$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22321f28-08aa-3d05-b4de-e1cce43023ad.roa File: 22321f28-08aa-3d05-b4de-e1cce43023ad.roa (raw, json) Hash identifier: ApatrBOcMFKTTQznUH3muXp6t+A+8qbCWD/W49zM2kk= Subject key identifier: 19:F1:79:94:F5:6A:31:5E:11:3C:23:34:C7:C4:3F:03:D0:43:0D:A2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF521593272C7DD24E52EBB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22321f28-08aa-3d05-b4de-e1cce43023ad.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 0 IP address blocks: 72.13.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:59:32:72:c7:dd:24:e5:2e:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=96ff0b49-eead-4c81-aa40-478096dc2f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1e:20:1b:6e:d3:a4:a6:59:81:45:e0:f4:38: 0e:0c:ee:74:d0:37:6b:7b:98:5c:7d:62:5c:7c:38: 48:0f:7f:eb:c0:a6:05:e0:52:ad:5f:ae:68:3f:a5: de:b6:73:42:40:eb:a7:f0:3d:5c:66:2e:e8:99:c9: 88:ad:37:ff:19:5f:10:9f:9b:b4:27:65:8e:9b:5f: b2:ee:3b:57:0d:2c:8d:3b:89:81:69:ac:7a:3d:e0: ce:40:55:23:2e:fb:9d:85:f3:5a:48:b6:e0:0a:d9: fc:a5:46:c3:ec:b0:d2:32:1b:cc:14:ff:c3:34:d1: a3:ba:4f:13:80:21:e8:bb:1e:54:f0:e9:da:57:8a: d9:96:c2:ef:2f:bc:28:24:ab:fc:74:6e:53:83:16: 83:da:32:c2:1d:56:d1:ee:dd:0a:b0:33:b3:a5:f1: e5:8c:3a:42:f0:c9:2f:92:1f:51:3f:3c:4f:df:7f: 04:a4:23:e0:29:bf:32:1b:cf:5b:32:69:a1:eb:80: cd:00:21:8d:76:a2:15:51:d5:80:62:bd:e9:33:18: 93:99:67:d4:ca:9d:64:cb:24:34:72:b2:57:39:54: 3a:23:b5:9c:22:17:b2:48:cc:3e:6a:55:8e:ea:4b: 4a:1a:5b:19:c8:ac:2a:01:3b:a9:8a:f0:91:0f:d5: ac:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F1:79:94:F5:6A:31:5E:11:3C:23:34:C7:C4:3F:03:D0:43:0D:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22321f28-08aa-3d05-b4de-e1cce43023ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 72.13.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:45:9e:90:e3:90:8f:9b:9a:c3:76:6f:c7:d3:d6:90:85:c6: 23:94:a5:8d:42:6d:7a:7e:13:63:b1:da:20:ec:ad:48:f4:a6: 03:8a:ea:64:c5:fb:7f:b0:45:e2:3b:6d:94:01:87:9d:83:16: fc:b1:47:af:c7:d3:6d:c2:65:a0:75:13:8d:d7:b9:89:4c:ca: 77:85:cd:a8:0f:74:39:34:11:04:8b:e3:41:4a:dc:a5:02:fd: 9a:49:31:15:1d:a9:77:b4:49:53:54:7c:fd:ba:7d:45:b7:54: 04:64:db:76:97:4c:50:08:46:79:1d:8c:05:00:a7:02:53:85: 32:a5:84:97:60:e3:a0:bd:9e:36:6b:c0:b0:37:2a:92:df:06: 4a:97:59:e3:a3:d8:48:79:de:45:25:bb:8c:c9:79:ee:4f:dd: d5:87:46:23:ce:e9:c4:a6:57:01:f5:2f:06:8b:34:98:8f:e4: 18:42:8f:08:71:93:65:3b:c9:0f:b8:97:49:ab:35:77:c6:0c: 36:c4:fd:6a:05:2d:6d:fd:4b:25:2c:10:77:b1:cb:88:68:ad: e4:52:c2:bf:01:28:73:df:79:f1:19:75:09:cd:7b:ee:94:77: 57:a1:e6:9f:e3:14:46:f0:5b:50:6d:ac:ba:7a:8a:c7:01:c4: 4c:2c:84:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IVkycsfdJOUuuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk OTZmZjBiNDktZWVhZC00YzgxLWFhNDAtNDc4MDk2ZGMyZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB4gG27TpKZZgUXg9DgODO500Ddre5hcfWJc fDhID3/rwKYF4FKtX65oP6XetnNCQOun8D1cZi7omcmIrTf/GV8Qn5u0J2WOm1+y 7jtXDSyNO4mBaax6PeDOQFUjLvudhfNaSLbgCtn8pUbD7LDSMhvMFP/DNNGjuk8T gCHoux5U8OnaV4rZlsLvL7woJKv8dG5TgxaD2jLCHVbR7t0KsDOzpfHljDpC8Mkv kh9RPzxP338EpCPgKb8yG89bMmmh64DNACGNdqIVUdWAYr3pMxiTmWfUyp1kyyQ0 crJXOVQ6I7WcIheySMw+alWO6ktKGlsZyKwqATupivCRD9Ws1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnxeZT1ajFeETwjNMfEPwPQQw2iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjIzMjFmMjgtMDhhYS0z ZDA1LWI0ZGUtZTFjY2U0MzAyM2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA0kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhFnpDjkI+bmsN2b8fT1pCFxiOUpY1CbXp+E2Ox2iDsrUj0pgOK6mTF +3+wReI7bZQBh52DFvyxR6/H023CZaB1E43XuYlMyneFzagPdDk0EQSL40FK3KUC /ZpJMRUdqXe0SVNUfP26fUW3VARk23aXTFAIRnkdjAUApwJThTKlhJdg46C9njZr wLA3KpLfBkqXWeOj2Eh53kUlu4zJee5P3dWHRiPO6cSmVwH1LwaLNJiP5BhCjwhx k2U7yQ+4l0mrNXfGDDbE/WoFLW39SyUsEHexy4horeRSwr8BKHPfefEZdQnNe+6U d1eh5p/jFEbwW1BtrLp6iscBxEwshOs= -----END CERTIFICATE-----Generated at Thu Sep 11 02:59:04 2025 by rpki-client