$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d7c63164-952c-3f37-ae44-d6db43209541.roa File: d7c63164-952c-3f37-ae44-d6db43209541.roa (raw, json) Hash identifier: +znTwAQrJ/M3dRRPu6gInb/g+ss9EPVbIBDOlZjXVuM= Subject key identifier: C5:09:05:58:6D:CF:CF:43:BB:9A:AB:52:D7:66:6F:B9:0C:C0:69:47 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584A6290CB2E03D00853E63BE180 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d7c63164-952c-3f37-ae44-d6db43209541.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 30036 IP address blocks: 72.255.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:cb:2e:03:d0:08:53:e6:3b:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=47e3b27c-d3e1-45c8-b1c8-df606a44f8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ed:80:15:2a:5d:d8:d0:1a:8e:a6:c8:01:86: 89:9d:ae:5a:d7:1b:cc:b7:9d:83:85:d3:58:28:71: 65:8f:15:88:1b:c1:21:99:d6:5b:c8:a1:88:2c:d8: d7:43:13:2c:3a:15:d0:d8:2e:f5:a0:58:de:cf:41: 14:44:95:b2:93:b6:48:d6:fe:02:37:f1:44:04:0a: 9c:6c:60:18:a8:f3:3c:41:6b:ca:11:e6:69:18:77: 8b:62:fa:34:ac:35:cc:e6:15:44:96:de:9a:17:c0: 31:40:9c:18:72:88:82:bd:02:cd:ff:d8:75:f4:f2: 10:b2:2c:72:c0:c3:2e:fa:28:13:28:bd:14:dc:b1: 56:69:c1:d8:a2:fe:77:fa:9e:29:c7:04:8a:33:3b: d8:62:f8:c4:2b:79:ff:11:29:02:94:39:e5:f0:a2: dd:01:0e:78:0a:ab:a2:de:a9:22:2a:ca:46:6a:6c: 12:59:13:be:42:d2:6b:1f:ab:b4:da:54:4c:f1:f3: 10:0f:78:7d:4c:32:fa:af:e2:3a:9a:62:5f:8c:a9: 60:13:f6:48:aa:19:4c:7f:fb:60:46:e3:83:22:42: f9:51:f1:25:20:36:3d:a9:1a:f1:e6:b3:e7:9a:8a: 2e:45:9f:f5:33:c0:e0:1b:22:2e:39:32:de:de:d1: 32:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:09:05:58:6D:CF:CF:43:BB:9A:AB:52:D7:66:6F:B9:0C:C0:69:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d7c63164-952c-3f37-ae44-d6db43209541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:07:f9:dc:61:61:bf:81:1d:98:d7:b0:03:63:20:0e:ad:eb: 5d:d6:be:b3:93:73:1f:75:75:9a:eb:45:18:cd:9d:8f:42:1d: 46:6e:f1:60:32:1e:78:63:7e:7a:df:22:c0:19:19:60:e0:e2: dc:8f:c4:de:c7:fb:d1:51:bc:04:cb:87:c1:fc:d2:33:67:e9: d7:c1:28:b1:da:29:05:9f:e1:e2:58:09:a9:10:ce:87:20:94: 5a:40:57:6d:55:61:6d:8f:56:d2:65:c5:6a:e4:71:e8:62:09: 0c:09:40:74:cc:53:33:ee:1c:d7:86:7a:7c:c0:d2:ac:ef:5f: 60:98:01:1c:21:4f:48:3c:df:c3:45:76:2b:2d:61:3e:4f:dc: aa:ca:ef:ca:94:f7:0b:28:99:40:62:d8:a3:04:36:0c:30:2f: 10:04:23:a4:d2:e9:d8:5e:33:fd:68:61:5e:53:0f:f0:0f:6c: 77:cd:45:20:ff:2e:7f:47:59:44:38:26:e3:6d:d8:3e:68:64: bd:58:d3:83:bb:c0:06:9e:c1:c4:99:46:d9:8b:5e:ed:82:3c: ec:3b:26:c6:0a:dd:05:bd:7d:03:b5:de:2d:7a:64:b4:3d:6b: 94:ea:b0:5e:62:21:3d:fc:a1:a0:d7:5f:58:5a:6c:a4:91:f4: 9e:74:31:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikMsuA9AIU+Y74YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk NDdlM2IyN2MtZDNlMS00NWM4LWIxYzgtZGY2MDZhNDRmOGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu2AFSpd2NAajqbIAYaJna5a1xvMt52DhdNY KHFljxWIG8EhmdZbyKGILNjXQxMsOhXQ2C71oFjez0EURJWyk7ZI1v4CN/FEBAqc bGAYqPM8QWvKEeZpGHeLYvo0rDXM5hVElt6aF8AxQJwYcoiCvQLN/9h19PIQsixy wMMu+igTKL0U3LFWacHYov53+p4pxwSKMzvYYvjEK3n/ESkClDnl8KLdAQ54Cqui 3qkiKspGamwSWRO+QtJrH6u02lRM8fMQD3h9TDL6r+I6mmJfjKlgE/ZIqhlMf/tg RuODIkL5UfElIDY9qRrx5rPnmoouRZ/1M8DgGyIuOTLe3tEy2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUJBVhtz89Du5qrUtdmb7kMwGlHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDdjNjMxNjQtOTUyYy0z ZjM3LWFlNDQtZDZkYjQzMjA5NTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8H+dxhYb+BHZjXsANjIA6t613WvrOTcx91dZrrRRjNnY9CHUZu8WAy HnhjfnrfIsAZGWDg4tyPxN7H+9FRvATLh8H80jNn6dfBKLHaKQWf4eJYCakQzocg lFpAV21VYW2PVtJlxWrkcehiCQwJQHTMUzPuHNeGenzA0qzvX2CYARwhT0g838NF distYT5P3KrK78qU9wsomUBi2KMENgwwLxAEI6TS6dheM/1oYV5TD/APbHfNRSD/ Ln9HWUQ4JuNt2D5oZL1Y04O7wAaewcSZRtmLXu2CPOw7JsYK3QW9fQO13i16ZLQ9 a5TqsF5iIT38oaDXX1habKSR9J50MVs= -----END CERTIFICATE-----Generated at Thu Jul 10 06:45:54 2025 by rpki-client