$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/96c0989f-ec33-3ac7-a4e2-b9dce2b8ad64.roa File: 96c0989f-ec33-3ac7-a4e2-b9dce2b8ad64.roa (raw, json) Hash identifier: uJPIbWFw0mPuHJRQkhAZBNGkVAIAk7TEpWaFMKs0Gew= Subject key identifier: 45:7E:2D:F0:9B:3A:21:92:5C:E3:3A:B9:5E:6A:E6:6C:AF:67:3F:FF Certificate issuer: /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63 Certificate serial: 010D0C9F4328584B01CD06F09C64AA34FE84C080 Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/96c0989f-ec33-3ac7-a4e2-b9dce2b8ad64.roa Signing time: Thu 28 Aug 2025 13:56:37 +0000 ROA not before: Thu 28 Aug 2025 13:56:37 +0000 ROA not after: Wed 26 Nov 2025 14:56:37 +0000 asID: 12025 IP address blocks: 72.44.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:01:cd:06:f0:9c:64:aa:34:fe:84:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63 Validity Not Before: Aug 28 13:56:37 2025 GMT Not After : Nov 26 14:56:37 2025 GMT Subject: CN=28c4df54-4e03-41ed-bcdc-a016698bc239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4a:77:d8:c2:69:7b:85:ee:67:1b:df:9a:92: bc:b8:7d:70:d3:44:09:44:c3:b1:9b:e8:07:bd:ae: 6c:da:3a:c1:e5:7f:8c:04:ce:6e:d6:cd:0d:9b:0f: 57:3e:0c:86:9d:43:b2:e7:93:e8:5d:f1:86:5b:d8: 36:91:e9:6f:84:62:c1:7b:4c:34:a7:15:13:12:00: 4f:4f:a3:b0:e8:02:f5:0e:66:1a:24:19:65:46:ef: fa:c4:70:81:79:ae:b2:90:e2:9c:84:76:28:77:0b: fa:ca:e4:e8:22:1a:81:04:a0:9d:11:1e:28:6c:c3: 0d:7b:0d:b3:35:4b:47:97:16:c3:7c:43:d0:32:70: c9:10:88:3b:ed:0a:a2:ed:72:84:1b:24:b6:54:1a: 1a:ee:ac:de:bd:27:59:f3:96:7d:7c:e7:87:13:82: 3a:cb:3f:20:51:45:de:e9:2e:21:0b:29:3d:70:12: 9c:cb:61:31:39:83:72:5b:2a:d3:d6:ec:47:db:11: 07:a1:5b:c0:d0:54:22:c4:cb:90:6b:18:57:ff:0b: ae:44:02:9d:30:f7:f1:24:16:14:c3:44:d3:09:80: 5c:02:3d:6f:6f:b8:a0:c9:84:48:aa:df:50:9d:3b: 9a:31:4c:01:94:88:f0:1d:b7:30:14:a5:03:a8:30: 0d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7E:2D:F0:9B:3A:21:92:5C:E3:3A:B9:5E:6A:E6:6C:AF:67:3F:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/96c0989f-ec33-3ac7-a4e2-b9dce2b8ad64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl X509v3 Authority Key Identifier: keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer sbgp-ipAddrBlock: critical IPv4: 72.44.