$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/71ed423c-b8df-3af2-bd39-9180f4e3d745.roa File: 71ed423c-b8df-3af2-bd39-9180f4e3d745.roa (raw, json) Hash identifier: qsDi+bNYRjhoVFjXNyiLLxnAvCOpPzypoDnLOwq1b60= Subject key identifier: 99:2B:82:B1:AF:2A:1A:51:4E:25:51:56:07:C3:10:B9:89:41:FA:D5 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B196C109067205D3C94C68800 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/71ed423c-b8df-3af2-bd39-9180f4e3d745.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22516 IP address blocks: 72.14.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:10:90:67:20:5d:3c:94:c6:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=bfefa14e-b88e-4eeb-9f7f-a685e5084c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:87:a6:56:ee:30:20:ec:5e:8a:ba:b5:83:08: 3c:00:09:e9:43:8c:2b:6e:0a:48:62:19:8a:80:1b: 4b:20:23:61:bf:39:f7:28:69:8c:dd:e9:35:86:47: f6:30:4a:66:39:3f:a5:23:d6:49:e9:9c:f5:1e:15: 17:2b:f9:b1:80:bf:ae:68:19:bb:ed:99:bf:4b:2c: 98:c4:4d:ad:79:91:12:eb:1c:29:23:20:91:65:c3: 52:51:f1:10:53:ab:0a:71:80:1a:77:07:db:bf:9d: 54:6f:13:3f:bb:5b:fb:a2:6a:a0:75:30:1b:fc:b4: 65:38:07:3e:c7:d8:d2:55:fb:a3:a8:13:3b:c2:df: 84:6f:c4:f2:a3:d2:f0:ff:66:09:cc:85:77:12:69: c2:13:e6:f4:91:dd:5e:52:e8:70:1d:72:0d:43:fa: b0:e4:ca:2a:22:af:80:cf:cc:d6:af:68:46:73:be: 29:0f:c2:7d:8a:01:67:41:58:2e:2c:fa:be:43:45: 6d:aa:54:78:17:9a:d2:fb:98:3d:36:8c:54:5e:21: 44:70:e8:29:df:94:27:f5:6d:f1:a2:02:67:95:a8: 1e:42:97:75:b1:31:73:af:83:ef:ad:3c:13:33:82: 2b:7d:8b:cd:97:99:75:33:17:bd:40:88:ab:5a:c4: ff:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2B:82:B1:AF:2A:1A:51:4E:25:51:56:07:C3:10:B9:89:41:FA:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/71ed423c-b8df-3af2-bd39-9180f4e3d745.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 72.14.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:e8:70:e1:bc:5d:2e:b9:99:5f:5d:65:85:2f:0b:a5:61:d6: 59:2e:21:dd:eb:ca:48:93:51:25:80:f4:f2:d8:91:df:13:57: 91:d7:d0:c7:e2:98:ac:38:e4:2b:13:d6:17:bd:6f:cc:3f:5f: fe:ed:93:26:b0:22:8b:73:dd:f0:91:2b:c8:a5:9b:44:62:3d: 91:e2:47:b3:6d:2c:b3:d1:89:89:fc:67:d0:3a:c3:b6:62:61: de:0a:bb:e8:fe:ee:20:28:6c:be:a3:32:7f:2b:d3:0b:4f:07: f2:f6:85:dc:a4:c2:3c:20:d4:9a:aa:cb:2a:25:53:4b:8b:5c: 78:69:ca:4e:c5:96:a5:96:db:48:11:49:41:00:17:a7:72:7a: da:71:bf:d3:42:73:61:6f:eb:52:de:82:0a:f8:d4:b4:c3:e9: c6:8d:3f:6b:02:18:99:e1:5b:a7:8b:d0:c5:dd:16:c1:de:f7: 56:6f:d6:02:05:51:d4:d8:8f:4e:61:14:b7:d1:b0:c3:d1:d3: 0a:e4:dd:eb:f5:91:13:06:5a:20:89:43:15:e3:9f:04:b4:36: 60:32:04:6f:ca:10:f8:20:dc:33:fa:a4:4d:58:66:a4:b4:52: da:54:81:11:3f:fa:07:34:5d:e5:19:36:31:cc:c2:d4:3f:e8: 02:cc:aa:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbBCQZyBdPJTGiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk YmZlZmExNGUtYjg4ZS00ZWViLTlmN2YtYTY4NWU1MDg0YzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroemVu4wIOxeirq1gwg8AAnpQ4wrbgpIYhmK gBtLICNhvzn3KGmM3ek1hkf2MEpmOT+lI9ZJ6Zz1HhUXK/mxgL+uaBm77Zm/SyyY xE2teZES6xwpIyCRZcNSUfEQU6sKcYAadwfbv51UbxM/u1v7omqgdTAb/LRlOAc+ x9jSVfujqBM7wt+Eb8Tyo9Lw/2YJzIV3EmnCE+b0kd1eUuhwHXINQ/qw5MoqIq+A z8zWr2hGc74pD8J9igFnQVguLPq+Q0VtqlR4F5rS+5g9NoxUXiFEcOgp35Qn9W3x ogJnlageQpd1sTFzr4PvrTwTM4IrfYvNl5l1Mxe9QIirWsT/bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkrgrGvKhpRTiVRVgfDELmJQfrVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNzFlZDQyM2MtYjhkZi0z YWYyLWJkMzktOTE4MGY0ZTNkNzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA5eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7ocOG8XS65mV9dZYUvC6Vh1lkuId3rykiTUSWA9PLYkd8TV5HX0Mfi mKw45CsT1he9b8w/X/7tkyawIotz3fCRK8ilm0RiPZHiR7NtLLPRiYn8Z9A6w7Zi Yd4Ku+j+7iAobL6jMn8r0wtPB/L2hdykwjwg1JqqyyolU0uLXHhpyk7FlqWW20gR SUEAF6dyetpxv9NCc2Fv61Leggr41LTD6caNP2sCGJnhW6eL0MXdFsHe91Zv1gIF UdTYj05hFLfRsMPR0wrk3ev1kRMGWiCJQxXjnwS0NmAyBG/KEPgg3DP6pE1YZqS0 UtpUgRE/+gc0XeUZNjHMwtQ/6ALMqrk= -----END CERTIFICATE-----Generated at Sat Sep 6 02:17:32 2025 by rpki-client