$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/ed7381f0-8a3b-3f12-a1d0-45e696be761b.roa File: ed7381f0-8a3b-3f12-a1d0-45e696be761b.roa (raw, json) Hash identifier: d0X1fXpi9WlReJL6GrZiYiSBot+JZzEayJWEnY5rksk= Subject key identifier: CF:57:46:C0:A8:A0:22:6D:FD:26:D7:22:59:05:C0:B1:AE:1C:F7:F5 Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F4328584A77808C2C21FFD599A38A1F04 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/ed7381f0-8a3b-3f12-a1d0-45e696be761b.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 11273 IP address blocks: 208.72.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:8c:2c:21:ff:d5:99:a3:8a:1f:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=48f62222-9c51-4a44-b35c-376fc883d9b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:70:ec:14:21:94:5e:13:72:2b:43:98:0b:af: 5e:81:6f:9c:c2:e6:d4:19:1a:91:28:6e:ed:18:dd: dd:39:56:a5:17:22:7d:2e:91:b2:40:fc:3b:e4:1d: 2f:8e:68:35:97:47:a1:9a:60:58:76:0b:41:f4:63: b9:57:ae:80:78:a2:ca:ce:de:36:a4:05:24:18:4c: 79:56:a1:0d:96:d8:ab:1a:c9:92:55:c8:0b:34:21: 05:aa:93:fd:b8:be:ee:8b:59:cf:1f:51:e6:a9:6e: 65:73:8e:9a:e3:f0:a6:3b:95:fc:27:1f:39:1d:df: 31:14:ed:50:08:32:64:4b:14:8f:ce:40:2f:5a:03: 0b:56:a2:32:18:76:c6:90:c7:8e:f7:86:f2:9f:b0: ea:69:d3:e9:23:00:2b:4c:05:b6:f5:5e:26:45:9b: f6:21:be:12:ee:5d:88:38:38:fb:f2:c4:3c:09:e3: 1b:9a:ad:d9:a3:f7:67:72:0c:cb:e3:06:eb:aa:a0: 77:43:c1:44:89:fb:04:bf:22:64:da:3b:fb:72:eb: 39:89:8d:19:2d:19:62:33:d7:48:4d:40:52:7a:57: e6:4b:1d:68:b7:41:96:6e:01:17:fc:f0:c3:4c:7e: d6:01:37:96:38:6a:e0:59:4f:f4:2f:c4:1f:cb:4d: c4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:57:46:C0:A8:A0:22:6D:FD:26:D7:22:59:05:C0:B1:AE:1C:F7:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/ed7381f0-8a3b-3f12-a1d0-45e696be761b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 208.72.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:11:82:32:3f:af:af:75:42:8c:b8:cc:d8:aa:30:b7:9f:2e: 0d:ca:0d:77:6f:af:a0:88:0d:e3:5e:4a:12:32:ea:7b:32:29: fa:d7:48:2d:8e:df:ae:6b:cf:fd:94:73:2c:5a:ae:33:26:52: 51:68:29:bd:1a:c5:18:66:be:28:2a:23:ec:4e:cd:ba:29:d8: 05:a6:bd:01:d8:6c:a1:ad:2c:70:ed:8e:cc:c2:72:9a:8e:1d: 85:b8:8c:40:84:e6:d0:cd:b0:df:15:33:56:83:d1:14:d7:16: 4e:bf:ba:8c:c2:a3:6a:3e:55:ad:47:57:7b:cb:0a:b7:07:70: 72:fc:4e:41:00:fd:2b:ce:91:f8:b5:e7:5f:80:56:de:1c:e3: 3f:4c:37:eb:7a:c4:89:e2:bf:ef:4d:ab:36:be:3f:b7:05:3f: e8:0c:c2:a8:00:e8:f4:de:fe:a4:75:b4:fa:28:a9:fd:18:c1: 2d:03:3e:dd:2a:c2:17:8b:2f:99:25:8e:a6:75:51:fa:4f:3b: 29:0e:45:4f:62:33:d3:b1:5f:c2:06:e4:af:19:9c:72:9d:12: fd:ab:78:8b:0c:b9:eb:70:49:3a:34:59:52:99:06:20:23:7f: 6e:8f:c6:92:9d:7e:b6:4d:ae:3c:68:dc:a6:05:d1:ec:cf:da: 7f:91:02:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gIwsIf/VmaOKHwQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk NDhmNjIyMjItOWM1MS00YTQ0LWIzNWMtMzc2ZmM4ODNkOWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHDsFCGUXhNyK0OYC69egW+cwubUGRqRKG7t GN3dOValFyJ9LpGyQPw75B0vjmg1l0ehmmBYdgtB9GO5V66AeKLKzt42pAUkGEx5 VqENltirGsmSVcgLNCEFqpP9uL7ui1nPH1HmqW5lc46a4/CmO5X8Jx85Hd8xFO1Q CDJkSxSPzkAvWgMLVqIyGHbGkMeO94byn7DqadPpIwArTAW29V4mRZv2Ib4S7l2I ODj78sQ8CeMbmq3Zo/dncgzL4wbrqqB3Q8FEifsEvyJk2jv7cus5iY0ZLRliM9dI TUBSelfmSx1ot0GWbgEX/PDDTH7WATeWOGrgWU/0L8Qfy03EgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9XRsCooCJt/SbXIlkFwLGuHPf1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvZWQ3MzgxZjAtOGEzYi0z ZjEyLWExZDAtNDVlNjk2YmU3NjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0Ej4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQRgjI/r691Qoy4zNiqMLefLg3KDXdvr6CIDeNeShIy6nsyKfrXSC2O 365rz/2UcyxarjMmUlFoKb0axRhmvigqI+xOzbop2AWmvQHYbKGtLHDtjszCcpqO HYW4jECE5tDNsN8VM1aD0RTXFk6/uozCo2o+Va1HV3vLCrcHcHL8TkEA/SvOkfi1 51+AVt4c4z9MN+t6xIniv+9Nqza+P7cFP+gMwqgA6PTe/qR1tPooqf0YwS0DPt0q wheLL5kljqZ1UfpPOykORU9iM9OxX8IG5K8ZnHKdEv2reIsMuetwSTo0WVKZBiAj f26PxpKdfrZNrjxo3KYF0ezP2n+RAgE= -----END CERTIFICATE-----Generated at Thu Jul 10 18:52:03 2025 by rpki-client