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:8e:10:c8:e2:0e:86:e6:40:df:07:3a:94:37:a8:b7:92:36: 23:0c:07:a5:b7:f7:cf:1e:ca:35:d9:ce:0a:68:ad:7f:b8:0d: 5a:08:08:2c:ad:5d:5c:04:47:8d:be:a1:16:ab:ee:43:45:78: 41:9d:9d:07:1b:e7:dc:d4:9e:9f:e2:94:78:bc:31:f3:80:f9: 80:48:92:41:f5:36:b8:b5:e8:85:fa:93:98:21:c4:d0:90:2d: c1:bd:82:00:4f:6d:b0:1f:93:70:55:a4:9a:fa:db:aa:a8:37: 39:cf:6c:c5:f5:6c:fc:89:5a:ac:e7:b7:13:8e:0b:80:46:52: 69:e9:65:0e:ba:c9:80:37:69:83:2c:6f:3f:2d:e7:3f:e8:f7: 9c:ae:35:3f:d3:35:41:f2:e9:ec:3a:1e:7e:03:6d:3a:fe:5d: 6f:3e:6b:d8:f5:26:4b:32:39:2f:a6:15:b5:a6:ef:33:21:80: e8:85:16:fc:09:50:59:20:eb:cf:39:92:a9:0c:05:16:67:63: 5e:4a:69:7e:73:f2:48:dc:f1:34:90:00:d5:b7:37:cc:bf:08: a2:c9:3a:82:f2:c7:c3:1b:86:b6:13:f0:d4:6b:07:63:21:ce: 7c:3f:82:b9:14:ec:7c:ec:ff:31:21:0e:59:c4:05:7d:2c:3b: 09:63:93:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsBzQbwnGSqNP6EwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGU1OWMxMzctMDYxOS00MDdiLTg3Y2UtOGE0ZTA4ZGQ2 YzYzMB4XDTI1MDgyODEzNTYzN1oXDTI1MTEyNjE0NTYzN1owLzEtMCsGA1UEAxMk MjhjNGRmNTQtNGUwMy00MWVkLWJjZGMtYTAxNjY5OGJjMjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkp32MJpe4XuZxvfmpK8uH1w00QJRMOxm+gH va5s2jrB5X+MBM5u1s0Nmw9XPgyGnUOy55PoXfGGW9g2kelvhGLBe0w0pxUTEgBP T6Ow6AL1DmYaJBllRu/6xHCBea6ykOKchHYodwv6yuToIhqBBKCdER4obMMNew2z NUtHlxbDfEPQMnDJEIg77Qqi7XKEGyS2VBoa7qzevSdZ85Z9fOeHE4I6yz8gUUXe 6S4hCyk9cBKcy2ExOYNyWyrT1uxH2xEHoVvA0FQixMuQaxhX/wuuRAKdMPfxJBYU w0TTCYBcAj1vb7igyYRIqt9QnTuaMUwBlIjwHbcwFKUDqDANvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEV+LfCbOiGSXOM6uV5q5myvZz//MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5 YzEzNy0wNjE5LTQwN2ItODdjZS04YTRlMDhkZDZjNjMvOTZjMDk4OWYtZWMzMy0z YWM3LWE0ZTItYjlkY2UyYjhhZDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGU1OWMxMzctMDYxOS00MDdiLTg3 Y2UtOGE0ZTA4ZGQ2YzYzLzBlNTljMTM3LTA2MTktNDA3Yi04N2NlLThhNGUwOGRk NmM2My5jcmwwHwYDVR0jBBgwFoAUhK/fZENn+KWm3VRabKVzFb4wW8EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5YzEzNy0wNjE5LTQwN2ItODdjZS04YTRl MDhkZDZjNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCzdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOOEMjiDobmQN8HOpQ3qLeSNiMMB6W3988eyjXZzgporX+4DVoICCyt XVwER42+oRar7kNFeEGdnQcb59zUnp/ilHi8MfOA+YBIkkH1Nri16IX6k5ghxNCQ LcG9ggBPbbAfk3BVpJr626qoNznPbMX1bPyJWqzntxOOC4BGUmnpZQ66yYA3aYMs bz8t5z/o95yuNT/TNUHy6ew6Hn4DbTr+XW8+a9j1JksyOS+mFbWm7zMhgOiFFvwJ UFkg6885kqkMBRZnY15KaX5z8kjc8TSQANW3N8y/CKLJOoLyx8MbhrYT8NRrB2Mh znw/grkU7Hzs/zEhDlnEBX0sOwljk1c= -----END CERTIFICATE-----Generated at Thu Sep 18 16:31:01 2025 by rpki-client