$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/3f0ecf30-525a-30e0-9d17-fe647c455234.roa File: 3f0ecf30-525a-30e0-9d17-fe647c455234.roa (raw, json) Hash identifier: I2kbyyDJ3ik906fv2YaCqpJQdOjlj6g3wc8fmz1xD8E= Subject key identifier: BF:7B:DD:48:55:84:08:D0:0C:32:5C:AC:ED:6D:AE:1E:C1:AE:50:32 Certificate issuer: /CN=e0927227-fbc8-4924-89af-1885637cb07c Certificate serial: 010D0C9F4328584B0B76B2B84D30392734FE4180 Authority key identifier: 42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/3f0ecf30-525a-30e0-9d17-fe647c455234.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 35280 IP address blocks: 72.19.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:b2:b8:4d:30:39:27:34:fe:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0927227-fbc8-4924-89af-1885637cb07c Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=563117b3-f116-465c-a702-b6a3481b92e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:77:14:a1:6b:26:6e:6d:c6:a7:7d:de:8b:01: 69:e7:f0:e6:de:c0:d7:34:6e:96:8c:64:e9:a7:96: 02:24:58:8e:97:22:9f:92:22:c1:53:c1:a4:18:e4: f9:7c:5d:9c:cf:3a:31:a3:9d:34:98:6c:8c:27:4b: 9c:5e:4c:9a:df:ac:8d:af:e7:3b:83:5d:8d:29:3d: 9d:42:00:a8:21:33:41:30:b5:24:8c:87:d3:73:e7: f5:87:af:ed:28:cd:8b:69:4f:da:98:30:93:e5:6c: 43:79:79:9c:23:28:8f:99:a5:ff:da:d2:69:9f:82: 8f:2f:f9:ee:8b:6c:69:0b:61:43:92:86:fb:e2:bd: 45:2d:d3:99:cf:db:0e:b1:e5:7e:20:b5:cc:53:77: d7:42:e2:c0:8c:ed:9a:94:09:92:e5:56:10:c0:fb: 87:4b:a0:f7:ea:f2:ae:a3:97:9c:54:8d:2a:f7:7e: 8a:0d:e7:bb:31:38:d7:5c:29:1b:88:4f:a2:3b:90: 69:e2:cb:58:75:e3:70:ed:41:f7:40:16:bd:55:7f: 9d:7f:57:4c:db:2c:23:fc:83:11:c8:3d:77:2e:27: 34:d5:7b:1a:8e:bf:e0:fd:ad:1a:02:89:39:94:2c: 75:d6:ae:61:fd:fc:83:7b:c4:1a:cd:e3:a1:c7:ee: 07:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7B:DD:48:55:84:08:D0:0C:32:5C:AC:ED:6D:AE:1E:C1:AE:50:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/3f0ecf30-525a-30e0-9d17-fe647c455234.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.crl X509v3 Authority Key Identifier: keyid:42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer sbgp-ipAddrBlock: critical IPv4: 72.19.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:a8:e9:2d:1b:60:b3:0f:af:0e:5d:c8:da:57:47:48:c6:14: 12:c1:35:bf:9e:72:f9:4b:d1:0e:6e:8c:ff:24:34:ac:43:95: 9b:9a:ea:70:7e:71:12:d0:53:3e:c5:94:a2:1d:9e:a1:f1:63: 4a:90:a3:73:35:3a:bf:10:65:c3:5c:56:d3:97:6b:e7:f6:21: 6e:d4:8d:0a:33:4c:20:00:f2:59:de:53:4c:95:55:39:af:d1: b1:79:ae:47:27:c1:31:d4:8b:c4:95:d7:9f:4e:b8:1f:9a:87: ae:59:fc:5a:da:bc:1f:09:08:74:c1:85:23:20:19:d8:1a:47: 7f:d7:5b:59:5e:af:b3:4c:bc:7a:4b:de:be:de:55:46:9a:04: 1c:35:c7:61:d6:96:4b:fe:fd:ef:50:f2:0d:9b:04:4f:97:f7: 16:90:53:5a:08:75:e2:1c:14:c4:07:b7:3f:04:93:52:b8:cd: e8:28:2f:2b:bc:0a:cb:99:b1:23:7d:f4:56:bf:e8:d2:4b:31: 25:db:93:d7:85:71:49:2a:6c:87:14:c6:c7:2d:20:80:fc:71: 4e:35:b0:21:10:19:59:84:df:04:3d:d5:66:1d:8d:ad:d0:93: 59:fa:41:75:8d:b5:bf:9c:66:25:b1:28:c2:cf:09:14:1a:a6: 52:d4:d4:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdrK4TTA5JzT+QYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA5MjcyMjctZmJjOC00OTI0LTg5YWYtMTg4NTYzN2Ni MDdjMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NTYzMTE3YjMtZjExNi00NjVjLWE3MDItYjZhMzQ4MWI5MmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoncUoWsmbm3Gp33eiwFp5/Dm3sDXNG6WjGTp p5YCJFiOlyKfkiLBU8GkGOT5fF2czzoxo500mGyMJ0ucXkya36yNr+c7g12NKT2d QgCoITNBMLUkjIfTc+f1h6/tKM2LaU/amDCT5WxDeXmcIyiPmaX/2tJpn4KPL/nu i2xpC2FDkob74r1FLdOZz9sOseV+ILXMU3fXQuLAjO2alAmS5VYQwPuHS6D36vKu o5ecVI0q936KDee7MTjXXCkbiE+iO5Bp4stYdeNw7UH3QBa9VX+df1dM2ywj/IMR yD13Lic01Xsajr/g/a0aAok5lCx11q5h/fyDe8QazeOhx+4HZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL973UhVhAjQDDJcrO1trh7BrlAyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lMDky NzIyNy1mYmM4LTQ5MjQtODlhZi0xODg1NjM3Y2IwN2MvM2YwZWNmMzAtNTI1YS0z MGUwLTlkMTctZmU2NDdjNDU1MjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTA5MjcyMjctZmJjOC00OTI0LTg5 YWYtMTg4NTYzN2NiMDdjL2UwOTI3MjI3LWZiYzgtNDkyNC04OWFmLTE4ODU2Mzdj YjA3Yy5jcmwwHwYDVR0jBBgwFoAUQtTA1qsZ7oEiV73CtogcoXHAf8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lMDkyNzIyNy1mYmM4LTQ5MjQtODlhZi0xODg1 NjM3Y2IwN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBMDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIio6S0bYLMPrw5dyNpXR0jGFBLBNb+ecvlL0Q5ujP8kNKxDlZua6nB+ cRLQUz7FlKIdnqHxY0qQo3M1Or8QZcNcVtOXa+f2IW7UjQozTCAA8lneU0yVVTmv 0bF5rkcnwTHUi8SV159OuB+ah65Z/FravB8JCHTBhSMgGdgaR3/XW1ler7NMvHpL 3r7eVUaaBBw1x2HWlkv+/e9Q8g2bBE+X9xaQU1oIdeIcFMQHtz8Ek1K4zegoLyu8 CsuZsSN99Fa/6NJLMSXbk9eFcUkqbIcUxsctIID8cU41sCEQGVmE3wQ91WYdja3Q k1n6QXWNtb+cZiWxKMLPCRQaplLU1Pc= -----END CERTIFICATE-----Generated at Thu Sep 4 05:06:20 2025 by rpki-client