 6c:28:71:bb:bb:ba:81:ac:c9:dd:c9:a8:6d:b0:64:de:e8:3e: a1:76:98:f7:27:46:3d:58:7b:bc:c4:dd:79:77:32:85:c6:2b: a5:73:2f:1d:f7:9a:bd:66:d0:dd:19:a8:5a:50:7a:7a:58:30: 19:ae:5b:91:09:f1:1f:41:f9:da:86:50:38:21:e9:a0:85:64: 42:92:84:d8:5f:4c:1f:5d:ed:4d:d4:d0:21:0a:9e:c0:c6:f1: f2:b1:55:a7:57:00:3c:59:6c:7d:cd:ee:7a:a0:3d:89:1e:31: 8f:b0:df:9c:33:8e:5b:b6:03:35:c6:de:d3:d0:a8:a5:eb:c9: 18:52:ae:69:68:c0:24:42:c4:bc:ee:b1:d8:cd:07:cd:d2:35: 6d:61:b6:0d:95:6a:77:d7:5a:72:82:40:4e:5e:82:dc:11:ee: d3:d3:a4:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr6toTra3oXiUNtMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRlMzk0MTctZTkzMS00NTE0LTg5ZGMtYTQyYjViNDU4 ZmI1MB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk MzA3NzI3NTktYTUyNC00NmVjLWEyNzctMGIxYTdmZTdmZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOHlrbqEt35LKmqdLaFjzk92X6stNu64U6ve KDAkeItXsOQnUE93L3oK7xfGC7lTrhK6SaYVicVhW526tW7jZIPJDL8L419Efj27 y8Fc60xDNnR0TiLRrSVb0y/+v5lbmSb1l+CtQkuUPKCVKbwZCJBJwideSu6+EDhF 6SSEsh/6inv5pUXBTIvtl5AELiFANBNW7yeYcczQhkLyCfagyTE2j5kzKws4ndU0 MFtmfIWp16MB85oeRcsA3nJfsPikjSxLAI7VPiaAlZcKvZduwjjxp0x8vFX8wj+M j84HKbJ32w6FKm4aE3ShrzKs75b78hZIepd4tULqgCWSr9scGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM++zSXGZKcB+0ncCCf3mzXR+r42MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80NGUz OTQxNy1lOTMxLTQ1MTQtODlkYy1hNDJiNWI0NThmYjUvODMyZTljZjMtNzY3Ni0z YjM5LWFmOTMtYTdlYjc0Mjc1YThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDRlMzk0MTctZTkzMS00NTE0LTg5 ZGMtYTQyYjViNDU4ZmI1LzQ0ZTM5NDE3LWU5MzEtNDUxNC04OWRjLWE0MmI1YjQ1 OGZiNS5jcmwwHwYDVR0jBBgwFoAURJ2ytRzKTIx3RJxmd0dmhKLGX/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80NGUzOTQxNy1lOTMxLTQ1MTQtODlkYy1hNDJi NWI0NThmYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqIlIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0/TdmX4okNB0bJYeJVueMm78fkyjLr1iPe/lYKhd4DgXgUgWqCgZf1 Pm1WVrmMevf7HwRhvrGIz0cg6VE59pyBsfjkothF99nFYb54T51YrOzdteHvQJzM T2wocbu7uoGsyd3JqG2wZN7oPqF2mPcnRj1Ye7zE3Xl3MoXGK6VzLx33mr1m0N0Z qFpQenpYMBmuW5EJ8R9B+dqGUDgh6aCFZEKShNhfTB9d7U3U0CEKnsDG8fKxVadX ADxZbH3N7nqgPYkeMY+w35wzjlu2AzXG3tPQqKXryRhSrmlowCRCxLzusdjNB83S NW1htg2VanfXWnKCQE5egtwR7tPTpJA= -----END CERTIFICATE-----Generated at Wed Sep 3 23:56:26 2025 by rpki-client