$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/2d9893cc-ced3-36c4-a0d0-5ffcbd47d695.roa File: 2d9893cc-ced3-36c4-a0d0-5ffcbd47d695.roa (raw, json) Hash identifier: F1Oq3uQdbt/QCKyqtJde90lCuELR+J1z7KHsRN9HHxw= Subject key identifier: B5:5D:C5:6F:FA:37:94:C7:6E:70:C6:14:98:B1:5A:68:9B:2D:1D:0E Certificate issuer: /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Certificate serial: 010D0C9F4328584B047C03FFBD9733476CA7B500 Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/2d9893cc-ced3-36c4-a0d0-5ffcbd47d695.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 7018 IP address blocks: 72.22.32.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:03:ff:bd:97:33:47:6c:a7:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=405b927f-e818-4f88-b5ba-ae80508cab3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1f:1a:52:79:eb:5d:fe:cb:9b:0e:98:28:ff: 0a:1b:a8:6f:6f:73:aa:65:ed:aa:bd:7b:6c:4b:7d: c6:58:36:80:0c:9e:b0:13:29:f6:9e:09:bf:66:24: e4:bd:c2:1e:56:ed:b9:a7:46:d1:49:73:aa:08:9b: d5:31:ee:9b:85:c4:b5:03:05:15:a3:24:22:e3:1a: 8f:6a:81:27:00:ca:d4:31:aa:45:06:0e:82:d4:10: 78:d2:46:e2:d8:08:8f:19:f7:59:4c:c2:66:48:1e: 1d:0c:06:b4:ee:e0:f9:06:ae:84:76:2e:4c:26:4f: b2:4c:d8:d7:82:fb:5a:b2:77:12:46:e6:a4:6b:1f: 67:07:00:e8:d5:40:c4:16:db:f2:fe:70:eb:9f:ee: b7:66:b1:3c:57:e8:43:c7:3f:df:ca:53:f2:ce:0b: 3c:8e:bf:11:e0:93:82:5b:3b:3d:57:81:71:29:0f: 1d:85:55:5e:5f:0c:9f:3e:e8:69:68:a1:8f:9e:5c: 6a:9f:4d:7f:a3:5e:8e:ce:19:ec:de:c4:d4:7b:53: e5:e5:ab:8a:54:bf:35:21:9b:e6:9a:3d:4b:1e:7d: ba:e9:31:44:57:8a:9f:53:c6:a9:73:c0:27:79:a2: 9d:a2:03:52:f4:bf:5c:a9:69:81:d6:e0:4b:9b:e5: 8e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:5D:C5:6F:FA:37:94:C7:6E:70:C6:14:98:B1:5A:68:9B:2D:1D:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/2d9893cc-ced3-36c4-a0d0-5ffcbd47d695.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl X509v3 Authority Key Identifier: keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer sbgp-ipAddrBlock: critical IPv4: 72.22.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:38:84:ee:f7:93:5c:c7:51:ba:22:7b:2c:7f:4f:fc:c8:c9: 54:e5:24:48:70:04:8d:a9:97:cd:13:c2:e3:43:c2:a8:eb:b0: 35:68:e6:b3:3b:9f:79:b3:3c:63:7e:16:16:38:ca:03:73:f0: 53:a3:c6:44:28:56:fa:eb:91:fa:13:bd:f8:af:a5:61:af:0f: 07:ea:54:fc:d5:dd:4f:ce:b4:26:c6:b5:74:01:41:80:55:38: a6:73:66:53:48:68:72:bf:60:9c:9d:2d:c8:fa:de:ca:e9:a9: d3:ab:cb:c9:41:53:ca:a8:d7:6d:5f:5b:b7:5e:99:1e:5d:31: 10:74:9c:1c:57:b1:46:fb:6e:70:19:c1:40:db:48:a0:18:c8: a6:aa:c8:a3:72:ab:46:07:a3:f1:58:b6:4a:d9:fd:5a:c1:9e: b7:95:c8:cc:96:94:41:a9:cb:7c:a3:d0:19:94:19:a9:7d:26: 19:e1:74:ca:82:a7:55:87:83:dc:3e:c1:79:63:2c:f8:ae:e2: 3f:21:f4:fb:78:20:a4:a4:7b:72:27:8d:87:be:22:2f:7d:a4: 24:38:12:ed:f4:e0:46:5b:0d:85:5b:ff:e6:5c:18:ec:98:f6: 1b:82:7b:b7:de:18:d5:e7:a1:fc:6f:3d:55:65:a2:4b:f4:d7: bb:c8:c1:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfAP/vZczR2yntQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDNmYWMtYWI5OS00YjM3LWE0MmUtZGJmNjdhOTVj NDYwMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk NDA1YjkyN2YtZTgxOC00Zjg4LWI1YmEtYWU4MDUwOGNhYjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx8aUnnrXf7Lmw6YKP8KG6hvb3OqZe2qvXts S33GWDaADJ6wEyn2ngm/ZiTkvcIeVu25p0bRSXOqCJvVMe6bhcS1AwUVoyQi4xqP aoEnAMrUMapFBg6C1BB40kbi2AiPGfdZTMJmSB4dDAa07uD5Bq6Edi5MJk+yTNjX gvtasncSRuakax9nBwDo1UDEFtvy/nDrn+63ZrE8V+hDxz/fylPyzgs8jr8R4JOC Wzs9V4FxKQ8dhVVeXwyfPuhpaKGPnlxqn01/o16Ozhns3sTUe1Pl5auKVL81IZvm mj1LHn266TFEV4qfU8apc8AneaKdogNS9L9cqWmB1uBLm+WORQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVdxW/6N5THbnDGFJixWmibLR0OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk M2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2N2E5NWM0NjAvMmQ5ODkzY2MtY2VkMy0z NmM0LWEwZDAtNWZmY2JkNDdkNjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDNmYWMtYWI5OS00YjM3LWE0 MmUtZGJmNjdhOTVjNDYwL2Q0NGQzZmFjLWFiOTktNGIzNy1hNDJlLWRiZjY3YTk1 YzQ2MC5jcmwwHwYDVR0jBBgwFoAUEHfkdKYtZFtD8H4411+2zqs3WzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkM2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2 N2E5NWM0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSBYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJY4hO73k1zHUboieyx/T/zIyVTlJEhwBI2pl80TwuNDwqjrsDVo5rM7 n3mzPGN+FhY4ygNz8FOjxkQoVvrrkfoTvfivpWGvDwfqVPzV3U/OtCbGtXQBQYBV OKZzZlNIaHK/YJydLcj63srpqdOry8lBU8qo121fW7demR5dMRB0nBxXsUb7bnAZ wUDbSKAYyKaqyKNyq0YHo/FYtkrZ/VrBnreVyMyWlEGpy3yj0BmUGal9JhnhdMqC p1WHg9w+wXljLPiu4j8h9Pt4IKSke3InjYe+Ii99pCQ4Eu304EZbDYVb/+ZcGOyY 9huCe7feGNXnofxvPVVlokv017vIwR8= -----END CERTIFICATE-----Generated at Fri Sep 5 09:55:56 2025 by rpki-client