$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/254685e2-c40b-3777-9a1d-4fd8419ecf4e.roa File: 254685e2-c40b-3777-9a1d-4fd8419ecf4e.roa (raw, json) Hash identifier: P6x1kFbg/4kWWSQAKnGiSzE7zun0h+Uouno7QPVSYto= Subject key identifier: C5:A3:EA:B6:15:4F:2C:F5:4B:67:0C:16:D3:A0:8E:C3:F6:4E:FD:58 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B0CDC101FEFD549A0A44204C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/254685e2-c40b-3777-9a1d-4fd8419ecf4e.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 6830 IP address blocks: 72.9.160.0/22 maxlen: 22 72.9.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:10:1f:ef:d5:49:a0:a4:42:04:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=7be01eeb-10f0-4f93-97ed-11a1f498554c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:69:f1:34:5c:66:3e:2f:1e:58:4c:fa:b1:54: 07:98:52:cd:89:54:d9:15:59:c9:e5:01:da:f5:1f: 66:50:bf:63:83:69:04:f4:6e:6c:4b:6c:d7:ba:9f: 21:79:06:ae:40:c5:05:b0:94:72:25:0e:c8:4a:9f: df:d1:be:39:0f:ec:aa:32:8d:3c:d3:63:ee:ea:c4: 93:e2:0c:88:6e:27:94:aa:cd:01:f9:18:75:af:aa: 6b:af:6e:4a:da:1f:e5:4a:a0:40:e0:24:0e:18:2c: 41:58:97:a9:53:eb:1c:1e:a9:69:18:d8:99:09:b6: 75:24:1a:b4:f4:6f:3c:0f:ec:06:0e:3a:4e:7e:96: 05:a4:24:35:2f:87:1d:69:d9:0a:d8:a4:4e:97:ec: fc:c4:27:4f:67:1f:4a:97:ef:ba:92:91:d0:fe:24: 57:69:13:b5:7e:2f:86:3c:ab:f8:6f:b1:d7:f1:a8: 9d:4e:c7:dd:25:77:e2:61:02:3b:33:45:e6:a3:a3: 06:c4:82:e9:a9:bd:fe:f4:c7:ee:f9:e4:7a:ff:ce: 35:3d:dd:94:71:22:f8:df:ca:6d:9d:21:f3:5e:f5: f0:15:86:36:d8:f5:a7:e7:6d:7c:c3:96:04:f4:06: 78:c3:ea:2b:28:75:72:de:63:07:b5:85:eb:b2:3c: ec:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A3:EA:B6:15:4F:2C:F5:4B:67:0C:16:D3:A0:8E:C3:F6:4E:FD:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/254685e2-c40b-3777-9a1d-4fd8419ecf4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 72.9.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:c6:e0:db:72:1b:47:6e:2c:b0:67:e2:a0:91:22:df:37:f9: 8b:67:ca:15:91:1e:0a:69:58:2e:60:52:fa:66:d1:37:fa:8b: 98:5f:51:54:95:5c:da:be:ee:35:7a:15:91:dd:b2:37:a4:71: 4b:70:50:fc:89:91:d3:a4:67:28:3f:d2:68:fd:16:35:5c:ef: 62:92:da:a8:7e:c4:bb:18:09:82:e6:88:b2:37:0c:8d:14:a7: f7:b9:99:f3:ab:a8:22:40:b0:82:52:44:b8:cb:b7:0b:b1:dd: 19:d3:9a:b3:be:2b:bd:3c:dd:09:50:36:f9:f9:c2:2d:36:2a: 3c:bf:45:f9:46:45:2c:aa:22:f8:77:a0:93:80:7e:54:c1:92: 82:16:e7:9d:11:ed:1b:0b:52:a7:9f:db:04:93:03:0e:72:0f: d6:e7:d3:6f:e3:26:b1:88:ae:61:48:35:28:ff:48:fd:f9:c5: f5:13:4f:0d:29:de:a6:2b:6c:9c:55:e7:a4:d8:3a:a6:49:61: 4e:47:64:35:e0:df:18:1f:a5:4f:fe:98:f9:db:42:e6:89:46: 00:78:06:28:74:23:32:6f:0a:44:b3:43:e0:fa:78:c5:e1:5c: 49:0f:56:17:94:df:ba:ae:40:f7:f7:01:d2:50:5c:bc:6f:b1: 6c:de:f7:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3BAf79VJoKRCBMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk N2JlMDFlZWItMTBmMC00ZjkzLTk3ZWQtMTFhMWY0OTg1NTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mnxNFxmPi8eWEz6sVQHmFLNiVTZFVnJ5QHa 9R9mUL9jg2kE9G5sS2zXup8heQauQMUFsJRyJQ7ISp/f0b45D+yqMo0802Pu6sST 4gyIbieUqs0B+Rh1r6prr25K2h/lSqBA4CQOGCxBWJepU+scHqlpGNiZCbZ1JBq0 9G88D+wGDjpOfpYFpCQ1L4cdadkK2KROl+z8xCdPZx9Kl++6kpHQ/iRXaRO1fi+G PKv4b7HX8aidTsfdJXfiYQI7M0Xmo6MGxILpqb3+9Mfu+eR6/841Pd2UcSL438pt nSHzXvXwFYY22PWn5218w5YE9AZ4w+orKHVy3mMHtYXrsjzsUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWj6rYVTyz1S2cMFtOgjsP2Tv1YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjU0Njg1ZTItYzQwYi0z Nzc3LTlhMWQtNGZkODQxOWVjZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSAmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjG4NtyG0duLLBn4qCRIt83+YtnyhWRHgppWC5gUvpm0Tf6i5hfUVSV XNq+7jV6FZHdsjekcUtwUPyJkdOkZyg/0mj9FjVc72KS2qh+xLsYCYLmiLI3DI0U p/e5mfOrqCJAsIJSRLjLtwux3RnTmrO+K7083QlQNvn5wi02Kjy/RflGRSyqIvh3 oJOAflTBkoIW550R7RsLUqef2wSTAw5yD9bn02/jJrGIrmFINSj/SP35xfUTTw0p 3qYrbJxV56TYOqZJYU5HZDXg3xgfpU/+mPnbQuaJRgB4Bih0IzJvCkSzQ+D6eMXh XEkPVheU37quQPf3AdJQXLxvsWze9/U= -----END CERTIFICATE-----Generated at Sat Sep 6 02:17:31 2025 by rpki-client