$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/cb456ff7-3af6-33b3-8914-cb40fa187e7d.roa File: cb456ff7-3af6-33b3-8914-cb40fa187e7d.roa (raw, json) Hash identifier: ubXkXPedg+UpFntFYxN2bWUXQRO/oPcb1oH5vXlvf8E= Subject key identifier: 50:7A:D5:6F:EE:B0:32:11:7A:48:19:86:E6:42:47:8B:B0:2E:1A:D5 Certificate issuer: /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e Certificate serial: 010D0C9F4328584B0B76A9574D81A40822E07880 Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/cb456ff7-3af6-33b3-8914-cb40fa187e7d.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 8075 IP address blocks: 72.22.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Sep 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a9:57:4d:81:a4:08:22:e0:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=e53c5ea3-4f5a-4ada-a878-fff93fe48ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8e:0b:cc:d5:46:5c:be:74:da:c9:9c:a2:05: 96:6a:3a:78:21:a5:7b:e3:71:04:ea:95:ba:7a:5e: 48:9a:25:a1:33:1c:31:6c:e4:23:37:1b:3d:69:61: 92:04:03:b3:1e:34:3f:db:f3:e8:bd:3b:c2:b6:2a: 29:e1:af:e0:97:9a:36:b9:f9:46:12:59:13:cb:e4: ae:f3:eb:e9:f7:72:b0:8d:18:3c:e6:8e:b3:2a:cc: 7d:8f:a6:5f:8a:bd:88:b6:8a:09:31:66:94:bb:58: 78:4f:a7:2e:a4:48:3e:43:60:1d:b4:7b:33:3d:db: c2:b4:01:9f:b6:dd:b6:f7:b2:d3:c5:e9:fe:61:7e: 1c:29:4d:2b:60:7b:c9:aa:d3:9d:b2:ad:83:e3:1d: cd:32:c4:53:6c:eb:54:81:ec:f9:9d:3b:58:9f:41: 23:bf:be:39:b7:af:de:6e:59:41:c2:88:ed:e2:02: 79:8f:29:10:cd:6a:51:8b:c6:06:fa:03:2e:fe:10: 6b:7d:cc:aa:12:b1:3f:8a:99:ad:af:36:52:38:2a: c6:d7:1d:25:23:7c:69:64:81:b8:4c:28:c4:63:7b: 48:3e:6e:b5:fe:2d:b8:7f:fd:82:86:02:91:f9:d5: 38:46:0d:25:c6:c1:06:40:f1:b6:37:19:42:67:9b: 3c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:7A:D5:6F:EE:B0:32:11:7A:48:19:86:E6:42:47:8B:B0:2E:1A:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/cb456ff7-3af6-33b3-8914-cb40fa187e7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl X509v3 Authority Key Identifier: keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer sbgp-ipAddrBlock: critical IPv4: 72.22.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:22:e4:32:b2:69:74:ec:6d:a0:be:8f:e9:64:ba:90:4d:d8: db:00:8a:d3:83:27:7a:42:bd:b5:6e:a5:57:49:60:b1:5e:93: fa:5f:94:f2:c7:19:37:1c:17:cd:18:25:0d:c3:29:1c:e9:81: b1:ac:68:74:ee:8f:28:9f:5f:e5:99:28:41:44:45:e2:8a:0f: 70:48:40:e6:8b:70:a9:72:93:be:41:4b:c6:32:f5:b2:dc:39: 55:f8:e9:a1:dc:0f:8b:53:b9:7e:d1:17:88:5c:d8:94:22:22: 5b:5e:66:79:93:8c:fc:5c:96:ff:10:ec:92:4a:42:0e:8e:a4: 8c:6d:6f:89:2f:73:28:81:b4:0f:92:de:3b:f9:e4:06:ee:79: a8:33:1c:a0:92:f9:6f:78:3f:cb:0c:4e:61:25:58:19:eb:1a: d9:8a:fd:e7:e6:ac:fd:a7:26:1c:f6:05:eb:6c:99:c9:08:e1: 05:4e:7d:66:35:e9:6d:bd:c4:97:5b:14:03:37:d4:5b:fc:05: 26:28:d8:89:a6:69:2e:ef:61:3d:83:07:d7:30:bf:a5:b2:00: ee:a4:4c:5b:4f:83:a1:3e:73:82:b3:4c:13:d9:4b:fa:2f:b3: ca:ca:24:82:5f:c8:1b:29:fe:36:49:9c:28:c0:c6:7e:d6:66: 52:5f:e3:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqlXTYGkCCLgeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTBmMzc3NWYtN2E2Yi00YjkyLWI1ZGYtODJkODE1NjJi MDhlMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZTUzYzVlYTMtNGY1YS00YWRhLWE4NzgtZmZmOTNmZTQ4ZWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY4LzNVGXL502smcogWWajp4IaV743EE6pW6 el5ImiWhMxwxbOQjNxs9aWGSBAOzHjQ/2/PovTvCtiop4a/gl5o2uflGElkTy+Su 8+vp93KwjRg85o6zKsx9j6Zfir2ItooJMWaUu1h4T6cupEg+Q2AdtHszPdvCtAGf tt2297LTxen+YX4cKU0rYHvJqtOdsq2D4x3NMsRTbOtUgez5nTtYn0Ejv745t6/e bllBwojt4gJ5jykQzWpRi8YG+gMu/hBrfcyqErE/ipmtrzZSOCrG1x0lI3xpZIG4 TCjEY3tIPm61/i24f/2ChgKR+dU4Rg0lxsEGQPG2NxlCZ5s8XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFB61W/usDIRekgZhuZCR4uwLhrVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYz Nzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4MTU2MmIwOGUvY2I0NTZmZjctM2FmNi0z M2IzLTg5MTQtY2I0MGZhMTg3ZTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTBmMzc3NWYtN2E2Yi00YjkyLWI1 ZGYtODJkODE1NjJiMDhlL2UwZjM3NzVmLTdhNmItNGI5Mi1iNWRmLTgyZDgxNTYy YjA4ZS5jcmwwHwYDVR0jBBgwFoAUCUtXkuMVh55WqGUJuWfdMHF6F1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYzNzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4 MTU2MmIwOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBZFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYi5DKyaXTsbaC+j+lkupBN2NsAitODJ3pCvbVupVdJYLFek/pflPLH GTccF80YJQ3DKRzpgbGsaHTujyifX+WZKEFEReKKD3BIQOaLcKlyk75BS8Yy9bLc OVX46aHcD4tTuX7RF4hc2JQiIlteZnmTjPxclv8Q7JJKQg6OpIxtb4kvcyiBtA+S 3jv55AbueagzHKCS+W94P8sMTmElWBnrGtmK/efmrP2nJhz2BetsmckI4QVOfWY1 6W29xJdbFAM31Fv8BSYo2ImmaS7vYT2DB9cwv6WyAO6kTFtPg6E+c4KzTBPZS/ov s8rKJIJfyBsp/jZJnCjAxn7WZlJf490= -----END CERTIFICATE-----Generated at Wed Sep 3 23:59:18 2025 by rpki-client