$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/ca7c52eb-4524-32f1-a243-35673890d6b4.roa File: ca7c52eb-4524-32f1-a243-35673890d6b4.roa (raw, json) Hash identifier: 1txwuBQ/7f1yPlBJrNHiytqbhJsYh6ScrNUToIeq4a8= Subject key identifier: 87:0B:55:2E:BD:DD:87:9C:F1:B9:DC:44:15:0D:1B:CC:B9:19:4F:11 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584A1B5FFCBE0A770476C1202C00 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/ca7c52eb-4524-32f1-a243-35673890d6b4.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 26967 IP address blocks: 69.72.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:5f:fc:be:0a:77:04:76:c1:20:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=01a8d60b-639b-4e60-874a-4f737ec55a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c2:33:2d:f4:2b:bd:e8:da:6e:e9:f9:e3:4e: 90:8d:74:7f:47:3e:7e:e5:20:44:4d:51:dc:a9:25: 8b:26:7a:c4:a5:51:89:6d:17:f6:c4:c4:9a:9e:db: b0:4e:19:7f:8d:16:59:a1:28:54:b0:89:0b:4f:04: ea:d4:c8:69:3a:ea:36:68:23:de:46:01:50:75:0d: 66:bd:f6:ee:1d:a2:98:fc:d3:2c:e0:a2:c2:8a:d5: 62:e2:b0:2b:80:e0:88:bf:30:e2:19:5e:99:b6:68: 14:3f:78:a2:e1:58:5a:88:3d:1f:36:b6:fc:8c:9f: 0e:9c:b7:1a:bc:8b:e6:4a:3e:87:ff:b8:f7:18:8f: f9:79:62:46:c0:02:18:a3:44:b4:50:f2:87:4d:ba: cf:ec:3b:d7:24:63:7e:7b:ee:8f:0b:ea:fa:af:98: 41:f8:1e:ef:3b:41:fe:df:b1:ac:41:26:1c:3b:b6: 99:3f:81:2a:93:92:fd:04:58:1e:90:ef:ff:7c:9e: 06:dd:aa:a5:d1:1c:6f:3f:55:46:a5:b4:b7:d5:a2: 1b:54:09:2e:e4:cf:da:44:36:bd:e9:eb:29:38:78: 44:76:3c:50:2a:49:fc:db:a2:6c:87:b8:2f:3f:bf: 04:7e:65:8b:89:c4:f9:12:8a:a1:00:ce:97:b0:09: fd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0B:55:2E:BD:DD:87:9C:F1:B9:DC:44:15:0D:1B:CC:B9:19:4F:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/ca7c52eb-4524-32f1-a243-35673890d6b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 69.72.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:16:1e:d2:56:29:d3:5f:26:1c:a4:f7:bd:5b:06:c1:0b:3b: af:92:6c:f7:a4:73:24:43:3c:2a:b9:c4:14:3f:74:94:cc:51: c5:00:e7:9e:d5:30:f0:02:52:3d:72:4c:18:6d:bb:e3:bd:a4: 82:be:84:80:e7:e2:53:ad:3e:70:5b:d7:45:58:42:a9:9b:8a: 08:bb:b8:be:ba:7c:4d:df:54:0e:f5:c3:1b:e8:26:57:10:59: 97:0b:51:b9:28:eb:3a:e2:6f:fe:11:2f:58:e4:ac:72:8f:e7: 1d:ed:be:93:fc:cf:04:07:09:40:b4:23:a9:25:0c:25:b9:bf: 58:51:e6:36:9d:81:86:53:fc:7c:fc:90:be:a8:b2:35:06:56: 02:63:e7:2d:a9:0a:7a:bb:91:fc:45:c0:41:25:4f:a2:83:25: cd:af:d4:d8:53:0d:43:b6:d8:4a:ce:1b:fb:83:fa:7a:4a:81: 1c:12:82:32:7c:ca:84:1a:6a:55:5c:ad:02:3e:90:c8:0d:ed: 0f:8d:83:da:52:02:38:2b:3a:b7:ea:46:ac:2d:50:41:ae:21: 07:7b:7f:fa:ac:91:88:1e:35:78:6d:d1:85:ad:d3:9a:50:10: 71:36:52:6e:74:67:8f:b6:9a:6d:de:0c:4a:26:f6:d3:56:80: 43:01:1b:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobX/y+CncEdsEgLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk MDFhOGQ2MGItNjM5Yi00ZTYwLTg3NGEtNGY3MzdlYzU1YTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcIzLfQrvejabun5406QjXR/Rz5+5SBETVHc qSWLJnrEpVGJbRf2xMSantuwThl/jRZZoShUsIkLTwTq1MhpOuo2aCPeRgFQdQ1m vfbuHaKY/NMs4KLCitVi4rArgOCIvzDiGV6ZtmgUP3ii4VhaiD0fNrb8jJ8OnLca vIvmSj6H/7j3GI/5eWJGwAIYo0S0UPKHTbrP7DvXJGN+e+6PC+r6r5hB+B7vO0H+ 37GsQSYcO7aZP4Eqk5L9BFgekO//fJ4G3aql0RxvP1VGpbS31aIbVAku5M/aRDa9 6espOHhEdjxQKkn826Jsh7gvP78EfmWLicT5EoqhAM6XsAn9SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcLVS693Yec8bncRBUNG8y5GU8RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvY2E3YzUyZWItNDUyNC0z MmYxLWEyNDMtMzU2NzM4OTBkNmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRUhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4WHtJWKdNfJhyk971bBsELO6+SbPekcyRDPCq5xBQ/dJTMUcUA557V MPACUj1yTBhtu+O9pIK+hIDn4lOtPnBb10VYQqmbigi7uL66fE3fVA71wxvoJlcQ WZcLUbko6zrib/4RL1jkrHKP5x3tvpP8zwQHCUC0I6klDCW5v1hR5jadgYZT/Hz8 kL6osjUGVgJj5y2pCnq7kfxFwEElT6KDJc2v1NhTDUO22ErOG/uD+npKgRwSgjJ8 yoQaalVcrQI+kMgN7Q+Ng9pSAjgrOrfqRqwtUEGuIQd7f/qskYgeNXht0YWt05pQ EHE2Um50Z4+2mm3eDEom9tNWgEMBG+g= -----END CERTIFICATE-----Generated at Sun Jun 8 18:34:28 2025 by rpki-client